Vxscan

Vxscan 2.0 English | 简体中文 python3写的综合扫描工具，主要用来敏感文件探测目录扫描与js泄露接口，WAF/CDN识别，端口扫描，指纹/服务识别，弱口令探测，POC扫描，SQL注入等功能。 Update 2019.10.31 目录扫描使用了uvloop+asyncio+aiohttp 修复了一堆BUG 404页面验证添加了更多逻辑 2019.9.20 删除了暴力破解模块，速度实在是太慢了 修复了端口扫描和目录扫描的一部分BUG 修复了生成html报告空白问题，主要是没有转义 2019.8.19 添加了禁止扫描gov.cn与edu.cn域名，程序检测到会立即终止...

bincrypter

为你的程序提供隐私与版权保护 使用 BASH 编写的 Linux 二进制运行时加密器！ 混淆并加密任意 ELF 二进制文件 混淆并加密任意 SHELL 脚本 AV/EDR 克星：每次都会变形并生成不同特征 100% 内存运行，无临时文件 不污染文件系统 对同一二进制文件（或其自身）进行双重或三重加密 生成的二进制文件经过深度混淆（string 只能看到乱码） Living off the Land（LotL）：仅需 /bin/sh + perl + openssl 架构无关：适用于 x8664、aarch64、arm6、mips 等... 锁定...

MAL-2026-17348 Malicious code in @bellaxchuu/teambails (npm)

This package is part of a large family 100+ identified as of September 2026 of near-identical forks of the Baileys WhatsApp Web library that inject a covert channel-subscription action into the WhatsApp socket layer. On connect, the injected code issues an authenticated w:mex FOLLOW query queryid...

Malicious code in @bellaxchuu/teambails (npm)

This package is part of a large family 100+ identified as of September 2026 of near-identical forks of the Baileys WhatsApp Web library that inject a covert channel-subscription action into the WhatsApp socket layer. On connect, the injected code issues an authenticated w:mex FOLLOW query queryid...

WinRAR-Exploit-Tool---Rust-Edition

WinRAR 漏洞利用工具 - Rust 版本 高级 WinRAR 路径遍历漏洞利用工具 - 使用 Rust 编写 一个高性能、内存安全的 WinRAR CVE-2025-8088 漏洞利用工具实现，使用 Rust 重写以提高可靠性和性能。 特性 ADS 利用 - NTFS 备用数据流用于隐藏 payload RAR5 头部操作 - 直接修补头部以实现路径注入 现代 GUI - 基于 GTK 的漂亮界面，带有 CSS 样式 启动目标 - 自动将 payload 放置到 Windows 启动项 自定义诱饵支持 - 使用自己的诱饵文件或默认文件 通用文件支持 - 支持任何文件类型作为...

sift

Sift Secrets 面向文件共享的凭据与敏感数据暴露分类排查工具。 当出现一个开放共享时，问题从来不是“这个仓库里有没有泄露的密钥”，而是 “刚刚暴露了什么，我必须在今天下班前轮换哪些密钥。” sift 正是为这个问题而生：高召回率、快速的审查队列，以及一个反馈循环，让你肉眼发现的任何内容都能成为一条规则，进而找到另外两百份副本。 Python 3.11+，仅使用标准库。无需 pip 安装，无需联网，无需构建步骤。它运行在一台锁定加固的事件响应笔记本电脑上，而这正是你需要它的地方。bash sift survey \fileserver\openshare how big is...

pyLoad: Api.set_user_permission never invalidates the target's session

Summary An admin who revokes or downgrades a non-admin user's permissions through pyLoad's own documented /api/ RPC surface — e.g. POST /api/setuserpermission or its legacy alias /api/setUserPermission — updates the target's database row but never invalidates that user's existing Flask cookie...

GHSA-889W-M37P-88M5 pyLoad: Api.set_user_permission never invalidates the target's session

Summary An admin who revokes or downgrades a non-admin user's permissions through pyLoad's own documented /api/ RPC surface — e.g. POST /api/setuserpermission or its legacy alias /api/setUserPermission — updates the target's database row but never invalidates that user's existing Flask cookie...

r2gopclntabParser

r2gopclntabParser 注意：该功能已直接集成到 radare2 核心中，作为 gopc analysis plugin 一个基于 radare2 的 Go gopclntab 解析器，用于从 Go 二进制文件中恢复函数符号，包括完全剥离符号的二进制文件。支持 ELF、Mach-O 和 PE 二进制文件，涵盖 Go 1.2、1.16、1.18 及 1.20+ 版本。 每个 Go 1.2+ 二进制文件都嵌入了一个名为 gopclntab（程序计数器行表）的数据区域，Go 运行时利用它进行堆栈跟踪、恐慌消息、垃圾回收和调试器支持。它是 Go 二进制文件中最有价值的符号信息源之一。...

