browser-xpi-malware-scanner

XPI Analyzer — Firefox扩展安全扫描器 一款命令行工具，用于分析Firefox扩展文件（.xpi），检测恶意软件、混淆、隐藏载荷、隐写术以及其他用于绕过扩展审查团队的恶意代码技术。 功能概述 extension-scanner.py 会解压Firefox扩展，并对其内部每个文件执行一系列安全检查，最终生成一份按严重性分级、带有颜色编码的报告。 如何使用本扫描器在Firefox/Mozilla扩展商店中实时发现恶意软件并进行深入分析 – 指南/教程 恶意软件分析：使用browser-xpi-malware-scanner.py在野捕获恶意软件...

CVE-2022-22965

CVE-2022-22965 2022.04.02 16:44 POCを最適化し、一回限りの検証ではなくなりました Optimized POC, no longer a one-time validation 警告：このプログラムはログ情報の整合性を破壊します。サーバーデータをバックアップしてください！サーバーの侵入テストの許可がある場合のみ使用してください！ Warning: This program will destroy log information integrity, please back up server data! Use only if you have serv...

CVE-2026-90857

SourceCodester College Notes Gallery Management System 1.0 is affected by an unrestricted file upload vulnerability in the Profile Upload component. The vulnerable endpoint is /dashboard/userprofile.php, where manipulation of the image argument allows an attacker to upload arbitrary files. The at...

CVE-2026-90857 SourceCodester College Notes Gallery Management System Profile Upload userprofile.php unrestricted upload

A vulnerability was detected in SourceCodester College Notes Gallery Management System 1.0. Affected is an unknown function of the file /dashboard/userprofile.php of the component Profile Upload. Performing a manipulation of the argument image results in unrestricted upload. The attack may be...

CVE-2026-90857 SourceCodester College Notes Gallery Management System Profile Upload userprofile.php unrestricted upload

A vulnerability was detected in SourceCodester College Notes Gallery Management System 1.0. Affected is an unknown function of the file /dashboard/userprofile.php of the component Profile Upload. Performing a manipulation of the argument image results in unrestricted upload. The attack may be...

EUVD-2026-78260

A vulnerability was detected in SourceCodester College Notes Gallery Management System 1.0. Affected is an unknown function of the file /dashboard/userprofile.php of the component Profile Upload. Performing a manipulation of the argument image results in unrestricted upload. The attack may be...

fuzzable

Fuzzable Framework for Automating Fuzzable Target Discovery with Static Analysis Introduction Vulnerability researchers conducting security assessments on software will often harness the capabilities of coverage-guided fuzzing through powerful tools like AFL++ and libFuzzer. This is important as ...

pip3line

Pip3line Codacy Badge Linux / MacOS Builds Windows Builds Raw bytes manipulation utility, able to apply well known and less well known transformations, quick binary search, network proxy interception and more. Install on Windows: Download the release zip here Remember to install/repair the VS...

SpaceX-Starlink-Router-Gen-2-XSS

SpaceX / Starlink Router Gen 2 XSS CVE-2023-49965 你可以在此处查看韩文版本： https://hackintoanetwork.com/blog/2023-starlink-router-gen2-xss-kor TL;DR 第二代路由器的初始强制门户页面存在跨站脚本（XSS）漏洞，攻击者可能利用该漏洞控制路由器和Dishy。 基础知识 产品： Starlink 路由器 Gen 2 测试版本： 2022.32.0（修复版本为 2023.48.0 及更高版本） 漏洞类型： XSS（跨站脚本） 漏洞概述...

wpgarlic

wpgarlic A proof-of-concept WordPress plugin fuzzer that led to the discovery of more than 300 vulnerabilities in WordPress plugins installed on almost 30 million sites. The used technique is described in https://kazet.cc/2022/02/03/fuzzing-wordpress-plugins.html If you want to continue the...

cosign

cosign Signing OCI containers and other artifacts using Sigstore! Cosign aims to make signatures invisible infrastructure. Cosign supports: "Keyless signing" with the Sigstore public good Fulcio certificate authority and Rekor transparency log default Hardware and KMS signing Signing with a cosig...

cosign

cosign Sigstore を使用して OCI コンテナ（およびその他のアーティファクト）に署名します! Cosign は、署名を見えないインフラストラクチャ にすることを目指しています。 Cosign は以下をサポートしています: Sigstore のパブリックグッド Fulcio 認証局と Rekor 透過性ログを使用した「キーレス署名」（デフォルト） ハードウェアおよび KMS 署名 cosign が生成した暗号化された秘密鍵/公開鍵ペアによる署名 OCI レジストリでのコンテナの署名、検証、保存。 Bring-your-own PKI（独自 PKI の持ち込み） 情報...

