msploitego

msploitego - The Pentesting suite for Maltego THIS IS A BETA RELEASE, please be nice and report any issues Whats New New Features Now supporting multiple workspaces for Metasploit via Postgres queries A bash script that runs tons of auxiliary modules against targets. Really 'fattens' up the...

AutoSploit

Docker deployment instructions tl;dr Using docker-compose: git clone https://github.com/NullArray/AutoSploit.git cd Autosploit/Docker docker-compose run --rm autosploit Using just Docker: git clone https://github.com/NullArray/AutoSploit.git cd Autosploit/Docker If you wish to edit default postgr...

chameleon

19 Customizable honeypots for monitoring network traffic, bots activities, and username\password credentials DNS, HTTP Proxy, HTTP, HTTPS, SSH, POP3, IMAP, STMP, RDP, VNC, SMB, SOCKS5, Redis, TELNET, Postgres, MySQL, MSSQL, Elastic and ldap If you want to implement the honeypots in your project,...

faraday-cli

Faraday on the terminal Use faraday directly from your favorite terminal faraday-cli is the official client that make automating your security workflows, easier. Before installing, we recommend creating and activating a Python virtual environment to avoid affecting your system Python packages. Fo...

kraken

Warning I have been reviewing the Kraken-Client code and since this was my first ever react app, its old, clunky and it needs major improvement the server needs some work too. In the next few weeks/months I will do my best to rewrite it in either updated React or in another framework. Please feel...

c2-cloud

About The Project The C2 Cloud is a robust web-based C2 framework, designed to simplify the life of penetration testers. It allows easy access to compromised backdoors, just like accessing an EC2 instance in the AWS cloud. It can manage several simultaneous backdoor sessions with a user-friendly...

msploitego

msploitego - Maltego를 위한 침투 테스트 스위트 이것은 베타 릴리스입니다. 문제가 있으면 보고해 주세요. 새로운 기능 새로운 기능 이제 Postgres 쿼리를 통해 Metasploit의 여러 작업공간 지원 대상에 대해 수많은 보조 모듈을 실행하는 bash 스크립트. Metasploit DB를 실제로 '비대하게' 만듬 변환: Metasploit 작업공간 열거 Nikto 파서 파일에서 Enum4linux 파서 파일에서 DNS 스캔 버그 수정 nmap 기반 변환의 거짓 음성 반환 잘못된 경로 msploitego는...

PoC

PoC 개념 증명PoC 익스플로잇과 도구를 위한 저장소입니다. BMCRSCDRCE BMC Server Automation의 RSCD 에이전트를 위한 인증되지 않은 원격 명령 실행 익스플로잇입니다. 이 익스플로잇은 CVE-2016-1542의 영향을 받는 서버에서 작동합니다Nessus로 탐지됨. 이제 Metasploit 모듈입니다. exploits/multi/misc/bmcserverautomationrscdnshrce를 참조하세요. 이 익스플로잇은 Nessus가 패킷을 기록하고 이를/정크를 Nessus로 다시 보내는 Python...

Mortimer

Mortimer 네트워크 포렌식 유형의 데이터와 인텔리전스를 주로 postgres 데이터베이스로 처리하는 스크립트 모음입니다. NCC Group Plc가 오픈소스로 공개했습니다 - http://www.nccgroup.com/ John Greencirt at nccgroup dot com을 위해 개발되었습니다. https://github.com/nccgroup/mortimer AGPL 라이선스로 공개되었습니다. 자세한 내용은 LICENSE를 참조하세요. broimport.py: bro 로그를 postgres 데이터베이스로...

Another-Metabase-RCE-CVE-2023-38646

Extension of the Pre-Auth RCE in Metabase CVE-2023-38646 explained here This helped me to avoid errors related to "database already in use" with H2 and postgre as engines "token": "TOKEN", "details": "isondemand": false, "isfullsync": false, "issample": false, "cachettl": null, "refingerprint":...

postgres-bruteforcer

postgres-bruteforcer About 이 Go 스크립트는 creds.txt라는 파일에서 사용자 이름과 비밀번호 목록을 읽어 PostgreSQL 데이터베이스에 대해 테스트합니다. 이 스크립트는 명령줄 인수 또는 IP 목록이 담긴 텍스트 파일로 PostgreSQL 서버의 IP를 입력받습니다. 접근이 허용되면 스크립트는 이 출력을 pg-output.txt라는 파일에 기록합니다. postgres 사용자를 사용할 수 있다면 일반적으로 이는 슈퍼유저이며 RCE, LFI 또는 SSRF를 허용할 수 있습니다. How to...

