tac_plus-pre-auth-rce

tacPlus 事前認証リモートコマンド実行の脆弱性 このリポジトリには、tacplus のさまざまなオープンソース実装における事前認証リモートコマンド実行の脆弱性に関する情報が含まれています。影響を受けるのは以下の2つのフォークです： Shrubbery Networks tacplus Facebook tacplus ただし、両方のフォークは、 16年以上...

vader

VADER: A Human-Evaluated Benchmark for Vulnerability Assessment, Detection, Explanation, and Remediation Official GitHub Repo:https://github.com/AfterQuery/vader Hugging Face Dataset:https://huggingface.co/datasets/AfterQuery/vader VADER is a human-evaluated benchmark designed to measure how well...

CVE-2024-27954

CVE-2024-27954 📝 CVE-2024-27954 - Path Traversal & SSRF Vulnerability in WP Automatic Plugin Description An Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability exists in the WP Automatic plugin, allowing Path Traversal and Server-Side Request Forgery SSRF...

GroupPolicyBackdoor

GroupPolicyBackdoor GroupPolicyBackdoor is a python utility for Group Policy Objects GPOs manipulation and exploitation. GPO attack vectors can very often lead to impactful privilege escalation scenarios in Active Directory environments. And yet, offensive security professionals may be reluctant ...

Reversecore_MCP

Reversecore MCP AI-Powered Reverse Engineering & Security Analysis via Model Context Protocol An MCP server that gives AI assistants like Claude and Cursor the ability to perform reverse engineering, malware analysis, vulnerability research, digital forensics, and source code auditing through...

blind-xxe-controller-CVE-2021-29447

Blind XXE controller I make this controller on doing metatwo machine in HackTheBox to exploiting CVE-2021-29447 which Is a WordPress XXE Vulnerability in Media Library affected version 5.7, 5.6.2, 5.6.1, 5.6, 5.0.11. where an authenticated user with ability to upload media library can upload...

CVE-2015-1397

POC for CVE-2015-1397 Magento SQL Injection. Read more at : https://blog.checkpoint.com/security/analyzing-magento-vulnerability/...

WDExtract

WDExtract 从vdm文件中提取Windows Defender数据库并解包 本程序按原样分发，不提供任何担保； 无官方支持，如果你喜欢该工具，欢迎贡献。 功能 解包Windows Defender/Microsoft Security Essentials的VDM容器； 解密恶意软件删除工具（MRT.exe）中嵌入的VDM容器； 在不解包的情况下提取原始RMDX容器（-ec开关）； 将基础VDM文件与delta文件合并（-m开关）； 从解包/解密/合并后的容器中即时提取所有PE映像（-e开关）： 转储VDLL（虚拟DLL）； 转储VFS（虚拟文件系统）内容； 转储签名辅助映像；...

flareprox

FlareProx 🔥 Simple IP Rotation & URL Redirection via Cloudflare Workers FlareProx automatically deploys HTTP proxy endpoints on Cloudflare Workers for easy redirection of all traffic to any URL you specify. It supports all HTTP methods GET, POST, PUT, DELETE, etc. and provides IP masking through...

awesome-password-cracking

Increíble Cracking de Contraseñas En criptoanálisis y seguridad informática, el cracking de contraseñas es el proceso de recuperar contraseñas a partir de datos que han sido almacenados o transmitidos por un sistema informático en forma ofuscada. Un enfoque común ataque de fuerza bruta es probar...

CVE-2019-19231

CVE-2019-19231 https://techdocs.broadcom.com/us/product-content/recommended-reading/security-notices/CA20191218-01-security-notice-for-ca-client-automation-agent-for-windows.html...

PolyEngine

PolyEngine — Polymorphic PE Packer 📦 PolyEngine is a research-grade, evasive PE packer designed for CTF challenges and low-level Windows security education. It focuses on bypassing EDR and AV heuristics through a layered stack of in-memory execution and obfuscation techniques. This is a side...

C3

C3 Build C3 MSVC/badge.svg?branch=master Build C3 Clang/badge.svg?branch=master C3 Custom Command and Control is a tool that allows Red Teams to rapidly develop and utilise esoteric command and control channels C2. It's a framework that extends other red team tooling, such as the commercial Cobal...

SimpleRemoter

SimpleRemoter 简体中文 | 繁體中文 | English !WARNING Important Legal Notice This software is intended solely for educational purposes and authorized use cases such as: Remote IT administration within your own organization Authorized penetration testing and security research Personal device management and...

Elementor Pro <=4.2.1 - Unauthenticated Arbitrary File Upload via Form Handler

Elementor Pro plugin for WordPress in versions =4.2.1 is vulnerable to unauthenticated arbitrary file upload in the Forms module File Upload field. The validation and processfield methods iterate over submitted file entries with different early-exit logic for UPLOADERRNOFILE entries. When an...

Joomla! Component com_abbrev - Local File Inclusion

A directory traversal vulnerability in the Abbreviations Manager comabbrev component 1.1 for Joomla! allows remote attackers to include and execute arbitrary local files via a .. dot dot in the controller parameter to index.php. id: CVE-2010-0985 info: name: Joomla! Component comabbrev - Local Fi...

CData Sync < 23.4.8843 - Path Traversal

A path traversal vulnerability exists in the Java version of CData Sync CData - Sync' - r...

Open Redirect in Login Redirect - MobSF

Mobile Security Framework MobSF is a security research platform for mobile applications in Android, iOS and Windows Mobile. An open redirect vulnerability exist in MobSF authentication view. id: CVE-2024-41955 info: name: Open Redirect in Login Redirect - MobSF author: Farish severity: medium...

BuddyPress REST API <7.2.1 - Privilege Escalation/Remote Code Execution

WordPress BuddyPress before version 7.2.1 is susceptible to a privilege escalation vulnerability that can be leveraged to perform remote code execution. id: CVE-2021-21389 info: name: BuddyPress REST API 7.2.1 - Privilege Escalation/Remote Code Execution author: lotusdll severity: high descriptio...

Phoenix Framework - Open Redirect

Phoenix Framework versions 1.0.0 through 1.0.4, 1.1.0 through 1.1.6, 1.2.0, 1.2.2 and 1.3.0-rc.0 contain an open redirect vulnerability, which may result in phishing or social engineering attacks. id: CVE-2017-1000163 info: name: Phoenix Framework - Open Redirect author: 0xAkoko severity: medium...