TEx

Bienvenido a Telegram Explorer Acerca del Proyecto TEx es una herramienta de Exploración de Telegram creada para ayudar a Investigadores, Investigadores y Agentes de la Ley a recolectar y procesar la enorme cantidad de datos generados desde grupos de Telegram criminales, fraudulentos, de segurida...

CVE-2026-7473---Arista-EOS-Tunnel-Decapsulation-Bypass

README.md markdown CVE-2026-7473 - Arista EOS Tunnel Decapsulation Bypass ⚠️ ADVERTENCIA Este código es SOLO para fines educativos y pruebas de seguridad autorizadas. 📋 Descripción CVE-2026-7473 es una vulnerabilidad en Arista EOS donde un switch configurado como punto de terminación de túneles...

overwrite

Un campo Flexible fácil y completo para Laravel Nova, perfecto para grupos de campos repetidos y flexibles. Inicio rápido Aquí tienes una guía muy resumida para empezar lo antes posible. Consulta la documentación completa en https://whitecube.github.io/nova-flexible-content Instalación...

BadBlood

BadBlood BadBlood by Secframe fills a Microsoft Active Directory Domain with a structure and thousands of objects. The output of the tool is a domain similar to a domain in the real world. After BadBlood is ran on a domain, security analysts and engineers can practice using tools to gain an...

automato

automato.rb automato uses native LDAP libraries to automate the collection and enumeration of various directory objects. This is incredibly useful during an internal penetration test. automato can also conduct password spraying attacks, and identify if a user is a local administrator against any...

stegowiper

stegoWiper: A powerful and flexible active attack for disrupting stegomalware Over the last 10 years, many threat groups have employed stegomalware or other steganography-based techniques to attack organizations from all sectors and in all regions of the world. Some examples are: APT15/Vixen Pand...

Apache NiFi - Information Disclosure

Apache NiFi 1.10.0 through 2.0.0 are missing fine-grained authorization checking for Parameter Contexts, referenced Controller Services, and referenced Parameter Providers, when creating new Process Groups. Creating a new Process Group can include binding to a Parameter Context, but in cases wher...

NGINX-ngx_http_rewrite_module-heap-buffer-overflow-CVE-2026-9256

CVE-2026-9256 NGINX ngxhttprewritemodule Proceso de derivación del PoC y reflexiones Ámbito de aplicación: solo para laboratorios locales, entornos de reproducción autorizados, verificación de vulnerabilidades y análisis de reglas de protección. No lo utilice en objetivos no autorizados. Las idea...

CVE-2026-9256-Poc

Desbordamiento de búfer en el montón de nginx ngxhttprewritemodule Descripción nginx Plus y nginx Open Source ngxhttprewritemodule contiene una vulnerabilidad de desbordamiento de búfer en el montón. Cuando una directiva rewrite utiliza una expresión regular con múltiples grupos de captura PCRE...

pacbot

Introduction Policy as Code Bot PacBot is a platform for continuous compliance monitoring, compliance reporting and security automation for the cloud. In PacBot, security and compliance policies are implemented as code. All resources discovered by PacBot are evaluated against these policies to...

boofuzz

.. image:: https://github.com/jtpereyda/boofuzz/raw/master/artwork/boo-logo-dark.svg :width: 60% :alt: boofuzz logo boofuzz: Network Protocol Fuzzing for Humans .. image:: https://github.com/jtpereyda/boofuzz/actions/workflows/test.yml/badge.svg?branch=master :target:...

m365_groups_enum

Enumerate Microsoft 365 Groups in a tenant with their metadata Description The allgroups.py script allows to enumerate all Microsoft 365 Groups in a Azure AD tenant with their metadata: name visibility: public or private description email address owners members Teams enabled? SharePoint URL e.g...

X-force

Biblioteca IBM X-Force Exchange | Biblioteca IBM Security X-FORCE Exchange en Python 3. Búsqueda: threatactivities, threatgroups, malwareanalysis, collector e industries. Para otras aplicaciones. Ver ---|--- Instalación root@kitploit: pip3 install XForce Uso Usando tu APIKEY, haz una autenticació...

CVE-2026-56423-MISP-deleteSelection-BrokenAccessControl

CVE-2026-56423 — MISP deleteSelection Control de Acceso Roto Prueba de concepto de una vulnerabilidad de autorización faltante en los flujos de eliminación masiva de MISP para Event Reports y Sharing Groups. Los controladores deleteSelection autorizan cada elemento seleccionado con un callback qu...

CVE-2026-78372

RansomLook does not consistently enforce authorization checks when accessing groups, markets, and ransom notes marked as private. An unauthenticated or otherwise unauthorized remote attacker can access information associated with private entities through several web views and API endpoints. The...

EUVD-2026-64845

RansomLook does not consistently enforce authorization checks when accessing groups, markets, and ransom notes marked as private. An unauthenticated or otherwise unauthorized remote attacker can access information associated with private entities through several web views and API endpoints. The...

CVE-2026-78372 RansomLook Missing Authorization Allows Disclosure of Private Group and Ransom Note Data

RansomLook does not consistently enforce authorization checks when accessing groups, markets, and ransom notes marked as private. An unauthenticated or otherwise unauthorized remote attacker can access information associated with private entities through several web views and API endpoints. The...

CVE-2026-78372

RansomLook is a ransomware group monitoring platform that fails to consistently enforce authorization checks when accessing groups, markets, and ransom notes marked as private. An unauthenticated remote attacker can access information associated with private entities through several web views and...

CVE-2026-78369 Missing Authentication Allows Unauthorized Creation of Crypto Groups in RansomLook

RansomLook contains a missing authentication vulnerability in the /admin/crypto/group/new endpoint. While the endpoint provides an administrative function for creating new crypto group entries, it was not protected by the application's authentication mechanism. An unauthenticated remote attacker...

ThreatActors-TTPs

NOTA: Esto es un fork de Crocodyli - Todo lo que hago es agregarle para mis propios fines. Lo estoy usando para alimentar las páginas de gapMATRIX en https://incidentbuddy.ai ACTORES DE AMENAZAS Y RANSOMWARES - TTPs Este repositorio fue creado con el objetivo de ayudar a empresas e investigadores...