zdns

ZDNS ZDNS는 고속 DNS 리졸버이자 대규모 DNS 측정을 수행하기 위한 명령줄 유틸리티입니다. ZDNS는 Go로 작성되었으며, 자체 재귀적 해석 코드와 다양한 이름 집합의 조회를 최적화하는 캐시를 포함하고 있습니다. 원시 DNS 패킷을 구성하고 파싱하기 위해 https://github.com/zmap/dns를 사용합니다. ZDNS의 아키텍처와 성능에 대한 자세한 내용은 ACM Internet Measurement Conference '22에 발표된 다음 논문을 참조하세요. !TIP ZDNS 위키에는 ZDNS에 대한 추가...

lava

LAVA: Large Scale Automated Vulnerability Addition Evaluating and improving bug-finding tools is currently difficult due to a shortage of ground truth corpora i.e., software that has known bugs with triggering inputs. LAVA attempts to solve this problem by automatically injecting bugs into...

go-exploit

go-exploit: Go 익스플로잇 프레임워크 go-exploit은 Go를 위한 익스플로잇 개발 프레임워크입니다. 이 프레임워크는 익스플로잇 개발자가 작고, 자체 포함형이며, 휴대 가능하고 일관된 익스플로잇을 만들 수 있도록 도와줍니다. 대규모 스캐닝, 익스플로잇 및 다른 도구와의 통합을 단순화하기 위해 개발되었습니다. API 문서는 pkg.go.dev/github.com/vulncheck-oss/go-exploit 패키지를 확인하세요. Go 익스플로잇 단계 Go 익스플로잇 프레임워크는 다음 단계를 포함하며, 이들은 체인으로...

CVE-2023-27350

CVE-2023-27350 이 도구는 대규모 인증 우회Papecut MF/NG를 위해 특별히 설계되었습니다. 이는 대규모로 인증 메커니즘을 우회 또는 회피하는 과정을 의미합니다. 스크린샷 요구 사항 Python3.7+ 지원 운영체제 Linuxer Wingays 시작하기 root@kitploit: $ git clone https://github.com/Pari-Malam/CVE-2023-27350 $ cd CVE-2023-27350 $ pip/pip3 install -r requirements.txt $ python/python...

scannerl

Scannerl Scannerl is a modular distributed fingerprinting engine implemented by Kudelski Security. Scannerl can fingerprint thousands of targets on a single host, but can just as easily be distributed across multiple hosts. Scannerl is to fingerprinting what zmap is to port scanning. Scannerl wor...

malice

malice Malice's mission is to be a free open source version of VirusTotal that anyone can use at any scale from an independent researcher to a fortune 500 company. Try It Out DEMO: demo.malice.io username : malice password : ecilam Requirements Hardware 16GB disk space 4GB RAM Software Docker...

Malicious code in @qlik/nebula-table-utils (npm)

npm/@qlik/nebula-table-utils is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were trojanized and...

MAL-2026-11821 Malicious code in @servicetitan/anvil-token (npm)

npm/@servicetitan/anvil-token is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were trojanized and...

MAL-2026-11601 Malicious code in @onereach/idw-apps (npm)

npm/@onereach/idw-apps is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were trojanized and republished ...

Malicious code in @onereach/condition-builder (npm)

npm/@onereach/condition-builder is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were trojanized and...

Malicious code in @onereach/si-step-chooser (npm)

npm/@onereach/si-step-chooser is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were trojanized and...

Malicious code in @or-sdk/idw-public (npm)

npm/@or-sdk/idw-public is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were trojanized and republished ...

MAL-2026-11980 Malicious code in pob-test-package-in-monorepo (npm)

npm/pob-test-package-in-monorepo is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were trojanized and...

Malicious code in @onereach/idw-contracts (npm)

npm/@onereach/idw-contracts is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were trojanized and...

MAL-2026-11664 Malicious code in @onereach/webform (npm)

npm/@onereach/webform is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were trojanized and republished b...

MAL-2026-11819 Malicious code in @servicetitan/anvil-react (npm)

npm/@servicetitan/anvil-react is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were trojanized and...

CVE-2026-0284

An XML injection vulnerability in the Large Scale VPN LSVPN functionality of Palo Alto Networks PAN-OS® software enables an unauthenticated attacker with network access to inject malicious XML content, potentially leading to information disclosure or corruption of internal LSVPN satellite data...

CVE-2026-0283

An authentication bypass vulnerability in Large Scale VPN LSVPN functionality of Palo Alto Networks PAN-OS software allows an attacker with network access to bypass security restrictions and establish an unauthorized site-to-site VPN connection. Panorama, Cloud NGFW, and Prisma® Access are not...

CVE-2026-0283 PAN-OS: Authentication Bypass Vulnerability in Large Scale VPN (LSVPN)

An authentication bypass vulnerability in Large Scale VPN LSVPN functionality of Palo Alto Networks PAN-OS software allows an attacker with network access to bypass security restrictions and establish an unauthorized site-to-site VPN connection. Panorama, Cloud NGFW, and Prisma® Access are not...

CVE-2026-0283

CVE-2026-0283 concerns Palo Alto Networks PAN-OS Large Scale VPN (LSVPN). The vulnerability is an authentication bypass in LSVPN that could allow an attacker with network access to bypass restrictions and establish an unauthorized site-to-site VPN. Public write-ups reference PAN-OS versions 10.2....