BSQLinjector

BSQLinjector BSQLinjectorはブラインド手法を使用してSQLデータベースからデータを取得します。アプリケーションに送信する前に、設定されたペイロードがどのように見えるかを明確に確認するために、「--test」スイッチを使用することをお勧めします。 オプション: --file Mandatory - File containing valid HTTP request and SQL injection point SQLINJECT. --file=/tmp/req.txt --pattern Mandatory - Pattern to look for when...

cloudquery

CloudOps, without the chaos CloudQuery is a cloud asset inventory built for platform teams. Sync your cloud infrastructure metadata into your data warehouse, powering insights and automation. Unify data and provide context across AWS, Azure, GCP, and 70+ cloud and SaaS sources such as Wiz, Finout...

jackdaw

jackdaw 수집 수집 수집 이것은 무엇인가요? Jackdaw는 도메인의 모든 정보를 수집하여 SQL 데이터베이스에 저장하고, 도메인 객체들이 서로 어떻게 상호작용하는지, 그리고 잠재적인 공격자가 이러한 상호작용을 어떻게 악용할 수 있는지에 대한 멋진 그래프를 보여줍니다. 또한 해시/비밀번호/사용자를 저장/조회/보고하여 암호 크래킹 프로젝트를 지원하는 편리한 기능도 제공합니다. 빠른 사용 정보 자동 수집을 사용하지 않는 경우예: Windows가 아닌 경우 dbinit을 통해 초기 빈 데이터베이스를 생성해야 합니다. 먼저...

jackdaw

jackdaw gather gather gather What is this? Jackdaw is here to collect all information in your domain, store it in a SQL database and show you nice graphs on how your domain objects interact with each-other an how a potential attacker may exploit these interactions. It also comes with a handy...

Judge-Jury-and-Executable

심판, 배심원, 그리고 실행 파일 위협 헌팅 포렌식 도구 기능: 즉시 마운트된 파일 시스템에서 위협 스캔 또는 사고 발생 전 시스템 베이스라인을 수집하여 추가 위협 헌팅 능력 확보 사고 전, 중, 후에 사용 가능 하나에서 여러 워크스테이션까지 MFT를 스캔하여 파일 권한, 파일 잠금, OS 파일 보호/숨김/그림자 우회 파일당 최대 51개의 다양한 속성 수집 스캔 결과는 SQL 테이블에 저장되어 나중에 검색, 여러 스캔 및/또는 여러 시스템에 걸친 결과 집계, 과거 또는 회고적 분석 가능 SQL의 힘을 활용하여 파일 시스템 검색...

WebGoat.NET

Webgoat.NET 소스 코드: https://github.com/jerryhoff/WebGoat.NET Zip 다운로드: https://github.com/jerryhoff/WebGoat.NET/zipball/master 이 웹 애플리케이션은 일반적인 웹 보안 취약점에 대해 학습할 수 있는 플랫폼입니다. 대부분의 웹 애플리케이션에 적용되는 일반적인 보안 결함들을 포함하고 있습니다. 또한 .NET 프레임워크와 관련된 학습 내용도 포함되어 있습니다. 이 앱의 실습은 웹 보안 공격과 개발자들이 이를 어떻게 극복할 수 있는지 가르...

msdat

Quentin HARDY --- [email protected] [email protected] MSDAT MSDAT M icros oft SQL D atabase A ttacking T ool is an open source penetration testing tool that tests the security of Microsoft SQL Databases remotely. Usage examples of MSDAT: You have a Microsoft database listening remotely...

securitybot

Securitybot Distributed alerting for the masses! Securitybot is an open-source implementation of a distributed alerting chat bot, as described in Ryan Huber's blog post. Distributed alerting improves the monitoring efficiency of your security team and can help you catch security incidents faster...

