MAL-2026-14411 Malicious code in dpg-media-7ehemel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a904ad03d7041e21fe41a101c6a2db4a6aa3106f7b36394208bb4a5a39ee594 npm package [email protected] executes node index.js from a preinstall lifecycle script that harvests installer identity and environment...

MAL-2026-14410 Malicious code in @temptation.js/utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b8ac41747a5c926627c28c9f1a651df91cd3447b07ca4cafabc1916004d1e70 The package registers a preinstall hook node index.js that runs on npm install and harvests installer-side data: os.hostname, OS username, home...

Malicious code in @temptation.js/utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b8ac41747a5c926627c28c9f1a651df91cd3447b07ca4cafabc1916004d1e70 The package registers a preinstall hook node index.js that runs on npm install and harvests installer-side data: os.hostname, OS username, home...

CVE-2026-54121

🛡️ CVE-2026-54121 — Indagine CTI su Certighost Privilege Escalation dei Servizi certificati di Active Directory / Rischio di compromissione del dominio Creato da Pratik Chhetri Data del report: 2026-07-28 📌 Sintesi esecutiva...

ZeroLogon-CVE-2020-1472-lab

ZeroLogon-CVE-2020-1472 Explicação e demonstração da vulnerabilidade ZeroLogon CVE-2020-1472 O objetivo deste laboratório é estritamente educacional. A sua execução não é recomendada em ambientes de produção ou que não lhe pertençam. Sobre a Vulnerabilidade Contexto da vulnerabilidade Esta...

Domain-Controller-DC-Exploitation-with-Metasploit-Impacket

Domain-Controller-DC-Ausnutzung-mit-Metasploit-Impacket End-to-End-Domain-Controller-Ausnutzung mit Metasploit und Impacket: DC10 entdeckt, Zerologon CVE-2020-1472 ausgenutzt, NTLM-Hashes extrahiert, SYSTEM-Shell erlangt und eine Meterpreter-Sitzung eingerichtet. Zusammenfassung Diese Übung...

opensquat

openSquat Core 📑 Table of Contents What is openSquat? Featured In Open-Core Model Key Features Quick Start Requirements Usage Premium and API Modes Configuration Automation CLI Reference Contributing Author License 🎯 What is openSquat? openSquat is an Open Source Intelligence OSINT security tool...

endsfuzzer

endsfuzzer endsfuzzer ist ein einfaches Werkzeug, um eine Liste von Domains auf bestimmte Endpunkte zu fuzzen. Es prüft alle Domains in einer Liste auf einen einzelnen Endpunkt und wechselt dann zum nächsten Endpunkt. Funktionen Schnell. Nutzt Go-Routinen. Schonender für Server. Fuzzt alle Hosts...

Active-Directory-BadSuccessor

Active-Directory-BadSuccessor Panoramica In questa stanza, esploriamo la tecnica di escalation dei privilegi BadSuccessor, una vulnerabilità che abusa degli Account di Servizio Gestiti Delegati dMSA in Active Directory. L'attacco consente a un utente con sufficiente controllo su un oggetto dMSA d...

udpx

Fast and lightweight, UDPX is a single-packet UDP scanner written in Go that supports the discovery of over 45 services with the ability to add custom ones. It is easy to use and portable, and can be run on Linux, Mac OS, and Windows. Unlike internet-wide scanners like zgrab2 and zmap, UDPX is...

waymore

About - v8.9 The idea behind waymore is to find even more links from the Wayback Machine plus other sources than other existing tools. 👉 The biggest difference between waymore and other tools is that it can also download the archived responses for URLs on wayback machine and URLScan so that you c...

sqlmc

SQLMC - SQL Injection Massive Checker Demo Information This tool is for educational purpose only, usage of SQLMC for attacking targets without prior mutual consent is illegal. Developers assume no liability and are not responsible for any misuse or damage cause by this program. Overview SQLMC SQL...

sqlmc

SQLMC - Controllo Massivo di SQL Injection Demo Informazioni Questo strumento è solo per scopi educativi, l'uso di SQLMC per attaccare target senza il preventivo consenso reciproco è illegale. Gli sviluppatori non si assumono alcuna responsabilità e non sono responsabili per qualsiasi uso impropr...

CVE-2026-41089-Netlogon-RCE

🛡️ CVE-2026-41089-Netlogon-RCE - Analyze critical Windows service security vulnerabilities This repository provides tools to analyze and test the Netlogon vulnerability known as CVE-2026-41089. This tool helps security professionals identify if their Windows Domain Controllers face risks from this...

xsubfind3r

xsubfind3r xsubfind3r is a command-line utility designed to discover subdomains for a given domain in a simple, efficient way. It works by gathering information from a variety of passive sources, meaning it doesn't interact directly with the target but instead gathers data that is already publicl...

CVE-2026-43499-A36

CVE-2026-43499-A36 Eigenständiger, am Gerät getesteter CVE-2026-43499-Port für das kanadische Galaxy A36 5G SM-A366W auf exakter Firmware A366WVLS3AYG1, einschließlich KernelSU-Late-Load- und Root-My-Galaxy-Integration. Dieses Repository enthält die gerätespezifische native Seite von Root My...

reverse-ip-new-api

reverse-ip-new-api Esta ferramenta é usada para realizar consultas reversas de IP — pesquisando todos os domínios hospedados em um endereço IP. Funcionalidades Processamento multi-threading Processamento baseado em API Tratamento de erros Personalizar o número de threads Compre um café : Bitcoin ...

SharpHound

SharpHound Ottieni SharpHound L'ultima build di SharpHound si trova sempre qui. Per determinare la versione di SharpHound compatibile con un'istanza BloodHound CE distribuita, accedi all'interfaccia web di BloodHound CE e fai clic su ⚙️ Impostazioni → Scarica i Collector. Quindi, fai clic sul...

Malicious code in @opap/player-kyc-widget (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector abfe2a5c5b34e28b415fb39f20acea1ec320ef85aeb9577c9a52153630f964fc The package's postinstall script runs automatically on npm install and collects host identifiers hostname, username, cwd, platform, arch from the...

signatures

Assinaturas Este repositório foi projetado para fornecer uma maneira fácil de criar e distribuir assinaturas de detecção. Seja criativo com suas próprias soluções de detecção, totalmente livres de limitações de licença. Para ajudar a combater o mal, comprometemos firmemente nosso trabalho com o...