20301 matches found
lxd-group-privesc-report
LXD Root Local Privilege Escalation to root via default lxd group membership and the lxd-installer package on Ubuntu. Demo runs on AWS EC2 Ubuntu Server 26.04 The bug is that Ubuntu Server 26.04's default install silently grants the primary user membership in the lxd group, a group that by LXD's...
SSH-Weak-DH
About This tool creates SSH connections to a server and goes through different client configurations to check if the server permits a Diffie-Hellman DH key exchange using a weak group. We aim for our tool to help assess SSH servers for weak DH key exchange settings. Please be aware that this tool...
duf
duf Disk Usage/Free Utility Linux, BSD, macOS & Windows Features User-friendly, colorful output Adjusts to your terminal's theme & width Sort the results according to your needs Groups & filters devices...
Fortigate-Belsen-Leak-Dump-CVE-2022-40684-
Fortigate-Belsen-Leak-Dump-CVE-2022-40684 How This Script Works: 1. The script goes through all subfolders under rootfolder and looks for vpn-passwords.txt. 2.Skips any lines with the banner '-=-= Belsen Group -=-=.' 3. For lines with the username:password format Extracts the part after the colon...
whalescan
Whalescan Released as open source by NCC Group Plc - https://www.nccgroup.com/ Developed by Saira Hassan @saibersaira https://github.com/nccgroup/whalescan Released under Apache license 2.0, see LICENSE for more information Introduction Whalescan is a vulnerability scanner for Windows containers,...
GPOddity
GPOddity The GPOddity project, aiming at automating GPO attack vectors through NTLM relaying and more. For more details regarding the attack and a demonstration on how to use the tool, see the associated article available at:...
libpcap
LIBPCAP 1.x.y by The Tcpdump Group To report a security issue please send an e-mail to [email protected]. To report bugs and other problems, contribute patches, request a feature, provide generic feedback etc please see the guidelines for contributing. The documentation directory has README...
GPOHound
GPOHound GPOHound is a tool for dumping and analysing Group Policy Objects GPOs extracted from the SYSVOL share. It provides a structured, formalized format to help uncover misconfigurations, insecure settings, and privilege escalation paths in Active Directory environments. The tool integrates...
ad-password-protection
Lithnet Password Protection for Active Directory LPP enhances the options available to an organization wanting to ensure that all their Active Directory accounts have strong passwords. LPP is a module that you install on your Active Directory servers that uses a password filter to inspect passwor...
IP-reputation-snort-rule-generator
IP-reputation-snort-rule-generator A tool to generate Snort rules or Cisco IDS signatures based on public IP/domain reputation data Released as open source by NCC Group Plc - http://www.nccgroup.com/ Developed by Will Alexander, will dot alexander at nccgroup dot com...
ransomware-simulator
Ransomware Simulator NCC Ransomware Simulator Released as open source by NCC Group Plc - http://www.nccgroup.com/ Developed by Donato Ferrante, donato dot ferrante at nccgroup dot trust https://www.github.com/nccgroup/ransomware-simulator Released under AGPL see LICENSE for more information To...
gpblib
GPBLib GPBLib contains the common code used by the GroupPolicyBackdoor, OUned and GPOddity projects for GPO manipulations. The migration of the tools to the use of the present library is still in progress...
CVE-2025-55182-Vulnerability-Proof-of-Concept-Group-Project-
CVE-2025-55182-Vulnerability-Proof-of-Concept-Group-Project-...
NoEyes
NoEyes ๐ Secure Terminal Chat End-to-end encrypted group chat, private messages, and file transfer in your terminal. The server is a blind forwarder: it cannot read your messages, does not know your username, does not know the room you are in, and cannot link any two messages to the same person,...
GPOZaurr
GPOZaurr Group Policy Eater is a PowerShell module that aims to gather information about Group Policies but also allows fixing issues that you may find in them. GPOZaurr provides 360 degrees of information about Group Policies and their settings. Just a single command Invoke-GPOZaurr provides...
Find-WSUS
๐งญ Find-WSUS Discover WSUS server configurations across Group Policy Objects GPOs โ including hidden Group Policy Preferences GPP. Find-WSUS is a PowerShell script designed for security professionals and system administrators to identify all WSUS Windows Server Update Services server URLs configur...
Group-Office < 26.0.5 - Remote Code Execution
Group-Office before versions 6.8.150, 25.0.82, and 26.0.5 is vulnerable to remote code execution via OS command injection. The endpoint email/message/tnefAttachmentFromTempFile directly concatenates the user-controlled parameter tmpfile into an exec call. By injecting shell metacharacters into...
CVE-2026-25512-PoC-Group-Office-Authenticated-RCE
CVE-2026-25512 PoC โ Group-Office ้่ฟ TNEF ๅค็ๅจๅฎ็ฐ่ฎค่ฏ RCE ไฝ่ ๏ผ Mohammed Idrees Banyamer ่ดฆๅท๏ผ @banyamersecurity GitHub๏ผ mbanyamer ๆฅๆ๏ผ 2026 ๅนด 2 ๆ 4 ๆฅ ๆผๆดๅฉ็จๆ ้ข Group-Office Intermesh 26.0.4 โ ้่ฟ TNEF ้ไปถๅค็ๅจๅฎ็ฐ่ฎค่ฏ RCE CVE CVE-2026-25512 CWE CWE-78๏ผๆไฝ็ณป็ปๅฝไปคๆณจๅ ฅ๏ผ ๅๅ Intermesh / Group-Office ๅๅฝฑๅ็ๆฌ 26.0.4๏ผๅๆถๅฝฑๅ้จๅ 25.x /...
vmware_vcenter_cve_2020_3952
Proof of concept for CVE-2020-3952 This is a short piece of code that exploits of CVE-2020-3952, which is described in detail at the Guardicore Labs post over here. This vulnerability was published by VMware in April 2020 with a maximum CVSS score of 10.0. It allows an attacker with a network...
EDIDFuzzer
EDID fuzzer A tool for fuzzing Enhanced Display Identification Data Released as open source by NCC Group Plc - http://www.nccgroup.com/ Developed by Andy Davis, andy dot davis at nccgroup dot com https://www.github.com/nccgroup/EDIDFuzzer Released under AGPL see LICENSE for more information...