recon-ninja

recon-ninja 이 도구는 업로드 옵션을 통해 도메인 디스커버리 결과를 업로드할 수 있는 정찰recon 도구를 제공하는 GitHub 저장소입니다. 이 도구는 활성 도메인을 스캔하는 도구인 HTTPX를 활용합니다. 또한 클라우드 기반 데이터베이스인 MongoDB Atlas가 통합되어 있어 정찰 데이터를 저장할 수 있습니다. 사용자는 업로드된 서브도메인을 검색 가능한 뷰로 제공하는 사용자 인터페이스UI를 통해 도구와 상호 작용할 수 있습니다. UI는 또한 title과 CNAME을 구분하여 표시하며, 업로드된 서브도메인 데이터...

rmm

Recon MindMap RMM Jason Haddix의 TBHM v4 recon edition 워크숍에서 영감을 받아, 도메인 및 서브도메인 목록을 정리하는 작업을 단순화해 주는 CLI명령줄 인터페이스 도구를 개발했습니다. 목표는 Obsidian Mind Map이나 xmind 같은 마인드 매핑 소프트웨어를 사용하여 복잡한 도메인 구조를 쉽게 생성할 수 있는 도구를 만드는 것입니다. 목차 설치 사용법 기여 행동 강령 연락처 정보 후원 설치 소스에서 빌드 작동하는 Go 환경이 필요합니다. 따라서 Go 설치 방법을 따라 주시기...

Recon2023

Recon 2023 슬라이드 및 코드...

spaces-finder

Spaces finder Spaces finder는 전리품을 찾기 위해 DigitalOcean Spaces를 빠르게 열거하는 도구입니다. 서브도메인 무차별 대입 도구와 유사하지만 DigitalOcean Spaces에 특화되어 있으며, 흥미로운 파일을 grep하고, 하드 드라이브를 빠르게 가득 채우는 것을 두려워하지 않는다면 관심 있는 파일을 다운로드할 수 있는 추가 기능도 있습니다. By Bharath @okbyenow의 AWSBucketDump를 기반으로 구축됨 사전 요구 사항 비표준 Python 라이브러리: xmltodic...

CVE-2026-84282 A Server-Side Request Forgery (SSRF) vulnerability exists in the ONLYOFFICE ownCloud Integration plugin (version 9.12)

A Server-Side Request Forgery SSRF vulnerability exists in the ONLYOFFICE ownCloud Integration plugin version 9.12. The /apps/onlyoffice/ajax/settings/address endpoint does not sufficiently validate the user-supplied Document Server URL before initiating outbound connections. An authenticated...

laravel-threat-detection v1.7.2

Laravel Threat Detection Security monitoring and attack logging for Laravel. Detect and log SQL injection, XSS, RCE, directory traversal, bot scanners and/wp-admin-style recon probes — every hostile request recorded to your database with full application context. It's an IDS, not a WAF: it never...

CVE-2026-55378

JS Recon is a JavaScript enumeration and SAST tool. From 1.2.1-beta.1 until 1.3.1-beta.2, the PR Branch Checker workflow in .github/workflows/prchecker.yml places github.headref and github.event.pullrequest.head.repo.fullname into BRANCHNAME and SOURCEREPO and interpolates those untrusted values...

CVE-2026-55378 JS Recon: Command injection in PR Branch Checker workflow via untrusted pull request context values

JS Recon is a JavaScript enumeration and SAST tool. From 1.2.1-beta.1 until 1.3.1-beta.2, the PR Branch Checker workflow in .github/workflows/prchecker.yml places github.headref and github.event.pullrequest.head.repo.fullname into BRANCHNAME and SOURCEREPO and interpolates those untrusted values...

CVE-2026-55378

JS Recon is a JavaScript enumeration and SAST tool. In versions 1.2.1-beta.1 through 1.3.1-beta.2 , the PR Branch Checker workflow in .github/workflows/pr_checker.yml interpolates untrusted values (github.head_ref and github.event.pull_request.head.repo.full_name) directly into a shell gh pr comm...

CVE-2026-55378 JS Recon: Command injection in PR Branch Checker workflow via untrusted pull request context values

JS Recon is a JavaScript enumeration and SAST tool. From 1.2.1-beta.1 until 1.3.1-beta.2, the PR Branch Checker workflow in .github/workflows/prchecker.yml places github.headref and github.event.pullrequest.head.repo.fullname into BRANCHNAME and SOURCEREPO and interpolates those untrusted values...

Malicious code in ecobee-home (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a02620d2c1be5db8251957a24b2dacf01b146b1ee009169a9d828cb1f2a7425 The package's declared postinstall script runs beacon.js, which issues an HTTP GET to a hardcoded bare-IP endpoint http://169.58.96.170:9001/cb...

Malicious code in ecobee-api (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bebaf39f3f17cfdfbddac8bb4f92aaa1fd600b7f0a69def35d879ebe5d90f14f On npm install, ecobee-api runs node beacon.js via its postinstall lifecycle script. The beacon issues an HTTP GET to the hardcoded bare-IP endpoint...

CVE-2026-75104 Hugging Face Transformers Path Traversal via Checkpoint Index

Hugging Face Transformers fails to validate shard filenames in checkpoint index files, allowing attackers to read arbitrary files outside the model directory. Attackers can supply malicious index files with parent-directory references or absolute paths that are joined without validation, enabling...

CVE-2026-75104

Hugging Face Transformers joins shard filenames from checkpoint index files without validation, allowing malicious index files with parent-directory references or absolute paths to read arbitrary files outside the model directory. CVSS 6.8 (medium) requires local access and user interaction. No p...

CVE-2026-75104 Hugging Face Transformers Path Traversal via Checkpoint Index

Hugging Face Transformers fails to validate shard filenames in checkpoint index files, allowing attackers to read arbitrary files outside the model directory. Attackers can supply malicious index files with parent-directory references or absolute paths that are joined without validation, enabling...

MAL-2026-13952 Malicious code in global-intel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5449036ad6a1bf0ee192023ddb23ea7afefe53da7133ab91f4ffbc6d3253f5dc package.json declares a preinstall hook that runs index.js on npm install. index.js collects host identity and OS files from the installer —...

Malicious code in @years20/n8n-nodes-utils-helper-j (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae821bd0afd5bdf483830eddac1c875d1ec3d229ca2078aa4fe7d88e9573eefb @years20/n8n-nodes-utils-helper-j 1.0.0 runs a postinstall script index.js/callback.js that executes id and hostname on the installer host,...

CVE-2026-18348

Missing authorization check in the uploadazure, uploadsftp, and uploadsmb VQL plugins allows an authenticated analyst-role user can initiate attacker-controlled outbound network connections from the Velociraptor server, bypassing the NETWORK ACL permission boundary. This enables internal network...

exploit-development-framework

Exploit Development Framework EDF A modular, educational ex...

MAL-2026-12400 Malicious code in matlab-azure-devops-extension (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ecc42778bb54bfdea5784d5dcb68cf43c89def3dbaeddba1d1a6bd2850cb174b The package's preinstall script node index.js auto-executes on npm install and collects host identifiers os.hostname, os.userInfo.username, home...