31 matches found
Graffiti
NOTE : Never upload payloads to online checkers Graffiti is a tool to generate obfuscated oneliners to aid in penetration testing situations. Graffiti accepts the following languages for encoding: Python Perl Batch Powershell PHP Bash Graffiti will also accept a language that is not currently on...
CVE-2018-11776-Python-PoC
CVE-2018-11776-Python-PoC hook-s3c github.com/hook-s3c, @hooks3c 트위터에서 CVE-2018-11776을 위한 작동하는 Python 테스트 및 PoC, 원래 다음에서 등장했습니다; https://github.com/hook-s3c/CVE-2018-11776-Python-PoC 무슨 일인가요? Semmle의 Man Yue Mo가 Struts2 RCE 취약점을 발표했습니다. 이 취약점은 요청의 URL 경로에 인코딩된 페이로드로 전달됩니다. 영향을 받는 버전은 2.3부터...
Invoke-PSImage
Invoke-PSImage Encodes a PowerShell script in the pixels of a PNG file and generates a oneliner to execute Invoke-PSImage takes a PowerShell script and encodes the bytes of the script into the pixels of a PNG image. It generates a oneliner for executing either from a file of from the web. It can...
awesome-web-security
Awesome Web Security 🐶 Курируемый список материалов и ресурсов по веб-безопасности. Излишне говорить, что большинство веб-сайтов страдают от различных ошибок, которые в конечном итоге могут привести к уязвимостям. Почему это происходит так часто? Здесь может быть задействовано множество факторов,...
python-paddingoracle
python-paddingoracle: A portable, padding oracle exploit API UPDATED FOR PYTHON 3 python-paddingoracle is an API that provides pentesters a customizable alternative to PadBuster and other padding oracle exploit tools that can't easily without a heavy rewrite be used in unique, per-app scenarios...
XSSYA
XSSYA-V2.0이 출시되었습니다 - https://github.com/yehia-mamdouh/XSSYA-V-2.0 확인 XSSYA는 교차 사이트 스크립팅XSS 스캐너 및 취약점 확인 도구입니다 두 가지 방식으로 작동 • 확인 방법 1: 요청 및 응답Request and Response • 확인 방법 2: 인코딩된 페이로드를 실행하고 웹 HTML 코드에서 동일한 페이로드를 디코딩된 상태로 검색 • HTTPS 지원 • 확인 후 쿠키를 얻기 위해 페이로드 실행 • 3가지 유형의 WAF 식별 ModSecurity -...
batchfuscate
batchfuscate 간단하면서도 효율적인 스크립트로, 당신의 배치batch 페이로드를 탐지 불가능하게 만듭니다. 요구 사항: 1. Windows 및 Linux에 python3가 설치되어 있어야 합니다. 2. pip install termcolor pip install pystyle pip install tqdm pip install colorama pip install requests 설치 방법:- 1. 저장소를 클론합니다. 2. pip install -r requirements.txt 3. python3 bat.py 사용...
CVE-2021-4034
CVE-2021-4034 CVE-2021-4034 정적 링크 구현으로, Blasty의 구현을 기반으로 하며 gcc가 필요하지 않습니다. payload.so는 payload.h에서 인코딩되어 디스크에 기록됩니다. 편의를 위해 정적으로 컴파일된 바이너리가 포함되어 있습니다. 원본 PoC 및 작성자 https://twitter.com/bl4sty/status/1486092552755466242?s=20...
waf-checker v1.2.0
WAF Checker This project helps you check how well your Web Application Firewall WAF protects your product against common web attacks. It can be run as a Cloudflare Worker with a built-in interactive Web UI or as a standalone Node.js CLI tool. Features Core Testing Enter a target URL, pick HTTP...
CVE-2026-48537 GFI Archiver < 15.13 Stored XSS via FileArchiveAssistantWizard.aspx
GFI Archiver before 15.13 contains a stored cross-site scripting vulnerability in the File Archive Assistant configuration that allows authenticated attackers to inject arbitrary web script or HTML via the excluded extensions parameter to /Archiver/FileArchiveAssistantWizard.aspx. The injected...
Byte XORi Encoder
Byte XOR encoder for RISC-V 64-bit Little Endian. Encodes the payload byte-by-byte with a 1-byte XOR key using the xori instruction. Useful when R-type XOR instruction bytes 0x33 are bad characters. Module Options msf use encoder/riscv64le/bytexori msf encoderbytexori show actions ...actions... m...
XOR Encoder
Dword XOR encoder for RISC-V 64-bit Little Endian. Encodes the payload with a 4-byte XOR key. Module Options msf use encoder/riscv64le/longxor msf encoderlongxor show actions ...actions... msf encoderlongxor set ACTION msf encoderlongxor show options ...show and set options... msf encoderlongxor...
Dword XOR Encoder (Tag-based)
Dword XOR encoder for RISC-V 32-bit Little Endian using a tag-based terminator rather than an encoded length. The decoder loop XORs each dword and stops when the result is zero the sentinel. This avoids encoding the payload length in the stub, eliminating a source of bad character conflicts. Note...
Byte XORi Encoder
Byte XOR encoder for RISC-V 32-bit Little Endian. Encodes the payload byte-by-byte with a 1-byte XOR key using the xori instruction. Useful when R-type XOR instruction bytes 0x33 are bad characters. Module Options msf use encoder/riscv32le/bytexori msf encoderbytexori show actions ...actions... m...
CVE-2019-25612 Admin Express 1.2.5.485 Local SEH Buffer Overflow via Folder Path
Admin Express 1.2.5.485 contains a local structured exception handling buffer overflow vulnerability that allows local attackers to execute arbitrary code by supplying an alphanumeric encoded payload in the Folder Path field. Attackers can trigger the vulnerability through the System Compare...
CVE-2019-25467
Verypdf docPrint Pro 8.0 contains a structured exception handling buffer overflow vulnerability that allows local attackers to execute arbitrary code by supplying an oversized alphanumeric encoded payload in the User Password or Master Password fields. Attackers can craft a malicious payload with...
cl-cybersec-pysxss
XSS WAF Lab – Payload Generator This project studies how Web...
Exploit for Deserialization of Untrusted Data in Laravel
CVE-2018-15133-PoC Este script Python implementa un exploit d...
Incorrect functionID will not trigger fallback
Lines of code Vulnerability details Impact When encoding a payload for settlement of multiple tokens, the fallback flag is not set when it should be. This will cause no fallback to be triggered even though the user has paid enough to cover the additional costs that are required. Proof of Concept ...