mimic

mimic mimic is a tool for covert execution on Linux x8664. What is "covert execution"? Covert execution is the art of hiding a process. In this case, mimic hides the process in plain sight. mimic can launch any program and make it look like any other program. Any user can use it. It does not...

inteno-exploits

IOPSYSデバイス向けの概念実証とエクスプロイト これは、Inteno の IOPSYS を実行しているデバイス上のさまざまな脆弱性を悪用するスクリプト集です。各脆弱性の詳細は私のブログで確認できます。 これらのスクリプトはLinuxでのみテストされていますが、他のオペレーティングシステムでも動作する可能性があります。 依存関係 PythonスクリプトにはPython 3.6以降と、サブモジュール websocket-client が必要です: pip install websocket-client さらに、cve-2017-17867.py と cve-2018-14533.py...

UpdraftPlus < 1.22.9 - Cross-Site Scripting

The plugin does not sanitise and escape the updraftinterval parameter before outputting it back in an admin page, leading to a Reflected Cross-Site Scripting XSS vulnerability. id: CVE-2022-0864 info: name: UpdraftPlus 1.22.9 - Cross-Site Scripting author: DhiyaneshDk severity: medium description...

WordPress Core <6.5.2 - Cross-Site Scripting

WordPress Core is vulnerable to Stored Cross-Site Scripting via user display names in the Avatar block in various versions up to 6.5.2 due to insufficient output escaping on the display name. id: CVE-2024-4439 info: name: WordPress Core 6.5.2 - Cross-Site Scripting author: nqdung2002 severity: hi...

Jeesns 1.4.2 - Cross-Site Scripting

Jeesns 1.4.2 is vulnerable to reflected cross-site scripting in the /weibo/topic component and allows attackers to execute arbitrary web scripts or HTML via a crafted payload in the system error message's text field. id: CVE-2020-19295 info: name: Jeesns 1.4.2 - Cross-Site Scripting author:...

Telesquare TLR-2855KS6 - Arbitrary File Deletion

An unauthorized file deletion vulnerability in Telesquare TLR-2855KS6 via DELETE method can allow deletion of system files and scripts. id: CVE-2021-46419 info: name: Telesquare TLR-2855KS6 - Arbitrary File Deletion author: DhiyaneshDK severity: critical description: | An unauthorized file deleti...

WordPress Skaut Bazar <1.3.3 - Cross-Site Scripting

WordPress Skaut Bazar plugin before 1.3.3 contains a reflected cross-site scripting vulnerability due to the use of $SERVER'PHPSELF' in the /skaut-bazar.php file, which allows attackers to inject arbitrary web scripts. id: CVE-2021-34643 info: name: WordPress Skaut Bazar 1.3.3 - Cross-Site...

mooSocial 3.1.8 - Reflected XSS

A vulnerability, which was classified as problematic, was found in mooSocial mooStore 3.1.6. Affected is an unknown function of the file /search/index. id: CVE-2023-4173 info: name: mooSocial 3.1.8 - Reflected XSS author: momika233 severity: medium description: | A vulnerability, which was...

ChurchCRM 4.5.3 - Cross-Site Scripting

A stored Cross-site scripting XSS vulnerability in ChurchCRM 4.5.3 allows remote attackers to inject arbitrary web script or HTML via the NoteEditor.php. id: CVE-2023-26843 info: name: ChurchCRM 4.5.3 - Cross-Site Scripting author: Harsh severity: medium description: | A stored Cross-site scripti...

Hoteldruid 3.0.5 - Cross-Site Scripting

A Reflected XSS was discovered in HotelDruid version 3.0.5, an attacker can issue malicious code/command on affected webpage's parameter to trick user on browser and/or exfiltrate data. id: CVE-2023-34537 info: name: Hoteldruid 3.0.5 - Cross-Site Scripting author: Harsh severity: medium...

Xinuo Openserver 5/6 - Cross-Site scripting

Xinuo formerly SCO Openserver versions 5 and 6 allows remote attackers to inject arbitrary web script or HTML tag via the parameter 'section' and is vulnerable to reflected cross-site scripting. id: CVE-2020-25495 info: name: Xinuo Openserver 5/6 - Cross-Site scripting author: 0xAkoko severity:...

