CVE-2024-27674

CVE-2024-27674 Macro Expert icacls "C:\Program Files x86\GrassSoft\Macro Expert" C:\Program Files x86\GrassSoft\Macro Expert BUILTIN\Users:OICIM NT SERVICE\TrustedInstaller:IF NT SERVICE\TrustedInstaller:ICIIOF NT AUTHORITY\SYSTEM:IF NT AUTHORITY\SYSTEM:IOICIIOF BUILTIN\Administrators:IF...

CVE-2022-30929

CVE-2022-30929 CVE-2022-30929 POC Descripción sugerida Mini-Tmall v1.0 es vulnerable a Permisos inseguros a través de tomcat-embed-jasper. Tipo de vulnerabilidad Permisos inseguros Proveedor del producto github;gitee Código base del producto afectado...

permission-manager

Permission manager Welcome to the Permission Manager! 🎉 🎉 Permission Manager is an application developed by SIGHUP that enables a super-easy and user-friendly RBAC management for Kubernetes. If you are looking for a simple and intuitive way of managing your users within a Kubernetes cluster, this...

CVE-2019-19268

CVE-2019-19268 Affected Version: rConfig 3.9.2. Description Multiple attack vectors in rConfig v3.9.2 due to misconfiguration, which allows local users to execute root commands via sudo. Discoverers dmw0ng - Discord: dmw0ng4449 TheCyberGeek - Discord: TheCyberGeek1892 Email: [email protected]...

agentsid-scanner

AgentsID Scanner El Faro de la seguridad de agentes. Escanea cualquier servidor MCP. Obtén un boletín de calificaciones de seguridad. Tu servidor MCP expone herramientas a agentes de IA. ¿Qué tan seguro es? La mayoría de los servidores MCP vienen sin autenticación, sin permisos por herramienta, s...

SecretsStalker

secretstalker / / / / / / / / / / / \ / - / - -/ / \ \ / / // / '/ - / ////// / // /,////\// ╔╦╦╬╬╬╬╬╬╦╦╗ ╔╬╬╬╝╝┘ ╚╝╝╬╬╬┐ ╬╬╝╚╩╬╗╔ ╚╬╬╬ ╬╝ ╚╬╬╗╗ ╔ ╚╬╗ ╬╬ ╔╗ ╚╬╬╬╬╬╬╦ ╬╬ we found your secret... ╔╬┤ ╬╬╬ ╬╬╬╬╬╬╬╬╝╝╝╬╬╗ ...now let's see what it ╬╬┤ ╚╩┘ ╚╬╬╬╬╬╩ ╠╬╬ can REALLY do. oo=|= ╬╬┤ ╠╬╬...

cloudmapper

CloudMapper Note the Network Visualization functionality command prepare is no longer maintained. CloudMapper helps you analyze your Amazon Web Services AWS environments. The original purpose was to generate network diagrams and display them in your browser functionality no longer maintained. It...

reportly

Reportly is an EntraID user activity report tool. About the tool This is a tool that will help blue teams during a cloud incident. When running the tool, the researcher will enter as input a suspicious user and a time frame and will receive a report detailing the following: 1. Information about t...

gundog

gundog gundog - PowerShell based guided hunting in Microsoft 365 Defender Gundog provides you with guided hunting in Microsoft 365 Defender. Especially if not only for Email and Endpoint Alerts at the moment. Functionality You provide an AlertID you might received via Email notification and gundo...

CVE-2012-6422

Exynos Exploit Esto es una POC para explotar la vulnerabilidad /dev/exynos-mem introducida en teléfonos Samsung anteriores. Se realizó por interés en la investigación de vulnerabilidades del kernel y como parte de un desafío CTF. El Exploit La vulnerabilidad introducida en estos teléfonos son los...

cliam

cliam Multi cloud iam permissions enumeration tool. Currently covers: AWS GCP Azure Oracle 🚧 WIP Description Cliam is a simple cloud permissions identifier. There are two main components to the CLI. Most of the enumerated permissions are list, describe or get permissions. enumerate which can be...

cliam

cliam Herramienta de enumeración de permisos IAM multi-nube. Actualmente cubre: AWS GCP Azure Oracle 🚧 WIP Descripción Cliam es un identificador simple de permisos en la nube. Hay dos componentes principales en la CLI. La mayoría de los permisos enumerados son permisos de listar, describir u...

Reg1c1de

Reg1c1de: Windows Registry Privesc Scanner Summary from help output: Reg1c1de is a tool that scans specified registry hives and reports on any keys where the user has write permissions In addition, if any registry values are found that contain file paths with certain file extensions and they are...

red-detector

Red-Detector Description Scan your EC2 instance to find its vulnerabilities using Vuls https://vuls.io/en/. Audit your EC2 instance to find security misconfigurations using Lynis https://cisofy.com/solutions/lynis. Scan your EC2 instance for signs of a rootkit using Chkrootkit...

noia

Noia Noia is a web-based tool whose main aim is to ease the process of browsing mobile applications sandbox and directly previewing SQLite databases, images, and more. Powered by frida.re. Please note that I'm not a programmer, but I'm probably above the median in code-savyness. Try it out, open ...

wphardening

WPHardening Fortalezca la seguridad de cualquier instalación de WordPress. ❮ NOTA ❯ Esta herramienta publica nuevas versiones de forma regular. Asegúrese de actualizar sus dependencias con frecuencia para obtener la última versión. Consulte el registro de cambios o CHANGELOG.md para conocer las...

wphardening

WPHardening Fortify the security of any WordPress installation. ❮ NOTE ❯ This tool releases new versions on a regular basis. Make sure to update your dependencies frequently to get the latest version. Check out the changelog or CHANGELOG.md to learn about the new features. Installation Installing...

CVE-2024-26574

CVE-2024-26574 Wondershare Filmora v.13.0.51 - Escalada de Privilegios por Permisos Inseguros Descripción: Una vulnerabilidad de permisos inseguros en Wondershare Filmora y versiones anteriores permite que un atacante local sin privilegios ejecute código arbitrario como SYSTEM a través de un scri...

mimic

mimic mimic is a tool for covert execution on Linux x8664. What is "covert execution"? Covert execution is the art of hiding a process. In this case, mimic hides the process in plain sight. mimic can launch any program and make it look like any other program. Any user can use it. It does not...

PipeViewer

Una herramienta GUI para ver Named Pipes de Windows y buscar permisos inseguros. La herramienta fue publicada como parte de una investigación sobre Docker named pipes: "Breaking Docker Named Pipes SYSTEMatically: Docker Desktop Privilege Escalation – Part 1" "Breaking Docker Named Pipes...