reaver-wps-fork-t6x

Overview Reaver implements a brute force attack against Wifi Protected Setup WPS registrar PINs in order to recover WPA/WPA2 passphrases , as described in Brute forcing Wi-Fi Protected Setup When poor design meets poor implementation. by Stefan Viehböck. Reaver has been designed to be a robust an...

failpoint

failpoint Golang용 failpoints 구현입니다. Fail point는 사용자가 제어하는 방식으로 오류를 주입할 수 있는 코드 지점을 추가하는 데 사용됩니다. Fail point는 해당 failpoint가 활성화된 경우에만 실행되는 코드 스니펫입니다. 빠른 시작 failpoint-ctl 사용 1. 소스에서 failpoint-ctl 빌드 git clone https://github.com/pingcap/failpoint.git cd failpoint make ls bin/failpoint-ctl 2. 프로그램에...

PiSavar

PiSavar - PineAP 모듈을 탐지하고 비인증 공격을 시작합니다 가짜 액세스 포인트 - WiFi Pineapple 활동 탐지용 프로젝트 소개 이 프로젝트의 목표는 WiFi pineapple 장치가 PineAP 모듈을 사용하여 연 가짜 액세스 포인트를 찾아내고, 공격 장치에 비인증 공격을 시작하여 클라이언트가 영향을 받지 않도록 방지하는 것입니다. PineAP 모듈 작동 방식 SSID 정보 수집 수집된 SSID 정보로 SSID 풀 생성 SSID 풀의 정보를 사용하여 가짜 액세스 포인트 생성 문제점은 무엇인가요? 하나의 M...

CVE-2026-105301

A flaw was found in the X.509 client-certificate authenticator of Keycloak, a solution for identity and access management. The issue occurs when the server is configured to check certificate revocation using CRL Distribution Points or OCSP. An attacker can provide a specially crafted certificate...

CVE-2026-105301 Keycloak-services: keycloak-services: blind ssrf via x.509 authenticator fetching attacker-controlled crl-dp/ocsp urls

A flaw was found in the X.509 client-certificate authenticator of Keycloak, a solution for identity and access management. The issue occurs when the server is configured to check certificate revocation using CRL Distribution Points or OCSP. An attacker can provide a specially crafted certificate...

EUVD-2026-92255

A flaw was found in the X.509 client-certificate authenticator of Keycloak, a solution for identity and access management. The issue occurs when the server is configured to check certificate revocation using CRL Distribution Points or OCSP. An attacker can provide a specially crafted certificate...

CVE-2026-105301

A flaw exists in the X.509 client-certificate authenticator of Keycloak , an identity and access management solution. When configured to check certificate revocation via CRL Distribution Points or OCSP , the server may process a specially crafted certificate provided by an attacker. This causes K...

CVE-2026-105301 Keycloak-services: keycloak-services: blind ssrf via x.509 authenticator fetching attacker-controlled crl-dp/ocsp urls

A flaw was found in the X.509 client-certificate authenticator of Keycloak, a solution for identity and access management. The issue occurs when the server is configured to check certificate revocation using CRL Distribution Points or OCSP. An attacker can provide a specially crafted certificate...

CVE-2026-105301

A flaw was found in the X.509 client-certificate authenticator of Keycloak, a solution for identity and access management. The issue occurs when the server is configured to check certificate revocation using CRL Distribution Points or OCSP. An attacker can provide a specially crafted certificate...

sharesniffer

sharesniffer sharesniffer is a network analysis tool for finding open and closed file shares on your local network. It includes auto-network discovery and auto-mounting of any open cifs and nfs shares. How to use Example to find all hosts on any local network with open/closed nfs/smb shares: pyth...

tarnish

tarnish tarnish is a static-analysis tool to aid researchers in security reviews of Chrome extensions. It automates much of the regular grunt work and helps you quickly identify potential security vulnerabilities. This tool accompanies the research blog post which can be found here. If you don't...

opencart-reward-free-checkout

abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · opencart-reward-free-checkout opencart-reward-free-checkout OpenCart 4.1.0.4 - OpenCart Ltd CVE-2025-15116은 4.1.0.3까지 존재했던 쿠폰 레이스였다. 4.1.0.4에서는 coupon.save가 쿠폰이 변경될 때 paymentmethod를 unset한다. reward.save는 그렇지 않다...

