SharpEDRChecker

SharpEDRChecker 全新改进的 C 实现版 Invoke-EDRChecker。检测运行中的进程、进程元数据、当前进程中加载的 DLL 及其元数据、常见安装目录、已安装的服务及其二进制元数据、已安装的驱动程序及其驱动元数据，所有这些都用于发现已知的防御产品，如杀毒软件、EDR 和日志记录工具。还能通过元数据检查捕获隐藏的 EDR，更多信息请参阅我的博客文章此处。 该二进制文件可以通过加载模块然后运行的方式载入你的 C2 服务器。注意：该二进制文件现已包含在 PoshC2 中，因此无需手动添加。 我会在时间允许时继续添加和完善列表。完整路线图见下文。 如有任何问题或疑问，可在...

CVE-2026-47255 AgenticMail API/storage and outbound relay hardening

AgenticMail gives AI agents real email addresses and phone numbers. @agenticmail/api prior to version 0.9.32 and @agenticmail/core prior to version 0.9.10 had weakness related to validation and and binding of inactive-agent hour filtering; storage SQL identifier validation; metadata-backed...

uniget 操作系统命令注入漏洞

Uniget is a general-purpose tool for installing and updating software, developed by Uniget itself. Versions of Uniget prior to 0.27.1 contained a vulnerability related to operating system command injection. This vulnerability stemmed from the direct execution of commands using the Bash shell scri...

Nextcloud: SSRF via potential filter bypass with too lax local domain checking

Summary: Hi. Reviewing the code for filtering for ssrf, in preventLocalAddress, we can see that it calls the function ThrowIfLocalAddress. It has three common checks, first, it checks if the string is localhost, or if it ends in .local or .localhost php // Disallow localhost and local network if...