EUVD-2026-81476

Insertion of Sensitive Information into Log File vulnerability in team-alembic AshAuthentication allows disclosure of user password digests to readers of the audit store. The auditlog add-on builds each entry's extradata in AshAuthentication.AddOn.AuditLog.Auditor.buildextradata/4, which takes...

Auto-PostXploit

Auto-PostXploit Windows Auto Post Exploitation - For ReD Team https://github.com/emilyanncr/Windows-Post-Exploitation/ Download : wget https://raw.githubusercontent.com/BehzaDMagzer/Auto-PostXploit/master/Auto-PostXploit.exe Usage : root@kitploit: meterpreter upload %path%/Auto-PostXploit.exe...

Swift-Attack

Swift-Attack Unit tests for blue teams to aid with building detections for some common macOS post exploitation methods. I have included some post exploitation examples using both command line history and API calls. The post exploitation examples included here are not all encompassing. Instead the...

KLAIOS

🛡️ KLAIOS – System Manual v6.0 Name: KLAIOS Kali Linux AI Operations System Version: 6.0 Red Team Edition Status: Operational / Armed 1. What is KLAIOS? KLAIOS is a hybrid security environment. It combines the offensive power of Kali Linux with the security of a VPN bunker and the intelligence of...

cornershot

什么是 CornerShot 在战争中，CornerShot 是一种武器，它能让士兵在不暴露自己的情况下，窥视墙角另一边（并可能进行射击）。 同样，CornerShot 软件包允许用户无需在远程主机上拥有任何特殊权限，即可探知该主机的网络访问情况。 使用 CornerShot，一个源 主机（能通过网络访问载体 主机）可以判断载体 与目标 之间是否存在针对特定端口 p 的网络访问。 例如，假设一个红队正试图从“被攻陷”的源主机 A 传播到目标主机 X，而主机 A 无法直接访问 X。 如果他们通过主机 B 传播，那么只有在之后他们才会发现主机 B 与 X 之间没有网络访问。 通过使用...

Static-Malware-Analysis-Follina-CVE-2022-30190

Static-Malware-Analysis-Follina-CVE-2022-30190 Static Malware Analysis of Follina CVE-2022-30190 from Blue Team Labs Online Lab : Blue Team Labs Online – Follina Challenge Analysis Type : Static Analysis Tools Used : VirusTotal, Windows File Explorer Introduction As my Blue Team journey, I wanted...

moonwalk

moonwalk 在Linux漏洞利用/渗透测试期间掩盖你的踪迹，在系统日志和文件系统时间戳上不留任何痕迹。 📖 目录 简介 功能 安装 使用方法 贡献 许可证 ℹ️ 简介 moonwalk 是一个 400 KB 的单二进制可执行文件，能够在渗透测试 Unix 机器时清除你的痕迹。它可以保存渗透前系统日志的状态，并在渗透后恢复该状态，包括文件系统时间戳，从而在 shell 中不留一丝 "幽灵" 的痕迹。 ⚠️ 注意： 本工具开源仅供 红队 操作使用，作者对任何因不当使用该工具所造成的后果概不负责。请仅在已获授权的机器上使用。 功能 小型可执行文件： 通过 curl 快速下载到目标机器。...

CVE-2025-14124

CVE-2025-14124 WordPress Team Plugin - Unauthenticated SQL Injection Author: Hyun Chiya Vulnerability Information...

apache-web-log-analysis-lab

Apache Web Log Analysis Lab Blue Team lab focused on analyzing Apache HTTP server logs to detect web scanning activity, directory enumeration, and path traversal attempts. Objective Install and expose an Apache web server in an isolated lab environment, simulate automated web scanning using...

chaos-client

Chaos Client Go client to communicate with Chaos dataset API. English • 中文 Installation root@kitploit: go install -v github.com/projectdiscovery/chaos-client/cmd/chaos@latest Usage root@kitploit: chaos -h This will display help for the tool. Here are all the switches it supports. root@kitploit:...

cve-2023-23397-purple-team

CVE-2023-23397 — Purple Team: Exploit + Detección Dos mitades de un mismo proyecto contra la misma vulnerabilidad de fuga de NTLM en Outlook CVE-2023-23397: Red team completado: entrega de phishing + explotación de CVE-2023-23397 contra una VM víctima con Windows 10, informe completo en...

chain-reactor

Chain Reactor Chain Reactor 是一个用于测试 Linux 机器上检测与响应覆盖率的开源工具。该工具生成可执行文件，用于模拟进程创建、网络连接等操作序列。Chain Reactor 不需要事先具备工程经验；该工具使用 JSON，因此自定义其行为就像编辑一个文件一样简单。 开始使用 有关安装和使用说明，请参阅 wiki 的入门页面。 了解更多 Chain Reactor 文档以 wiki 形式提供。 有关原子项目系列的理念和开发信息，请访问我们的网站 https://atomicredteam.io。 请查看许可证了解有关分发和修改 Chain Reactor 的信...

Team WordPress Plugin (TLP Team) <= 5.0.9 - SQL Injection

Team WordPress plugin = 5.0.11 contains a SQL injection caused by improper sanitization and escaping of a parameter in an AJAX action accessible to unauthenticated users, letting remote attackers execute arbitrary SQL commands. id: CVE-2025-14124 info: name: Team WordPress Plugin TLP Team = 5.0.9...

CZ Loan Management <= 1.1 - SQL Injection

The CZ Loan Management WordPress plugin through 1.1 does not properly sanitise and escape a parameter before using it in a SQL statement via an AJAX action available to unauthenticated users, leading to a SQL injection. id: CVE-2024-5975 info: name: CZ Loan Management = 1.1 - SQL Injection author...

edu-recon

edu-recon Orquestador autorizado de reconocimiento y triaje para ejercicios red/blue del sector educativo. Introduce los objetivos, ejecuta los escáneres, filtra el ruido y te entrega una cola de revisión clasificada en una interfaz web. Diseñado para desplegarse en tu máquina Linux Kali / infra,...

Aggressor-Aggregator

Aggressor Aggregator Description A helper script for consolidating Aggressor Script and Beacon Object File BOF repositories into a single CNA for Cobalt Strike. Designed for automation in red team CTF environments with frequent setup/destruction of operator clients. This script is essentially a...

Claude-Red

claude-red Habilidades de seguridad ofensiva para Claude — archivosSKILL.md listos para usar que convierten a Claude en un operador de red team consciente del contexto. Visión general • Inicio rápido • Categorías • Índice de habilidades • Hoja de ruta • Contribuir Visión general claude-red es una...

CVE-2026-86465

Apache Airflow Akeyless provider: the Akeyless secrets backend's team-scope guard can be bypassed with a user-controlled key. In a multi-team deployment, a Dag author scoped to one team can supply a Variable key containing a path separator that causes the backend to resolve a secret belonging to ...

CVE-2026-86465 Apache Airflow Akeyless provider: Akeyless secrets backend: team-scope guard bypass via user-controlled key

Apache Airflow Akeyless provider: the Akeyless secrets backend's team-scope guard can be bypassed with a user-controlled key. In a multi-team deployment, a Dag author scoped to one team can supply a Variable key containing a path separator that causes the backend to resolve a secret belonging to ...

EUVD-2026-80316

Apache Airflow Akeyless provider: the Akeyless secrets backend's team-scope guard can be bypassed with a user-controlled key. In a multi-team deployment, a Dag author scoped to one team can supply a Variable key containing a path separator that causes the backend to resolve a secret belonging to ...