13357 matches found
CVE-2021-3831
Script PHP Exploit CVE-2021-3831 Panoramica Questo script PHP è progettato per interagire con un sito web target generando specifici hash MD5 ed effettuando richieste HTTP per sfruttare potenziali vulnerabilità. È destinato a scopi educativi e dovrebbe essere utilizzato solo in ambienti in cui si...
solarflare
solarflare Credential Dumping Tool for SolarWinds Orion Blog post: https://malicious.link/post/2020/solarflare-release-password-dumper-for-solarwinds-orion/ Credit to @asolino, @gentilkiwi, and @skelsec for helping me figuring out DPAPI. root@kitploit: ============================================...
SMB-Penetration-Testing-NTLM-Relay-Version-2-
SMB Penetrationstest – NTLM-Relay-Angriff Red Team Lab – NTLM-Relay via LLMNR-Poisoning, CVE-2007-2447, NTLMv2-Hash-Cracking & NT AUTHORITY\SYSTEM unter Windows 10 Autor Feld| Details ---|--- Name| Younes GitHub| @Youneskc Typ| Penetrationstest-Labor Status| Abgeschlossen Rechtlicher...
CVE-2024-4295-Poc
CVE-2024-4295-Poc CVE-2024-4295 Email Subscribers by Icegram Express editsubscriberstatus \email-subscribers\lite\includes\db\class-es-db-lists-contacts.php:616 EmailSubscribersPublic-esemailsubscribeinit \email-subscribers\lite\public\class-email-subscribers-public.php:178 WPHook-applyfilters...
cve-2025-24054-lab
CVE-2025-24054 — Laboratorio di Rilevamento e Mitigazione Registro di progetto per un laboratorio di sicurezza difensiva su CVE-2025-24054 , la vulnerabilità New Technology LAN Manager NTLM Hash Disclosure Spoofing di Windows, partendo dal presupposto che il sistema interessato non possa essere...
about-hmac
Informazioni su HMAC Un esempio di implementazione di base di HMAC Hash-based Message Authentication Code utilizzando Flask in Python. Cos'è HMAC?! Il codice di autenticazione dei messaggi basato su hash HMAC fornisce al server e al client ciascuno una chiave privata nota solo a quel server e a...
certsync
certsync certsync is a new technique in order to dump NTDS remotely, but this time without DRSUAPI : it uses golden certificate and UnPAC the hash. It works in several steps: 1. Dump user list, CA informations and CRL from LDAP 2. Dump CA certificate and private key 3. Forge offline a certificate...
CVE-2016-5639
CVE-2016-5639 Crestron AirMedia AM-100 Traversal- und Hashdump-Metasploit-Module Zwei ähnliche Module, die CVE-2016-5639 ausnutzen, um Hashes zu dumpen und Dateien per Path Traversal abzurufen. Ich habe diese Module getrennt erstellt, weil ich Erfahrung damit sammeln wollte, etwas zu schreiben, d...
CVE-2026-74662
A flaw was found in the Linux kernel's internet fragmentation inet: frags code. A race condition exists where the fragment queue timer can be activated before the queue is properly registered. This premature timer activation can lead to an inconsistent state, resulting in a stale hash node. This...
CVE-2026-33829-Writeup
CVE-2026-33829-Analisi Caso di studio di vulnerabilità: CVE-2026-33829 Coercizione NTLM nello Strumento di cattura di Windows Riepilogo esecutivo Questa analisi descrive la replica tecnica di CVE-2026-33829 , una vulnerabilità di divulgazione di informazioni presente nell'architettura applicativa...
log4j-checker
Log4j-Checker Questo repository contiene script che possono aiutare a identificare i file .jar che potrebbero essere vulnerabili a CVE-2021-44228, noto anche come Log4Shell. Log4Shell Hash Check Questo script trova i file .jar nel filesystem a partire da un percorso specifico, calcola un hash...
K000163001: NLnet Labs Unbound vulnerability CVE-2026-42923
Security Advisory Description NLnet Labs Unbound up to and including version 1.25.0 has a vulnerability in the DNSSEC validator where the code path to consult the negative cache for DS records does not take into account the limit on NSEC3 hash calculations introduced in 1.19.1. This leads to...
CVE-2026-53525
A flaw was found in WeeChat, a free chat client. The relay authentication mechanism uses a non-constant-time comparison when verifying password hashes. This vulnerability allows a remote attacker to exploit subtle timing differences during the authentication process. By analyzing these timing...
CVE-2026-68768
A flaw was found in hashcat. A vulnerability exists where the software attempts to write more data than its allocated memory can hold, specifically in the function responsible for writing output files. This can happen when processing a specially crafted hash file containing an excessively long...
Log4JShell-Bytecode-Detector
🔍 Log4JShell Bytecode Detector Log4JShell Bytecode Detector ist ein Open-Source-Tool, das dabei hilft zu erkennen, ob eine Jar-Datei von der kritischen Schwachstelle CVE-2021-44228 betroffen ist. Das Tool scannt die Jar-Datei und vergleicht die Klassen mit einer Reihe von anfälligen Hashes für...
CVE-2026-78280
Unauthenticated Cross Site Request Forgery CSRF in Hash Form = 1.4.0 versions...
CVE-2025-24071_PoC
CVE-2025-24071PoC CVE-2025-24071: Perdita di hash NTLM tramite estrazione RAR/ZIP e file .library-ms Windows Explorer avvia automaticamente una richiesta di autenticazione SMB quando un file .library-ms viene estratto da un archivio .rar, portando alla divulgazione dell'hash NTLM. L'utente non de...
EUVD-2026-64787
Unauthenticated Cross Site Request Forgery CSRF in Hash Form = 1.4.0 versions...
CVE-2026-78280
CVE-2026-78280 is an unauthenticated Cross-Site Request Forgery (CSRF) vulnerability in the WordPress Hash Form plugin , affecting versions 1.4.0 and earlier . The flaw was discovered by sanghyeok Kim and reported via Patchstack. Per the CVSS 3.1 vector, an attacker with network access and low co...
