rootly-graphify-importer

rootly-graphify graphify를 기반으로 구축된 이 도구는 Andrej Karpathy의 LLM Wiki 아이디어에서 영감을 받았습니다. 매 쿼리마다 처음부터 지식을 재발견하는 대신, LLM이 시간이 지날수록 더 풍부해지는 영구적이고 구조화된 지식 그래프를 구축하도록 합니다. Graphify는 모든 파일 폴더를 가져와 커뮤니티, 연결, 신뢰도 점수가 있는 쿼리 가능한 그래프로 변환합니다. 이 포크는 Rootly API를 대상으로 합니다. Rootly API에 연결하고, 선택한 시간 창에 대한 인시던트, 알림, 팀...

flask-saml2

flask-saml2 .. note:: メンテナーを募集しています 。このプロジェクトはメンテナンスされていません。このライブラリは動作します（少なくとも最後に使用したときは動作していました）が、私はもはやこのライブラリが作られたプロジェクトでは作業していません。このプロジェクトのリーダーシップと保守を引き継ぐことに興味がある方は、ご連絡ください。 .. image:: https://travis-ci.com/timheap/flask-saml2.svg?branch=master :target: https://travis-ci.com/timheap/flask-sam...

jexboss

JexBoss - JBoss and others Java Deserialization Vulnerabilities verify and EXploitation Tool JexBoss is a tool for testing and exploiting vulnerabilities in JBoss Application Server and others Java Platforms, Frameworks, Applications, etc. Requirements Python = 2.7.x urllib3 ipaddress Installatio...

jexboss

JexBoss - JBoss 및 기타 Java 역직렬화 취약점 확인 및 익스플로잇 도구 JexBoss는 JBoss 애플리케이션 서버 및 기타 Java 플랫폼, 프레임워크, 애플리케이션 등의 취약점을 테스트하고 익스플로잇하기 위한 도구입니다. 요구 사항 Python = 2.7.x urllib3 ipaddress 리눅스/맥 설치 JexBoss 최신 버전을 설치하려면 다음 명령어를 사용하세요: git clone https://github.com/joaomatosf/jexboss.git cd jexboss pip install -r...

webrtc-ips

STUN IP Address requests for WebRTC Demo: https://diafygi.github.io/webrtc-ips/ What this does Firefox and Chrome have implemented WebRTC that allow requests to STUN servers be made that will return the local and public IP addresses for the user. These request results are available to javascript,...

gf

gf A wrapper around grep to avoid typing common patterns. What? Why? I use grep a lot. When auditing code bases, looking at the output of meg, or just generally dealing with large amounts of data. I often end up using fairly complex patterns like this one: ▶ grep -HnrE...

RpcProxyInvoke

RpcProxyInvoke 概要 ローカルおよびリモートコードを実行する一般的な方法を作成するために、私たちは比較的目立たないコード実行方法を設計しました。これを内部ではRpcCraft（Self）およびRpcExec（Remote Process）と呼んでいます。この手法は、エクスプロイト開発者の間でよく知られている方法論を活用し、NdrServerCall2やNdrServerCallAllなどのRPC（リモートプロシージャコール）サーバーコールを悪用して任意のコードを実行します。 サーバーコールの悪用による実行...

Threat-Remediation-Scripts

Introduction Since 2021, I have developed a number of scripts to assist me with my investigations and remediation efforts. I figured, why not share them to the public, in hopes it helps you. How do these scripts work? The scripts I developed are intended to work with Crowdstrike Endpoint Detectio...

EUVD-2026-94164

Unsigned integer underflow in wstrncat in src/port.c in wolfSSL wolfSSH from v1.4.11 through v1.5.0 on non-Windows platforms allows an authenticated remote attacker to write one out-of-bounds null byte past the end of a stack buffer by sending a crafted SFTP path. wolfSSHRealPath in src/ssh.c...

CVE-2026-83742 wstrncat() unsigned integer underflow leads to an off-by-one null write in wolfSSH on non-Windows platforms

Unsigned integer underflow in wstrncat in src/port.c in wolfSSL wolfSSH from v1.4.11 through v1.5.0 on non-Windows platforms allows an authenticated remote attacker to write one out-of-bounds null byte past the end of a stack buffer by sending a crafted SFTP path. wolfSSHRealPath in src/ssh.c...

