LEAKEY

LEAKEY 🔑 LEAKEY 是一个用于验证渗透测试和红队演练中发现的泄露 API 令牌/密钥的工具。 该脚本对漏洞猎手非常有用，可用于验证和确定泄露凭据的影响。 LEAKEY 使用位于 /.leakey/signatures.json 的基于 JSON 的签名文件。 LEAKEY 的理念是使其高度可定制，并能轻松添加新发现的服务/检查项。 LEAKEY 通过签名文件加载服务/检查列表，如果您想添加更多检查项/服务，只需将其附加到 signatures.json 文件中。 要求： jq 安装： root@kitploit: curl...

keyhacks

KeyHacksは、バグバウンティプログラムやペンテストで見つけたさまざまなAPIキーを検証する方法を示しています。 @Gwen001 が全プロセスをスクリプト化しており、こちらから入手できます。こちら 目次 ABTasty API Key Algolia API key Amplitude API Keys Asana Access token AWS Access Key ID and Secret Azure Application Insights APP ID and API Key Bazaarvoice Passkey Bing Maps API Key Bit.ly...

WHOREPRESS

Wordpress ログインチェッカー インストール root@kitploit: npm install --global whorepress 使い方 形式が次のようなリストを用意してください。 url:username:pass root@kitploit: whorepress list.txt 引数一覧 引数| 説明 ---|--- --admin-only| 管理者権限のみをチェック --debug| デバッグエラー出力 --output| 出力ファイル 作者 Website: https://imtaqin.id Github: @fdciabdul...

adfly

adfly LDAPプロトコルを使用したActive Directoryクエリツール。レッドチーマーやペネトレーションテスターがユーザー資格情報を検証し、ADユーザーやADグループに関する情報を取得するのに役立ちます。 AD flyはLDAPプロトコルを使用してユーザー認証アクセスと情報クエリを行うツールです。AD flyは接続にLDAPを使用するため、認証に有効なアカウントのみが必要であり、AD flyを使用するためにADの一部である必要はありません。攻撃マシンからレッドチーマーはLDAPを介してActive Directoryに到達し、運用に必要な情報を取得できます。...

CredNinja

このツールは、迅速かつ効率的にエンゲージメントを実行したいペネトレーションテスター向けです。このツールは（以下のいくつかの追加機能も含めて）より隠密な作戦にも使用できますが、大規模ネットワークのスケールで使用した際に真価を発揮します。 中核となる機能は、ダンプした資格情報（またはハッシュ。パス・ザ・ハッシュも可能）のリストと、ドメイン上のシステムのリスト（ポート445をスキャンすることを推奨します。あるいは --scan...

Owa-Valid-Login-Checker

Owa-Valid-Login-Checker Python 2.7 コーヒーを購入： Bitcoin $: 14nXhmRiQx5joCXFTdR8ydm3T8et7MFDXC Pythonのインストール方法 ??? python 2.7.16 / 2.7.17 をインストール pip をインストール : pip install requests pip install colorama pip install futures 実行方法 ??? リスト例 site.com/owa/|user|pass...

CVE-2026-78362

The SEO Flow by LupsOnline WordPress plugin before 3.0.3 does not correctly validate the credential supplied with its API requests, allowing unauthenticated users to be served as the administrator who configured the SEO Flow by LupsOnline WordPress plugin before 3.0.3 and take over the site...

EUVD-2026-71851

The SEO Flow by LupsOnline WordPress plugin before 3.0.3 does not correctly validate the credential supplied with its API requests, allowing unauthenticated users to be served as the administrator who configured the SEO Flow by LupsOnline WordPress plugin before 3.0.3 and take over the site...

CVE-2026-78362 SEO Flow by LupsOnline 3.0.0 - 3.0.2 - Unauthenticated Privilege Escalation via API Key Authentication

The SEO Flow by LupsOnline WordPress plugin before 3.0.3 does not correctly validate the credential supplied with its API requests, allowing unauthenticated users to be served as the administrator who configured the SEO Flow by LupsOnline WordPress plugin before 3.0.3 and take over the site...

PT-2026-86334

🚨 CVE-2026-78362 The SEO Flow by LupsOnline WordPress plugin before 3.0.3 does not correctly validate the credential supplied with its API requests, allowing unauthenticated users to be served as the administrator who configured the SEO Flow by LupsOnline WordPress plugin before 3.0.3 and take ov...

CVE-2026-85216 MISP LDAP and LinOTP Authentication Bypass via Empty or Invalid Credentials

MISP contains an authentication bypass vulnerability in its LDAP and LinOTP authentication components due to insufficient validation of user-supplied credentials. The custom LdapAuthenticate and LinOTPAuthenticate components replace CakePHP's FormAuthenticate implementation but did not replicate...

CVE-2026-42393

The comparison used for the doveadm password and API key is not fully timing safe and can reveal the length of the configured secret. An attacker with access to the same network as the doveadm service, able to make repeated requests and measure response timing accurately, can learn the length of...

CVE-2026-77073

n8n versions before 2.34.1 contain a credential validation bypass in the MCP createworkflowfromcode tool when authentication type is set to an expression. Attackers with a valid MCP Bearer API key and knowledge of a target credential ID can persist unauthorized cross-project credential references...

CVE-2026-77073

n8n versions before 2.34.1 contain a credential validation bypass in the MCP create_workflow_from_code tool when authentication type is set to an expression. An attacker with a valid MCP Bearer API key and a target credential ID can persist unauthorized cross-project credential references on work...

EUVD-2026-63262

n8n versions before 2.34.1 contain a credential validation bypass in the MCP createworkflowfromcode tool when authentication type is set to an expression. Attackers with a valid MCP Bearer API key and knowledge of a target credential ID can persist unauthorized cross-project credential references...

PT-2026-78929

Name of the Vulnerable Software and Affected Versions n8n versions prior to 2.34.1 Description A credential validation bypass exists in the MCP create workflow from code tool when the authentication type is configured as an expression. An attacker possessing a valid MCP Bearer API key and a targe...

OpenStack Keystone: OpenStack Keystone: Unauthorized cross-project access due to improper validation in EC2 credential creation

A flaw was found in OpenStack Keystone. An attacker holding an unrestricted application credential could exploit a vulnerability in the POST /v3/credentials endpoint where the caller-supplied projectid for an EC2-type credential was not validated against the project of the authenticating...

EUVD-2026-54641

Pathling is a set of tools that make it easier to use FHIR and clinical terminology within health data analytics. Prior to version 2.0.0 of Pathling Server, Pathling's bulk-submit operation allows an allowed submitter to supply an explicit oauthMetadataUrl parameter that is not validated against...

Nimux 1.0.2

Nimux is a native command surface for authorized security assessments. It combines network enumeration, credential validation, Active Directory operations, Kerberos workflows, remote execution, file movement, secrets collection, DCSync, GPO operations, database clients, and SOCKS routing into one...

CVE-2026-9494

An information disclosure vulnerability exists in Canonical ubuntu-pro-client formerly ubuntu-advantage-tools. The client validates Ubuntu Pro APT credentials by executing /usr/lib/apt/apt-helper using the download-file command. During this process, the secret bearer token is embedded directly in...