BIBLIOsoft BIBLIOpac 2008 - Cross-Site Scripting

BIBLIOsoft BIBLIOpac 2008 contains a cross-site scripting vulnerability via the db or action parameter to bin/wxis.exe/bibliopac/, which allows a remote attacker to inject arbitrary web script or HTML. id: CVE-2018-16139 info: name: BIBLIOsoft BIBLIOpac 2008 - Cross-Site Scripting author:...

Jenkins build-metrics 1.3 - Cross-Site Scripting

Jenkins build-metrics 1.3 is vulnerable to a reflected cross-site scripting vulnerability that allows attackers to inject arbitrary HTML and JavaScript into the web pages the plugin provides. id: CVE-2019-10475 info: name: Jenkins build-metrics 1.3 - Cross-Site Scripting author: madrobot severity...

scrounger

Description Scrounger - a person who borrows from or lives off others. There is no better description for this tool for two main reasons, the first is because this tool takes inspiration from many other tools that have already been published, the second reason is because it lives off mobile...

PowerShell-Pro-Obfuscator-Python

PowerShell Pro Obfuscator — PowerShellコードの難読化と仮想化 PowerShell Pro Obfuscator は、プロプライエタリな .ps1 スクリプトを、リネーム、ポリモーフィックな文字列・整数暗号化、制御フロー平坦化、有限状態オートマトン（FSA）、VMエンジン、自己防御型の整合性チェック、保護リンカー、アンチデバッグプローブで保護します。 ポリモーフィックな文字列暗号化、VMエンジン、有限状態オートマトン変換、自己整合性・アンチデバッグチェックにより、PowerShell .ps1 スクリプトを難読化・仮想化・保護します —...

CnaEmulator

CnaEmulator - Cobalt Strike Aggressor Script エミュレータ & モックハーネス CnaEmulator は、Cobalt Strike Aggressor Scripts .cna 向けのスタンドアロンで汎用的な開発・エミュレーション・テストハーネスです。セキュリティ研究者、ツール開発者、BOF 作者が、teamserver や GUI クライアントを起動することなく、スクリプト構文の検証、Beacon コンソールエイリアスコマンドのシミュレーション、および COFFLoader64.exe を介したインメモリ Beacon Object...

rosenbridge

project:rosenbridge : hardware backdoors in x86 CPUs github.com/xoreaxeaxeax/rosenbridge // domas // @xoreaxeaxeax Overview project:rosenbridge reveals a hardware backdoor in some desktop, laptop, and embedded x86 processors. The backdoor allows ring 3 userland code to circumvent processor...

CVE-2024-7456scripts

CVE-2024-7456 https://nvd.nist.gov/vuln/detail/CVE-2024-7456 に基づいて、bashとNode.jsの両方を使用してSQLiを悪用するための簡単なスクリプトです。...

Follina-Workaround-CVE-2022-30190

Follina の回避策 CVE-2022-30190 説明 この2つのスクリプトは、MSRCのブログに詳述されているCVE-2022-30190の脆弱性を緩和するためにMicrosoftが提供する回避策を適用し、また公式パッチがリリースされた場合には回避策を復元するために使用できます。 最初のスクリプト 'FollinaMitigation.ps1' は、レジストリキーをバックアップした後、回避策を適用するためにそれを削除します。 2番目のスクリプト 'FollinaImportKey.ps1' は、以前にエクスポートされたレジストリキーをインポートします。 詳細はこちらをご覧ください...

ATP-PowerShell-Scripts

ATP-PowerShell-Scripts Microsoft 署名済み PowerShell スクリプト C:\ProgramData\Microsoft\Windows Defender Advanced Threat Protection\DataCollection にある署名済みスクリプトの一覧 ファイルへのアクセス デフォルトではファイルにアクセスできません。TrustedInstaller 特権が必要です。 https://github.com/Mr-Un1k0d3r/EDRs/blob/main/elevatetosystemortrustedinstaller.c...