fierce

Fierce Fierce is a DNS reconnaissance tool for locating non-contiguous IP space. Useful links: Domain Name System DNS Domain Names - Concepts and Facilities Domain Names - Implementation and Specification Threat Analysis of the Domain Name System DNS Name Servers NS State of Authority Record SOA...

CVE-2026-71300

CVE-2026-71300 — camel-atmosphere-websocket dispatch header injection Runnable proof-of-concept reproducer for the Apache Camel vulnerability where the camel-atmosphere-websocket producer selects its WebSocket recipients from websocket. Exchange headers whose names fall outside the Camel namespac...

cve-2024-6387-poc

cve-2024-6387-poc a signal handler race condition in OpenSSH's server sshd 7etsuo Description An exploit for CVE-2024-6387, targeting a signal handler race condition in OpenSSH's server sshd on glibc-based Linux systems. The vulnerability allows for remote code execution as root due to...

PowerPriv

PowerPriv DESCRIPCIÓN Una implementación en PowerShell de PrivExchange por @dirkjan código original aquí: https://github.com/dirkjanm/PrivExchange/blob/master/privexchange.py Útil para entornos en los que no se pueden ejecutar aplicaciones basadas en Python, se tienen credenciales de usuario o no...

CVE-2021-34473-scanner

CVE-2021-34473-scanner Scanner for CVE-2021-34473, ProxyShell, A Microsoft Exchange On-premise Vulnerability To test machines one by one, use scanner-CVE-2021-34473.bat: scanner-CVE-2021-34473.bat mail.exemple.fr To test multiple machines at once, use mass-scanner and add ip/FQDN to check, one by...

cve-2020-0688

cve-2020-0688 Uso: root@kitploit: usage: cve-2020-0688.py -h -s SERVER -u USER -p PASSWORD -c CMD optional arguments: -h, --help show this help message and exit -s SERVER, --server SERVER ECP Server URL Example: http://ip/owa -u USER, --user USER login account Example: domain\user -p PASSWORD,...

CVE-2021-26855_SSRF

CVE-2021-26855SSRF CVE-2021-26855 Exchange SSRF POC change the ceye.io tokne & Identifier : token = 'XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX' dnsurl = randomstr + '.XXXXXX.ceye.io' python CVE-2021-26855SSRF.py https://a.com...

msprobe

msprobe About Installing Usage Examples Coming Soon Acknowledgements About Finding all things on-prem Microsoft for password spraying and enumeration. The tool will used a list of common subdomains associated with your target apex domain to attempt to discover valid instances of on-prem Microsoft...

msprobe

msprobe Acerca de Instalación Uso Ejemplos Próximamente Agradecimientos Acerca de Encontrando todo lo relacionado con Microsoft on-premises para pulverización de contraseñas y enumeración. La herramienta utilizará una lista de subdominios comunes asociados con tu dominio apex de destino para...

CVE-2020-0688

CVE-2020-0688（Microsoft Exchange のデフォルトの MachineKeySection 逆シリアル化脆弱性）のためのエクスプロイトおよび検出ツール ビルド root@kitploit: csc ExchangeCmd.cs csc ExchangeDetect.cs 使い方 root@kitploit: ExchangeDetect root@kitploit: ExchangeCmd サブコマンド: exec args コマンドを実行 arch リモートプロセスのアーキテクチャを取得（シェルコード用） shellcode シェルコードを実行 exit...

EUVD-2026-42967

ZITADEL: Unauthorized Token Privilege Escalation in OAuth2 Token Exchange...

ZITADEL: Unauthorized Token Privilege Escalation in OAuth2 Token Exchange

Summary A vulnerability in ZITADEL’s OAuth2 Token Exchange endpoint allows an authenticated user or client to exchange a low-privilege access token for a token with elevated permissions at a completely different application. This bypasses the intended authorization and separation policies...

ProxyLogon-CVE-2021-26855-metasploit

ProxyLogon-CVE-2021-26855-metasploit CVE-2021-26855 proxyLogon exchange ssrf to arbitrary file write metasploit exploit script preparation root@kitploit: git clone https://github.com/TaroballzChen/ProxyLogon-CVE-2021-26855-metasploit cd ProxyLogon-CVE-2021-26855-metasploit mkdir -p...

cve-2021-26855

cve-2021-26855 root@kitploit: GET /ecp/x.png HTTP/1.1 Host: 192.168.170.134 Cookie: X-BEResource=localhost1942062522 User-Agent: Mozilla/5.0 Windows NT 10.0; Win64; x64; rv:109.0 Gecko/20100101 Firefox/110.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0...

GHSA-RRXG-G2PF-6HH4

creationtimestamp| type| source ---|---|--- 2026-09-14 18:21:58+00:00| seen| https://infosec.exchange/users/cR0w/statuses/117270781388053699 2026-09-14 19:32:08+00:00| seen| https://gist.github.com/alon710/3693f8803a657bff4ffb362747901533...

ruler

Introducción Ruler es una herramienta que te permite interactuar con servidores Exchange de forma remota, a través del protocolo MAPI/HTTP o RPC/HTTP. El objetivo principal es abusar de las características del lado del cliente de Outlook y obtener una shell de forma remota. Todos los detalles sob...

ruler

Introduction Ruler is a tool that allows you to interact with Exchange servers remotely, through either the MAPI/HTTP or RPC/HTTP protocol. The main aim is abuse the client-side Outlook features and gain a shell remotely. The full low-down on how Ruler was implemented and some background regardin...

CVE-2026-76441

creationtimestamp| type| source ---|---|--- 2026-09-14 16:42:48+00:00| seen| https://infosec.exchange/users/AAKL/statuses/117270391382884208 2026-09-14 17:40:21+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mvinqftse52r 2026-09-14 18:08:56+00:00| seen|...

CVE-2026-20353

creationtimestamp| type| source ---|---|--- 2026-09-14 16:42:48+00:00| seen| https://infosec.exchange/users/AAKL/statuses/117270391382884208 2026-09-14 17:30:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mvin6h3atz22 2026-09-14 18:08:38+00:00| seen|...

proxyshell

ProxyShell Microsoft Exchange CVE-2021-34473, CVE-2021-34523, CVE-2021-31207에 대한 개념 증명 익스플로잇 세부 정보 배경 정보와 맥락을 보려면 Horizon3의 연구를 설명하는 블로그 게시물을 읽어보세요. https://www.horizon3.ai/news/blog/proxyshell 기능 이메일 주소를 제공할 필요 없음 Active Directory에서 이메일을 열거 시도 Active Directory에서 LegacyDN을 열거 시도 내장 이메일에서 LegacyDN...