CVE-2020-15148-bypasses

CVE-2020-15148-bypasses 几条关于CVE-2020-15148（yii2反序列化）的绕过 poc1 这一个是在2.0.37版本可利用的，2.0.38修复了这，也就是这个被分配了CVE-2020-15148，后面的三个是绕过 root@kitploit: checkAccess = 'system'; $this-id = 'ls'; namespace Faker use yii\rest\CreateAction; class Generator protected $formatters; public function construct...

ProcDump-for-Linux

ProcDump ProcDump is a Linux and Mac reimagining of the classic ProcDump tool from the Sysinternals suite of tools for Windows. ProcDump provides a convenient way for Linux and Mac developers to create core dumps of their application based on performance triggers. ProcDump for Linux and Mac is pa...

ProcDump-for-Linux

ProcDump ProcDump 是经典 ProcDump 工具（来自 Windows 的 Sysinternals 套件）在 Linux 和 Mac 上的重新实现。ProcDump 为 Linux 和 Mac 开发者提供了一种便捷的方式，基于性能触发器为应用程序创建核心转储（core dump）。ProcDump for Linux and Mac 是 Sysinternals 的一部分。 安装与使用 系统要求 最低 Linux 操作系统版本： Red Hat Enterprise Linux / CentOS 7 Fedora 29 Ubuntu 16.04 LTS gdb =...

pyod

.. image:: https://raw.githubusercontent.com/yzhao062/pyod/master/brand/pyod-icon.svg :target: https://pyod.dev :alt: Ecosistema PyOD :width: 84px Detección de anomalías en Python PyOD 3 PyOD 3: Detección de anomalías agéntica a escala |badgewebsite| |badgepypi| |badgeanaconda| |badgedocs|...

test-your-sysadmin-skills

:star: "一位优秀的系统管理员不需要知道一切，但他们应该能够针对不可能的项目提出惊人的解决方案。 " - cwheeler33 ServerFault :star: "我的技能是让事情运转起来，而不是知道十亿个事实。... 如果我需要修复一个系统，我会识别问题，检查日志并查找错误。如果我需要实施一个解决方案，我会研究正确的方案，实施并记录它，之后除非我经常与它互动，否则只会有一个大致的了解……这就是为什么要有文档。 " - Sparcrypt Reddit ℹ️ 该项目包含 284 个测试问题和答案，可用于测试您的知识或在 Linux nix 系统管理员等职位的面试/考试中使用。 ✔️...

iOSForensic

iOSForensic iosForensic es una herramienta de Python para ayudar en el análisis forense en iOS. Obtiene archivos, registros, extrae bases de datos sqlite3 y descomprime archivos .plist en xml. Instalación Simplemente clone este repositorio git e instale las dependencias. Dependencias Linux OpenSS...

awesome-soc-analyst

awesome-soc-analyst 我们为 SOC 分析师和 SOC 分析师候选人收集了有用的资源。 该仓库由 LetsDefend 维护。欢迎在此添加新资源。 目录 书籍 恶意软件分析 实操实验室 钓鱼邮件分析 调查工具 网络日志来源 网络设备日志 Linux 防火墙日志 SMB 日志 Windows 防火墙日志 网络安全设备日志 IDS/IPS 日志 网络防火墙日志 Web 应用防火墙（WAF）日志 Web 服务器日志 Apache 日志 IIS 日志 Nginx 日志 取证痕迹 浏览器历史记录与缓存 DNS 缓存/历史记录 Hosts 文件...

GHSA-4RF6-QX84-Q9FV Fulgur: Non-painting replaced elements amplify to thousands of blank PDF pages (denial of service)

fulgur converts untrusted HTML/CSS into PDF, commonly on a server that processes input supplied by many tenants. In versions prior to 0.26.0, a childless box that resolves to a pathologically tall height was amplified into thousands of blank PDF pages, even when it produces no visible output. The...

Fulgur: Non-painting replaced elements amplify to thousands of blank PDF pages (denial of service)

fulgur converts untrusted HTML/CSS into PDF, commonly on a server that processes input supplied by many tenants. In versions prior to 0.26.0, a childless box that resolves to a pathologically tall height was amplified into thousands of blank PDF pages, even when it produces no visible output. The...

