metasploitable-pentest-report

Metasploitable 2 — ペネトレーションテストレポート 免責事項: このペネトレーションテストは、教育目的のみで、プライベートで隔離されたVMwareラボ環境において実施されました。実際のシステムには一切アクセスしていません。すべてのIPアドレスは匿名化されています。 概要 フィールド| 詳細 ---|--- テスター| Prafullya Shandilya 標的| Metasploitable 2（意図的に脆弱なVM） 攻撃者| Kali Linux ネットワーク| 隔離されたVMwareホストオンリーラボ 日付| 2026年5月9日 ツール| Nmap...

Vuln_Exploitation_MegaQuagga_Pentest

脆弱性の悪用 — MegaQuagga ペネトレーションテストレポート 分析者: Samuel Weiss 組織: 0x2A Security 日付: 2026年4月20日 顧客: MegaQuagga Publishing 対象: www.megaquagga.local 分類: 機密 概要 本プロジェクトは、MegaQuagga Publishing の Web 環境に対して実施された 構造化ペネトレーションテスト を文書化したものです。このエンゲージメントでは、5件の悪用可能な脆弱性が確認され、そのうち2件を連鎖させることで、認証なしのリモートコード実行 RCE...

Hack-The-Box-Nexus-Findings-Report

🛡️ Hack The Box - Nexus 発見レポート 📋 概要 このリポジトリは、Hack The Box マシン Nexus の包括的なペネトレーションテストレポートを含んでいます。 🔍 主な発見 Gitea コミット履歴における認証情報の露出 - 中程度 Krayin CRM 無制限ファイルアップロード CVE-2026-38526 - 高 Gitea テンプレート同期ディレクトリトラバーサル - 重大 ユーザーフラグ取得: 3290dde5fca195ea451632d54d4b60da ルートフラグ取得: c25914b5b518500d1c71da5c8331ac9d...

Exploiting-GitLab-CVE-2023-7028

CVE-2023-7028 を対象としたペネトレーションテスト...

CICD-Goat-Vapt-Writeup

CICD-Goat VAPT Writeup A full vulnerability assessment & penetration test against OWASP CICD-Goat — a deliberately vulnerable CI/CD environment Jenkins, Gitea, GitLab, CTFd — mapped end-to-end against the OWASP Top 10 CI/CD Security Risks. Why this exists Most CI/CD security writeups either stay...

Penetration-Test

Penetration-Test Report completo del test di penetrazione contro IP VM Ubuntu. Catena di attacco: enumerazione delle directory → scoperta di file di backup → cracking delle password → upload di file CMS → reverse shell → escalation dei privilegi del kernel Dirty Pipe, CVE-2022-0847. Struttura del...

PYSEC-2026-2727 Open WebUI missing authorization check at the model update function - models from other users can be updated

Summary A user can modify another user's model even if its visibility is set to Private. The finding resulted from a penetration test for a customer. It is suspected that the root cause of the issue lies within the core of Open WebUI, which is why it is being reported as a security issue here...

network-pentest-metasploitable2

Network / System Penetration Test — Metasploitable 2 !Type...

Internal-Penetration-Test-Report-Web-Exploitation-Post-Exploitation-Using-Metasploit-

Internal-Penetration-Test-Report-Web-Exploitation-Post-Exploit...

bleak

BLEAK — Bluetooth Link Exploitation & Attack Knowledgebase...

Open WebUI missing authorization check at the model update function - models from other users can be updated

Summary A user can modify another user's model even if its visibility is set to Private. The finding resulted from a penetration test for a customer. It is suspected that the root cause of the issue lies within the core of Open WebUI, which is why it is being reported as a security issue here...

report-anonymizer

🛡️ Report Anonymizer Local LLM anonymizer for penetration-t...

PT-2026-41175

Name of the Vulnerable Software and Affected Versions Open WebUI versions prior to 0.5.7 Description An issue exists where a user can modify another user's model regardless of whether its visibility is set to Private. By altering access permissions during the editing process, unauthorized access...

Vuln_Exploitation_MegaQuagga_Pentest

Vulnerability Exploitation — MegaQuagga Penetration Test Repor...

Malicious code in vision-service-python-client (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 faa725015cfe04b49bbcf9f472d21a77993c7ca9692ad2b0912e9bd3d2554669 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

Towards Leveraging LLMs to Generate Abstract Penetration Test Cases from Software Architecture

Software architecture models capture early design decisions that strongly influence system quality attributes, including security. However, architecture-level security assessment and feedback are often absent in practice, allowing security weaknesses to propagate into later phases of the software...

Exploit for CVE-1999-0368

🛡️ Advanced Penetration Testing & System Forensic Audit Mid...

Malicious code in strands-agents-anthropic (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 b86e2f5ba17218d5e9377627cc2c437009cc3dc7c6615c87b8317995614288c6 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

Faraday 5.19.0

Faraday is a tool that introduces a new concept called IPE, or Integrated Penetration-Test Environment. It is a multiuser penetration test IDE designed for distribution, indexation and analysis of the generated data during the process of a security audit. The main purpose of Faraday is to re-use...

Faraday 5.18.0

Faraday is a tool that introduces a new concept called IPE, or Integrated Penetration-Test Environment. It is a multiuser penetration test IDE designed for distribution, indexation and analysis of the generated data during the process of a security audit. The main purpose of Faraday is to re-use...