College-Management-System-course_code-SQL-Injection-Authenticated

学院管理系统 - 'coursecode' SQL注入（已验证） 1. 描述： College Management System 1.0 允许通过参数 'coursecode' 在 /College-Management-System/admin/asign-single-student-subjects.php 进行 SQL 注入。利用此问题可能允许攻击者破坏 应用程序、访问或修改数据，或利用底层数据库中的潜在漏洞。 2. 验证概念： 在 Burpsuite 中拦截受影响页面的请求，包含 'coursecode' 参数，并将其保存为 poc.req。然后运行 SQLmap...

CVE-2023-26984

CVE-2023-26984 Vulnerability Explanation: An issue in the password reset function of Peppermint v0.2.4 allows attackers to access the emails and passwords of the Tickets page via a crafted request. Attack Vectors: The attacker had to log in with the user role and reset the password. Then intercep...

JailedCement

JailedCement the funny :trollface: warning: this will bootloop your device, if you use it thinking it wont i will point and laugh at you. Disguised as onlyfans++... DM me iswaxbro8319...

trufflehog-explorer

TruffleHog Explorer 🕵️‍♂️ Bienvenido a TruffleHog Explorer, una herramienta web fácil de usar para visualizar y analizar datos extraídos con TruffleHog. TruffleHog es una de las herramientas open source más potentes para el descubrimiento, clasificación, validación y análisis de secretos. En este...

DevGuide

OWASP Foundation Developer Guide The Developer Guide is one of the original documents from OWASP and so has a long history. The original DevGuide repository has many of the previous versions going back to the very first version 1.0 release from 2002. This is the content for the Developer Guide...

patchright

🎭 Patchright...

AwesomeXSS

AwesomeXSS This repository is a collection of Awesome XSS resources. Contributions are welcome and should be submitted via an issue. Awesome contents Challenges Reads & Presentations Tools Mind maps DOM XSS Payloads Polyglots Tags and event handlers Context breaking HTML context Attribute context...

bandwhich

bandwhich これは、プロセス、接続、リモートIP/ホスト名別に現在のネットワーク使用状況を表示するCLIユーティリティです。 目次 bandwhich 目次 プロジェクトの状態 動作の仕組み インストール 下流パッケージのステータス プリビルドバイナリのダウンロード ソースからのビルド クロスコンパイル Android インストール後 Linux 1. setcap ケイパビリティの説明 2. sudo または代替 インストール後 Windows 使用方法 コントリビューション ライセンス プロジェクトの状態...

bandwhich

bandwhich This is a CLI utility for displaying current network utilization by process, connection and remote IP/hostname Table of contents bandwhich Table of contents Project status How does it work? Installation Downstream packaging status Download a prebuilt binary Building from source...

cachet_2.4.0-dev

CVE-2021-39174 Cachet 2.4.0-dev 一个用于 CVE-2021-39174 Cachet 2.4.0-dev 的 python3 脚本，通过 Twig 服务端模板注入实现信息泄露和远程代码执行（RCE）。执行 RCE 需要用户的 API KEY。请参阅下面的 Leave Songs 链接，其中介绍了如何通过 SQL 注入（CVE-2021-39165）获取 API KEY。 开始使用 运行程序 数据提取 root@kitploit: python3 cachet2.4.0-dev.py -t http://cachet.site/ -u username -p...

CVE-2024-23741

CVE-2024-23741 An issue in Hyper through 3.4.1 on macOS allows a remote attacker to execute arbitrary code via the RunAsNode and enableNodeClilnspectArguments settings. There is a tool designed to automate the process of searching for vulnerabilities in electron:...

CVE-2021-22986

CVE-2021-22986 用法: python exploit.py -u...

CVE-2024-10924

CVE-2024-10924...

atlant-harden

AtlantHarden — Windows, Browser & Office Security Hardening Tool AtlantHarden is a comprehensive Windows 10/11 security hardening application with a modern, professional UI. It applies 606 hardening settings — including 354 DISA STIG controls across Windows 11, Edge, Chrome, Firefox, and Office 3...

openapi_security_scanner

OpenAPI Security Scanner Acerca del Proyecto Los problemas de seguridad de autorización en aplicaciones web modernas no son fácilmente detectados por los escáneres de seguridad. Algunos ejemplos de Shopify, LINE, NordVPN. Una de las razones es que los escáneres de seguridad se centran...

SigDigger

SigDigger - The free digital signal analyzer SigDigger is a free digital signal analyzer for GNU/Linux and macOS, designed to extract information of unknown radio signals. It supports a variety of SDR devices through SoapySDR, and allows adjustable demodulation of FSK, PSK and ASK signals, decode...

mailinabox

Mail-in-a-Box By @JoshData and contributors. Mail-in-a-Box helps individuals take back control of their email by defining a one-click, easy-to-deploy SMTP+everything else server: a mail server in a box. Please seehttps://mailinabox.email for the project's website and setup guide! Our goals are to...

mailinabox

Mail-in-a-Box 作者 @JoshData 和贡献者。 Mail-in-a-Box 通过提供一台一键式、易于部署的 SMTP+全套服务服务器，帮助个人重新掌控自己的电子邮件：一个装在盒子里的邮件服务器。 请访问https://mailinabox.email 查看项目网站和设置指南！ 我们的目标是： 让部署优秀的邮件服务器变得简单。 促进互联网的去中心化、创新和隐私保护。 拥有自动化、可审计且幂等的配置。 不 打造一个完全不可入侵、NSA 也无法攻破的服务器。 不 做成一个可供高级用户自定义的东西。 此外，本项目还有一份行为准则，其优先级高于上述目标。加入我们的社区时，请先阅读...

L1B3RT4S

L1B3RT45...

CVE-2022-27925

Zimbra Unauthenticated Remote Code Execution Exploit CVE-2022-27925...