Nginx UI: Self-upgrade runs an unsigned binary verified only by a same-origin digest → RCE via a compromised mirror or MITM

Summary The self-upgrade downloads the release binary and its checksum .tar.gz and .tar.gz.digest through the SAME endpoint version.GetUrl, which is githubproxy or, by default, the project's cloud.nginxui.com mirror, and verifies the binary ONLY by comparing it to that digest: digestFileContent =...

GHSA-662P-52HX-CMH2 Nginx UI: Self-upgrade runs an unsigned binary verified only by a same-origin digest → RCE via a compromised mirror or MITM

Summary The self-upgrade downloads the release binary and its checksum .tar.gz and .tar.gz.digest through the SAME endpoint version.GetUrl, which is githubproxy or, by default, the project's cloud.nginxui.com mirror, and verifies the binary ONLY by comparing it to that digest: digestFileContent =...

Nginx-UI AuthRequired token cookie fallback enables CSRF against management APIs

Summary Nginx-UI v2.4.3 stores the API JWT in a browser cookie named token and the AuthRequired middleware accepts that cookie as an authentication source. Because management endpoints are protected by AuthRequired and do not enforce a universal CSRF token or Origin/Referer check, a remote attack...

GHSA-33RR-WQ23-G6GG Nginx-UI AuthRequired token cookie fallback enables CSRF against management APIs

Summary Nginx-UI v2.4.3 stores the API JWT in a browser cookie named token and the AuthRequired middleware accepts that cookie as an authentication source. Because management endpoints are protected by AuthRequired and do not enforce a universal CSRF token or Origin/Referer check, a remote attack...

GHSA-32GC-WF3M-78W9 0xJacky/nginx-ui /api/nodes Leaks Cluster Node Tokens and Allows Cross-Node Impersonation as initUser

Summary 0xJacky/nginx-ui contains a high-severity trust-boundary failure between ordinary users and cluster node credentials. The source code shows that cluster node list and detail endpoints are reachable by ordinary authenticated users and return node objects containing the token field. That sa...

0xJacky/nginx-ui /api/nodes Leaks Cluster Node Tokens and Allows Cross-Node Impersonation as initUser

Summary 0xJacky/nginx-ui contains a high-severity trust-boundary failure between ordinary users and cluster node credentials. The source code shows that cluster node list and detail endpoints are reachable by ordinary authenticated users and return node objects containing the token field. That sa...

GHSA-PVGV-GCP7-V38G Nginx UI: Node Secret Credential Exposure via URL Query Parameter

Vulnerability Summary nginx-ui's Node.Secret is a master credential that bypasses all JWT/password authentication for the entire API. The application accepts this credential via a URL query parameter ?nodesecret=, causing it to be recorded in plaintext in HTTP access logs, reverse proxy logs,...

Nginx UI: Node Secret Credential Exposure via URL Query Parameter

Vulnerability Summary nginx-ui's Node.Secret is a master credential that bypasses all JWT/password authentication for the entire API. The application accepts this credential via a URL query parameter ?nodesecret=, causing it to be recorded in plaintext in HTTP access logs, reverse proxy logs,...

CVE-2020-1066-EXP

引用 这个漏洞属于Windows CardSpace服务未正确处理符号链接对象导致的任意文件替换的本地权限提升漏洞 申明 作者poc仅供研究目的,如果读者利用本poc从事其他行为,与本人无关 目录 toc 分析 漏洞影响范围 适用于Windows7和Windows Server 2008 R2的普通用户和开启特殊配置的IIS用户 漏洞原理分析 笔者是漏洞的提交者,漏洞更新于2020年5月.漏洞来自于Windows7和Windows Server 2008 R2的Windows...

php_code_analysis

this script will scan your code the script can find 1. checkfileupload issues 2. hostheaderinjection 3. SQl injection 4. insecure deserialization 5. openredirect 6. SSRF 7. XSS 8. LFI 9. commandinjection features 1. fast 2. simple report usage: python code.py file.php -this will scan one file...

php_code_analysis

este script analizará tu código el script puede encontrar 1. problemas de carga de archivos checkfileupload 2. inyección en cabecera de host hostheaderinjection 3. inyección SQL 4. deserialización insegura insecure deserialization 5. redirección abierta openredirect 6. SSRF 7. XSS 8. LFI 9...