CVE-2023-34051

CVE-2023-34051 CVE-2023-34051은 VMSA-2023-0001 패치를 우회하는 인증 우회Authentication Bypass 취약점입니다. vRealize Log Insight용 VMSA-2023-0001에는 다음 CVE가 포함됩니다: VMware vRealize Log Insight 디렉터리 트래버설 취약점 CVE-2022-31706 VMware vRealize Log Insight 취약한 접근 제어 취약점 CVE-2022-31704 VMware vRealize Log Insight 정보 공개 취약점...

Important: Red Hat Security Advisory: Kiali 2.11.16 for Red Hat OpenShift Service Mesh 3.1

Kiali 2.11.16 for Red Hat OpenShift Service Mesh 3.1 is now available. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from t...

reconspider

Most Advanced Open Source Intelligence OSINT Framework ReconSpider ReconSpider is most Advanced Open Source Intelligence OSINT Framework for scanning IP Address, Emails, Websites, Organizations and find out information from different sources. ReconSpider can be used by Infosec Researchers,...

Important: Red Hat Security Advisory: Kiali 2.17.13 for Red Hat OpenShift Service Mesh 3.2

Kiali 2.17.13 for Red Hat OpenShift Service Mesh 3.2 is now available. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from t...

payday

Payday Payload generator that uses Metasploit and Veil. Takes IP address input and then builds payloads automatically. Calls Veil framework with supplied IP address and creates binaries and handlers. Uses msfvenom to create payloads and writes resource handler files in the same way that Veil does...

massdns

MassDNS A high-performance DNS stub resolver MassDNS is a simple high-performance DNS stub resolver targeting those who seek to resolve a massive amount of domain names in the order of millions or even billions. Without special configuration, MassDNS is capable of resolving over 350,000 names per...

nodejs24 security update

An update is available for nodejs24. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Node.js is a platform built on Chrome's JavaScript runtime for easily...

hostintel

hostintel This tool is used to collect various intelligence sources for hosts. Hostintel is written in a modular fashion so new intelligence sources can be easily added. Hosts are identified by FQDN host name, Domain, or IP address. This tool only supports IPv4 at the moment. The output is in CSV...

shocker

Shocker A tool to find and exploit servers vulnerable to Shellshock Ref: https://en.wikipedia.org/wiki/Shellshocksoftwarebug Released as open source by NCC Group Plc - https://www.nccgroup.trust/ Developed By: Tom Watson, tom dot watson at nccgroup dot trust https://github.com/nccgroup/shocker...

ip-finder-cli

IPFinder CLI Command Line Interface https://ipfinder.io/ Supports Single IP Address, asn, ranges, firewall as Input Supports Bulk Exports Results to Screen or to An Output File Supports IPv4 and IPv6 Supports ASN number , RANGES , Firewall Getting Started sign up for a free account at...

abdal-anydesk-remote-ip-detector

AnyDesk IP漏洩脆弱性 CVE-2024-52940 🎤 README翻訳 English Deutsch فارسی 📸 スクリーンショット 🎥 概念実証ビデオ AnyDesk IP漏洩脆弱性 の動作を確認するには、以下のPoCデモ動画をダウンロードしてください。 📥 ダウンロード プルーフ01 📥 ダウンロード プルーフ02 推奨 - 📥 ダウンロード プルーフ03 これらの動画は脆弱性の動作方法を示し、IPアドレスのプライバシーに対する手順と影響を説明しています。 💎 はじめに...

Western Digital MyCloud NAS - Authentication Bypass

It was discovered that the Western Digital My Cloud device before 2.30.196 is affected by an authentication bypass vulnerability. An unauthenticated attacker can exploit this vulnerability to authenticate as an admin user without needing to provide a password, thereby gaining full control of the...

active_c2_ioc_public

+OPTIONS: ^: +TITLE: アクティブなC2 IOC 注意 各エントリのfirstseen/lastseenの日付に注意してください。IPアドレスだけで判断しないでください。...

PoC-CVE-2000-0649

PoC-CVE-2000-0649 CVE-2000-0649에 대한 PoC를 생성하는 작은 도구입니다. 사용법 이 스크립트는 서버가 CVE-2000-0649에 취약한지 확인합니다. HTTP, HTTPS 및 다양한 경로를 시도해 보시기 바랍니다. 제 경험상 정보 노출은 대개 HTTP로 연결하고 기본 경로인 '/' 또는 '/images'를 사용할 때 발생합니다. 호스트/IP 주소와 포트를 제공해야 합니다. 기본 경로는 '/'로 설정됩니다. 선택적으로 '/'로 시작하는 경로를 지정할 수 있습니다. root@kitploit: $...

CVE-2023-4281

CVE ID: CVE-2023-4281 脆弱性タイプ: IPアドレススプーフィング 説明: Activity Logプラグインは、クライアントのIPアドレスを信頼できない可能性のあるヘッダーから取得するため、攻撃者がその値を操作できる可能性があります。これは、悪意のあるトラフィックの発信元を隠すために悪用される可能性があります。 再現手順: root@kitploit: Run the following code in the web browser and note on the backend that the IP address has been faked. await...

CVE-2023-4279

CVE ID : CVE-2023-4279 Vulnerability Type : IPアドレススプーフィング Description : このプラグインは、信頼できない可能性のあるヘッダーからクライアントのIPアドレスを取得するため、攻撃者がその値を操作できるようになります。これは、悪意のあるトラフィックの送信元を隠すために使用される可能性があります。 Steps to reproduce : root@kitploit: 1. In User Activity Log Settings, enable the setting "Allow Ip Address of users ...

CVE-2022-4539

使用注意事项： 适应性： 您可以轻松修改有效载荷、IP 生成逻辑和代理，以匹配不同的场景或环境。 道德使用： 确保在测试任何系统前已获得明确授权。 可扩展性： 本代码设计为可扩展且适应性强，既适用于小规模测试，也适用于更复杂的大型评估。 WordPress 的 Web 应用程序防火墙插件在 2.1.2 及之前版本中存在 IP 地址欺骗漏洞。这是因为在请求日志记录和登录限制中，获取 IP 地址信息的位置限制不足。攻击者可以提供带有不同 IP 地址的 X-Forwarded-For 标头，该地址将被记录，并可用来绕过可能已阻止某个 IP 地址或国家/地区登录的设置。...

TekDefense-Automater

TekDefense-Automater バージョン: 0.21 http://www.tekdefense.com/automater/ http://www.tekdefense.com/news/2013/12/4/finally-the-new-automater-release-is-out.html...

pymultitor

PyMultiTor Python Multi Threaded Tor Proxy, Did you ever want to be at two different places at the same time? When I asked myself this question, I actually started developing this solution in my mind. While performing penetration tests there are often problems caused by security devices that bloc...

pysho

pysho Shodan API経由でShodanクエリを実行するPythonベースのツール ツールを入手: root@kitploit: git clone https://github.com/Kr0ff/pysho python -m pip install -r requirements.txt chmod +x pysho.py ./pysho 使用例: root@kitploit: Perform a check on your Shodan API key python pysho.py --info root@kitploit: Perform search for a...