Facad1ng

このGitHubリポジトリが役立つと思われたら、スターをください！⭐️ Facad1ngは、セキュリティ研究、フィッシング認識、防御テスト のために設計されたオープンソースのURLマスキングおよび分析ツールです。 攻撃者がURL操作やソーシャルエンジニアリング手法を使って悪意のあるリンクを偽装する方法を示し、防御側がそのような攻撃を理解し軽減するのに役立ちます。 🧭 MITRE ATT&CK マッピング MITRE ATT &CK® T1665 – Hide Infrastructure Command and Control にマッピングされています。...

cuddlephish

CuddlePhish ペネトレーションテスター向けの、多ユーザー対応ブラウザ・イン・ザ・ミドル（BitM）攻撃ツールです。この攻撃は、多くの高価値ウェブアプリケーションで多要素認証をバイパスするために使用できます。セッショントークンを使用しないアプリケーションでも機能するため、従来のトークン窃取攻撃では悪用できなかったアプリケーションにも対応します。これはソーシャルエンジニアリングツールであり、ターゲットサービスの技術的な欠陥を悪用するものではありません。 QuickStart（クイックスタート） このツールは専用のウェブサーバーです。Debian...

ie11_vbscript_exploit

IE11 VBScript エクスプロイト CVE-2018-8174 & CVE-2019-0768 のエクスプロイトジェネレーター IE11 での VBScript 実行による RCE 前提条件 Metasploit msfvenom 使用方法 python ie11vbscript.py Listener IP Listener Port 手順 1. このスクリプトを使用して "exploit.html" を生成します 2. HTML ファイルをサーバーにホストします 3. Metasploit で windows/meterpreter/reversetcp...

CVE-2026-79253

CVE-2026-79253 is an improper input validation vulnerability in the Network component of Google Chrome on Windows , affecting versions prior to 152.0.7977.65 . A remote attacker leveraging social engineering could exploit this via a crafted HTML page to leak sensitive information . The Chromium s...

CVE-2026-79225

CVE-2026-79225 is an incorrect authorization vulnerability in Google Chrome for Android prior to 152.0.7977.65 . A remote attacker leveraging social engineering could bypass system access restrictions through UI Interaction . Chromium rates the security severity as Low . The fix is included in ve...

CVE-2026-78947

CVE-2026-78947 is an incomplete cleanup vulnerability in Chromium , affecting Google Chrome prior to 152.0.7977.65 . A remote attacker, leveraging social engineering , could use a crafted Chrome extension to bypass the web origin policy . Chromium rated the security severity as Low . The fix is t...

CVE-2026-78980

CVE-2026-78980 is an improper input validation vulnerability in the ReaderMode component of Google Chrome prior to version 152.0.7977.65 . A remote attacker, leveraging social engineering, can exploit a crafted HTML page to bypass the web origin policy and gain access to a privileged page. Chromi...

CVE-2026-79108

CVE-2026-79108 affects Google Chrome prior to 152.0.7977.65 , specifically in the Web Authentication (Passkeys & Security Keys) component. A UI misrepresentation allows a remote attacker , leveraging social engineering , to bypass system access restrictions by delivering a crafted HTML page. Chro...

CVE-2026-79009

CVE-2026-79009 is a UI misrepresentation vulnerability in Google Chrome prior to 152.0.7977.65 . A remote attacker, leveraging social engineering , can spoof UI elements by serving a crafted HTML page to the victim. Chromium classifies the severity as Low . The affected component is the browser's...

CVE-2026-79041

CVE-2026-79041 is a missing authorization vulnerability in the Browser component of Google Chrome on Mac prior to 152.0.7977.65 . A remote attacker leveraging social engineering could bypass the web origin policy into a privileged page by delivering a crafted HTML page . The Chromium project assi...

CVE-2026-79090

CVE-2026-79090 is an improper privilege management flaw in the Actor component of Google Chrome , affecting versions prior to 152.0.7977.65 . A remote attacker leveraging social engineering could bypass system access restrictions through a crafted HTML page . The Chromium security team rated this...

CVE-2026-79098

CVE-2026-79098 is a UI misrepresentation vulnerability in PermissionElement within Google Chrome , affecting versions prior to 152.0.7977.65 . A remote attacker, leveraging social engineering , can spoof UI elements through a crafted HTML page , potentially misleading users into granting unintend...

CVE-2026-79022

Google Chrome prior to 152.0.7977.65 is affected by a UI misrepresentation vulnerability in the Transactions Platform component. A remote attacker leveraging social engineering could potentially spoof UI elements via a crafted HTML page, misleading users into interacting with fabricated transacti...

CVE-2026-79206

An out-of-bounds read in the FileSystem component of Google Chrome prior to version 152.0.7977.65 allowed a remote attacker, leveraging social engineering , to read memory outside the sandbox via a crafted HTML page. The Chromium security severity is rated Low . The fix is available in Chrome 152...

CVE-2026-79089

A race condition in the Transactions Platform of Google Chrome on Android prior to version 152.0.7977.65 allows a remote attacker, leveraging social engineering, to bypass system access restrictions via a crafted HTML page. The Chromium security team classified the severity as Low . The fix is av...

CVE-2026-78897

CVE-2026-78897 is a missing authorization vulnerability in the BrowserTag component of Google Chrome , affecting versions prior to 152.0.7977.65 . A remote attacker leveraging social engineering can exploit a crafted Chrome extension to obtain sensitive information from the victim. Chromium rates...

CVE-2026-79196

CVE-2026-79196 is a race condition in the Editing component of Google Chrome , affecting versions prior to 152.0.7977.65 . A remote attacker, leveraging social engineering , can obtain sensitive information by convincing a user to open a crafted HTML page. Chromium rates the security severity as ...

CVE-2026-78979

CVE-2026-78979 is a race condition in the Core component of Google Chrome on Windows , affecting versions prior to 152.0.7977.65 . The flaw allowed a remote attacker, leveraging social engineering, to bypass web origin policy via a crafted HTML page. Chromium assigned a Low security severity. No ...

CVE-2026-79000

CVE-2026-79000 is a low-severity improper input validation vulnerability in DeviceBoundSessionCredentials in Google Chrome prior to 152.0.7977.65 . A remote attacker, leveraging social engineering , can craft network traffic to bypass the web origin policy . The Chromium project classifies the se...

CVE-2026-79266

A use after free vulnerability in DevTools of Google Chrome prior to 152.0.7977.65 allowed a remote attacker, leveraging social engineering, to execute arbitrary code inside the sandbox via a crafted Chrome extension . The Chromium security severity is rated Medium . The fix is to update Chrome t...