CVE-2024-24919-Incident-Report.md

🛡️ SOC287 - Checkpoint Security Gateway における任意ファイル読み取り CVE-2024-24919 日付: 2024年6月6日 調査タイプ: Web攻撃 プラットフォーム: LetsDefend 発動したルール: SOC287 – 任意ファイル読み取りを検出 CVE: CVE-2024-24919 深刻度: 高 影響: パストラバーサルによる機密システムファイルへの不正アクセス 📌 概要 2024年6月6日、CP-Spark-Gateway-01 上でアラートがトリガーされ、Check Point Security Gateway...

DEMO-Proof-of-Concept-Temporal-Memory-Inconsistency-in-cldflt.sys-CVE-2025-62221

Análisis Técnico y Prueba de Concepto: Inconsistencia de Memoria Temporal en cldflt.sys CVE-2025-62221 DEMO Prueba de Concepto: Inconsistencia de Memoria Temporal en cldflt.sys CVE-2025-62221 CVE-2025-62221: Este repositorio proporciona un análisis técnico exhaustivo y una demostración de Prueba ...

CVE-2021-42013-EXPLOIT

🚨 CVE-2021-42013 - Apache 2.4.49 & 2.4.50 Remote Code Execution 🚨 CVE-2021-42013 builds upon the previously identified vulnerability, CVE-2021-41773. Despite the Apache team's efforts to address CVE-2021-41773 in version 2.4.50, subsequent investigations revealed that the fix fell short of fully...

Arlo

Arlo Extract executable binaries from Arlo dump & updates See blogpost at https://www.synacktiv.com/publications/arlo-im-watching-you Parser arlo.py is used to parse a Flash memory dump, download and parse updates or list knwon models. It requires cryptography, asn1crypto and requests pip package...

CVE-2021-29156

CVE-2021-29156 Prueba de Concepto c 2021 GuidePoint Security Charlton Trezevant [email protected] Antecedentes Hoy GuidePoint se complace en publicar una herramienta funcional de Prueba de Concepto para CVE-2021-29156, una vulnerabilidad de inyección LDAP en ForgeRock OpenAM v13.0.0. Esta...

GenWiFiFaker

EN GenWiFiFaker is a tool for creating fake WiFi access points. It can be used for testing network security, performing demonstrations, or other educational purposes. This tool generates fake SSIDs and MAC addresses and broadcasts them over a specified WiFi interface. Features Generate Fake SSIDs...

red-kube

Red Team K8S Adversary Emulation Based on kubectl Red Kube is a collection of kubectl commands written to evaluate the security posture of Kubernetes clusters from the attacker's perspective. The commands are either passive for data collection and information disclosure or active for performing...

CacheData_decrypt

CacheDatadecrypt Un simple kit de herramientas para hacer fuerza bruta y descifrar el CacheData de Windows EntraId. root@kitploit: usage: decryptcachedata.py -h pin,password ... CacheData bruteforcer. On a live windows host, to copy the folders with all subfolders and files: xcopy /H /E /G /C as...

eos

Enemies Of Symfony EOS EOS loots information from a Symfony target in debug mode: Section| Description ---|--- General| Get general information about the target. Phpinfo| Extract Symfony environment variables from the exposed phpinfo. Routes| Get the list of registered routes. Request logs| Look...

CVE-2026-85393

A flaw was found in node-forge. This vulnerability allows a remote attacker to forge valid RSA PKCS1 v1.5 signatures for arbitrary messages. The flaw occurs because the software fails to properly validate the element count in nested DigestAlgorithm sequences during signature verification. By...

ritm

Ruby In The Middle HTTP/HTTPS interception proxy Ruby in the middle RITM is an HTTP/HTTPS interception proxy with on-the-fly certificate generation and signing, which leaves the user with the full power of the Ruby language to intercept and even modify requests and responses as she pleases...

nono v0.75.0

Built by the team that brought you Sigstore The standard for secure software attestation, used by PyPI, npm, brew, and Maven Central !NOTE In the lead-up to a 1.0 release, APIs are stabilizing. API changes may still occur where necessary, but will be kept to a minimum. !IMPORTANT Organization...

waf-bypass

WAF Bypass Tool WAF Bypass Tool is an open source tool to analyze the security of any WAF for False Positives and False Negatives using predefined and customizable payloads. Check your WAF before an attacker does. WAF Bypass Tool is developed by Nemesida WAF team with the participation of...

RP_DCP_Code_Exec

Real Player 'DCP://' URI Remote Arbitrary Code Execution Vulnerability video demo: https://youtu.be/AMODp3iTnqY The 'DCP://' URI scheme is an internal protocol used by Real Player to retrieve URLs to display in the Player browser tab. It stands for 'Data Cache Protocol'. It will retrieve files fr...

Gotanda

Gotanda Gotanda es una extensión web de OSINT Inteligencia de Fuentes Abiertas para Firefox/Chrome. Esta extensión web puede buscar información OSINT a partir de algunos IOC Indicadores de Compromiso en páginas web. IP, Dominio, URL, SNS... etc. Este repositorio es en parte un estudio y práctica ...

RealPlayer_G2_RCE

Real Player v.20.0.8.310 G2 Control 'DoGoToURL' Remote Code Execution Vulnerability Video demo: https://www.youtube.com/watch?v=9c9Q4VZQOUk Real Player G2 Control component contains a remote code execution vulnerability because it allows 'javascript:' URIs to be passed as the argument, which is...

ssj

SSJ - Your everyday Linux distribution gone Super Saiyan. Introduction SSJ is a silly little script that makes use of Docker installed on your everyday Linux distribution Ubuntu, Debian, etc. and magically arms it with hundreds of penetration testing and forensic tools. Technical Details SSJ pull...

EvilnoVNC

EvilnoVNC EvilnoVNC is a Ready to go Phishing Platform. Unlike other phishing techniques, EvilnoVNC allows 2FA bypassing by using a real browser over a noVNC connection. In addition, this tool allows us to see in real time all of the victim's actions, access to their downloaded files and the enti...

CVE-2018-9995_dvr_credentials

Tool show DVR Credentiales root@kitploit: Exploit Title: "Gets DVR Credentials Modify" CVE: CVE-2018-9995 CVSS Base Score v3: 7.3 / 10 CVSS Vector String: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N Date: 09/04/2018 Modify 28/04/2024 Exploit Author: Fernandez Ezequiel twitter:@capitanalfa &...

EUVD-2026-70713

Use of released resource in Mobile in Google Chrome on on Android prior to 152.0.7977.82 allowed a remote attacker leveraging social engineering to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...