Fulgur: Unbounded page slicing from attacker-controlled CSS height causes denial of service

fulgur converts untrusted HTML/CSS into PDF, commonly on a server that processes input supplied by many tenants. In versions prior to 0.19.0, a body-direct child whose CSS-resolved height greatly exceeds the page height was sliced into one fragment per page with no upper bound. The height is take...

GHSA-J5CX-PH8G-95V3 Fulgur: Unbounded page slicing from attacker-controlled CSS height causes denial of service

fulgur converts untrusted HTML/CSS into PDF, commonly on a server that processes input supplied by many tenants. In versions prior to 0.19.0, a body-direct child whose CSS-resolved height greatly exceeds the page height was sliced into one fragment per page with no upper bound. The height is take...

blackpill

BlackPill BlackPill es un rootkit sigiloso para Linux hecho en Rust. Características El rootkit está compuesto por múltiples módulos hablando de módulos de Rust, no de módulos del kernel: evasión de defensas : oculta archivos, procesos, conexiones de red, etc. hooking : engancha syscalls e IDT...

PoshC2_Old

PLEASE NOTE THIS REPO IS NOT BEING ACTIVELY UPDATED BUT IS STILL FULLY FUNCTIONAL - ALL FUTURE C2SERVER/IMPLANT WORK IS BEING CARRIED OUT ON THE PYTHON VERSION PoshC2 - https://github.com/nettitude/PoshC2/ PoshC2 PoshC2 is a proxy aware C2 framework that utilises Powershell and/or equivalent...

sparrow-wifi

Sparrow-WiFi Sparrow-WiFi is a 2.4 GHz and 5 GHz WiFi and Bluetooth spectral awareness tool for Linux. It integrates WiFi scanning, Bluetooth Low Energy and Classic discovery, software-defined radio spectrum analysis HackRF, Ubertooth, GPS tracking, FAA RemoteID drone detection, drone/rover-mount...

jadx-ai-mcp

JADX-AI-MCP Part of Zin MCP Suite ⚡ Fully automated MCP server + JADX plugin built to communicate with LLM through MCP to analyze Android APKs using LLMs like Claude — uncover vulnerabilities, analyze APK, and reverse engineer effortlessly. ⭐ Contributors Thanks to these wonderful people for thei...

fwknop

fwknop - Single Packet Authorization Introduction fwknop implements an authorization scheme known as Single Packet Authorization SPA for strong service concealment. SPA requires only a single packet which is encrypted, non-replayable, and authenticated via an HMAC in order to communicate desired...

CVE-2023-35086-POC

CVE-2023-35086-POC July 25 2023, Altin tin-z, github.com/tin-z Breve descripción Los firmwares de los routers ASUS RT-AX56U V2 y RT-AC86U, con versiones iguales o inferiores a 3.0.0.4.38650460 y 3.0.0.438651529 respectivamente, tienen una vulnerabilidad de formato de cadena en la función detwan.c...

nextjs-security-scanner

日本語版は README.ja.md を参照してください。 nextjs-security-scanner Bash script to detect CVE-2025-55182 React2Shell and credential exposure in Next.js projects. Zero dependencies. CVE-2025-55182: React2Shell CVSS: 10.0 CRITICAL | CWE-502: Deserialization of Untrusted Data | SNORT SID: 65554 Unauthenticated...

CVE-2026-92992

Dromara mayfly-go (up to 1.11.5 ) contains an authorization flaw in the AI Assistant component (file server/internal/ai/api/ai.go). The whitelist bypass is one-token wide: any compound command containing curl , wget , or sed executes automatically without approval, and that approval is granted by...

CVE-2026-92992 Dromara mayfly-go AI Assistant ai.go authorization

A security vulnerability has been detected in Dromara mayfly-go up to 1.11.5. The affected element is an unknown function of the file server/internal/ai/api/ai.go of the component AI Assistant. The manipulation leads to missing authorization. Remote exploitation of the attack is possible. The...