CVE-2026-62176

The PraisonAI multi-agent system is vulnerable to code injection in versions prior to 4.6.78 . The flaw exists in the deploy/api.py and deploy/docker.py modules, where the agents_file parameter is directly interpolated into an f-string without sanitization. This generated code is then written to ...

CVE-2026-62176 PraisonAI: Code Injection via f-string Interpolation in Deploy API Server Generation

PraisonAI is a multi-agent teams system. Prior to version 4.6.78, the deploy/api.py module generates Python server code by directly interpolating the agentsfile parameter into an f-string that is then written to a file and executed via subprocess.Popen. An attacker who controls the agentsfile val...

CVE-2026-62176 PraisonAI: Code Injection via f-string Interpolation in Deploy API Server Generation

PraisonAI is a multi-agent teams system. Prior to version 4.6.78, the deploy/api.py module generates Python server code by directly interpolating the agentsfile parameter into an f-string that is then written to a file and executed via subprocess.Popen. An attacker who controls the agentsfile val...

EUVD-2026-94521

PraisonAI is a multi-agent teams system. Prior to version 4.6.78, the deploy/api.py module generates Python server code by directly interpolating the agentsfile parameter into an f-string that is then written to a file and executed via subprocess.Popen. An attacker who controls the agentsfile val...

GHSA-G6J7-PFFP-8WHG PraisonAI: Code Injection via f-string Interpolation in Deploy API Server Generation

Summary The deploy/api.py module generates Python server code by directly interpolating the agentsfile parameter into an f-string that is then written to a file and executed via subprocess.Popen. An attacker who controls the agentsfile value via CLI argument, configuration, or upstream API can...

PraisonAI: Code Injection via f-string Interpolation in Deploy API Server Generation

Summary The deploy/api.py module generates Python server code by directly interpolating the agentsfile parameter into an f-string that is then written to a file and executed via subprocess.Popen. An attacker who controls the agentsfile value via CLI argument, configuration, or upstream API can...

red-kube

Red Team K8S Adversary Emulation Based on kubectl Red Kube is a collection of kubectl commands written to evaluate the security posture of Kubernetes clusters from the attacker's perspective. The commands are either passive for data collection and information disclosure or active for performing...

Maverick

Maverick Crystal Palace（カスタムPIC（Position Independent Code）リンカーとPICOモジュールシステム）で構築されたAdaptix C2エージェントです。トランスポート、タスク、難読化の各コンポーネントが実行時に読み込まれる独立したPICOブロブとして実装された、モジュール式シェルコードエージェントの構築方法を示しています。 注記 このエージェントには回避技術は一切含まれておらず、実際のエンゲージメントでそのまま使用することを意図していません。Crystal...

OUned

OUned The OUned project, an exploitation tool automating Organizational Units ACLs abuse through gPLink manipulation. For a detailed explanation regarding the principle behind the attack, the necessary setup as well as how to use the tool, you may refer to the associated article:...

EventHorizon

EventHorizon EventHorizon 是一款旨在为安全分析师和/或研究人员提供 Windows 事件跟踪 ETW 遥测数据的工具，结合类似 sigma 的规则，可实现强大的端点检测与响应能力。但需说明，EventHorizon 绝不可替代正规解决方案。本项目主要目的是简化 ETW 遥测数据的收集过程，并支持在不编写代码的情况下生成检测规则。为提升易用性，EventHorizon 的安装过程力求尽可能简单：提供 .msi 安装程序（参见 releases 标签）以及基本的安装说明（参见 wiki）。 !WARNING 请仅在测试环境 （非生产环境）中使用...

FruityWifi

FruityWiFi 무선 네트워크 감사 도구 http://www.fruitywifi.com/ 중요 참고 사항 Debian 11 Bullseye: Debian 11 Bullseye 기반 시스템을 사용하세요. 설치 프로그램이 구버전 문제를 해결하도록 업데이트되었습니다. 참고 : 일부 모듈은 Python3로 업그레이드될 때까지 작동하지 않습니다. FruityWiFi는 무선 네트워크를 감사하기 위한 오픈 소스 도구입니다. 사용자는 웹 인터페이스를 직접 사용하거나 메시지를 보내어 고급 공격을 배포할 수 있습니다. 처음에는...

Process-Dump

Process Dump Process Dump is a Windows reverse-engineering command-line tool to dump malware memory components back to disk for analysis. Often malware files are packed and obfuscated before they are executed in order to avoid AV scanners, however when these files are executed they will often...

SharpAppLocker

SharpAppLocker Get-AppLockerPolicy PowerShell cmdlet의 C 포트로, 확장된 기능을 제공합니다. 특정 유형의 규칙 및 작업을 필터링하고 검색하는 기능이 포함되어 있습니다. 초기에 AppLocker를 우회한 후 PS 로그를 남기고 싶지 않을 때 유용합니다. 사전 컴파일된 버전을 찾고 계신가요? https://github.com/Flangvik/SharpCollection 프로젝트를 확인해보세요! / | | / \ | | | | \ --.| | / /\ \ | | | | --. \ ' \ /...

CVE-2019-17638-Jetty

JETTY Jettyプロジェクトは、eclipse foundationによる100% JavaのHTTPサーバー、HTTPクライアント、およびサーブレットコンテナです。 http://www.eclipse.org/jetty/ Jettyはオープンソースであり、Apache 2.0およびEclipse Public License 1.0のデュアルライセンスが適用されています。Jettyを配布する際には、どちらかのライセンスを選択できます。 JETTYの実行...

Collect-MemoryDump

Collect-MemoryDump Collect-MemoryDump - DFIR을 위한 Windows 메모리 스냅샷 자동 생성 Collect-MemoryDump.ps1은 포렌식적으로 건전한 방식으로 라이브 Windows 시스템에서 메모리 스냅샷페이지 파일 수집 포함을 수집하는 데 사용되는 PowerShell 스크립트입니다. 기능: ARM64 지원 MAGNET DumpIt for Windows 및 MAGNET Response 메모리 수집을 시작하기 전에 호스트 이름 및 실제 메모리 크기 확인 메모리 덤프 파일을 저장할 충분한 여...

htcap

HTCAP htcap is a web application scanner able to crawl single page application SPA recursively by intercepting ajax calls and DOM changes. KEY FEATURES Recursive DOM crawling engine Discovers ajax/fetch/jsonp/websocket requests Supports cookies, proxy, custom headers, http auth and more Heuristic...

TinyInst

TinyInst Copyright 2020 Google LLC Licensed under the Apache License, Version 2.0 the "License"; you may not use this file except in compliance with the License. You may obtain a copy of the License at https://www.apache.org/licenses/LICENSE-2.0 Unless required by applicable law or agreed to in...

pwncat

pwncat pwncat is a post-exploitation platform for Linux targets. It started out as a wrapper around basic bind and reverse shells and has grown from there. It streamlines common red team operations while staging code from your attacker machine, not the target. pwncat used to only support Linux, b...

sdnpwn

What is sdnpwn? sdnpwn is a toolkit and framework for testing the security of Software-Defined Networks SDNs. For more information check out this article: https://sdnpwn.net/2017/08/22/what-is-sdnpwn/ Installation First download sdnpwn using git git clone https://github.com/smythtech/sdnpwn Make...

VMkatz

VMkatz Too Big to Steal You are three weeks into a red team engagement. You land on a NAS attached to the virtualization cluster — hundreds of gigabytes of .vmdk, .vmsn, .sav sitting right there. But your link does 200 KB/s. Exfiltrating a single 100 GB disk would take six days. VMkatz exists...