citrix-honeypot

Citrix ADC NetScaler 蜜罐 检测并记录 CVE-2019-19781（Shitrix / Citrixmash）的攻击载荷 记录失败的登录尝试 提供从真实设备获取的内容和响应头，以增加在搜索引擎（如 Google、Shodan 等）上的索引机会 安装 预编译版本 预编译的 Linux（x64）软件包可在此处获取 root@kitploit: mkdir citrix-honeypot cd citrix-honeypot wget...

stegowiper

stegoWiper: A powerful and flexible active attack for disrupting stegomalware Over the last 10 years, many threat groups have employed stegomalware or other steganography-based techniques to attack organizations from all sectors and in all regions of the world. Some examples are: APT15/Vixen Pand...

fire-wall-server

🛡️ Spring4Shell 防火墙缓解脚本 Python 该项目使用 Python 内置的 http.server 模块模拟防火墙，检测并阻止利用 Spring4Shell CVE-2022-22965 漏洞的恶意请求。 🔍 关于 Spring4Shell 是一个影响 Spring Core 框架的严重远程代码执行 RCE 漏洞。攻击者使用恶意有效载荷在服务器上部署 Web Shell。本仓库演示如何使用轻量级的自定义 Python HTTP 防火墙来阻止这些攻击。 🚀 功能特性 检测并阻止已知的 Spring4Shell 有效载荷 模式匹配针对： 危险 URL...

CVE-2025-71359

picklescan before 0.0.29 fails to detect malicious pickle payloads that utilize lib2to3.pgen2.grammar.Grammar.loads in the reduce method, allowing remote code execution. Attackers can craft pickle files embedding dangerous code that evades picklescan detection and executes during pickle.load...

EUVD-2025-210416

picklescan before 0.0.29 fails to detect malicious pickle payloads that utilize lib2to3.pgen2.grammar.Grammar.loads in the reduce method, allowing remote code execution. Attackers can craft pickle files embedding dangerous code that evades picklescan detection and executes during pickle.load...

XSS_Vulnerability_scanner

XSSVulnerabilityscanner Features: - Tests multiple XSS...

picklescan 数据伪造问题漏洞

picklescan is a security scanning program by the individual developer Matthieu Maitre. A data forgery issue vulnerability exists in picklescan versions prior to 0.0.23, which stems from a ZIP file manipulation that may cause a crash, thereby bypassing malicious payload detection...

GHSA-769V-P64C-89PR PyTorch Model Files Can Bypass Pickle Scanners via Unexpected Pickle Extensions

CVE-2025-1889 Summary Picklescan fails to detect hidden pickle files embedded in PyTorch model archives due to its reliance on file extensions for detection. This allows an attacker to embed a secondary, malicious pickle file with a non-standard extension inside a model archive, which remains...

6 Ways to Quickly Detect a Log4Shell Exploit in Your Environment

In recent days, the cybersecurity industry has been rapidly assessing the full impact of the Log4Shell CVE-2021-44228 and CVE-2021-45046 vulnerability. Many organizations are quickly trying to figure out whether this vulnerability is within their environment, and where. The next question a securi...

Libdetection: Introducing New Generation of Attacks Detection

In the latest version of Wallarm Node, we integrated a new attack detection engine that will work with a combination of current detects. Libdetection is a unique open-source project https://github.com/wallarm/libdetection, that provides a signature-free payloads detection by implementing a syntax...

North Korean Spear-Phishing Attack Targets U.S. Firms

Researchers have uncovered an ongoing, sophisticated malware campaign aiming at U.S.-based targets with an interest in nuclear deterrence, North Korea’s nuclear submarine program and North Korean economic sanctions. The campaign, which researchers from Prevailion call “Autumn Aperture” and link...

XSS vulnerability in invite-users-panel.vm [$i18n.getText('easyuser.send.invitations.email.placeholder', [$siteTitle]), line 37]

Panopticon http://panopticon.dyn.syd.atlassian.com/ has detected that the following file contains a XSS vulnerability. This vulnerability has been manually confirmed. File: confluence-plugins/confluence-bundled-plugins/confluence-easyuser-admin/src/main/resources/templates/invite-users-panel.vm...