Apache APISIX Remote Code Execution (CVE-2022-24112) proof of concept exploit

Summary An attacker can abuse the batch-requests plugin to send requests tobypass the IP restriction of Admin API.A default configuration of Apache APISIX (with default API key) isvulnerable to remote code execution.When the admin key was changed or the port of Admin API was changed toa port different from the data panel, the impact is lower. But thereis still a risk to bypass the IP restriction of Apache APISIX’s datapanel. There is a check in the batch-requests plugin which overrides […]

Read more

Discord Remote Administration Tool fully written in Python3

Discord Remote Administration Tool fully written in Python3. This is a RAT controlled over Discord with over 20 post exploitation modules. not owned by me, was just looking for the funni code, enjoy I guess <3 https://github.com/moom825/Discord-RAThttps://github.com/Sp00p64/DiscordRAT thanks to moom825 for allowing me to find this and Sp00p64 for creating this master piece <3 Disclaimer: This tool is for educational use only, the author will not be held responsible for any misuse of this tool. Setup Guide: You will first […]

Read more

Hacker Community Remote Access Trojan

Hacker Community Remote Access Trojan python 3.7>= libs: pip install pyrebase4 pip install keyboard pip install colorama HC RAT is a RAT that contain two kinds of attacks. keylogger and RCE first file HC.py is the virus that keylog and controller.py is the controller of rce and keylogging Target computer: python HC.py Controller computer: python controller.py [[email protected] ~] $ help help showing this message cd navigate remoted pc (Please Note that you should only    

Read more

Remote sensing change detection using PaddlePaddle

Developing and benchmarking deep learning-based remote sensing change detection methods using PaddlePaddle. CDLab also has a PyTorch version. Currently, this repo contains more model implementations, dataset interfaces, and configuration files. Prerequisites opencv-python==4.1.1paddlepaddle-gpu==2.2.0visualdl==2.2.1pyyaml==5.1.2scikit-image==0.15.0scikit-learn==0.21.3scipy==1.3.1tqdm==4.35.0 Tested using Python 3.7.4 on Ubuntu 16.04. Get Started In src/constants.py, change the dataset locations to your own. Model Training To train a model from scratch, use python train.py train –exp_config PATH_TO_CONFIG_FILE A few configuration files regarding different datasets and models are provided in the configs/ folder for […]

Read more

SSH tunnels to remote server

Author: Pahaz Repo: https://github.com/pahaz/sshtunnel/ Inspired by https://github.com/jmagnusson/bgtunnel, which doesn’t work on Windows. See also: https://github.com/paramiko/paramiko/blob/master/demos/forward.py Requirements Installation sshtunnel is on PyPI, so simply run: pip install sshtunnel or easy_install sshtunnel or conda install -c conda-forge sshtunnel to have it installed in your environment. For installing from source, clone the repo and run: python setup.py install Testing the package In    

Read more