Dshell

Dshell 확장 가능한 네트워크 포렌식 분석 프레임워크입니다. 플러그인을 신속하게 개발하여 네트워크 패킷 캡처 분석을 지원합니다. 주요 기능: 특화된 플러그인을 사용한 심층 패킷 분석 강력한 스트림 재조립 IPv4 및 IPv6 지원 사용자가 선택 가능한 여러 출력 형식 및 사용자 정의 출력 핸들러 생성 기능 연결 가능한 플러그인 데이터 소스 처리를 별도의 Python 프로세스로 분할하는 병렬 처리 옵션 핵심 Dshell 플러그인 디렉토리와 중복되지 않으면서 새로 개발된 외부 플러그인을 공유 및 설치할 수 있는 외부 플러그인 ...

exrop

Exrop Automatic ROP chain generator for x86-64 binaries, powered by Triton symbolic execution. Features Set registers to constants or other registers rdi=0x41414141, rdi=rax Write to memory constant and register-based addresses/values Write strings/bytes to memory Function calls with mixed...

cryptovenom

CryptoVenom CryptoVenom: The Cryptography Swiss Army knife What is CryptoVenom? CryptoVenom is an OpenSource tool which contains a lot of cryptosystems and cryptoanalysis methods all in one, including classical algorithms, hash algorithms, encoding algorithms, logic gates, mathematical functions,...

binprotect

빌드 지침 빌드 지침은 4. 빌드를 참조하세요. 목차 1. 소개 2. 바이너리 재작성기 2.1. 상대 주소 추적 2.2. 역어셈블리 2.2.1. 기본 블록 분할 2.2.2. 간접 제어 흐름 2.2.2.1. 점프 테이블 2.2.2.1.1. 경계가 있는 점프 테이블 2.2.2.1.2. 경계가 없는 점프 테이블 2.2.2.1.3. 다양한 유형의 점프 테이블 2.2.2.2. 예외 사례 2.2.3. 함수 2.2.4. 'Noreturn' 호출 처리 2.3. 예외 지원 2.3.1. 언와인드 지원 2.3.1.1. 구현 2.3.2. 예외 정보...

react2shell

React2Shell: React Server Components에서의 RCE 제로데이 CVE-2025-55182 React 및 CVE-2025-66478 Next.js 이 저장소는 승인된 보안 테스트 및 교육 목적으로만 사용되는 익스플로잇 코드를 포함하고 있습니다. 참고: 여러 연구자들이 이 취약점에 대한 분석을 발표했습니다. 추가 관점, 익스플로잇 기법 및 탐지 방법은 참고 자료 섹션을 확인하세요. 개요 2025년 12월 3일 수요일, React Server Components에서 심각한 원격 코드 실행RCE 취약점이...

CVE-2026-90856 SourceCodester College Notes Gallery Management System Registration Flow signup.php privileges management

A security vulnerability has been detected in SourceCodester College Notes Gallery Management System 1.0. This impacts an unknown function of the file signup.php of the component Registration Flow. Such manipulation of the argument role leads to improper privilege management. The attack can be...

CVE-2026-90856

SourceCodester College Notes Gallery Management System 1.0 is affected by an improper privilege management vulnerability in the Registration Flow component. The flaw resides in the signup.php file, where manipulation of the role argument allows a remote, unauthenticated attacker to gain elevated ...

CVE-2026-90856 SourceCodester College Notes Gallery Management System Registration Flow signup.php privileges management

A security vulnerability has been detected in SourceCodester College Notes Gallery Management System 1.0. This impacts an unknown function of the file signup.php of the component Registration Flow. Such manipulation of the argument role leads to improper privilege management. The attack can be...