Inventus

Inventus Inventus é uma aranha projetada para encontrar subdomínios de um domínio específico, rastreando-o e quaisquer subdomínios que descobrir. É uma aranha Scrapy, o que significa que é facilmente modificável e extensível às suas necessidades. Demonstração asciicast Requisitos Linux -- Não...

inforfinder

Inforfinder =========== Inforfinder è uno strumento progettato per raccogliere informazioni su qualsiasi dominio che punti a un server ip, dominio, range, file. Richiede le librerie python: pyRequests, lxml e py3DNS Puoi eseguire l'installazione con pip oppure installare l'app inforfinder come...

recon-ninja

recon-ninja यह टूल एक GitHub रिपॉजिटरी है जो एक recon टूल प्रदान करता है जिससे आप अपनी डोमेन डिस्कवरी को अपलोड विकल्प के माध्यम से अपलोड कर सकते हैं। यह टूल HTTPX का उपयोग करता है, जो जीवित alive डोमेन स्कैन करने के लिए एक टूल है। इस टूल में एक एकीकृत MongoDB Atlas डेटाबेस भी है, जो एक...

imposter

IMPOSTER यह एक पेंटेस्ट टूल है जिसका उपयोग रॉग नेटवर्क पर विंडोज क्लाइंट्स पर हमला करने के लिए किया जाता है। वर्तमान संस्करण विशेषताएँ LDAP को NTLM प्रमाणीकरण में डाउनग्रेड करें नेटवर्क लोकेशन अवेयरनेस को धोखा देने के लिए डोमेन कंट्रोलर के शुरुआती चरणों का नकली बनाएं सर्वर DNS, CLDAP, LDAP सेटअप...

CVE-2026-80192

@better-auth/sso before 1.6.27 and before 1.4.8 in the 1.4.x line and before 1.7.0-rc.5 in the 1.7 prerelease line contains two domain-ownership flaws. When domain verification is disabled, automatic organization assignment accepts unverified provider domains, allowing an authenticated organizati...

zerologon

Zerologon-Test für SMB und RPC Ein Python-Skript basierend auf dem SecuraBV-Skript. Zeigt, dass CVE-2020-1472 über RPC/SMB und nicht nur über RPC/TCP ausgenutzt werden kann. Zusätzlich wird ein zufälliges Byte in der finalen Client-Herausforderung und den Client-Anmeldedaten eingefügt – zum Teste...

CVE-2021-1675-PrintNightmare-Analysis

Ricerca di vulnerabilità: Privilege Escalation locale e RCE tramite Windows Print Spooler PrintNightmare / CVE-2021-1675 Il repository contiene un report tecnico dettagliato Write-up e l'analisi del concetto di sfruttamento di una vulnerabilità critica nel servizio di gestione stampa di Windows...

CVE-2020-1472

CVE-2020-1472 POC Richiede l'ultima versione di impacket da GitHub con le strutture netlogon aggiunte. Tieni presente che, per impostazione predefinita, questo modifica la password dell'account del controller di dominio. Sì, questo ti permette di eseguire DCSync, ma interrompe anche la...

indicator-intelligence

Indicator-Intelligence NOTA: Devi usarlo esclusivamente per attività legali. Vedi; USAGEPOLICY.md LICENSE Descrizione Trova domini correlati e indirizzi IPv4 per fare intelligence sulle minacce dopo che Indicator-Intelligence ha raccolto file statici Screenshot Fatto Raccoglie domini e IP...

CVE-2019-6467

CVE-2019-6467 BIND nxdomain-redirect Solo per scopi educativi Esecuzione root@kitploit: $ docker run --rm --name cve-2019-6467 -it -p 53:53/udp knqyf263/cve-2019-6467 Exploit Query normale root@kitploit: $ dig @127.0.0.1 nxdomain.example.com nxdomain può essere sostituito con qualsiasi termine ch...

iptodomain

iptodomain Beschreibung: Mit diesem Tool können Sie Domains aus einem IP-Bereich extrahieren, indem Sie die historischen Informationen nutzen, die in Virustotal archiviert sind unter Verwendung des API-Schlüssels. Es ist nützlich, wenn Sie wissen möchten, welche Domains hinter dieser IP-Adresse...