DataEase_Postgresql_JDBC_Bypass-CVE-2025-49002

fofa语法：title="DataEase" poc: "POST /de2api/datasource/validate HTTP/1.1 Host: your-ip Accept-Encoding: gzip, deflate, br, zstd sec-ch-ua: ""Google Chrome"";v=""135"", ""Not-A.Brand"";v=""8"", ""Chromium"";v=""135"" User-Agent: Mozilla/5.0 Windows NT 10.0; Win64; x64 AppleWebKit/537.36 KHTML, like...

Rocky Linux 8.8 [CIQ] Security Update: postgres-decoderbufs / postgres-decoderbufs-debuginfo / etc (ciqsa-2026_0373)

The Rocky Linux 8.8 host has packages installed that are affected by a vulnerability as referenced in the CIQ ciqsa-20260373 advisory. This advisory aggregates security fixes for the postgres-decoderbufs SRPM in CIQ LTS 8.8. It addresses 1 CVE: CVE-2025-1094. Tenable has extracted the preceding...

CentOS Linux 7 [TuxCare] Security Update: php / php-bcmath / php-cli / php-common / php-dba / php-devel / etc Multiple Vulnerabilities (CENTOS7:CLSA-2024:1706700142)

The CentOS Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS7:CLSA-2024:1706700142 advisory. - In PHP versions 7.3.x below 7.3.27, 7.4.x below 7.4.15 and 8.0.x below 8.0.2, when using SOAP extension to connect to a SOAP server, a...

Rocky Linux 8.6 [CIQ] Security Update: postgres-decoderbufs / postgres-decoderbufs-debuginfo / etc (ciqsa-2026_0148)

The Rocky Linux 8.6 host has packages installed that are affected by a vulnerability as referenced in the CIQ ciqsa-20260148 advisory. This advisory aggregates security fixes for the postgres-decoderbufs SRPM in CIQ LTS 8.6. It addresses 1 CVE: CVE-2025-1094. Tenable has extracted the preceding...

Rocky Linux 9.2 [CIQ] Security Update: postgres-decoderbufs / postgres-decoderbufs-debuginfo / etc (ciqsa-2026_1169)

The Rocky Linux 9.2 host has packages installed that are affected by a vulnerability as referenced in the CIQ ciqsa-20261169 advisory. This advisory aggregates security fixes for the postgres-decoderbufs SRPM in CIQ LTS 9.2. It addresses 1 CVE: CVE-2024-7348. Tenable has extracted the preceding...

Rocky Linux 9.2 [CIQ] Security Update: postgres-decoderbufs / postgres-decoderbufs-debuginfo / etc Multiple Vulnerabilities (ciqsa-2026_1059)

The Rocky Linux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20261059 advisory. This advisory aggregates security fixes for the postgres-decoderbufs SRPM in CIQ LTS 9.2. It addresses 3 CVEs: CVE-2024-10979, CVE-2024-10976,...

Rocky Linux 9.4 [CIQ] Security Update: postgres-decoderbufs / postgres-decoderbufs-debuginfo / etc (ciqsa-2026_0565)

The Rocky Linux 9.4 host has packages installed that are affected by a vulnerability as referenced in the CIQ ciqsa-20260565 advisory. This advisory aggregates security fixes for the postgres-decoderbufs SRPM in CIQ LTS 9.4. It addresses 1 CVE: CVE-2025-1094. Tenable has extracted the preceding...

Rocky Linux 9.4 [CIQ] Security Update: postgres-decoderbufs / postgres-decoderbufs-debuginfo / etc Multiple Vulnerabilities (ciqsa-2026_1055)

The Rocky Linux 9.4 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20261055 advisory. This advisory aggregates security fixes for the postgres-decoderbufs SRPM in CIQ LTS 9.4. It addresses 3 CVEs: CVE-2024-10979, CVE-2024-10976,...

Rocky Linux 9.2 [CIQ] Security Update: postgres-decoderbufs / postgres-decoderbufs-debuginfo / etc (ciqsa-2026_1176)

The Rocky Linux 9.2 host has packages installed that are affected by a vulnerability as referenced in the CIQ ciqsa-20261176 advisory. This advisory aggregates security fixes for the postgres-decoderbufs SRPM in CIQ LTS 9.2. It addresses 1 CVE: CVE-2025-1094. Tenable has extracted the preceding...