thc-hydra

H Y D R A root@kitploit: c 2001-2023 by van Hauser / THC https://github.com/vanhauser-thc/thc-hydra Many modules were written by David dot Maciejak @ gmail dot com BFG code by Jan Dlabal Licensed under AGPLv3 see LICENSE file Please do not use in military or secret service organizations, or for...

LogonTracer

Concept LogonTracer v2 is a tool to investigate malicious logon by visualizing and analyzing Windows Active Directory event logs. This tool associates a host name or an IP address and account name found in logon-related events and displays it as a graph. This way, it is possible to see in which...

DahuaConsole

Dahua Console Versión: Pre-alpha Bugs: Efectivamente TODO: Muchas cosas Requisitos de instalación root@kitploit: sudo pip3 install -r requirements.txt Argumentos root@kitploit: -h, --help show this help message and exit --rhost RHOST Remote Target Address IP/FQDN --rport RPORT Remote Target Port...

win-brute-logon

Notice 1: We are excited to announce that our current tool has been ported to a PowerShell version. This means that users can now access and use the tool directly from the PowerShell command line, making it even more convenient and efficient to use. We believe that this new version will greatly...

Koh

Koh Koh is a C and Beacon Object File BOF toolset that allows for the capture of user credential material via purposeful token/logon session leakage. Some code was inspired by Elad Shamir's Internal-Monologue project no license, as well as KB180548. For why this is possible and Koh's approeach, s...

fakelogonscreen

FakeLogonScreen FakeLogonScreen is a utility to fake the Windows logon screen in order to obtain the user's password. The password entered is validated against the Active Directory or local machine to make sure it is correct and is then displayed to the console or saved to disk. It can either be...

CVE-2023-23192

CVE-2023-23192 CVE-2023-23192 - Userlock - Omisión de la autenticación multifactor MFA Título del exploit: Userlock - Omisión de la autenticación multifactor MFA Fecha: 01/11/2023 Autor del exploit: Pinar Sadioglu Página web del fabricante: https://www.isdecisions.com/products/userlock/help/...

sap_logon_ticket

saplogonticket Kit de herramientas general relacionado con el mecanismo SSO de SAP: los Logon Tickets...

DiagTrackEoP

DiagTrackEoP Solo otra forma de abusar del privilegio SeImpersonate. Este PoC está basado en este blog de @crisprss. En este blog @crisprss mostró un método interesante para abusar del privilegio SeImpersonate usando AzureAttestService, que viene con versiones recientes de SQL server; el PoC se...

CVE-2020-0688-Scanner

CVE-2020-0688-Scanner Este script escaneia um IP/faixa/CIDR e exibe os Microsoft Exchange Servers e versões descobertas. O IP/faixa/CIDR especificado será escaneado com masscan na porta tcp/443. Após uma varredura bem-sucedida, ele tenta fazer HTTP GET "/owa/auth/logon.aspx" com curl para obter o...

CVE-2022-25257

CVE-2022-25257 SAS Logon 9.4 consente l'iniezione di messaggi di avviso. Scoperto: 15 febbraio 2022 Versioni interessate: 9.4 Exploit POC: SASLogon/csrf ha un parametro chiamato "target" Questo parametro influisce sul messaggio di avviso per l'URL che l'utente stava per aprire ma, a causa...

SAPKiln

OWASP SAPKiln SAP की दुनिया 🌎 बहुत विशाल और अनूठी है। SAP के पास विभिन्न समस्याओं से निपटने के लिए कई उत्पाद हैं, साथ ही NetWeaver जैसे कई तकनीकी प्लेटफॉर्म भी हैं। SAPKiln एक ओपन-सोर्स GUI टूल 💻 है जिसे सुरक्षा शोधकर्ताओं को SAP Logon/GUI डेस्कटॉप एप्लिकेशन के माध्यम से SAP सिस्टम का कुशल ऑडिटिं...

CVE-2026-56547

An input reflection vulnerability in HCL Traveler affects the Apple profile generation used to synchronize Mail, Calendar, and Contacts. The Logon Name and Mail Address values are reflected back into the generated profile without validation against the Domino directory entry for the authenticated...

CVE-2026-56547 An input reflection vulnerability affects HCL Traveler

The Apple profile generated for the Apple built-in Mail, Calendar and Contacts account to synchronize with HCL Traveler requires the Logon Name and Mail Address to be embedded in them. The values cannot be changed later on, so the Apple profile generation page asks for those values and reflects...

Astra Linux – Vulnerability found in Linux 5.15, Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: scsi: lpfc: Moved the unregistration of NPIV’s transport to after resource cleanup. There are cases after NPIV is deleted where the fabric switch still believes that NPIV is logged into the fabric. This occurs when a vport is...

EUVD-2026-55511

In the Linux kernel, the following vulnerability has been resolved: ksmbd: defer destroyprevioussession until after NTLM authentication In ntlmauthenticate, destroyprevioussession is called using a user pointer resolved from the client-supplied NTLM blob username field before the NTLMv2 response ...

Astra Linux – Vulnerability in freerdp3

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.22.0, there was a NULL pointer dereference vulnerability in rdpwritelogoninfov2. This vulnerability allowed a malicious RDP server to crash the FreeRDP proxy by sending a specially crafted LogonInfoV2 PDU with...

Malicious code in streak-core-insights (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 54c92b91e60c1852de5e84952155bf8aadca8ca1a0e7e784e0e1fa4d25e8c641 The package advertises calendar-day math but on module import runs an obfuscated initializer that gates on Linux + WSLDISTRONAME, then downloads...

MAL-2026-12422 Malicious code in quorvex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9127b24fd8619b810163b5b5714d580951a3a96cfa1b37e63a57ff3cc9c2cca5 [email protected] ships index.mjs as the package main, containing a base64-encoded Windows PE 355KB in a PAYLOAD constant. At import time on Windows host...

Malicious code in quorvex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9127b24fd8619b810163b5b5714d580951a3a96cfa1b37e63a57ff3cc9c2cca5 [email protected] ships index.mjs as the package main, containing a base64-encoded Windows PE 355KB in a PAYLOAD constant. At import time on Windows host...