CVE-2026-62380

Netty (io.netty:netty-codec-socks) versions 4.2.0.Final through 4.2.16.Final and 4.1.x through 4.1.136.Final contain input validation flaws in the SOCKS4 (Socks4ClientEncoder) and SOCKS5 (Socks5ClientEncoder) client encoders. The domain address and authentication (username/password) fields are no...

CVE-2026-62380 Netty before 4.2.16.Final SOCKS Proxy Null Byte Injection

Netty io.netty:netty-codec-socks versions 4.2.0.Final through 4.2.16.Final and 4.1.x through 4.1.136.Final contain null byte, CRLF, and credential injection vulnerabilities in the SOCKS4 Socks4ClientEncoder and SOCKS5 Socks5ClientEncoder client encoders, which fail to validate domain address and...

EUVD-2026-64272

Netty io.netty:netty-codec-socks versions 4.2.0.Final through 4.2.16.Final and 4.1.x through 4.1.136.Final contain null byte, CRLF, and credential injection vulnerabilities in the SOCKS4 Socks4ClientEncoder and SOCKS5 Socks5ClientEncoder client encoders, which fail to validate domain address and...

CVE-2026-62380 Netty before 4.2.16.Final SOCKS Proxy Null Byte Injection

Netty io.netty:netty-codec-socks versions 4.2.0.Final through 4.2.16.Final and 4.1.x through 4.1.136.Final contain null byte, CRLF, and credential injection vulnerabilities in the SOCKS4 Socks4ClientEncoder and SOCKS5 Socks5ClientEncoder client encoders, which fail to validate domain address and...

wtfis

wtfis Passives Hostname-, Domain- und IP-Lookup-Tool für Nicht-Roboter WTF ist das? wtfis ist ein Kommandozeilen-Tool, das mithilfe verschiedener OSINT-Dienste Informationen über eine Domain, einen FQDN oder eine IP-Adresse sammelt. Anders als andere Tools dieser Art ist es speziell für den...

check_mdi

checkmdi Script Python per enumerare i domini Microsoft 365 validi, recuperare il nome del tenant e verificare la presenza di un'istanza di Microsoft Defender for Identity MDI. Basato su: https://github.com/thalpius/Microsoft-Defender-for-Identity-Check-Instance. Uso ./checkmdi.py -d...

httprobe

httprobe Prende una lista di domini e verifica quali server HTTP e HTTPS sono attivi. Installazione root@kitploit: ▶ go install github.com/tomnomnom/httprobe@latest Utilizzo base httprobe accetta domini delimitati da nuove righe su stdin: root@kitploit: ▶ cat recon/example/domains.txt example.com...

awesome-windows-domain-hardening

Awesome Hardening del Dominio Windows Una lista curata di fantastiche tecniche di hardening della sicurezza per Windows. Creata da gepeto42 e PaulWebSec, ma fortemente ispirata alla ricerca di PyroTek3! Riepilogo Questo documento riassume le informazioni relative al talk di DerbyCon di Pyrotek e...

ail-typo-squatting

ail-typo-squatting ail-typo-squatting è una libreria Python per generare un elenco di potenziali domini typosquatting con un motore di permutazione dei nomi di dominio, per alimentare AIL e altri sistemi. Lo strumento può essere utilizzato come strumento autonomo o per alimentare altri sistemi. S...

PassTheCert

PassTheCert A volte, i Domain Controller non supportano PKINIT. Questo può essere perché i loro certificati non hanno l'EKU Smart Card Logon. Tuttavia, diversi protocolli, incluso LDAP, supportano Schannel, quindi l'autenticazione tramite TLS. Abbiamo creato un piccolo strumento Proof-of-Concept...

SpamChannel

SpamChannel Worker live ospitato su https://spamchannel.haxxx.workers.dev AGGIORNAMENTO 13 ago 2023: Due giorni dopo il mio talk al DEFCON 31, MailChannels ha silenziosamente deciso di richiedere unDomain Lockdown Record per inviare email da Cloudflare Workers, il che significa che questo codice...

Active-Directory-trust-attacks

Questo repository non contiene un README...

CVE-2026-75932

Jet Admin allows an attacker to create a malicious app and connect it to a target user's custom domain, edit the authentication configuration, and reroute traffic to the attacker-controlled app. Once connected to the target domain, the attacker's workspace is populated with the victim's OAuth...

EUVD-2026-63997

Jet Admin allows an attacker to create a malicious app and connect it to a target user's custom domain, edit the authentication configuration, and reroute traffic to the attacker-controlled app. Once connected to the target domain, the attacker's workspace is populated with the victim's OAuth...

CVE-2026-75932

CVE-2026-75932 is a tenant isolation failure in Jet Admin (a web-based admin platform). An unauthenticated attacker can create a malicious app, connect it to a target user's custom domain, edit the authentication configuration, and reroute traffic to the attacker-controlled app. Once connected, t...

CVE-2026-75932 Jet Admin tenant isolation failure

Jet Admin allows an attacker to create a malicious app and connect it to a target user's custom domain, edit the authentication configuration, and reroute traffic to the attacker-controlled app. Once connected to the target domain, the attacker's workspace is populated with the victim's OAuth...

Jet Admin Cloud Platform multiple vulnerabilities

RISK EVALUATION Jet Admin allows an attacker to create a malicious app and connect it to a target user's custom domain, edit the authentication configuration, and reroute traffic to the attacker-controlled app. Once connected to the target domain, the attacker's workspace is populated with the...

CVE-2026-66721

Missing authorization issue for domain admins in CloudStack's host tags listing functionality. Domain Admins, by default, have permission to call the listHostTags API, but the API returns host tags for every host in the environment without domain scoping. It should instead be restricted to only t...

CVE-2026-66722

Improper authorization for CRUD operations on Project Roles and Project Role permissions for domain admins in CloudStack. A Domain Admin can create, update, delete, and list project roles and project role permissions for projects in any domain, not just their own. The check only confirms the call...

EUVD-2026-63833

Missing authorization issue for domain admins in CloudStack's host tags listing functionality. Domain Admins, by default, have permission to call the listHostTags API, but the API returns host tags for every host in the environment without domain scoping. It should instead be restricted to only t...