867 matches found
WebGoat.NET
Webgoat.NET Source Code: https://github.com/jerryhoff/WebGoat.NET Download zip: https://github.com/jerryhoff/WebGoat.NET/zipball/master This web application is a learning platform that attempts to teach about common web security flaws. It contains generic security flaws that apply to most web...
jackdaw
jackdaw reúne reúne reúne ¿Qué es esto? Jackdaw está aquí para recopilar toda la información de tu dominio, almacenarla en una base de datos SQL y mostrarte gráficos interesantes sobre cómo los objetos de tu dominio interactúan entre sí y cómo un posible atacante podría explotar estas...
jackdaw
jackdaw gather gather gather What is this? Jackdaw is here to collect all information in your domain, store it in a SQL database and show you nice graphs on how your domain objects interact with each-other an how a potential attacker may exploit these interactions. It also comes with a handy...
msdat
Quentin HARDY --- [email protected] [email protected] MSDAT MSDAT M icros oft SQL D atabase A ttacking T ool is an open source penetration testing tool that tests the security of Microsoft SQL Databases remotely. Usage examples of MSDAT: You have a Microsoft database listening remotely...
Judge-Jury-and-Executable
Judge Jury and Executable Una herramienta forense de caza de amenazas Características: Escanea un sistema de archivos montado en busca de amenazas de inmediato O recopila una línea base del sistema antes de un incidente, para una capacidad adicional de caza de amenazas Se puede usar antes, durant...
BSQLinjector
BSQLinjector BSQLinjector utiliza el método ciego para recuperar datos de bases de datos SQL. Recomiendo usar el interruptor "--test" para ver claramente cómo se ve el payload configurado antes de enviarlo a una aplicación. Opciones: root@kitploit: --file Mandatory - File containing valid HTTP...
cloudquery
CloudOps, without the chaos CloudQuery is a cloud asset inventory built for platform teams. Sync your cloud infrastructure metadata into your data warehouse, powering insights and automation. Unify data and provide context across AWS, Azure, GCP, and 70+ cloud and SaaS sources such as Wiz, Finout...
Reproduce-CVE-2024-21513
Reproduce-CVE-2024-21513 Resumen Este proyecto demuestra la vulnerabilidad CVE-2024-21513 en el paquete langchain-experimental, específicamente en las versiones =0.0.15 y 0.0.21. La vulnerabilidad permite la ejecución de código arbitrario a través del componente VectorSQLDatabaseChain al recupera...
securitybot
Securitybot Distributed alerting for the masses! Securitybot is an open-source implementation of a distributed alerting chat bot, as described in Ryan Huber's blog post. Distributed alerting improves the monitoring efficiency of your security team and can help you catch security incidents faster...
CVE-2026-69502
Server-side request forgery ssrf in Azure SQL Database allows an unauthorized attacker to elevate privileges over a network...
CVE-2026-69502
CVE-2026-69502 is a server-side request forgery (SSRF) vulnerability in Azure SQL Database that allows an unauthorized, network-based attacker to elevate privileges . The CNA-assigned CVSS 3.1 score is 10.0 (Critical) with a vector of AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N, indicating no privileges ...
EUVD-2026-63994
Server-side request forgery ssrf in Azure SQL Database allows an unauthorized attacker to elevate privileges over a network...
CVE-2026-69502 Azure SQL Database Elevation of Privilege Vulnerability
...
CVE-2026-69502 Azure SQL Database Elevation of Privilege Vulnerability
...
EUVD-2026-63690
Improper neutralization of special elements used in an sql command 'sql injection' in Azure SQL Database allows an authorized attacker to elevate privileges over a network...
EUVD-2026-63622
Improper access control in Azure SQL Database allows an authorized attacker to elevate privileges over a network...
EUVD-2026-63624
Improper neutralization of special elements used in an sql command 'sql injection' in Azure SQL Database allows an authorized attacker to elevate privileges over a network...
PT-2026-79396
Name of the Vulnerable Software and Affected Versions Azure SQL Database affected versions not specified Description Server-side request forgery SSRF allows an unauthorized attacker to elevate privileges over a network. SSRF is a flaw where an attacker can induce the server-side application to ma...