Invoke-WCMDump

Invoke-WCMDump Script PowerShell per estrarre le credenziali di Windows dal Gestore Credenziali Invoke-WCMDump enumera le credenziali di Windows nel Gestore Credenziali e poi estrae le informazioni disponibili su ciascuna. Le password vengono recuperate per le credenziali di tipo "Generic", ma no...

sshuttle

sshuttle: onde o proxy transparente encontra VPN encontra ssh Até onde sei, o sshuttle é o único programa que resolve o seguinte caso comum: Sua máquina cliente ou roteador é Linux, FreeBSD, MacOS ou Windows. Você tem acesso a uma rede remota via ssh. Você não precisa necessariamente ter acesso d...

Invoke-SessionHunter

Invoke-SessionHunter Recupera e visualizza le informazioni sulle sessioni utente attive su computer remoti. Non sono richiesti privilegi di amministrazione. Lo strumento sfrutta il servizio del registro remoto per interrogare l'hive del registro HKEYUSERS sui computer remoti. Identifica ed estrae...

Invoke-BSOD

Invoke-BSOD Für den Fall, dass ein Computer erledigt werden soll – ohne Admin-Rechte! BSOD-Methode von hier: https://github.com/Leurak/MEMZ/blob/master/WindowsTrojan/Source/Destructive/KillWindows.cL10-L18 Invoke-BSOD.ps1 Ein PowerShell-Skript, um einen Blue Screen of Death BSOD ohne Admin-Rechte...

bw-dump

BW-Dump Update 2 : Dieser Schwachstelle wurde CVE-2023-38840 zugewiesen. Update : Ein Patch wurde im GitHub-Pull-Request 5813 veröffentlicht, der die Schwachstelle behebt. Die betroffenen Versionen sind Bitwarden Desktop 2023.7.0 und älter. Beschreibung Ein Proof-of-Concept-Tool, das das...

swarmer

swarmer Uma ferramenta para adicionar furtivamente chaves de registro no HKCU sem que o EDR/AV consiga ver o que está acontecendo mesmo que você não tenha acesso de administrador. Como usar? NOTA: Você só conseguirá fazer isso UMA VEZ; depois queNTUSER.MAN for seu novo hive do registro, você NÃO...

CVE-2026-55790 Craft CMS: DOM XSS via GitHub issue title in CraftSupport widget

Craft CMS is a content management system CMS. In versions 5.0.0-RC1 through 5.9.22 and 4.0.0-RC1 through 4.17.15, an attacker with only a GitHub account can plant a JavaScript payload in a craftcms/cms issue title. When a Craft admin uses the CraftSupport widget’s "Give feedback" screen and types...

CVE-2026-44738

Grav is a file-based Web platform. Prior to 2.0.0-rc.2, the Twig sandbox allow-list permits any user with the admin.pages role to call config.toArray from within a page body, dumping the entire merged site configuration — including all plugin secrets SMTP passwords, AWS keys, OAuth client secrets...

CVE-2026-43359

In the Linux kernel, the following vulnerability has been resolved: btrfs: fix transaction abort on set received ioctl due to item overflow If the set received ioctl fails due to an item overflow when attempting to add the BTRFSUUIDKEYRECEIVEDSUBVOL we have to abort the transaction since we did...

Linux Distros Unpatched Vulnerability : CVE-2026-43359

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - btrfs: fix transaction abort on set received ioctl due to item overflow If the set received ioctl fails due to an item overflow when attempting to add the...

Transparent Proxy Server: sshuttle

Transparent proxy server that works as a poor man’s VPN. Forwards over ssh. Doesn’t require admin. Works with Linux and MacOS. Supports DNS tunneling. Sshuttle solves the following common case: Your client machine or router is Linux, FreeBSD, or MacOS. You have access to a remote network via ssh...