ketshash

Ketshash A little tool for detecting suspicious privileged NTLM connections, in particular Pass-The-Hash attack, based on event viewer logs. The tool was published as part of the "Pass-The-Hash detection" research - more details on "Pass-The-Hash detection" are in the blog post:...

PhishingKitHunter

PhishingKitHunter Finden Sie Phishing-Kits, die die Dateien und Bilder Ihrer Marke/Organisation verwenden. PhishingKitHunter oder PKHunter ist ein Tool, das entwickelt wurde, um URLs von Phishing-Kits zu identifizieren, die in Phishing-Kampagnen gegen Ihre Kunden eingesetzt werden und dabei einig...

CVE-2022-37969

CVE-2022-37969 Windows Local Privilege Escalation PoC Autoren: Ricardo Narvaja & Daniel Kazimirow Solid Nur zu Demonstrationszwecken. Der vollständige Exploit funktioniert auf anfälligen Windows 11 21H2-Systemen. Funktionaler PoC basierend auf zuvor veröffentlichten Informationen von Zscaler Sieh...

evilginx

Evilginx v.1.1.0 THIS VERSION IS OBSOLETE. PLEASE USE THE LATEST VERSION! EVILGINX 2:https://github.com/kgretzky/evilginx2 Evilginx is a man-in-the-middle attack framework used for phishing credentials and session cookies of any web service. It's core runs on Nginx HTTP server, which utilizes...

CVE-2023-47668

CVE-2023-47668 Restrict Content = 3.2.7 - Esposizione di informazioni tramite file di log legacy Descrizione: Il plugin Membership – Restrict Content per WordPress è vulnerabile all'esposizione di informazioni sensibili in tutte le versioni fino alla 3.2.7 inclusa tramite il file di log legacy. C...

ColdFusion_EXp

Strumento di reverse shell per lo sfruttamento delle vulnerabilità CVE-2023-29298/CVE-2023-26360 Introduzione Il principio della vulnerabilità è che i dati delle richieste del client CFML che costruiamo vengono salvati nel coldfusion-out.log del server; questa directory registra le informazioni...

All-in-One WP Migration and Backup < 7.106 - Arbitrary Log File Write

The All-in-One WP Migration and Backup WordPress plugin before 7.106 does not properly sanitise a user-supplied value before using it to build a file path. This makes it possible for unauthenticated attackers to create or append a log file in arbitrary locations outside the intended storage...

MagnusBilling Login Logs - Cross-Site Scripting

Improper neutralization of input during web page generation vulnerability in MagnusSolution MagnusBilling login logging allows unauthenticated users to store HTML content in the viewable log component accessible at /mbilling/index.php/logUsers/read" cross-site scripting This vulnerability is...

CVE-2025-27591-Meta-below-LPE

CVE-2025-27591 — Meta below: escalation locale dei privilegi tramite symlink Panoramica Campo| Dettagli ---|--- CVE| CVE-2025-27591 Software| Meta below monitor delle risorse di sistema Versioni interessate| 0.9.0 Vulnerabilità| Follow di symlink → sovrascrittura arbitraria di file come root...

hontel

HonTel HonTel is a Honeypot for Telnet service. Basically, it is a Python v2.x application emulating the service inside the chroot environment. Originally it has been designed to be run inside the Ubuntu/Debian environment, though it could be easily adapted to run inside any Linux environment...

CVE-2023-47529

CVE-2023-47529 Cloud Templates & Patterns collection = 1.2.2 - Esposizione di informazioni sensibili tramite file di log root@kitploit: Description: The Cloud Templates & Patterns collection plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including,...

CVE-2017-5618-Screen-4.5.0-Root

GNU Screen 4.5.0 Exploração de Escalação de Privilégio Local CVE-2017-5618 📌 Visão Geral Exploração de escalação de privilégio local para o GNU Screen 4.5.0 que sequestra o carregamento de bibliotecas compartilhadas para obter acesso root através da manipulação do ld.so.preload. 🔧 Detalhes Técnic...

CVE-2023-47668

CVE-2023-47668 Descrizione Vulnerabilità di esposizione di informazioni sensibili a un attore non autorizzato nel plugin StellarWP Membership Plugin – Restrict Content plugin Esempio del risultato root@kitploit: Log file content: 2024-12-24 20:47:19 - wprcpdiscounts table upgrade to 202003311...

watchTowr-vs-progress-moveit_CVE-2024-5806

CVE-2024-5806 Progress MOVEit Transfer CVE-2024-5806 के लिए शोषण। हमारा ब्लॉग पोस्ट TBD पर देखें। PoC कार्य में सहायता के लिए --help देखें। एक विशिष्ट रन इस प्रकार दिखना चाहिए: root@kitploit: python CVE-2024-5806.py --target-ip 192.168.1.1 --target-user user2 --ppk id.ppk --pem id / | | |\ \ \ /...

Security Bulletin: Security Vulnerability in Apache Zookeeper affects IBM Sterling B2B Integrator and IBM Sterling File Gateway (CVE-2026-24281 CVE-2026-24308)

Summary IBM Sterling B2B Integrator and IBM Sterling File Gateway have addressed vulnerability due to Apache Zookeeper Vulnerability Details CVEID:CVE-2026-24281 DESCRIPTION: Hostname verification in Apache ZooKeeper ZKTrustManager falls back to reverse DNS PTR when IP SAN validation fails,...

CVE-2020-23968-ILEX-SignGo-EoP

CVE-2020-23968 Ilex International Sign&go Workstation Security Suite 7.1 consente l'elevazione dei privilegi tramite un attacco di symlink su C:\ProgramData\Ilex\S&G\Logs\000-sngWSService1.log...

Security Bulletin: IBM Sterling B2B Integrator and IBM Sterling File Gateway store sensitive information in a log file (CVE-2026-1918)

Summary IBM Sterling B2B Integrator and IBM Sterling File Gateway have addressed vulnerability due to sensitive information in a log file. Vulnerability Details CVEID:CVE-2026-1918 DESCRIPTION: IBM Sterling B2B Integrator 6.2.0.0 through 6.2.0.52, 6.2.1.0 through 6.2.1.12, and 6.2.2.0 through...

CVE-2026-56651

Dool in versions up to 1.3.8 is vulnerable to symlink following when the "--devel" flag is used, as the application opens a log file without the "ONOFOLLOW" flag. A local attacker can exploit this by creating a symlink at the expected log file path pointing to a sensitive file, causing dool to...

CVE-2025-27591

CVE-2025-27591 - Escalação de Privilégios via below Este repositório contém um exploit para CVE-2025-27591 , uma vulnerabilidade de escalação de privilégios na ferramenta de monitoramento Linux Below. 🛠️ Detalhes da Vulnerabilidade CVE : CVE-2025-27591 Pontuação CVSS : 7.8 Alta Ferramenta Afetada ...

CVE-2026-56651 Arbitrary File Overwrite via Symlink Following in dool project

Dool in versions up to 1.3.8 is vulnerable to symlink following when the "--devel" flag is used, as the application opens a log file without the "ONOFOLLOW" flag. A local attacker can exploit this by creating a symlink at the expected log file path pointing to a sensitive file, causing dool to...