Reproduce-CVE-2024-21513

CVE-2024-21513 재현 개요 이 프로젝트는 langchain-experimental 패키지, 특히 버전 =0.0.15 및 0.0.21에서 CVE-2024-21513 취약점을 시연합니다. 이 취약점은 데이터베이스에서 값을 검색할 때 VectorSQLDatabaseChain 구성 요소를 통해 임의 코드 실행을 허용하며, 이는 검색된 모든 값에 대해 eval을 사용하기 때문입니다. 취약점 재현 워크플로우 이 애플리케이션을 사용하면 영화ID, 제목, 감독, 연도, 평점에 대한 정보가 있는 SQL 데이터베이스와 대화할 수...

The vulnerability of Azure SQL Database’s cloud relational database model, related to insufficient validation of queries on the server side, allows attackers to escalate their privileges.

The vulnerability of the Azure SQL Database cloud relational database is related to insufficient validation of queries on the server side. Exploiting this vulnerability can allow an attacker to increase their privileges remotely...

The vulnerability of the Azure SQL Database, a cloud relational database, stems from the lack of protection for SQL query structures, allowing attackers to exploit their privileges.

The vulnerability of the Azure SQL Database cloud relational database model is related to the lack of security measures for SQL query structures. Exploiting this vulnerability can allow attackers to enhance their privileges remotely...

The vulnerability of the Azure SQL Database, a cloud relational database, is related to deficiencies in access control. This allows attackers to escalate their privileges.

The vulnerability of the Azure SQL Database cloud relational database model is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to enhance their privileges remotely...

The vulnerability of the Azure SQL Database, a cloud relational database, stems from the lack of protection for SQL query structures, allowing attackers to exploit their privileges.

The vulnerability of the Azure SQL Database cloud relational database model is related to the lack of security measures for SQL query structures. Exploiting this vulnerability can allow attackers to enhance their privileges remotely...

CVE-2026-91934

Flowise versions before 3.1.4 fail to validate file paths in the SQL Database Chain node when connecting to SQLite databases, allowing authenticated attackers to write arbitrary files. Attackers can write malicious SQLite databases to system directories or inject files into the web root to execut...

CVE-2026-91934 Flowise before 3.1.4 Remote Code Execution via SQL Database Chain

Flowise versions before 3.1.4 fail to validate file paths in the SQL Database Chain node when connecting to SQLite databases, allowing authenticated attackers to write arbitrary files. Attackers can write malicious SQLite databases to system directories or inject files into the web root to execut...

EUVD-2026-78792

Flowise versions before 3.1.4 fail to validate file paths in the SQL Database Chain node when connecting to SQLite databases, allowing authenticated attackers to write arbitrary files. Attackers can write malicious SQLite databases to system directories or inject files into the web root to execut...

CVE-2026-91934

Flowise versions before 3.1.4 are affected by an insufficient path validation vulnerability in the SQL Database Chain node when connecting to SQLite databases. The flaw allows authenticated attackers to write arbitrary files to the filesystem by crafting file paths in SQLite connection parameters...

CVE-2026-91934 Flowise before 3.1.4 Remote Code Execution via SQL Database Chain

Flowise versions before 3.1.4 fail to validate file paths in the SQL Database Chain node when connecting to SQLite databases, allowing authenticated attackers to write arbitrary files. Attackers can write malicious SQLite databases to system directories or inject files into the web root to execut...

CVE-2026-91934 Flowise before 3.1.4 Remote Code Execution via SQL Database Chain

Flowise versions before 3.1.4 fail to validate file paths in the SQL Database Chain node when connecting to SQLite databases, allowing authenticated attackers to write arbitrary files. Attackers can write malicious SQLite databases to system directories or inject files into the web root to execut...

PT-2026-92054

Flowise versions before 3.1.4 fail to validate file paths in the SQL Database Chain node when connecting to SQLite databases, allowing authenticated attackers to write arbitrary files. Attackers can write malicious SQLite databases to system directories or inject files into the web root to execut...