FortiWeb - Cross Site Scripting

FortiWeb 6.3.0 through 6.3.7 and versions before 6.2.4 contain an unauthenticated cross-site scripting vulnerability. Improper neutralization of input during web page generation can allow a remote attacker to inject malicious payload in vulnerable API end-points. id: CVE-2021-22122 info: name:...

EUVD-2026-91444

ZcashFoundation Zebra zebra-rpc before 8.0.0 and zebrad before 4.5.0 contain a reachable assertion in the zlistunifiedreceivers RPC handler, which calls expect on Sapling receiver parsing that fails for Unified Addresses carrying invalid Jubjub points. Authenticated RPC clients can submit such an...

sccm-http-looter

SCCM HTTP Looter 작동 방식 SCCM 배포 지점DP은 Microsoft SCCM이 소프트웨어 설치, 패치, 스크립트 배포 등에 사용되는 모든 파일을 호스팅하는 서버입니다. 기본적으로 이러한 서버는 SMBTCP/445 및 HTTP/STCP/80 및/또는 TCP/443를 통한 액세스를 허용하며 일부 유형의 Windows 인증예: NTLM을 요구합니다. 현재 SCCM DP 탈취 도구들은 파일을 수집하기 위해 SMB 공유를 탐색할 수 있는 능력에 의존합니다. CMloot cmloot 그러나 조직이 내부 네트워크의 서버에 ...

CentOS Linux 8.5 [TuxCare] Security Update: openssl / openssl-devel / openssl-libs / openssl-perl / etc Multiple Vulnerabilities (CENTOS8.5:CLSA-2026:1790933161)

The CentOS Linux 8.5 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS8.5:CLSA-2026:1790933161 advisory. - Issue summary: A certificate with many nameRelativeToCRLIssuer CRL distribution points causes disproportionate heap growth when...

CaptainHook

Captain Hook 무엇인가요? 이 도구의 목적은 사용자 입력을 추적하여 민감한 메서드java.lang.Runtime.exec, java.sql.Statement.executeQuery, ...에 대한 주입 지점을 찾고, 주입 지점과 메서드 호출 사이에서 발생하는 입력의 변형mutation을 찾는 것입니다. "마크Mark"가 생성되며, 이 마크는 앱의 모든 가능한 사용자 입력에 삽입되어야 합니다. 서로 다른 마크는 알림alert의 출처를 파악하는 데 도움이 됩니다. 모니터링되는 메서드 목록은 CLI에서...

veeam-velociraptor

Veeam Backup & Replication Velociraptor 아티팩트 - PoC 이 저장소에는 원격 Veeam Backup & Replication 포렌식 파이프라인을 위한 개념 증명PoC 역할을 하는 Velociraptor 아티팩트 모음이 포함되어 있습니다: artifacts/에는 아티팩트 정의가 포함되어 있습니다 tools/에는 Windows.QEMU.ImgConvert와 함께 사용할 수 있는 qemu-img.zip 아카이브가 포함되어 있습니다 자세한 내용은 관련 블로그 게시물에서 확인할 수 있습니다:...

Rocky Linux 9.6 [TuxCare] Security Update: ctdb / ldb-tools / libldb / libldb-devel / libnetapi / etc Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1781350676)

The Rocky Linux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1781350676 advisory. - A flaw was found in Samba's handling of NTFS-style reparse points on shares configured with read only = yes. Due to missing...

AlmaLinux 9.6 [TuxCare] Security Update: ctdb / ldb-tools / libldb / libldb-devel / libnetapi / etc Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1781350676)

The AlmaLinux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1781350676 advisory. - A flaw was found in Samba's handling of NTFS-style reparse points on shares configured with read only = yes. Due to missing...