wifi-deauth

対象のWi-Fiネットワークからすべてのデバイスを切断するDoS攻撃。 ネットワークのパスワードは不要 Kali NetHunterでテスト済み（下部にスナップショット） 重要 場合によっては、ネットワークAPが同じBSSID/SSID名で5GHzと2.4GHzの両方で動作することがあります。 APを完全に停止させるために、通常は2つのネットワークインターフェースを使用して2つのdeautherを同時に実行します。1つは2.4GHz用、もう1つは5GHz用です。 帯域幅| チャンネル範囲 ---|--- 2.4 GHz| 1 14 5 GHz| 35 65 動作原理...

dnspooq

dnspooq DNSpooq 概念验证 - dnsmasq 缓存投毒 CVE-2020-25686, CVE-2020-25684, CVE-2020-25685 仅供教育目的使用 要求 Docker compose Docker 利用 启动容器 $ docker-compose up -d 运行 exploit.py $ docker-compose exec attacker bash bash-5.0 python exploit.py 查询未缓存的名称... 生成伪造的数据包... 已投毒: b'google.com.' = 169.254.169.254 在 50.309...

CarbonCopy

CarbonCopy 一种工具，可创建任何在线网站的伪造证书，并为可执行文件签名以绕过AV检测。适用于Windows和Linux。 先决条件 要在Linux上使用，请执行以下命令： apt-get install osslsigncode pip3 install pyopenssl...

CVE-2026-108679

Versions of JeecgBoot through 3.9.5 are vulnerable to a missing authorization vulnerability in the SystemApiController component, specifically within the sendBusAnnouncement handler. This flaw allows any authenticated user to bypass permission checks by sending a POST request to /sys/api/sendBusA...

EvilSlackbot

EvilSlackbot Slackワークスペース内でレッドチームおよびフィッシング演習を実施するためのSlack攻撃フレームワークです。 免責事項 このツールはセキュリティ専門家のみを対象としています。明示的なテスト許可なしに、いかなるSlackワークスペースに対してもこのツールを使用しないでください。自己責任で使用してください。 背景...

Apache CloudStack - SAML Signature Exclusion

The CloudStack SAML authentication disabled by default does not enforce signature check. In CloudStack environments where SAML authentication is enabled, an attacker that initiates CloudStack SAML single sign-on authentication can bypass SAML authentication by submitting a spoofed SAML response...

CVE-2024-30850-chaos-rat-rce-poc

https://github.com/chebuya/CVE-2024-30850-chaos-rat-rce-poc/assets/146861503/ac03c8c7-54b3-4280-9f29-719c44af5192 CHAOS RAT v5.01 网页面板 RCE（CVE-2024-30850、CVE-2024-31839） https://github.com/tiagorlampert/CHAOS 此漏洞利用通过伪造代理回调实现 XSS（CVE-2024-31839），并利用该 XSS 攻击管理员网页面板中的命令注入漏洞（CVE-2024-30850），从而攻陷 RAT...

CVE-2020-0601-spoofkey

CVE-2020-0601-spoofkey 查看如何制作伪造密钥并签名代码 需要: openssl, main.rb我上传的 访问: https://twitter.com/exploitblizzard...

phishurl-list

来自 JPCERT/CC 的钓鱼 URL 数据集 列详细信息 date: 由 JPCERT/CC 确认的日期 URL: 钓鱼网站的完整 URL description: 有关被仿冒品牌的信息 统计页面 https://jpcertcc.github.io/phishurl-list/...

EUVD-2026-44641

PraisonAI: Call API localhost-only authentication bypass via spoofed Host header...

CVE-2026-87670

An authorization logic vulnerability exists in the Brocade Fabric OS REST API gateway (versions before 10.0.1 ). The internal gate guarding restricted management endpoints relies exclusively on client-controlled HTTP headers , allowing an authenticated user with a valid REST session to spoof thes...

CVE-2026-87670

An authorization logic vulnerability exists in the Brocade Fabric OS versions before 10.0.1 REST API gateway. The internal gate guarding restricted management endpoints relies exclusively on client-controlled HTTP headers. An authenticated user with any valid REST session can spoof these headers ...

EUVD-2026-43177

PraisonAI: AgentMail webhook lacks signature verification, allowing unauthenticated message injection and sender spoofing...

CVE-2026-106316

UI misrepresentation in Chromoting in Google Chrome on on Mac prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to spoof UI elements via crafted network traffic. Chromium security severity: Low...

CVE-2026-106232

UI misrepresentation in Browser in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-106272

UI misrepresentation in Chromoting in Google Chrome on on Windows prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to potentially spoof UI elements via crafted network traffic. Chromium security severity: Low...

EUVD-2026-93642

UI misrepresentation in Chromoting in Google Chrome on on Mac prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to spoof UI elements via crafted network traffic. Chromium security severity: Low...

EUVD-2026-93626

UI misrepresentation in WebAppInstalls in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to spoof UI elements via a crafted HTML page. Chromium security severity: Low...

EUVD-2026-93743

Improper input validation in Compositing in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to spoof address bar via a crafted HTML page. Chromium security severity: Medium...

EUVD-2026-93711

Clickjacking in PermissionElement in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted HTML page. Chromium security severity: Medium...