sysmon-config

sysmon-config | Файл конфигурации Sysmon для всех, кто хочет сделать форк Это шаблон файла конфигурации Microsoft Sysinternals Sysmon с отслеживанием событий высокого качества по умолчанию. Этот файл должен стать отличной отправной точкой для мониторинга изменений в системе в компактном и доступн...

RDPassSpray

RDPassSpray RDPassSparyは、Microsoftドメイン環境でパスワードスプレー攻撃を実行するためのPythonツールです。 ユーザーをロックアウトしないように、必ずロックアウトポリシーを確認してください。 使用方法 まず、必要な依存関係をインストールします： root@kitploit: pip3 install -r requirements.txt 次に、xfreerdpがインストールされていることを確認します： root@kitploit: apt-get install python-apt apt-get install xfreerdp...

zabbix-template-CVE-2020-1472

zabbix-template-CVE-2020-1472 Template Zabbix per monitorare gli eventi del Visualizzatore eventi di Windows relativi alla vulnerabilità di elevazione dei privilegi di Netlogon - CVE-2020-1472. Monitora gli ID evento 5827, 5828 & 5829...

Nethive-Project

Nethive-Project Sistema di monitoraggio a latenza da zero a bassa Funzionalità • Installazione • Avvio rapido • Contributori • Guida utente Il Progetto Nethive fornisce un'infrastruttura di Security Information and Event Management SIEM potenziata da misurazioni automatiche...

Event-ID-268-Rule-Name-SOC292-Possible-PHP-Injection-Detected-CVE-2024-4577-

Questo repository non contiene un README...

CVE-2021-34486

CVE-2021-34486 Windows Etw LPE testato solo su Windows 20H2 x64 ed2k://|file|cnwindows10businesseditionsversion20h2updatedmarch2021x64dvdca61aaaa.iso|6074574848|B6741C4E4B09337471B02DC95E953992|/ Grazie a @yongchuank https://www.pixiepointsecurity.com/blog/advisory-cve-2021-34486.html...

ZeroLogon-Exploitation-Check

Script para automatizar verificações de potencial exploração do CVE-2020-1472 também conhecido como ZeroLogon no domínio. Este é um script muito "rápido e sujo" que automatiza alguns dos principais artefatos na determinação de uma exploração real do CVE-2020-1472, compilado de vários blogs...

CVE-2026-80655

In the Linux kernel, the following vulnerability has been resolved: soc: xilinx: Fix race condition in event registration The zynqmppower driver registers handlers for suspend and subsystem restart events using registerevent. However, the work structures zynqmppminitsuspendwork and...

CVE-2026-80607

In the Linux kernel, the following vulnerability has been resolved: tracing/probes: Remove WARNONONCE from parsebtfarg Sashiko found that user can cause this WARNONONCE easily with adding a kprobe event based on a raw address with BTF parameter. Since this is not an unexpected condition, remove t...

cve-2022-46395-qemu

CVE-2022-46395 Laboratorio QEMU r36p0 Questo repository contiene un laboratorio QEMU/no-Mali per riprodurre la condizione di trigger portabile di CVE-2022-46395 contro la linea di driver Arm Mali r36p0. Il laboratorio è destinato alla ricerca locale di vulnerabilità e ai test di regressione. Non...

CVE-2026-80655

In the Linux kernel , the zynqmp_power driver (Xilinx ZynqMP SoC) contained a race condition in event registration. The work structures used by suspend and subsystem-restart callbacks were allocated and initialized after the call to register_event(). If firmware triggered an event during this win...

EUVD-2026-67531

In the Linux kernel, the following vulnerability has been resolved: soc: xilinx: Fix race condition in event registration The zynqmppower driver registers handlers for suspend and subsystem restart events using registerevent. However, the work structures zynqmppminitsuspendwork and...

RsWindowsThingies

RsWindowsThingies Windows-Dingens… aber in Rust Werkzeuge listenmft Beobachte, wie sich die Werte eines Eintrags ändern. root@kitploit: listenmft 0.2.0 Matthew Seyer See the differences in MFT attirbues. USAGE: listenmft.exe OPTIONS FLAGS: -h, --help Prints help information -V, --version Prints...

Get-AppLockerEventlog

Get-AppLockerEventlog DESCRIZIONE Questo script analizzerà tutti i canali di eventi del registro di Windows per estrarre tutti i log relativi ad AppLocker. Lo script raccoglierà tutte le informazioni importanti relative agli eventi per scopi forensi o di threat-hunting, o anche per risolvere...

T3SF

T3SF Framework di simulazione di esercizi tecnici tabletop Indice Informazioni Preparazione TODO CHANGELOG Contributing Informazioni T3SF è un framework che offre una struttura modulare per l'orchestrazione di eventi basati su una lista principale di scenari MSEL insieme a un insieme di regole...

usbrip

usbrip abgeleitet von „USB Ripper“, nicht „USB R.I.P.“ ist ein einfaches Forensik-Tool mit einer Befehlszeilenschnittstelle, mit dem Sie USB-Geräte-Artefakte d. h. den USB-Ereignisverlauf auf Linux-Maschinen verfolgen können. Inhaltsverzeichnis: Beschreibung Schnellstart Vorführung Struktur der...

WordPress Spider Calendar <=1.4.9 - SQL Injection

WordPress Spider Calendar plugin through 1.4.9 is susceptible to SQL injection. An attacker can execute arbitrary SQL commands via the catid parameter in a spiderbigcalendarmonth action to wp-admin/admin-ajax.php, thus making it possible to obtain sensitive information, modify data, and/or execut...

Online Event Booking and Reservation System 2.3.0 - SQL Injection

Online Event Booking and Reservation System 2.3.0 contains a SQL injection vulnerability in event-management/views. An attacker can possibly obtain sensitive information from a database, modify data, and execute unauthorized administrative operations in the context of the affected site. id:...

Sourcecodester Online Event Booking and Reservation System 2.3.0 - Cross-Site Scripting

Sourcecodester Online Event Booking and Reservation System 2.3.0 contains a cross-site scripting vulnerability in PHP/MySQL via the msg parameter to /event-management/index.php. An attacker can leverage this vulnerability in order to change the visibility of the website. Once the target user clic...

WordPress Spider Calendar <=1.5.65 - Cross-Site Scripting

WorsPress Spider Calendar plugin through 1.5.65 is susceptible to cross-site scripting. The plugin does not sanitize and escape the callback parameter before outputting it back in the page via the window AJAX action, available to both unauthenticated and authenticated users. An attacker can injec...