whonow

Whonow DNS Server A malicious DNS server for executing DNS Rebinding attacks on the fly. whonow lets you specify DNS responses and rebind rules dynamically using domain requests themselves. respond to DNS queries for this domain with 34.192.228.43 the first time it is requested and then 192.168.1...

whonow

Whonow DNS 서버 DNS 리바인딩 공격을 실행하기 위한 악성 DNS 서버입니다. whonow를 사용하면 도메인 요청 자체를 통해 DNS 응답 및 리바인드 규칙을 동적으로 지정할 수 있습니다. respond to DNS queries for this domain with 34.192.228.43 the first time it is requested and then 192.168.1.1 every time after that A.34.192.228.43.1time.192.168.1.1.forever.rebind.netwo...

webrtc-ips

STUN IP Address requests for WebRTC Demo: https://diafygi.github.io/webrtc-ips/ What this does Firefox and Chrome have implemented WebRTC that allow requests to STUN servers be made that will return the local and public IP addresses for the user. These request results are available to javascript,...

CVE-2026-43700

CVE-2026-43700 WebKit WebGPU importExternalTexture 교차 출처 정보 유출. Safari 빨강/초록/파랑/흰색 수정 버전 = 26.5.2: PATCHED importExternalTexture blocked: SecurityError 원리 GPUDevice.importExternalTexturesource: HTMLVideoElement는 동영상을 GPU가 샘플링할 수 있는 GPUExternalTexture로 가져옵니다. 수정 전에는 동영상에 대해 taintsOrigin 교차 출처 확인을 ...

WebKit-NavigationAPI-SOP-Bypass

WebKit-NavigationAPI-SOP-Bypass WebKit Navigation API — 교차 포트 가로채기를 통한 동일 출처 정책 우회 CVE-2026-20643 | ---|--- CVE| CVE-2026-20643 발견자| Thomas Espach WebKit Bugzilla 306050 구성 요소| WebKit — WebCore::Navigation::innerDispatchNavigateEvent 영향| iOS 26.3.1 build 23D8133 iPhone18,2 분류| SOP 우회 상호작용| 클릭 / 링...

singularity

Singularity of Origin Recent updates: NEW 2025-11-25 : Chrome release 142 added Local Network Access LNA, which prevents DNS rebinding attack techniques implemented in Singularity. Singularity of Origin's LNA-from-Non-Secure-Contexts branch implements support for Trial for Local Network Access fr...

dref

DNS 리바인딩 공격 프레임워크 이 프로젝트는 더 이상 유지보수되지 않습니다. dref는 DNS 리바인딩의 복잡한 작업을 처리합니다. 다음은 내장 페이로드 중 하나에서 가져온 코드 조각으로, 후킹된 브라우저에서 로컬 서브넷을 스캔하는 데 프레임워크를 사용하는 방법을 보여줍니다. 라이브 웹 서비스를 식별한 후 GET 응답을 외부로 유출하며, 동일 출처 정책을 우회합니다: // mainFrame runs first async function mainFrame // We use some tricks to derive the...

CVE-2017-17692

CVE-2017-17692 취약점 제목: SOP 우회 날짜: 2017년 9월 6일 소프트웨어 링크: https://play.google.com/store/apps/details?id=com.sec.android.app.sbrowser&hl=en 익스플로잇 작성자: Dhiraj Mishra 연락처: http://twitter.com/mishradhiraj 웹사이트: http://datarift.blogspot.in/ 카테고리: 브라우저 PoC 동영상: https://youtu.be/x8f-tQaZriQ 데모...

flash-xdomain-xploit

저자: Gursev Singh Kalra [email protected] Flash와 안전하지 않은 crossdomain.xml을 이용한 Same Origin Policy 우회 개념 증명PoC ActionScript 코드 컴파일 및 배포 1. Apache Flex SDK를 다운로드하여 설치합니다. 여기에는 ActionScript 컴파일러가 포함되어 있습니다. 2. ActionScript 코드를 로컬 디렉터리에 복사하고 XDomainXploit.as로 이름을 지정합니다. 3. readFrom 및 sendTo 매개변수의 ...

flash-xdomain-xploit

저자: Gursev Singh Kalra [email protected] Flash와 안전하지 않은 crossdomain.xml을 이용한 동일 출처 정책 우회 Proof of Concept ActionScript 코드 컴파일 및 배포 1. Apache Flex SDK를 다운로드하여 설치합니다. 여기에는 ActionScript 컴파일러가 포함되어 있습니다. 2. ActionScript 코드를 로컬 디렉터리에 복사하고 XDomainXploit.as로 이름을 지정합니다. 3. readFrom 및 sendTo 매개변수의 값을...

