launchd-portrep

launchd-portrep launchd-portrep is an exploit for a port replacement vulnerability in launchd, the initial userspace process and service management daemon on macOS. By sending a crafted Mach message to the bootstrap port, launchd can be coerced into deallocating its send right for any Mach port t...

sctphantom

SCTPhantom — Linux kernel SCTP ASCONF use-after-free tracking site Source for the SCTPhantom patch-status tracker: a single-page site recording which distributions have shipped a fix for the SCTP ASCONF transport use-after-free in the Linux kernel. Where the facts live Everything about the bug —...

log4shell-vulnerable-app

Log4Shell 샘플 취약 애플리케이션 CVE-2021-44228 이 저장소는 CVE-2021-44228에 취약한 Spring Boot 웹 애플리케이션을 포함합니다. 이 취약점은 Log4Shell로 알려져 있습니다. Log4j 2.14.1 spring-boot-starter-log4j2 2.6.1을 통해과 JDK 1.8.0181을 사용합니다. 애플리케이션 실행 다음 명령어로 실행하세요: docker run --name vulnerable-app --rm -p 8080:8080...

ATSCAN

ATSCAN SCANNER Advanced Mass Search / Dork / Exploitation Scanner | Alisam Technology is not responsible for any misuse, damage caused by this script or attacking targets without prior mutual consent! It is your responsibility to obey laws! ---|--- Codename:| 4n0n4t ---|--- AUTHOR:| Ali MEHDIOUI...

CVE-2023-4634

CVE-2023-4634 Wordpress 플러그인 Media-Library Plugin 3.10용 RCE 익스플로잇 CVE-2023-4634 정보 Patrowl은 3.10 미만 버전의 Media-Librairy-Assistant Wordpress 플러그인에서 인증되지 않은 RCE 취약점을 발견했습니다. 이 익스플로잇은 간단하지 않으며 아래에 설명된 약간의 설정만 필요합니다. 이 익스플로잇에 대한 전체적인 발견 및 공격 과정은 블로그에서 확인할 수 있습니다:...

anubis-fetch

anubis-fetch $ nix run github:fzakaria/anubis-fetch -- --text https://lore.kernel.org/ Anubis 작업증명proof-of-work 챌린지 뒤에 있는 URL을 가져오기 위한 Go CLI입니다. 레거시 SHA-256 및 WASM 챌린지를 프로세스 내에서 해결하며, 헤드리스 Chromium을 폴백으로 사용합니다. lore.kernel.org 및 kernel.org와 같은 사이트는 페이지를 제공하기 전에 작업증명을 요구하기 위해 Anubis를 사용합니다. 일반 HT...

GraphQLmap

GraphQLmap GraphQLmap is a scripting engine to interact with a graphql endpoint for pentesting purposes. Install Features and examples Dump a GraphQL schema Interact with a GraphQL endpoint Execute GraphQL queries Autocomplete queries GraphQL field fuzzing Example 1 - Bruteforce a character Examp...

FARO

FARO 문서 민감도 탐지기 목차 이게 뭐죠? 구성 요소 Docker로 FARO 실행하기 호스트 머신에서 FARO 실행하기 전제 조건 가상 환경 의존성 NER 모델 FARO Spider 단일 파일 탐지 기술적 세부 사항 FARO 엔터티 탐지기 설정 지원되는 입력 파일 형식 기법 테스트 Git-LFS 설치 FARO 탐지 추가 인수 알려진 문제 기여자 이게 뭐죠? FARO는 조직 내 문서에서 민감한 정보를 탐지하는 도구입니다. 복잡한 데이터 보호 도구를 구성하는 데 많은 시간과 비용을 들일 수 없지만 조직 내 민감 문서를 추적하려...

Security Bulletin: IBM SPSS Modeler is affected by multiple vulnerabilities in Netty

Summary IBM SPSS Modeler is affected by multiple vulnerabilities in Netty. This has been addressed in the remediation section. Vulnerability Details CVEID:CVE-2026-62380 DESCRIPTION: Netty io.netty:netty-codec-socks versions 4.2.0.Final through 4.2.16.Final and 4.1.x through 4.1.136.Final contain...

jwtear

Jwtear A modular command-line tool to parse, create and manipulate JSON Web TokenJWT tokens for security testing purposes. Features Complete modularity. All commands are plugins. Easy to add new plugins. Support JWS and JWE tokens. Easy interface for plugins. follow the template example Flexible...

CVE-2014-0472

CVE-2014-0472 Use docker-compose up -d Access localhost:8083 Reference: https://www.djangoproject.com/weblog/2014/apr/21/security/ 1. One or more views are present which construct a URL based on user input commonly, a "next" parameter in a querystring indicating where to redirect upon successful...

DongTai

DongTai 中文版本Chinese version About DongTai IAST Dongtai IAST is an open-source Interactive Application Security Testing IAST tool that enables real-time detection of common vulnerabilities in Java applications and third-party components through passive instrumentation. It is particularly suitable...

K000163640: Apache Struts vulnerabilities CVE-2026-104711, CVE-2026-104712, CVE-2026-104713, and CVE-2026-104714

Security Advisory Description CVE-2026-104711 Improper neutralization of special elements used in an expression language statement 'Expression Language Injection' vulnerability in Apache Struts. If the application is configured to use the legacy RESTful action mapper, a crafted request can inject...

subcrawl

SubCrawl SubCrawl is a framework developed by Patrick Schläpfer, Josh Stroschein and Alex Holland of HP Inc’s Threat Research team. SubCrawl is designed to find, scan and analyze open directories. The framework is modular, consisting of four components: input modules, processing modules, output...

CVE-2025-31131

CVE-2025-31131 - YesWiki 4.5.2 미만 경로 탐색 익스플로잇 이것은 YesWiki 4.5.2 이전 버전을 대상으로 하는 인증되지 않은 경로 탐색 익스플로잇입니다. 취약점은 squelette 매개변수에 존재하며, 서버에서 임의의 파일을 읽을 수 있게 합니다. 취약점 세부 정보 CVE-ID: CVE-2025-31131 영향 받는 소프트웨어: YesWiki 4.5.2 미만 유형: 경로 탐색 심각도: 높음 CVSS: 8.6 참조:...

frelatage

pip3 install frelatage The Python Fuzzer that the world deserves Installation | How it works | Features | Use Frelatage | Configuration Frelatage is a coverage-based Python fuzzing library which can be used to fuzz python code. The development of Frelatage was inspired by various other fuzzers,...

webshell-analyzer

Web Shell Analyzer Web shell analyzer is a cross platform stand-alone binary built solely for the purpose of identifying, decoding, and tagging files that are suspected to be web shells. The web shell analyzer is the bigger brother to the web shell scanner project...

TokenBreaker

TokenBreaker Token Breaker is focused on 2 particular vulnerability related to JWT tokens. None Algorithm RSAtoHMAC Refer to this link about insights of the vulnerability and how an attacker can forge the tokens Try out this vulnerability here TheNone Usage usage: TheNone.py -h -t TOKEN...

pcfg_cracker

PCFG = Probabilistic Context Free Grammar PCFG = Pretty Cool Fuzzy Guesser In short: A collection of tools to perform research into how humans generate passwords. These can be used to crack password hashes, but also create synthetic passwords honeywords, or help develop better password strength...

Malware-Exhibit

⚠️⚠️ Malware-Exhibit ⚠️⚠️ Docker - Usage and Importance Pull the docker image In Information, do not use this repository on your own computer or clone the repository and build the dockerfile on your down computer To run the image use ie: ---docker run --name -it...