LEAKEY

LEAKEY 🔑 LEAKEY 是一个用于验证渗透测试和红队演练中发现的泄露 API 令牌/密钥的工具。 该脚本对漏洞猎手非常有用，可用于验证和确定泄露凭据的影响。 LEAKEY 使用位于 /.leakey/signatures.json 的基于 JSON 的签名文件。 LEAKEY 的理念是使其高度可定制，并能轻松添加新发现的服务/检查项。 LEAKEY 通过签名文件加载服务/检查列表，如果您想添加更多检查项/服务，只需将其附加到 signatures.json 文件中。 要求： jq 安装： root@kitploit: curl...

keyhacks

KeyHacksは、バグバウンティプログラムやペンテストで見つけたさまざまなAPIキーを検証する方法を示しています。 @Gwen001 が全プロセスをスクリプト化しており、こちらから入手できます。こちら 目次 ABTasty API Key Algolia API key Amplitude API Keys Asana Access token AWS Access Key ID and Secret Azure Application Insights APP ID and API Key Bazaarvoice Passkey Bing Maps API Key Bit.ly...

CredNinja

このツールは、迅速かつ効率的にエンゲージメントを実行したいペネトレーションテスター向けです。このツールは（以下のいくつかの追加機能も含めて）より隠密な作戦にも使用できますが、大規模ネットワークのスケールで使用した際に真価を発揮します。 中核となる機能は、ダンプした資格情報（またはハッシュ。パス・ザ・ハッシュも可能）のリストと、ドメイン上のシステムのリスト（ポート445をスキャンすることを推奨します。あるいは --scan...

WHOREPRESS

Wordpress ログインチェッカー インストール root@kitploit: npm install --global whorepress 使い方 形式が次のようなリストを用意してください。 url:username:pass root@kitploit: whorepress list.txt 引数一覧 引数| 説明 ---|--- --admin-only| 管理者権限のみをチェック --debug| デバッグエラー出力 --output| 出力ファイル 作者 Website: https://imtaqin.id Github: @fdciabdul...

adfly

adfly Active Directory查询工具，使用LDAP协议，帮助红队成员/渗透测试人员验证用户凭据，检索有关AD用户、AD组的信息。 AD fly是一款使用LDAP协议进行用户身份验证访问和信息查询的工具。由于AD fly使用LDAP进行连接，它只需要一个有效账户进行身份验证，无需是AD域的一部分即可使用AD fly。从攻击机出发，红队成员能够通过LDAP访问Active Directory并检索操作所需的信息。 版本1.0包含以下模块： 查询用户组成员资格 列出组成员 列出所有域控制器 root@kitploit: \// \ | |/ $ $ || + AD Fly +...

Owa-Valid-Login-Checker

Owa-Valid-Login-Checker Python 2.7 Cómprame un café : Bitcoin $: 14nXhmRiQx5joCXFTdR8ydm3T8et7MFDXC ¿Cómo instalar Python ??? Instala Python 2.7.16 / 2.7.17 Instala pip : pip install requests pip install colorama pip install futures ¿Cómo ejecutar ??? Lista de ejemplo site.com/owa/|user|pass...

CVE-2026-78362

The SEO Flow by LupsOnline WordPress plugin before 3.0.3 does not correctly validate the credential supplied with its API requests, allowing unauthenticated users to be served as the administrator who configured the SEO Flow by LupsOnline WordPress plugin before 3.0.3 and take over the site...

EUVD-2026-71851

The SEO Flow by LupsOnline WordPress plugin before 3.0.3 does not correctly validate the credential supplied with its API requests, allowing unauthenticated users to be served as the administrator who configured the SEO Flow by LupsOnline WordPress plugin before 3.0.3 and take over the site...

CVE-2026-78362 SEO Flow by LupsOnline 3.0.0 - 3.0.2 - Unauthenticated Privilege Escalation via API Key Authentication

The SEO Flow by LupsOnline WordPress plugin before 3.0.3 does not correctly validate the credential supplied with its API requests, allowing unauthenticated users to be served as the administrator who configured the SEO Flow by LupsOnline WordPress plugin before 3.0.3 and take over the site...

PT-2026-86334

🚨 CVE-2026-78362 The SEO Flow by LupsOnline WordPress plugin before 3.0.3 does not correctly validate the credential supplied with its API requests, allowing unauthenticated users to be served as the administrator who configured the SEO Flow by LupsOnline WordPress plugin before 3.0.3 and take ov...

CVE-2026-85216 MISP LDAP and LinOTP Authentication Bypass via Empty or Invalid Credentials

MISP contains an authentication bypass vulnerability in its LDAP and LinOTP authentication components due to insufficient validation of user-supplied credentials. The custom LdapAuthenticate and LinOTPAuthenticate components replace CakePHP's FormAuthenticate implementation but did not replicate...

CVE-2026-42393

The comparison used for the doveadm password and API key is not fully timing safe and can reveal the length of the configured secret. An attacker with access to the same network as the doveadm service, able to make repeated requests and measure response timing accurately, can learn the length of...

CVE-2026-77073

n8n versions before 2.34.1 contain a credential validation bypass in the MCP createworkflowfromcode tool when authentication type is set to an expression. Attackers with a valid MCP Bearer API key and knowledge of a target credential ID can persist unauthorized cross-project credential references...

CVE-2026-77073

n8n versions before 2.34.1 contain a credential validation bypass in the MCP create_workflow_from_code tool when authentication type is set to an expression. An attacker with a valid MCP Bearer API key and a target credential ID can persist unauthorized cross-project credential references on work...

EUVD-2026-63262

n8n versions before 2.34.1 contain a credential validation bypass in the MCP createworkflowfromcode tool when authentication type is set to an expression. Attackers with a valid MCP Bearer API key and knowledge of a target credential ID can persist unauthorized cross-project credential references...

PT-2026-78929

Name of the Vulnerable Software and Affected Versions n8n versions prior to 2.34.1 Description A credential validation bypass exists in the MCP create workflow from code tool when the authentication type is configured as an expression. An attacker possessing a valid MCP Bearer API key and a targe...

OpenStack Keystone: OpenStack Keystone: Unauthorized cross-project access due to improper validation in EC2 credential creation

A flaw was found in OpenStack Keystone. An attacker holding an unrestricted application credential could exploit a vulnerability in the POST /v3/credentials endpoint where the caller-supplied projectid for an EC2-type credential was not validated against the project of the authenticating...

EUVD-2026-54641

Pathling is a set of tools that make it easier to use FHIR and clinical terminology within health data analytics. Prior to version 2.0.0 of Pathling Server, Pathling's bulk-submit operation allows an allowed submitter to supply an explicit oauthMetadataUrl parameter that is not validated against...

Nimux 1.0.2

Nimux is a native command surface for authorized security assessments. It combines network enumeration, credential validation, Active Directory operations, Kerberos workflows, remote execution, file movement, secrets collection, DCSync, GPO operations, database clients, and SOCKS routing into one...

CVE-2026-9494

An information disclosure vulnerability exists in Canonical ubuntu-pro-client formerly ubuntu-advantage-tools. The client validates Ubuntu Pro APT credentials by executing /usr/lib/apt/apt-helper using the download-file command. During this process, the secret bearer token is embedded directly in...