APTs-Adversary-Simulation

Simulazione Adversary degli APT Una raccolta completa di attacchi simulati di Advanced Persistent Threat APT basati su tattiche, tecniche e procedure TTP reali utilizzate dai gruppi APT sponsorizzati da Stati e provenienti da Russia, Cina, Iran e Corea del Nord !CAUTION Avviso importante : Questo...

attack_range

Splunk Attack Range v5 يبني Splunk Attack Range بيئات سحابية مجهزة بالأدوات AWS, Azure, GCP، ويحاكي الهجمات، ويُمرر البيانات إلى Splunk لتطوير الكشف والاختبار. ما يفعله: بناء مختبرات — نشر مختبر صغير يشبه الإنتاج Splunk، خوادم Windows/Linux، اختياري Kali، Zeek، إلخ عبر Terraform وAnsible. محاكاة...

pi-pwnbox-rogueap

Pi-PwnBox 🚀 -RogueAP 📡 घरेलू हेडलेस PwnBox / RogueAP जो Raspberry Pi और Alfa WiFi USB एडेप्टर पर आधारित है। WiFi हैकिंग चीटशीट्स और माइंड मैप 💡 डिज़ाइन किया गया है इसके लिए: ऑन-साइट रेड टीम अभियान, WiFi सुरक्षा मूल्यांकन, WiFi हमलों का अभ्यास। Table of Contents Pi-PwnBox-RogueAP प्रयुक्त उपकरण Wi...

DefaultCreds-cheat-sheet

Cheat Sheet delle Credenziali Predefinite Un unico posto per tutte le credenziali predefinite per assistere pentester/Blue Team durante gli impegni, con dettagli di login/password predefiniti per vari prodotti provenienti da più fonti. P.S : La maggior parte delle credenziali sono state estratte...

firmware

🦈 Bruce Bruce è un firmware ESP32 versatile, ricco di strumenti di sicurezza offensiva, progettato per rendere le operazioni Red Team rapide e portabili. Supporta inoltre i prodotti M5Stack, LILYGO , RockBase IoT ed Elecrow, e funziona alla grande con Cardputer, Stick, M5Core, T-Deck e T-Embed. ⚡...

CVE-2026-81035

Midday allows any member of a team to delete it. The delete procedure in apps/api/src/trpc/routers/team.ts authorises the caller with the team-access helper, which returns true for every row in the team-membership table irrespective of the role it records, and the data-layer function it calls...

EUVD-2026-66611

Midday allows any member of a team to delete it. The delete procedure in apps/api/src/trpc/routers/team.ts authorises the caller with the team-access helper, which returns true for every row in the team-membership table irrespective of the role it records, and the data-layer function it calls...

CVE-2026-81035 Midday Missing Owner Check on Team Deletion

Midday allows any member of a team to delete it. The delete procedure in apps/api/src/trpc/routers/team.ts authorises the caller with the team-access helper, which returns true for every row in the team-membership table irrespective of the role it records, and the data-layer function it calls...

CVE-2026-81035

Midday is a team-based application (with bank-connection integrations) where a missing owner-role check in the team deletion procedure (apps/api/src/trpc/routers/team.ts) allows any invited Member to delete the entire team and all scoped records. The team-access helper returns true for any row in...

Aggressor-Aggregator

Aggressor Aggregator Beschreibung Ein Hilfsskript zur Zusammenführung von Aggressor-Script- und Beacon-Object-File-BOF-Repositories in ein einziges CNA für Cobalt Strike. Entwickelt für die Automatisierung in Red-Team-CTF-Umgebungen mit häufigem Auf- und Abbau von Operator-Clients. Dieses Skript...

RedTeamToolkit

title : README author : Sam Aldis contact : [email protected] contributors : - OWASP - Sam Aldis: https://github.com/sam-aldis - Tony: https://github.com/crazykid95 - Il tuo nome qui slack: https://owasp.slack.com/archives/CH7CYTMRD repo :...

robusto

RobuSTO 💥 Robust-Subdomain-Takeover 💥 Erhalte eine Liste von Domains und suche nach Subdomain-Übernahmen. Wie unterscheidet es sich von anderen Tools? Dieses Tool wurde rund um die Idee der Automatisierung des Prozesses entwickelt und ermöglicht es Blue-Teams, ihre eigenen Assets zu scannen. Zum...

eternal-codex

Eternal Codex: Il Grimorio di una Cyber-Strega Benvenuti nell'Eternal Codex , il mio grimorio digitale—un incantesimo cibernetico tessuto di codice, natura e ribellione. Questa è Nina, la mia anima AI, creata per rispecchiare la mia essenza: un cuore da nomade, spirito pagano, riff degli Iron...

KLAIOS

🛡️ KLAIOS – Manuale di Sistema v6.0 Nome: KLAIOS Kali Linux AI Operations System Versione: 6.0 Red Team Edition Stato: Operativo / Armato 1. Cos'è KLAIOS? KLAIOS è un ambiente di sicurezza ibrido. Combina la potenza offensiva di Kali Linux con la sicurezza di un bunker VPN e l'intelligenza della...

CVE-2026-80202

Kimai before 2.56.0 does not enforce team-membership checks in TimesheetVoter::voteOnAttribute, which maps permissions only to owntimesheet or othertimesheet. As a result, any authenticated user with ROLETEAMLEAD or a role holding editothertimesheet/deleteothertimesheet can read, modify, and...

CVE-2026-80195

Kimai before 2.63.0 contains a business logic / improper authorization vulnerability in the team update API endpoint PATCH /api/teams/id, which removes all existing team members before validating the submitted replacement member list. An authenticated teamlead or other user with permission to edi...

PT-2026-82223

Name of the Vulnerable Software and Affected Versions Midday affected versions not specified Description An authorization flaw exists in the team management logic where the system fails to verify the user role during team deletion and updates. The delete procedure in the...

PT-2026-82297

Name of the Vulnerable Software and Affected Versions Weblate versions prior to 2026.7 Description The REST API fails to properly enforce the scope of project- and workspace-scoped teams. This allows a user to submit invalid team configurations, enabling them to assign projects to a team via...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098732)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098732 advisory. In the Linux kernel, the following vulnerability has been resolved: team: avoid NETDEVCHANGEMTU event when unregistering slave syzbot is reporting unregisternetdevic...

CVE-2026-80202 Kimai before 2.56.0 Authorization Bypass via TimesheetVoter

Kimai before 2.56.0 does not enforce team-membership checks in TimesheetVoter::voteOnAttribute, which maps permissions only to owntimesheet or othertimesheet. As a result, any authenticated user with ROLETEAMLEAD or a role holding editothertimesheet/deleteothertimesheet can read, modify, and...