UPGer

UPGer | CVE-2022-4060 - ユーザー投稿ギャラリー CVE-2022-4060の脆弱性をチェックする自動大量ツール - WordPressプラグイン : User Post Gallery install.sh sha1sum install.sh | grep 12345678 md5sum install.sh sha512sum install.sh bash install.sh...

CVE-2022-22947

Spring Cloud Gateway Actuator API SpEL-инъекция и выполнение команд CVE-2022-22947 Spring Cloud Gateway Actuator API SpEL Code Injection CVE-2022-22947 Использование: root@kitploit: -t http://vuldomain.com //один IP -f urls.txt //пакетное сканирование из файла, многопоточный, быстрый -c command...

patch-checker

PatchChecker This is the code base for the service running on: https://patchchecker.com. In short, PatchChecker is a web application running on flask that provides output similar to that of Watson. However by using PatchChecker, one is not required to execute a binary on the target machine...

HiddenEyeReborn

Introduction The HiddenEye: Reborn tool is a project aimed at exploiting human error. As my second attempt at creating a comprehensive tool for this purpose, it presently has numerous phishing features. We intend to add more functionality soon. Keep up with our progress by checking out our roadma...

CVE-2022-24924

Vulnérabilité de contrôle d'accès inadéquat dans LiveWallpaperService CVE-2022-24924SVE-2021-24089 Version Windows testée : Windows 10 20H2 Build 19042.1348 64 bits Version de Live Wallpaper : 3.0.9.0 ou antérieure Il existe un service LiveWallpaperService qui fonctionne par défaut sur les...

CVE-2019-11043

Ladon POC Moudle CVE-2019-11043 PHP-FPM + Ngnix Описание уязвимости Уязвимость удаленного выполнения кода в PHP-FPM CVE-2019-11043 На Real World CTF, организованном компанией Chaitin Tech, зарубежный исследователь безопасности Andrew Danau, решая одну из задач CTF, обнаружил, что при отправке...

CVE-2020-11851

CVE-2020-11851 Уязвимость удаленного выполнения кода в ArcSight Logger через ArcSight Management Center https://nvd.nist.gov/vuln/detail/CVE-2020-11851 Основные выводы Описание уязвимости ArcSight Logger — это комплексное решение для управления журналами, которое снижает нагрузку, связанную с...

linux-soft-exploit-suggester

linux-soft-exploit-suggester Script to find exploits for all vulnerable software on the system, targeting software packages rather than just kernel vulnerabilities. It uses the exploit database to assess the security of packages and search for exploits to help with privilege escalation. Usage...

linux-soft-exploit-suggester

linux-soft-exploit-suggester Скрипт для поиска эксплойтов для всех уязвимых программ в системе, ориентированный на пакеты программного обеспечения, а не только на уязвимости ядра. Он использует exploit database для оценки безопасности пакетов и поиска эксплойтов, чтобы помочь с повышением...

voltron

Voltron Voltron est une boîte à outils extensible d'interface utilisateur pour débogueur écrite en Python. Elle vise à améliorer l'expérience utilisateur de divers débogueurs LLDB, GDB, VDB et WinDbg en permettant l'attachement de vues utilitaires capables de récupérer et d'afficher des données...

voltron

Voltron Voltron is an extensible debugger UI toolkit written in Python. It aims to improve the user experience of various debuggers LLDB, GDB, VDB and WinDbg by enabling the attachment of utility views that can retrieve and display data from the debugger host. By running these views in other TTYs...

blindy

Blindy Simple script for running brute-force blind MySql injection Note: this script was created for fun, helpful in some ctf challenges : description The script will run through queries listed in sets in provided file and try to brute-force any place where placeholder is found. GET & POST http...

HoneyProxy

이 프로젝트는 다른 곳으로 이동했습니다. HoneyProxy는 이제 mitmproxy의 일부입니다: http://docs.mitmproxy.org/en/stable/mitmweb.html HoneyProxy HoneyProxy는 HTTPS 트래픽 흐름을 분석하는 데 도움을 주는 경량 중간자man-in-the-middle 프록시입니다. 보안 연구자의 요구에 맞춰 설계되었으며 실시간 분석과 로그 분석을 모두 지원합니다. mitmproxy와 호환되며, 포렌식 관점에서 유용한 기능에 중점을 두고 확장된 시각화 기능을 제공합니다...

omigod

CVE-2021-38647: Omigod Ещё один эксплойт для Omigod, написанный быстро и грязно на Go. Эксплойт использует и основан на: исследовании от wiz: https://www.wiz.io/blog/omigod-critical-vulnerabilities-in-omi-azure SOAP-полезной нагрузке от midoxnet: https://github.com/midoxnet/CVE-2021-38647...

xeca

xeca xeca is a project that creates encrypted PowerShell payloads for offensive purposes. Creating position independent shellcode from DLL files is also possible. Note: Please place your custom AMSI bypass in src/assets/amsi-bypass.ps1. Table of Contents xeca Install How It Works Mitigations...

my-dshrness-aipentest

DSH PenTest Workflow v4.2 A multi-agent penetration testing w...

OffensiveVBA

OffensiveVBA In preparation for a VBS AV Evasion Stream/Video I was doing some research for Office Macro code execution methods and evasion techniques. The list got longer and longer and I found no central place for offensive VBA templates - so this repo can be used for such. It is very far away...

c-jwt-cracker

JWT cracker A multi-threaded JWT brute-force cracker written in C. If you are very lucky or have a huge computing power, this program should find the secret key of a JWT token, allowing you to forge valid tokens. This is for testing purposes only, do not put yourself in trouble : I used the Apple...

CVE-2024-53345

CVE-2024-53345 Критическая 0-day уязвимость в системе управления арендой автомобилей версий 1.0 - 1.3 Описание: В системе управления арендой автомобилей версии 1.0 - 1.3 в функциональности загрузки файлов модуля System Settings существует критическая уязвимость, которая позволяет пользователям с...

jboss-autopwn

jboss-autopwn JBoss Autopwn은 BlackHat Europe 2010에서 소개된 도구입니다. 이 버전은 Minded Security가 발견한 JBoss 인증 우회 VERB 조작 취약점CVE-2010-0738을 포함합니다. C. Papathanasiou 2010 INTRODUCTION 이 JBoss 스크립트는 대상 JBoss AS 서버에 JSP 셸을 배포합니다. 배포 후 스크립트는 업로드 및 명령 실행 기능을 통해 대화형 세션을 제공합니다. 기능: 다중 플랫폼 지원 - Windows, Linux 및 Mac...