kubebox

= Kubebox small^⎈❏^ Antonin Stefanutti https://github.com/astefanutti@astefanutti // Meta :description: Terminal- und Web-Konsole für Kubernetes // Settings :idprefix: :idseparator: - :experimental: // Aliases ifdef::env-github :note-caption: ℹ️ :icon-check: ✔️ :icon-edit: ✏️ endif::...

freeradius-server

Il server FreeRADIUS Introduzione Il progetto FreeRADIUS Server è un server di policy multi-protocollo ad alte prestazioni e altamente configurabile, che supporta RADIUS, DHCPv4, DHCPv6, DNS, TACACS+ e VMPS. È disponibile secondo i termini della GNU GPLv2. L'uso di RADIUS consente di centralizzar...

sherloq

مجموعة أدوات مفتوحة المصدر لتحليل الصور الرقمية الجنائي مقدمة "تحليل الصور الجنائي هو تطبيق علوم الصور والخبرة المتخصصة لتفسير محتوى الصورة و/أو الصورة نفسها في المسائل القانونية. تشمل التخصصات الفرعية الرئيسية لتحليل الصور الجنائي مع تطبيقات إنفاذ القانون: القياس التصويري، المقارنة التصويرية،...

cve-2026-41940-PoC

CVE-2026-41940 ⚠ Questo strumento è creato esclusivamente a scopo educativo o di bug bounty. L'uso non autorizzato al di fuori di ambienti controllati è severamente vietato. Descrizione Uno strumento per sfruttare CVE-2026-41940, un bypass critico dell'autenticazione in cPanel & WHM CVSS 10.0, ch...

PetitPotam

PetitPotam Strumento PoC per costringere host Windows ad autenticarsi verso altre macchine tramite MS-EFSRPC EfsRpcOpenFileRaw o altre funzioni : Gli strumenti utilizzano la named pipe LSARPC con interfaccia c681d488-d850-11d0-8c52-00c04fd90f7e perché è più diffusa. Ma è possibile attivarlo anche...

CVE-2020-1472

Script di test ZeroLogon Uno script Python che utilizza la libreria Impacket per testare la vulnerabilità relativa all'exploit Zerologon CVE-2020-1472. Tenta di effettuare il bypass dell'autenticazione Netlogon. Lo script terminerà immediatamente quando il bypass viene eseguito con successo, senz...

evilgophish

Table of Contents evilgophish A Word About Sponsorship Credits Prerequisites Disclaimer Why? Background Infrastructure Layout setup.sh Cloudflare Turnstile Setup Cloudflare Turnstile HTML Template Guide replacerid.sh Email Campaign Setup QR Code Generator SMS Campaign Setup Live Feed Setup A Word...

evilginx2

Evilginx 3.0 Evilginx is a man-in-the-middle attack framework used for phishing login credentials along with session cookies, which in turn allows to bypass 2-factor authentication protection. This tool is a successor to Evilginx, released in 2017, which used a custom version of nginx HTTP server...

howdy

Howdy bietet eine Windows Hello™-ähnliche Authentifizierung für Linux. Nutzen Sie Ihre eingebauten IR-Emitter und Kamera in Kombination mit Gesichtserkennung, um Ihre Identität zu bestätigen. Dank des zentralen Authentifizierungssystems PAM funktioniert dies überall dort, wo Sie sonst Ihr Passwor...

fail2ban

root@kitploit: / | | | | / | | |/ /| ' / | ' \ || ,||/|./,|||| v1.1.0.dev1 20??/??/?? Fail2Ban: banir hosts que causam múltiplos erros de autenticação O Fail2Ban verifica arquivos de log como /var/log/auth.log e bane endereços IP que realizam muitas tentativas de login falhadas. Ele faz isso...

fail2ban

root@kitploit: / | | | | / | | |/ /| ' / | ' \ || ,||/|./,|||| v1.1.0.dev1 20??/??/?? Fail2Ban: ban hosts that cause multiple authentication errors Fail2Ban scans log files like /var/log/auth.log and bans IP addresses conducting too many failed login attempts. It does this by updating system...

CVE-2026-81032

NebulaGraph exposes its runtime configuration over an unauthenticated HTTP service. Each daemon starts the web service defined in src/webservice/WebService.cpp, whose bind address defaults to all interfaces, and registers routes for reading and writing gflags alongside status and statistics...

CVE-2026-81029

OpenMetadata accepts a caller-supplied post-authentication redirect target and appends the issued token to it. SamlLoginServlet reads the callback request parameter and stores it in the HTTP session without comparing it against any configured or registered destination, and the assertion consumer...

impacket

Impacket Copyright Fortra, LLC e società affiliate. Tutti i diritti riservati. Impacket è stato originariamente creato da SecureAuth, e ora è mantenuto da Core Security di Fortra. Impacket è una raccolta di classi Python per lavorare con protocolli di rete. Impacket è focalizzato sul fornire...

authelia

!OpenSSF Best...

kerbrute

Kerbrute Ein Tool zum schnellen Bruteforcen und Aufspüren gültiger Active-Directory-Konten durch Kerberos-Pre-Authentication Laden Sie die neuesten Binärdateien von der Releases-Seite herunter, um loszulegen. Hintergrund Dieses Tool entstand aus einigen bash-Skripten, die ich vor ein paar Jahren...

crypto/tls: crypto/tls: Incorrect certificate validation during TLS session resumption

A flaw was found in the crypto/tls component. This vulnerability occurs during Transport Layer Security TLS session resumption when certificate authority CA settings are modified between the initial and resumed handshakes. An attacker could exploit this to bypass certificate validation, allowing ...

EUVD-2026-66605

OpenMetadata accepts a caller-supplied post-authentication redirect target and appends the issued token to it. SamlLoginServlet reads the callback request parameter and stores it in the HTTP session without comparing it against any configured or registered destination, and the assertion consumer...

CVE-2026-81027

one-api gates one of its two channel-pinning paths and not the other. middleware/auth.go permits a request to name a specific channel either through a suffix on the API key or through a URL path parameter. The suffix path is reached only after model.IsAdmin succeeds and otherwise rejects the...

CVE-2026-74752

In the Linux kernel, the following vulnerability has been resolved: sctp: validate cookie AUTH state before use When cookie authentication is disabled, COOKIEECHO restores fixed-size AUTH fields directly from peer-controlled cookie bytes. A forged RANDOM length, HMAC list, or CHUNKS list can then...