CVE-2025-61163

Cohere North AI v1.1.5 contains an excessively permissive cross-domain policy that allows untrusted domains to interact with the service. The root cause is the server failing to validate the Origin header of incoming connection requests, effectively granting cross-origin access to any domain with...

fprobe

FProbe FProbe - Schneller HTTP-Probe Installation root@kitploit: GO111MODULE=on go get -u github.com/theblackturtle/fprobe Funktionen Nimmt eine Liste von Domains/Subdomains entgegen und prüft auf funktionierende HTTP/HTTPS-Server. Optimiert RAM- und CPU-Nutzung zur Laufzeit. Unterstützt speziell...

DetectionLabELK

DetectionLabELK DetectionLabELK هو فرع من DetectionLab الخاص بـ Chris Long مع مجموعة ELK بدلاً من Splunk. الوصف: DetectionLabELK هو المختبر المثالي للاستخدام إذا كنت ترغب في بناء قدرات كشف فعالة. لقد تم تصميمه مع وضع المدافعين في الاعتبار. غرضه الأساسي هو السماح للفرق الزرقاء ببناء نطاق Windows...

CVE-2026-41089

CVE-2026-41089 root@kitploit: ██████╗██╗ ██╗███████╗ ██╗ ██╗ ██╗ ██████╗ ██████╗ ██╔════╝██║ ██║██╔════╝ ██║ ██║███║██╔═████╗██╔═████╗ ██║ ██║ ██║█████╗ ███████║╚██║██║██╔██║██║██╔██║ ██║ ╚██╗ ██╔╝██╔══╝ ██╔══██║ ██║████╔╝██║████╔╝██║ ╚██████╗ ╚████╔╝ ███████╗ ██║ ██║ ██║╚██████╔╝╚██████╔╝ ╚═════...

PrivExchange

PrivExchange Strumenti POC che accompagnano il blog Abusing Exchange: One API call away from Domain Admin. Requisiti Questi strumenti richiedono impacket. Puoi installarlo tramite pip con pip install impacket, ma si consiglia di utilizzare l'ultima versione da GitHub. privexchange.py Questo...

cve-2021-1675

〖EXP〗Ladon Drucker-Schwachstelle Privilegieneskalation CVE-2021-1675 Reproduktion http://k8gege.org/p/CVE-2021-1675.html Grundlegende Informationen Am 9. Juni veröffentlichte Microsoft das Sicherheitsupdate für Juni und behob 50 Sicherheitslücken, darunter eine Windows Print Spooler-Elevation of...

RepoReaper

RepoReaper Panoramica RepoReaper è uno strumento di precisione progettato per automatizzare l'identificazione di repository .git esposti su un elenco di domini e sottodomini. Elaborando un file di testo fornito dall'utente con i nomi dei domini, RepoReaper controlla sistematicamente ciascuno di...

CVE-2026-80192

@better-auth/sso contains two domain-ownership authentication bypass flaws affecting versions before 1.6.27 (and before 1.4.8 in the 1.4.x line, before 1.7.0-rc.5 in the 1.7 prerelease line). When domain verification is disabled , an authenticated organization owner/administrator can register an ...

CVE-2026-80192 better-auth SSO before 1.6.27 Domain Ownership Authentication Bypass

@better-auth/sso before 1.6.27 and before 1.4.8 in the 1.4.x line and before 1.7.0-rc.5 in the 1.7 prerelease line contains two domain-ownership flaws. When domain verification is disabled, automatic organization assignment accepts unverified provider domains, allowing an authenticated organizati...