11658 matches found
idacode
IDACode IDACode makes it easy to execute and debug Python scripts in your IDA environment without leaving Visual Studio Code. The VS Code extension can be found on the marketplace. IDACode is still in a very early state and bugs are to be expected. Please open a new issue if you encounter any...
studio
ShipSec Studio 오픈소스 보안 워크플로 오케스트레이션 플랫폼. ShipSec은 현재 활발히 개발 중입니다. 안정적인 프로덕션 사용과 고성능 보안 운영을 위해 플랫폼을 최적화하고 있습니다. ShipSec Studio는 자동화된 보안 워크플로를 구축, 실행 및 모니터링하기 위한 시각적 DSL과 런타임을 제공합니다. 보안 로직을 인프라 관리에서 분리하여, 대규모 보안 도구 실행을 위한 내구성 있고 격리된 환경을 제공합니다. YouTube에서 플랫폼 동작을 확인하세요. 🏗️ 핵심 기둥 내구성 있는 재개 가능 워크플로 —...
power-pwn
メンテナンス: AI エージェントをあらゆる場所でセキュアに。 概要 Power Pwn は、Microsoft 365 Power Platform および AI サービス向けの攻撃・防御両用セキュリティツールセットです。 主な機能（一部）: 💾 PowerDump : テナント全体のスキャンとデータ収集を包括的に実行 🚪 BackDoor : Power Platform 環境への永続的なアクセスを実現するバックドアフローを展開 🦠 NoCodeMalware : コードを書かずに悪意のある Power Platform アーティファクトを作成・展開 🎣 PowerPhishing ...
blutter
Blutter Flutter Mobile Application Reverse Engineering Tool by Compiling Dart AOT Runtime Currently the application supports only Android libapp.so arm64 only. Also the application is currently work only against recent Dart versions. For high priority missing features, see TODO Environment Setup...
apkstudio
APK Studio Android 애플리케이션 패키지 리버스 엔지니어링을 위한 오픈소스, 크로스 플랫폼 Qt6 기반 IDE입니다. .smali 코드 파일에 대한 구문 강조 기능을 포함한 코드 편집기 등 IDE와 유사한 레이아웃을 제공합니다. 주요 기능 크로스 플랫폼, Linux , Mac OS X , Windows 에서 실행 APK 디컴파일/리컴파일/서명 및 설치 자동 도구 다운로드 및 설치 - APK Studio가 필요한 도구Java, Apktool, JADX, ADB, Uber APK Signer를 자동으로 다운로드하여 설...
PSBits
PSBits 通常よりも少し深く掘り下げることを可能にする、（比較的）シンプルなソリューション群。 各フォルダには詳細を説明する独自の readme.md を置くべきです。ない場合は、コードの冒頭とインラインに詳細なコメントがあります。 ニュースレター：https://gtworek.ck.page/ 自分でコンパイルしたい場合は、無料版 Visual Studio のダウンロード、インストール、設定に関する詳細な手順をこちらで確認できます：...
blackout-public
ZoomInfo GTM Studio：同意前トラッキングの記録 「研究者をブロックすることはできても、証拠をブロックすることはできない。」 何が起きたか 2025年11月25日、ZoomInfoのCEOであるHenry Schuck氏は、LinkedInでGTM Studioのプロダクトデモを投稿しました。GTM Studioは、「個人レベルでのウェブサイト訪問を識別する」ことを謳う同社のAI搭載プラットフォームです。 あるセキュリティ研究者がGTM...
Magento-ver.-2.4.6
エクスプロイトタイトル: FireBear Studio Improved Import & Export ver. 3.8.6 for Magento 2.4.6 - XSLT Server Side Injection 日付: 2023-11-17 エクスプロイト作者: tmrswrr ベンダーホームページ: FireBear Studio ソフトウェアリンク: FireBear Studio Improved Import & Export バージョン: FireBear Improved Import & Export ver. 3.8.6 PoC 1...
pycdc-studio
pycdc-studio 中文说明 pycdc / pycdas を使用してPythonバイトコードを探索し、ネイティブ逆コンパイル結果を検査し、Pyarmorのワンショット出力をインポートし、AIフォールバックで未サポートのコードオブジェクトを再試行するためのQt WidgetsデスクトップUIです。 このアプリはWindowsとLinuxのデスクトップ環境両方をサポートしています。 スクリーンショット メインワークスペース AIフォールバック できること .pyc / .pyo ファイルを直接開く...
systeminformer
System Informer A free, powerful, multi-purpose tool that helps you monitor system resources, debug software and detect malware. Brought to you by Winsider Seminars & Solutions, Inc...
Label Studio < 1.16.0 - Cross-Site Scripting
Label Studio prior to version 1.16.0 contains a cross-site scripting caused by rendering unsanitized user-provided HTML in the /projects/upload-example endpoint, letting attackers execute arbitrary JavaScript via crafted labelconfig in a GET request, exploit requires victims to visit malicious UR...
Wavemaker Studio 6.6 - Local File Inclusion/Server-Side Request Forgery
WaveMaker Studio 6.6 mishandles the studioService.download?method=getContent&inUrl= value in com/wavemaker/studio/StudioService.java, leading to disclosure of local files and server-side request forgery. id: CVE-2019-8982 info: name: Wavemaker Studio 6.6 - Local File Inclusion/Server-Side Request...
Label Studio - Sensitive Information Exposure
An attacker can construct a filter chain to filter tasks based on sensitive fields for all user accounts on the platform by exploiting Django's Object Relational Mapper ORM. Since the results of query can be manipulated by the ORM filter, an attacker can leak these sensitive fields character by...
SawtoothSoftware Lighthouse Studio < 9.16.14 - Pre-Auth Remote Code Execution
A pre-authentication remote code execution vulnerability exists in Sawtooth Software’s Lighthouse Studio versions prior to 9.16.14. The issue arises from the unsafe use of the eval function within the Perl CGI component ciwweb.pl, where attacker-supplied input inside hidRandomACARAT is directly...
Label Studio - Cross-Site Scripting
Versions prior to 1.9.2 have a cross-site scripting XSS vulnerability that could be exploited when an authenticated user uploads a crafted image file for their avatar that gets rendered as a HTML file on the website. id: CVE-2023-47115 info: name: Label Studio - Cross-Site Scripting author: isaca...
Joomla! Component Jphone 1.0 Alpha 3 - Local File Inclusion
A directory traversal vulnerability in jphone.php in the JPhone comjphone component 1.0 Alpha 3 for Joomla! allows remote attackers to include and execute arbitrary local files via a .. dot dot in the controller parameter to index.php. id: CVE-2010-3426 info: name: Joomla! Component Jphone 1.0...
CVE-2018-8172
CVE-2018-8172 Microsoft Visual Studio CVE-2018-8172 リモートコード実行の脆弱性 http://darkcert.com/2018/08/microsoft-visual-studio-remote-code-execution-cve-2018-8172/ https://twitter.com/SyFi2k...
tiny_tracer
tinytracer A Pin Tool for tracing: API calls, including input and output of selected functions defined local functions, and functions from statically linked libraries selected instructions: RDTSC, CPUID, INT inline system calls, including parameters of selected syscalls transition between section...
reko
reko - a general purpose decompiler. Reko Swedish: "decent, obliging" is a decompiler for machine code binaries. This project is freely available under the GNU General Public License. The project consists of front ends, core decompiler engine, and back ends to help it achieve its goals. A...