pwndoc

PwnDoc PwnDoc는 침투 테스트 보고 애플리케이션으로, 발견 내용을 쉽고 간단하게 작성하고 사용자 정의 가능한 Docx 보고서를 생성할 수 있습니다. 주요 목표는 취약점과 같은 데이터를 사용자 간에 공유하여 Pwn 에 더 많은 시간을 할애하고 Doc 에 더 적은 시간을 쓰는 것입니다. 문서 설치 데이터 역할 취약점 감사 템플릿 설정 프로필 기능 다국어 지원 다중 데이터 지원 뛰어난 사용자 정의 재사용 가능한 감사 및 취약점 데이터 관리 사용자 정의 섹션 생성 취약점에 사용자 정의 필드 추가 CVSS v3 및 v4 점수를...

autopsy

Autopsy 4 http://www.sleuthkit.org/ 2016年3月15日 概要 Autopsy は、The Sleuth Kit やその他のオープンソースのデジタルフォレンジックツールへのグラフィカルインターフェースです。 Autopsy 3 は、Autopsy 2 を Java ベースに完全に書き直したものです。 Autopsy 4 は、Autopsy 3 を改良し、複数のユーザーによる単一ケースの共同作業をサポートします。 Autopsy...

pwndoc v1.7.0

PwnDoc PwnDoc is a pentest reporting application making it simple and easy to write your findings and generate a customizable Docx report. The main goal is to have more time to Pwn and less time to Doc by mutualizing data like vulnerabilities between users. Documentation Installation Data Roles...

Beyond the Scope: Security Testing of Permission Management in Team Workspace

Nowadays team workspaces are widely adopted for multi-user collaboration and digital resource management. To further broaden real-world applications, mainstream team workspaces platforms, such as Google Workspace and Microsoft OneDrive, allow third-party applications referred to as add-ons to be...

Microsoft Office OneNote Remote Code Execution Vulnerability

Microsoft Office OneNote is a set of tools for free-form information access and multi-user collaboration. A remote code execution vulnerability exists in Microsoft Office OneNote, which can be exploited by an attacker to execute arbitrary code on a system...

Securing and governing data in a new hybrid work reality

The past year has led to an evolution in not only how we think about work, but more importantly, where work gets done. Arguably, gone are the days that your organization’s data is limited to the protected confines of your corporate network as your people continue to work remotely, return in some...

UPDATE: SILENTTRINITY v0.3.0

PenTestIT RSS Feed Just yesterday, I wrote about this open source post-exploitation C2 framework and a new release is already available. The post was titled - List of Open Source C2 Post-Exploitation Frameworks. We now have SILENTTRINITY v0.3.0 amongst us, which was in the works for a long time!...