vulnx

VulnX Vulnx 🕷️ es un Bot Inteligente Auto Inyector de Shell que detecta vulnerabilidades en múltiples tipos de CMS https://github.com/anouarbensaad/vulnx/archive/master.zip Wiki de VulnX • Cómo Usar • Compatibilidad • Biblioteca • Vulnx es un Bot Inteligente Auto Inyector de Shell que detecta...

vulnx

VulnX Vulnx 🕷️ is An Intelligent Bot Auto Shell Injector that detects vulnerabilities in multiple types of Cms https://github.com/anouarbensaad/vulnx/archive/master.zip VulnX Wiki • How To Use • Compatibility • Library • Vulnx is An Intelligent Bot Auto Shell Injector that detects vulnerabilities...

dalfox

Dalfox es una potente herramienta de código abierto que se centra en la automatización, lo que la hace ideal para escanear rápidamente fallos de XSS y analizar parámetros. Su avanzado motor de pruebas y sus características especializadas están diseñados para agilizar el proceso de detección y...

CVE-2021-31762

CSRF-to-RCE ..| CVE-2021-31762 |.. Description : Exploiting a Cross-site request forgery CSRF attack to create a privileged user through the Webmin's add users feature then getting a reverse shell through the Webmin's running process feature Tested Version : Webmin 1.973 GitHub's latest version...

CVE-2020-11444

CVE-2020-11444 Nexus 3 Unauthorized Access Exploit Script For more exploit scripts, see: https://github.com/zhzyker/exphub Readme +-----------------------------------------------------------------------------------------------+ + DES: by zhzyker as https://github.com/zhzyker/exphub + +...

codejail

CodeJail CodeJail gestiona la ejecución de código no confiable en sandboxes seguros. Está diseñado principalmente para la ejecución de Python, pero también puede usarse para otros lenguajes. La seguridad se aplica con AppArmor. Si su sistema operativo no admite AppArmor, o si el perfil de AppArmo...

EUVD-2026-89758

Apache MINA SSHD is a Java library for client-side and server-side SSH. SSH servers can be configured to require multi-authentication schemes, for instance two different public keys, not just one. In OpenSSH, this would be done by setting in sshdconfig AuthenticationMethods "publickey,publickey"...

CVE-2026-93994 Apache MINA SSHD: Repeated-publickey policy bypass on server

Apache MINA SSHD is a Java library for client-side and server-side SSH. SSH servers can be configured to require multi-authentication schemes, for instance two different public keys, not just one. In OpenSSH, this would be done by setting in sshdconfig AuthenticationMethods "publickey,publickey"...

CVE-2026-93994 Apache MINA SSHD: Repeated-publickey policy bypass on server

Apache MINA SSHD is a Java library for client-side and server-side SSH. SSH servers can be configured to require multi-authentication schemes, for instance two different public keys, not just one. In OpenSSH, this would be done by setting in sshdconfig AuthenticationMethods "publickey,publickey"...

CVE-2026-93994

The Apache MINA SSHD Java library is affected by a partial authentication bypass in versions up to 2.19.0 and 3.0.0-M1 to 3.0.0-M5 . The vulnerability exists in the sshd-core component, where the server fails to enforce that two distinct public keys are used when a multi-authentication policy (e....

netbox v4.7.2

The cornerstone of every automated network NetBox Community | NetBox Cloud | NetBox Enterprise NetBox exists to empower network engineers. Since its release in 2016, it has become the go-to solution for modeling and documenting network infrastructure for thousands of organizations worldwide. As a...

EvilAbigail

Initrd encrypted root fs attack Scenario Laptop left turned off with FDE turned on Attacker boots from USB/CD/Network Script executes and backdoors initrd User returns to laptop, boots as normal Backdoored initrd loads: Debian/Ubuntu/Kali .so file into /sbin/init on boot, dropping a shell...

xori

Xori - Marco de desensamblado personalizado Xori es una librería de desensamblado y análisis estático preparada para automatización que consume shellcode o binarios PE y proporciona datos de análisis de triage. Agradecimientos: Xori no existiría sin la inspiración e ideas de la comunidad de códig...

xori

Xori - Custom disassembly framework Xori is an automation-ready disassembly and static analysis library that consumes shellcode or PE binaries and provides triage analysis data. Acknowledgements: Xori wouldn't exist without inspiration and ideas from the open source community. We are indebted to...

reportly

Reportly is an EntraID user activity report tool. About the tool This is a tool that will help blue teams during a cloud incident. When running the tool, the researcher will enter as input a suspicious user and a time frame and will receive a report detailing the following: 1. Information about t...

reportly

Reportly 是一款 EntraID 用户活动报告工具。 关于本工具 本工具旨在帮助蓝队在云安全事件调查中快速获取信息。 运行时，研究者输入可疑用户和时间范围，即可生成一份详细报告，内容包括： 1. 用户信息 2. 用户执行的操作 3. 针对用户执行的操作 4. 用户登录及失败日志 使用方法 运行工具时，会显示身份验证链接和设备代码，请访问链接并输入代码完成验证。 输入可疑用户的用户主体名称（User Principal Name）。 按以下格式输入开始和结束时间：2022-11-16 建议时间跨度不超过一周。 报告生成完毕后，工具会输出“Your report is...

pwnspoof

pwnSpoof de Punk Security genera archivos de registro falsos realistas para servidores web comunes con escenarios de ataque personalizables. Cada paquete de registros es único y completamente personalizable, lo que lo hace perfecto para generar escenarios CTF y para series de entrenamiento. ¿Pued...

pwnspoof

pwnSpoof from Punk Security generates realistic spoofed log files for common web servers with customisable attack scenarios. Every log bundle is unique and completely customisable, making it perfect for generating CTF scenarios and for training serials. Can you find the attacker session and build...

badsecrets

badsecrets A pure python library for identifying the use of known or very weak cryptographic secrets across a variety of platforms. The project is designed to be both a repository of various "known secrets" for example, ASP.NET machine keys found in examples in tutorials, and to provide a...

badsecrets

badsecrets 一个纯Python库，用于识别在各种平台上使用已知或非常弱密码学秘密的情况。该项目旨在既作为各种“已知秘密”的仓库（例如，在教程示例中发现的ASP.NET机器密钥），又提供一种语言无关的抽象层来识别它们的使用。 判断何时使用了“坏秘密”通常需要检查使用了该秘密的加密产物：例如，使用密钥哈希算法签名的Cookie。当深入研究每个平台提供的实现细节时，事情会变得复杂，而该库旨在简化这一过程。 查看我们在Black Lantern Security博客上的完整博客文章。 灵感来源于Blacklist3r，并希望扩展到更多支持的平台，同时消除语言和操作系统依赖性。 当前模块...