LavaDome

LavaDome 🌋️ LavaMoat による、DOM ノードの安全な E ンカプセル化のための新しいツール ⚠️ 実験的 WIP - ご自身の責任で使用してください（詳細） デモ LavaDome に挑戦してみましょう - デモアプリ を訪れ、コンソールを開き、LavaDome インスタンス内から秘密情報を盗み出すためにあらゆる手段を講じてください（成功したら 報告 してください） プレビュー （クリックして展開） 動機 今日のウェブ標準において、DOM サブツリーを安全な方法で 選択的に分離する確立された方法はありません。言い換えれば、同じ JavaScript...

the-callback-that-outlived-the-page-cve-2026-78997-uc-browser-android-universal-xss

CVE-2026-78997 — UC Browser for Android ユニバーサル XSS UXSS CVE-2026-78997 の PoC 資料 — UC Browser for Android com.UCMobile.intl、バージョン 13.7.8.1314 におけるユニバーサル クロスサイトスクリプティング。Omri Inbar Novee により開示。 ブリッジのホワイトリストに登録されたドメイン mtmsg.uc.cn 上の リフレクテッド XSS により、特権的な ucapi JavaScript ブリッジへの...

CVE-2026-103922

Capacitor is a cross-platform native runtime for web applications. From 6.0.0 until 6.2.2, 7.6.9, 8.3.5, 8.4.3, and 8.5.1, the Android and iOS WebView navigation guard validates a target URL's host and scheme but not its path, allowing a victim who activates an untrusted link to navigate a frame ...

EUVD-2026-90973

Capacitor is a cross-platform native runtime for web applications. From 6.0.0 until 6.2.2, 7.6.9, 8.3.5, 8.4.3, and 8.5.1, the Android and iOS WebView navigation guard validates a target URL's host and scheme but not its path, allowing a victim who activates an untrusted link to navigate a frame ...

CVE-2026-103922 Capacitor Android and iOS: remote content can be loaded at the app origin via the internal HTTP proxy path

Capacitor is a cross-platform native runtime for web applications. From 6.0.0 until 6.2.2, 7.6.9, 8.3.5, 8.4.3, and 8.5.1, the Android and iOS WebView navigation guard validates a target URL's host and scheme but not its path, allowing a victim who activates an untrusted link to navigate a frame ...

CVE-2026-103922

The Capacitor cross-platform native runtime (versions 6.0.0 up to 6.2.2, 7.6.9, 8.3.5, 8.4.3, and 8.5.1) contains a navigation guard vulnerability on Android and iOS . The guard validates the host and scheme of a target URL but fails to validate the path , allowing an attacker to navigate a frame...

CVE-2026-12295-UXXS-in-my-wasm

CVE-2026-12295 — 非about:srcdoc URI上のsrcdocデータ（Firefox UXSS） 概念実証：侵害されたコンテンツプロセスが、nsDocShellLoadState に任意の URI とともに SrcdocData を保持する PDocumentChannel ロードを偽造します。脆弱なビルドでは、攻撃者のHTMLが被害者のオリジン でドキュメントとして配信されます — 同一オリジン読み取り＋外部送信（UXSS）。 対象：Firefox 149.0a1 nightly @ 2fbc0748c4（脆弱、修正前）、macOS arm64。 Firefox...

Open WebUI: Same-origin XSS to account takeover via terminal port-preview iframe hardcoding allow-same-origin

SummaryAny authenticated user with access to a shared terminal server could get script of their choosing to run in the Open WebUI origin itself. The in-app port preview rendered the content of a previewed port in an iframe whose sandbox always granted allow-same-origin alongside allow-scripts, an...

Rocky Linux 10.0 [CIQ] Security Update: thunderbird / thunderbird-debuginfo / thunderbird-debugsource Multiple Vulnerabilities (crlsa-2025_14844)

The Rocky Linux 10.0 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202514844 advisory. firefox: thunderbird: Denial-of-service due to out-of-memory in the Graphics: WebRender component CVE-2025-9182 thunderbird: firefox: Sandbox escape du...

Rocky Linux 9 [CIQ] Security Update: webkit2gtk3 / webkit2gtk3-debuginfo / webkit2gtk3-debugsource / etc Multiple Vulnerabilities (crlsa-2026_9692)

The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20269692 advisory. webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash CVE-2025-43213 webkitgtk: Processing maliciously crafted web...