Lucene search
+L

1661 matches found

Kitploit
Kitploit
added 2026/09/15 9:15 p.m.8 views

patchy

Patchy Movimiento lateral automatizado y persistencia aprovechando la gestión de parches del SO de GCP basado en mi entrada de blog. Patchy consta de dos modos principales: movimiento lateral y persistencia. La persistencia utiliza credenciales válidas de cuenta de servicio para crear un trabajo ...

5.9AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/15 6:39 p.m.33 views

gcp_scanner

Disclaimer This project is not an official Google project. It is not supported by Google and Google specifically disclaims all warranties as to its quality, merchantability, or fitness for a particular purpose. GCP Scanner This is a GCP resource scanner that can help determine what level of acces...

5.8AI score
SaveExploits0References5
Kitploit
Kitploit
added 2026/09/15 6:39 p.m.9 views

gcp_scanner

Descargo de responsabilidad Este proyecto no es un proyecto oficial de Google. No cuenta con el respaldo de Google y Google específicamente renuncia a todas las garantías sobre su calidad, comerciabilidad o idoneidad para un propósito particular. GCP Scanner Este es un escáner de recursos de GCP...

5.9AI score
SaveExploits0References5
EUVD
EUVD
added 2026/09/15 5:08 p.m.3 views

EUVD-2026-78874

OpenCost provides cost monitoring for Kubernetes workloads and cloud costs. Prior to 1.121.0, the POST /serviceKey endpoint in pkg/costmodel/router.go allows a network client to invoke AddServiceKey without mandatory authentication and submit an arbitrary key form value that is written to the GCP...

8.8CVSS
SaveExploits0References7
Kitploit
Kitploit
added 2026/09/15 4:30 p.m.10 views

peirates

Peirates What is Peirates? Peirates, a Kubernetes penetration tool, enables an attacker to escalate privilege and pivot through a Kubernetes cluster. It automates known techniques to steal and collect service account tokens, secrets, obtain further code execution, and gain control of the cluster...

6AI score
SaveExploits0References4
Kitploit
Kitploit
added 2026/09/15 11:23 a.m.12 views

juicy-potato

Juicy Potato abusando de los privilegios dorados Una versión azucarada deRottenPotatoNG, con un poco de jugo, es decir, otra herramienta de Elevación de Privilegios Local, desde una Cuenta de Servicio de Windows a NT AUTHORITY\SYSTEM Resumen RottenPotatoNG y sus variantes aprovechan la cadena de...

6.1AI score
SaveExploits0References4
Kitploit
Kitploit
added 2026/09/15 10:24 a.m.12 views

S4UTomato

S4UTomato Escalar cuenta de servicio a LocalSystem mediante Kerberos. Patatas tradicionales Los amigos familiarizados con la serie "Potato" de escalada de privilegios deben saber que puede elevar privilegios de cuentas de servicio a privilegios de sistema local. Las técnicas de explotación...

6AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/15 6:04 a.m.208 views

pytmipe

PYTMIPE & TMIPE PYTMIPE PYthon library for Token Manipulation and Impersonation for Privilege Escalation is a Python 3 library for manipulating Windows tokens and managing impersonations in order to gain more privileges on Windows. TMIPE is the python 3 client which uses the pytmipe library...

6AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/14 7:49 p.m.7 views

RFCpwn

RFCpwn Un kit de herramientas de enumeración y explotación de SAP que utiliza llamadas RFC de SAP Twitter: @icryo Este es un kit de herramientas para demostrar el impacto de cuentas de servicio comprometidas. Esta PoC no está destinada para su uso en entornos de producción, no se garantiza...

6AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/14 7:20 p.m.9 views

cve-2024-7646

CVE-2024-7646 Descripción Por defecto, nginx.ingress.kubernetes.io/server-snippet está deshabilitado, pero debido a este CVE, nginx.ingress.kubernetes.io/auth-tls-verify-client puede aún insertar fragmentos personalizados, o incluso se puede incluir código lua. Versión corregida controlador...

