CVE-2021-21983

CVE-2021-21975 VMware vRealize OperationsvROps Manager API 임의 파일 쓰기로 인한 원격 코드 실행RCE vRealize OperationsvROps는 AI 기반의 셀프 드라이빙 IT 운영 관리 도구로, 애플리케이션에서 인프라까지 VMware Cloud 및 HCI 배포를 최적화, 계획, 확장하고 퍼블릭 클라우드 모니터링을 통합합니다. VMware vRealize Operations Manager API 8.4 and all previous versions는 SSRFServer Sid...

androguard

Androguard Androguard: Reverse engineering and pentesting for Android applications Androguard 5 is a Python toolkit for Android reverse engineering: open an APK, inspect the manifest and DEX, disassemble or decompile code, hunt references and vulnerabilities, and optionally patch or analyze nativ...

macos_sandbox

macOS 소개 - App 샌드박스 macOS로 전환하는 블로그포스트 시리즈를 계속하면서, macOS App 샌드박스에 대해 조금 이야기해보려고 합니다. macOS App 구조 블로그포스트를 먼저 읽어볼 것을 강력히 권장합니다 - 독자가 App과 프로세스태스크의 차이를 알고, launchd와 App 실행과의 관계에 대해 조금 알고 있다고 가정하겠습니다. 예제로 보는 샌드박스 macOS 샌드박스에 대해 처음 배웠을 때, 저는 순진하게도 악성 Word 매크로를 만들어보려고 했습니다. 이것은 여전히 Windows 생태계에서 매우 흔...

Neo

Neo C2 프레임워크 레드팀 운영 및 보안 테스트에서 협력적인 에이전트 관리를 위해 설계된 모듈형 서버-클라이언트 아키텍처의 사후 침투 프레임워크입니다. 운영자가 자신만의 확장 모듈을 추가할 수 있는 유연성을 제공합니다. 설치 • 에이전트 및 스테이저 • 프로파일 및 리스너 • 모듈 • 멀티플레이어 • SOCKS5 • 태스크 오케스트레이션 기능 확장성: 서버는 Flask 개발 서버와 달리 프로덕션 WSGI를 사용하여 실제 트래픽에서 안정성과 성능을 보장합니다. 멀티플레이어 모드: 운영자 간 실시간 협업과 대화형 세션 잠금 기...

OffensiveNim

OffensiveNim Мои эксперименты по использованию Nim для разработки имплантов и общих наступательных операций. Содержание OffensiveNim Содержание Почему Nim? Работающие примеры в этом репозитории Примеры в разработке WIP Компиляция примеров из этого репозитория Простой способ рекомендуется Сложный...

upx

ooooo ooo ooooooooo. ooooooo ooooo 888' 8' 888 Y88. 8888 d8' 888 8 888 .d88' Y888..8P 888 8 888ooo88P' 8888' 888 8 888 .8PY888. 88. .8' 888 d8' 888b YbodP' o888o o888o o88888o The Ultimate Packer for eXecutables Copyright c 1996-2026 Markus Oberhumer, Laszlo Molnar & John Reiser...

5MMISSI-CVE-2017-1000499

5MMISSI-CVE-2017-1000499 CVE-2017-1000499의 PoC phpMyAdmin 4.7.x 버전4.7.6.1/4.7.7 이전은 CSRF 취약점에 노출되어 있습니다. 사용자를 속여 조작된 URL을 클릭하게 함으로써 레코드 삭제, 테이블 드롭/트렁케이트 등과 같은 유해한 데이터베이스 작업을 수행할 수 있습니다. 내용 Makefile web/index.html 지침 사전 준비 git clone https://github.com/Villaquiranm/5MMISSI-CVE-2017-1000499.git cd...

Veil-PowerView

PowerTools PowerTools от Veil — это коллекция проектов на PowerShell, ориентированных на наступательные операции. Разработано @harmj0y и @sixdub...

certificate-of-compromise

Сертификат компрометации SoK/Документация по наступательным операциям против службы сертификации Active Directory v1.0.0 Живой документ и вклад сообщества Этот документ — живой документ. Исследования ADCS не статичны: методы получают исправления, открываются новые условия, а анализ сообщества...

b2evolution CMS <6.11.6 - Open Redirect

b2evolution CMS before 6.11.6 contains an open redirect vulnerability via the redirectto parameter in emailpassthrough.php. An attacker can redirect a user to a malicious site and possibly obtain sensitive information, modify data, and/or execute unauthorized operations. id: CVE-2020-22840 info:...

Car Rental Management System 1.0 - SQL Injection

Car Rental Management System 1.0 contains an SQL injection vulnerability via /admin/ajax.php?action=login. An attacker can possibly obtain sensitive information from a database, modify data, and execute unauthorized administrative operations in the context of the affected site. id: CVE-2022-32022...

OpenCATS - Open Redirect

OpenCATS contains an open redirect vulnerability due to improper validation of user-supplied GET parameters. This, in turn, exposes OpenCATS to possible template injection and obtaining sensitive information, modifying data, and/or executing unauthorized operations. id: CVE-2023-27292 info: name:...

Complete Online Job Search System 1.0 - SQL Injection

Complete Online Job Search System 1.0 contains a SQL injection vulnerability via /eris/admin/company/index.php?view=edit&id=. An attacker can possibly obtain sensitive information from a database, modify data, and execute unauthorized administrative operations in the context of the affected site...

Labstack Echo 4.8.0 - Open Redirect

Labstack Echo 4.8.0 contains an open redirect vulnerability via the Static Handler component. An attacker can leverage this vulnerability to cause server-side request forgery, making it possible to obtain sensitive information, modify data, and/or execute unauthorized operations. id: CVE-2022-400...

Citrix SD-WAN Center - Remote Command Injection

Citrix SD-WAN Center is susceptible to remote command injection via the addModifyZTDProxy function in NmsController. The function does not sufficiently validate or sanitize HTTP request parameter values that are used to construct a shell command. An attacker can trigger this vulnerability by...

Django - Open Redirect

Django 1.11.x before 1.11.15 and 2.0.x before 2.0.8 contains an open redirect vulnerability. If django.middleware.common.CommonMiddleware and APPENDSLASH settings are selected, and if the project has a URL pattern that accepts any path ending in a slash, an attacker can redirect a user to a...

Citrix SD-WAN Center - Remote Command Injection

Citrix SD-WAN Center is susceptible to remote command injection via the ping function in DiagnosticsController, which does not sufficiently validate or sanitize HTTP request parameter values used to construct a shell command. An attacker can trigger this vulnerability by routing traffic through t...

Citrix SD-WAN Center - Remote Command Injection

Citrix SD-WAN Center is susceptible to remote command injection via the apply action in StorageMgmtController. The callStoragePerl function does not sufficiently validate or sanitize HTTP request parameter values that are used to construct a shell command. An attacker can trigger this vulnerabili...

CirCarLife <4.3 - Improper Authentication

CirCarLife before 4.3 is susceptible to improper authentication. An internal installation path disclosure exists due to the lack of authentication for /html/repository.System. An attacker can obtain sensitive information, modify data, and/or execute unauthorized operations. id: CVE-2018-16668 inf...

Loan Management System 1.0 - SQL Injection

Loan Management System 1.0 contains a SQL injection vulnerability via the username parameter. An attacker can possibly obtain sensitive information from a database, modify data, and execute unauthorized administrative operations in the context of the affected site. id: CVE-2025-9744 info: name:...