website exploit scanner githubの検索結果1 - 5 件 / 5件

• あとで読む

  【2020年】CTF Web問題の攻撃手法まとめ - こんとろーるしーこんとろーるぶい

  • 245 users
  • graneed.hatenablog.com
  • テクノロジー
  • 2021/08/09

  はじめに 対象イベント 読み方、使い方 Remote Code Execution(RCE) 親ディレクトリ指定によるopen_basedirのバイパス PHP-FPMのTCPソケット接続によるopen_basedirとdisable_functionsのバイパス JavaのRuntime.execでシェルを実行 Cross-Site Scripting(XSS) nginx環境でHTTPステータスコードが操作できる場合にCSPヘッダーを無効化 GoogleのClosureLibraryサニタイザーのXSS脆弱性 WebのProxy機能を介したService Workerの登録 括弧を使わないXSS /記号を使用せずに遷移先URLを指定 SOME(Same Origin Method Execution)を利用してdocument.writeを順次実行 SQL Injection MySQ

  • CTF
  • あとで読む
  • security
  • セキュリティ
  • php

  
• あとで読む

  GitHub - modelcontextprotocol/servers: Model Context Protocol Servers

  • 60 users
  • github.com/modelcontextprotocol
  • テクノロジー
  • 2024/11/28

  Official integrations are maintained by companies building production ready MCP servers for their platforms. 21st.dev Magic - Create crafted UI components inspired by the best 21st.dev design engineers. 2slides - An MCP server that provides tools to convert content into slides/PPT/presentation or generate slides/PPT/presentation with user intention. ActionKit by Paragon - Connect to 130+ SaaS inte

  • MCP
  • AI
  • LLM
  • Anthropic
  • server
  • protocol
  • github
  • プログラミング

  
• あとで読む

  The SaaS CTO Security Checklist Redux - Gold Fig — Peace of mind for infrastructure teams

  • 29 users
  • www.goldfiglabs.com
  • テクノロジー
  • 2021/06/07

  Doing the basics goes a long way in keeping your company and product secure. This third1 edition of the SaaS CTO Security Checklist provides actionable security best practices CTOs (or anyone for that matter) can use to harden their security. This list is far from exhaustive, incomplete by nature since the security you need depends on your company, product, and assets. 🚀 Your employees Accustom e

  • security
  • あとで読む
  • セキュリティ

  
• あとで読む

  Terrapin Attack

  • 24 users
  • terrapin-attack.com
  • テクノロジー
  • 2023/12/19

  Paper Vulnerability Scanner Q&A Patches News The accepted paper including the artifact appendix is now available. The Terrapin Attack will be presented at Real World Crypto Symposium 2024, Black Hat USA 2024, and USENIX Security Symposium 2024. We compiled a comprehensive list of SSH implementations adopting the "strict kex" countermeasure by OpenSSH. Recommended Articles: Ars Technica (Dan Goodin

  • ssh
  • security
  • network
• あとで読む

  Expert used ChatGPT-4o to create a replica of his passport in just 5 minutes bypassing KYC

  • 4 users
  • securityaffairs.com
  • テクノロジー
  • 2025/04/07

  SECURITY AFFAIRS MALWARE NEWSLETTER ROUND 41 | Security Affairs newsletter Round 519 by Pierluigi Paganini – INTERNATIONAL EDITION | China admitted its role in Volt Typhoon cyberattacks on U.S. infrastructure | Symbolic Link trick lets attackers bypass FortiGate patches, Fortinet warns | Attackers are exploiting recently disclosed OttoKit WordPress plugin flaw | Laboratory Services Cooperative dat