532 matches found
mimicry
Mimicry Mimicry Mimicry è uno strumento di sicurezza sviluppato da Chaitin Technology per l'inganno attivo nello sfruttamento e nel post-sfruttamento. L'inganno attivo può migrare dal vivo l'attaccante verso l'honeypot senza che se ne accorga. Possiamo raggiungere un livello di sicurezza più...
Phoenix-Framework
Phoenix-Framework Phoenix ist ein asynchrones Post-Exploitation-Framework, das vertrauenswürdige Websites für C2 missbraucht. Unterstützte Plattformen Phoenix unterstützt derzeit die folgenden Plattformen über deren Bot-APIs: Discord Telegram Reddit Demnächst Phoenix bietet die folgenden...
Chrome DevTools Technique Enables Authenticated Session Hijacking in Live Windows Browsers
Cybersecurity researchers have detailed a post-exploitation technique that enables the Chrome DevTools Protocol CDP inside a running Google Chrome or Microsoft Edge process on Windows, allowing an operator to access cookies, saved data, and authenticated browser sessions. The technique assumes th...
ctf-writeups
🏴 CTF Writeups & PoC Collection Documented solutions from Hac...
Exploit for Missing Authentication for Critical Function in Cpanel
cPanel-CVE-2026-41940-auth-bypass-exploit Critical authenticat...
HTB-Writeups
Hack The Box Writeups This repository contains my Hack The Bo...
RollerCoaster
RollerCoaster: Advanced Exploitation of Cisco ASA LINA Firmwar...
Hacker Runs Hermes AI Agent Unattended for Post-Exploitation at Thai Finance Ministry
Someone installed a popular AI assistant on a rented server, switched off the setting that makes it ask permission before running risky commands, and pointed it at Thailand's Ministry of Finance, which runs the country's treasury and tax collection. The agent then worked through the ministry's...
ExploitMind
ExploitMind v1.0.0 Full APT Kill-Chain Exploitation Framew...
OSCPToolkit
OSCP Toolkit Setup This is a bash script oscp-toolkit-setup...
Iran-Linked Hackers Use New Cavern C2 Framework to Target Israeli Organizations
An Iranian hacking group affiliated with Iran's Ministry of Intelligence and Security MOIS has been wielding a previously undocumented modular command-and-control C2 framework dubbed Cavern aka Cav3rn targeting Israeli organizations. The activity, which has primarily singled out IT providers and...
mythox-opencode-cyber
⬡ MYTHOX CYBER OPS — OpenCode Agent Suite 6 agents متخصصو...
aetherion
/\ | | | | | |...
metasploitable2-pentest
Metasploitable 2 Penetration Test Date: June 2026 Teste...
coruna-postexploit
Coruna Post-Exploitation Framework Overview This is a com...
Critical Check Point VPN Flaw Exploited to Bypass Passwords in IKEv1 Setups
Check Point has warned of active exploitation of a critical vulnerability impacting Remote Access VPN and Mobile Access deployments that are configured to use the deprecated IKEv1 key exchange protocol. The vulnerability, tracked as CVE-2026-50751 CVSS score: 9.3, is a case of a logic flow weakne...
Post_Exploitation_Privilege_Escalation
⬆️ Week 05 — Post-Exploitation & Privilege Escalation Inter...
AnSploit
Ansploit v2.0 — Android Network Security & Exploitation Toolki...