CVE-2026-83742

The wolfSSL wolfSSH library (versions v1.4.11 through v1.5.0 ) is vulnerable on non-Windows platforms due to an unsigned integer underflow in the wstrncat() function within src/port.c. An authenticated remote attacker can trigger this by sending a crafted SFTP path to wolfSSH_RealPath() in src/ss...

CVE-2026-83742 wstrncat() unsigned integer underflow leads to an off-by-one null write in wolfSSH on non-Windows platforms

Unsigned integer underflow in wstrncat in src/port.c in wolfSSL wolfSSH from v1.4.11 through v1.5.0 on non-Windows platforms allows an authenticated remote attacker to write one out-of-bounds null byte past the end of a stack buffer by sending a crafted SFTP path. wolfSSHRealPath in src/ssh.c...

CVE-2026-83742

Unsigned integer underflow in wstrncat in src/port.c in wolfSSL wolfSSH from v1.4.11 through v1.5.0 on non-Windows platforms allows an authenticated remote attacker to write one out-of-bounds null byte past the end of a stack buffer by sending a crafted SFTP path. wolfSSHRealPath in src/ssh.c...

apache__dolphinscheduler_CVE-2022-34662_2-0-9

Dolphin Scheduler 공식 웹사이트 dolphinscheduler.apache.org Total Lines 설계 특징 DolphinScheduler는 강력한 DAG 시각적 인터페이스를 갖춘 분산형이자 확장 가능한 워크플로 스케줄러 플랫폼으로, 데이터 파이프라인에서 복잡한 작업 종속성을 해결하고 다양한 유형의 작업을 out of the box 형태로 제공하는 데 전념합니다. 주요 목표는 다음과 같습니다: DAG 그래프에서 작업 간의 종속성에 따라 작업을 연결하며, 작업의 실행 상태를 실시간으로 시각화할 수 있습니다...

CVE-2023-26035

CVE-2023-26035 ZoneMinder 스냅샷 - 비인증 설치 저장소 가져오기 $ git clone https://github.com/Yuma-Tsushima07/CVE-2023-26035.git 설정 참고: 최신 버전의 node를 설치하세요. $ npm init $ npm i axios cheerio yargs 사용법 ┌─✗─v37r1x@7h3B14ckKn1gh75─/Documents/Code/CVE-2023-26035 └──╼ $node exp.js -h Options: --version Show version...

firepwner

CVE-2015-6357: FirePWNER Exploit — Cisco FireSIGHT Management Center SSL 인증 검증 취약점 소개 Cisco FireSIGHT Management Center 인증서 검증 취약점3은 자체적으로 중간 심각도로 CVSS 5.1 의 취약점입니다. 하지만 이 취약점은 SSL 인증서 검증이 왜 그렇게 중요한지를 보여주는 예입니다. 이 익스플로잇에서는 이 취약점을 활용하여 Cisco FireSIGHT 시스템에서 권한 있는 원격 명령 실행을 얻는 방법을 시연합니다. 이 익스플로잇은 S...

CVE-2026-106386

A flaw was found in the WebAudio component of chromium-browser. An uninitialized resource allows a remote attacker to cause information disclosure by convincing a user to visit a specially crafted HTML page. Successful exploitation enables the attacker to read process memory inside the browser...

CVE-2026-106401

A flaw was found in the Media component of chromium-browser. An out-of-bounds write vulnerability allows a remote attacker to achieve arbitrary code execution outside the browser sandbox by tricking a user into visiting a specially crafted HTML HyperText Markup Language page. Successful...

CVE-2026-106375

A flaw was found in chromium-browser. This flaw allows a remote attacker to execute arbitrary code outside the browser's isolated security environment sandbox by convincing a user to visit a crafted HTML page. The vulnerability is caused by an incomplete cleanup of resources within the Dawn...

CVE-2026-106388

A flaw was found in chromium-browser. A missing authorization check in the DataTransfer component allows a remote attacker who has compromised the renderer process to obtain sensitive information. By tricking a user into loading a specially crafted HTML page, the attacker can bypass restrictions ...