Chimera

Chimera는 번쩍이고 매우 해킹적인 PowerShell 난독화 스크립트로, AMSI 및 안티바이러스 솔루션을 우회하도록 설계되었습니다. AV를 트리거하는 것으로 알려진 악성 PS1을 처리하고 일반적인 탐지 서명을 회피하기 위해 문자열 대체 및 변수 연결을 사용합니다. Chimera는 이 글을 위해 만들어졌으며, 탐지 서명을 우회하는 것이 얼마나 사소한 일인지에 대한 추가 증거입니다. 이 저장소가 누군가가 강력하고 더 안정적인 무언가를 구축하도록 영감을 주기를 바랍니다. Chimera 작동 방식... 아래는...

CVE-2019-12189

CVE-2019-12189 - Vulnerabilidad XSS en Zoho ManageEngine ServiceDesk Plus 9.3 Información Descripción: Se descubrió XSS en ManageEngine ServiceDesk Plus versión Versiones afectadas: 9.3 Investigador: Dang The Tuyen Prueba de concepto La vulnerabilidad se origina por la confusión de comillas simpl...

cve-2023-38646-poc

Metabase Pre Authentication RCE CVE-2023-38646 CVE-2023-38646 es una vulnerabilidad de ejecución remota de código en Metabase. Esta vulnerabilidad se debe a un defecto de seguridad en el manejo de las cadenas de conexión JDBC por parte de Metabase al procesar el punto final de API no autenticado...

Apache-Commons-Text-CVE-2022-42889

Apache Commons Text CVE-2022-42889 Resumen Apache Text4Shell CVE-2022-42889 Las versiones afectadas de Apache Commons Text son de la 1.5 a la 1.9 y se ha parcheado en la versión 1.10. Apache Commons Text es una biblioteca Java descrita como "una biblioteca centrada en algoritmos que trabajan con...

perl_spreadsheet_excel_rce_poc

ParseExcel security vulnerabilitiy TL;DR: RCE from logic in parsing format strings. Short explanation on the exploit Root cause of the exploitation comes from calling eval to an unvalidated user input in Utility.pm...

xcavator

xcavator A network data locater using credentials obtained during penetration tests. Xcavator is a tool that scans a range of IP addresses for services that host files FTP, FTPS and SMB at the moment and for given credentials it will try to download everything it can and scan within the files for...

hardcodes

hardcodes 소스 코드에서 문자열 추출 hardcodes 는 개발자가 프로그램에 하드코딩한 문자열을 검색하는 유틸리티입니다. 모듈식 토크나이저를 사용하여 주석, 모든 수의 백슬래시 및 거의 모든 구문을 처리할 수 있습니다. 네, 모든 구문을 처리하도록 설계되었으며 다음 언어가 공식적으로 지원됩니다: ada, applescript, c, c, c++, coldfusion, golang, haskell, html, java, javascript, jsp, lua, pascal, perl, php, powershell,...

JObfuscator

JObfuscator — Java Source Code Obfuscation & Protection JObfuscator is a source code obfuscator for the Java programming language. It can protect your Java source code and algorithms from hacking, cracking, reverse engineering, decompilation, and technology theft. JObfuscator employs a variety of...

snmp-shell

SNMP Shell Simulación de Shell sobre Net-SNMP con funcionalidad extend Aquí una vista previa : Descripción Si tu objetivo tiene una instancia de Net-SNMP con la funcionalidad "extend" , y tienes una cadena de comunidad SNMP que te otorga acceso de escritura , puedes usar esta herramienta para...

CVE-2021-44228

Comprobador de CVE-2021-44228 Este es el repositorio para comprobar la vulnerabilidad CVE-2021-44228. Esto es una PoC que solo muestra cadenas sin ninguna carga de clase externa. No se puede utilizar para la ejecución arbitraria de código. ¿Cómo funciona? Paso 1: Ejecutar la aplicación del servid...

proctools

proctools Pequeño conjunto de herramientas para extraer información y volcar cadenas sensibles de procesos de Windows. Hecho para acompañar a FormThief. procsearch - encuentra cadenas sensibles en la memoria del proceso objetivo busca la cadena analizada en la memoria legible del proceso; si se...

regexploit

Regexploit Find regexes which are vulnerable to Regular Expression Denial of Service ReDoS. More info onthe Doyensec blog Many default regular expression parsers have unbounded worst-case complexity. Regex matching may be quick when presented with a matching input string. However, certain...

CVE-2016-2569

Hello there, Thank you for reading my first blog entry. Today we will go with exploit creation for one of the open-source tool Squid Caching proxy server. So What Is Squido? Squid is a caching proxy for the Web supporting HTTP, HTTPS, FTP, and more. It reduces bandwidth and improves response time...

stringsifter

StringSifter is a machine learning tool that automatically ranks strings based on their relevance for malware analysis. Quick Links Technical Blogpost - Learning to Rank Strings Output for Speedier Malware Analysis Announcement Blogpost - Open Sourcing StringSifter DerbyCon Talk - StringSifter:...

cryptovenom

CryptoVenom CryptoVenom: The Cryptography Swiss Army knife What is CryptoVenom? CryptoVenom is an OpenSource tool which contains a lot of cryptosystems and cryptoanalysis methods all in one, including classical algorithms, hash algorithms, encoding algorithms, logic gates, mathematical functions,...

discourse-CVE-2023-45806

yksivaihde-CVE-2023-45806 CVE: https://github.com/discourse/discourse/security/advisories/GHSA-hcgf-hg2g-mw78 Patch: https://github.com/discourse/discourse/commit/7d484864fe91ff79c478f57e7ddb1235d701921e usage: fixquoteattribution"Username|", , where "Username|" is the unique search string within...

AutoIt-Obfuscator

AutoIt Obfuscator — Obfuscation for AutoIt Script Source Code AutoIt Obfuscator is a tool to modify AutoIt script source code in this way to make an analysis of obfuscated code very difficult. More technical details, downloads, documentation available at:...

cve-2018-12798

Vulnerabilidad de Ejecución Remota de Código por Desbordamiento de Montón en Adobe Acrobat Reader Vulnerabilidad Vulnerabilidad de Restricción Incorrecta de Operaciones dentro de los Límites de un Búfer de Memoria Descripción de la Vulnerabilidad Esta vulnerabilidad permite a atacantes remotos...

CVE-2022-37201

CVE-2022-37201 CVE-2022-37201 POC POC Primero que todo, debes instalar sqlmap. Necesitas configurar: dominio o IP objetivo tu cookie Luego ejecuta el shell: sqlmap -u http://targetDomainOrIP/jfinalcms/jfinalcms/admin/contact/list --thread 8 --batch --smart --random-agent --data "...

CVE-2019-11287

CVE-2019-11287: DoS via Heap Overflow in RabbitMQ Web Management Plugin Pivotal RabbitMQ, versions 3.7.x prior to 3.7.21 and 3.8.x prior to 3.8.1, and RabbitMQ for Pivotal Platform, 1.16.x versions prior to 1.16.7 and 1.17.x versions prior to 1.17.4, contain a web management plugin that is...