8.8CVSS8.3AI score0.27018EPSS
SaveExploits0
NVD
NVD
added 2026/09/14 4:17 p.m.6 views

CVE-2026-47701

The OpenTelemetry Operator is a Kubernetes Operator for the OpenTelemetry Collector. Prior to 0.152.0, cmd/otel-allocator TargetAllocator instances with targetAllocator.prometheusCR.enabled set to true preserve a selected ServiceMonitor endpoint's bearerTokenFile value as...

7.7CVSS0.00279EPSS
SaveExploits0References4
Kitploit
Kitploit
added 2026/09/14 1:46 p.m.6 views

CVE-2025-11001

...

7.8CVSS7.5AI score0.26999EPSS
SaveExploits11
Kitploit
Kitploit
added 2026/09/14 12:43 a.m.9 views

cve-2026-46391

CVE-2026-46391 - @haxtheweb/open-apis의 SSRF를 통한 자격 증명 노출 CVE-2026-46391에 대한 개념 증명 코드입니다. @haxtheweb/open-apis의 cacheAddress 엔드포인트에서 SSRF 취약점을 트리거하고 콜백을 통해 전송된 서비스 계정 자격 증명을 캡처합니다. 빌드 root@kitploit: go build -o cve-2026-46391 . 테스트 root@kitploit: go test ./... 사용법 root@kitploit: ./cve-2026-46391 -...

8.7CVSS6AI score0.00457EPSS
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/12 5:27 p.m.10 views

CVE-2024-36539

Prueba de Concepto PoC para Vulnerabilidad de Permisos Inseguros en Contour v1.28.3 Este repositorio contiene un script de Prueba de Concepto PoC que demuestra una vulnerabilidad de permisos inseguros en Contour v1.28.3. Esta vulnerabilidad permite a atacantes acceder a datos sensibles y escalar...

9.8CVSS6AI score0.01263EPSS
SaveExploits0
Kitploit
Kitploit
added 2026/09/12 6:14 a.m.8 views

JuicyPotatoNG

JuicyPotatoNG Just another Windows Local Privilege Escalation from Service Account to System. Full details at -- https://decoder.cloud/2022/09/21/giving-juicypotato-a-second-chance-juicypotatong/ Usage root@kitploit: JuicyPotatoNG by decoderit & splintercode Mandatory args: -t createprocess call:...

6AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/12 5:44 a.m.9 views

StopDefender

StopDefender Stop Windows Defender programmatically creating a new token using TrustedInstaller and Windefend service accounts. One button stop action, no need for supply commandline options nor pid. Usefull for integration with Post Explotation frameworks. Blogpost...

5.9AI score
SaveExploits0References2
NVD
NVD
added 2026/09/11 9:17 a.m.12 views

CVE-2026-19486

A Server-Side Request Forgery SSRF vulnerability in Google Cloud Gemini Enterprise Agent Platform App Builder versions prior to 2026-06-01 on Google Cloud Platform allows an unauthenticated attacker to leak the Compute Engine default service account access token. This vulnerability was patched on...

8.7CVSS0.00247EPSS
SaveExploits0References1
CVE
CVE
added 2026/09/11 8:18 a.m.35 views

CVE-2026-19486

CVE-2026-19486 is a Server-Side Request Forgery (SSRF) vulnerability in Google Cloud Gemini Enterprise Agent Platform App Builder (versions prior to 2026-06-01 on Google Cloud Platform). An unauthenticated attacker can exploit it to leak the Compute Engine default service account access token , r...

8.7CVSS0.00247EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/09/11 8:18 a.m.10 views

EUVD-2026-76021

A Server-Side Request Forgery SSRF vulnerability in Google Cloud Gemini Enterprise Agent Platform App Builder versions prior to 2026-06-01 on Google Cloud Platform allows an unauthenticated attacker to leak the Compute Engine default service account access token. This vulnerability was patched on...

8.7CVSS0.00247EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/09/11 8:18 a.m.38 views

CVE-2026-19486 SSRF in Gemini Enterprise Agent Platform App Builder

A Server-Side Request Forgery SSRF vulnerability in Google Cloud Gemini Enterprise Agent Platform App Builder versions prior to 2026-06-01 on Google Cloud Platform allows an unauthenticated attacker to leak the Compute Engine default service account access token. This vulnerability was patched on...

8.7CVSS0.00247EPSS
SaveExploits0References1
Rows per page
Query Builder