Koh

Koh Koh एक C और बीकन ऑब्जेक्ट फ़ाइल BOF टूलसेट है जो जानबूझकर टोकन/लॉगऑन सत्र रिसाव के माध्यम से उपयोगकर्ता क्रेडेंशियल सामग्री को कैप्चर करने की अनुमति देता है। कुछ कोड एलाड शमीर के इंटरनल-मोनोलॉग प्रोजेक्ट कोई लाइसेंस नहीं के साथ-साथ KB180548 से प्रेरित था। यह संभव क्यों है और Koh का दृष्टिकोण...

Damn-Vulnerable-Bank

Damn Vulnerable Bank गाइड: https://rewanthtammana.com/damn-vulnerable-bank/ एप्लिकेशन के बारे में Damn Vulnerable Bank को जानबूझकर असुरक्षित एंड्रॉइड एप्लिकेशन के रूप में डिज़ाइन किया गया है। सभी विवरण गाइड में प्रलेखित हैं, यहाँ. आगामी सत्र NoNameCon https://cfp.nonamecon.org/nnc2021/talk/WCKLTN...

ROADtools

ROADtools R ogue O ffice 365 e A zure attivo D irectory ROADtools è un framework per interagire con Azure AD. Consiste in una libreria roadlib con componenti comuni, lo strumento di esplorazione di Azure AD ROADrecon e lo strumento ROADtools Token eXchange roadtx. ROADlib ROADlib è una libreria c...

RottenPotato

Questo codice non è più mantenuto - per una implementazione più recente vedi https://github.com/breenmachine/RottenPotatoNG RottenPotato Escalation dei privilegi locali da account di servizio Windows a SYSTEM Per una panoramica tecnica di questo exploit vedi il nostro post sul blog all'indirizzo...

github-search

github-search Una raccolta di strumenti per eseguire ricerche su GitHub. Installazione root@kitploit: git clone https://github.com/gwen001/github-search cd github-search pip3 install -r requirements.txt La maggior parte delle volte GitHub richiede un token per eseguire ricerche. Puoi creare un fi...

RottenPotatoNG

RottenPotatoNG Nuova versione di RottenPotato come DLL C++ e binario C++ standalone - nessun bisogno di meterpreter o altri strumenti. RottenPotatoDLL Questo progetto genera un file DLL e EXE. La DLL contiene tutto il codice necessario per eseguire l'attacco RottenPotato e ottenere un handle a un...

git-all-secrets

git-all-secrets About git-all-secrets is a tool that can: Clone multiple public/private github repositories of an organization and scan them, Clone multiple public/private github repositories of a user that belongs to an organization and scan them, Clone a single public/private repository of an...

scorecard

OpenSSF Scorecard...

shhgit

🚨 shhgit is no longer maintained. If you need support or consultation for your secret scanning endeavours, drop me an e-mail [email protected] 🚨 shhgit helps secure forward-thinking development, operations, and security teams by finding secrets across their code before it leads to a security...

CVE-2026-81036

Stalwart Mail Server does not compare an OAuth redirect target against any registered destination in its default configuration. The validation routine in crates/http/src/auth/oauth/registration.rs returns success immediately when the client-authentication requirement is disabled, and that...

EUVD-2026-66612

Stalwart Mail Server does not compare an OAuth redirect target against any registered destination in its default configuration. The validation routine in crates/http/src/auth/oauth/registration.rs returns success immediately when the client-authentication requirement is disabled, and that...

CVE-2026-81034

Netmaker (through v1.6.0 ) unconditionally disables TLS certificate verification on its SMTP connection in pro/email/smtp.go , where the skip-verify field is set to true with no configuration path to override it. An attacker positioned between Netmaker and its mail relay can present a rogue certi...

EUVD-2026-66610

Netmaker disables certificate verification on the connection to the configured mail server. The sender in pro/email/smtp.go assigns a TLS configuration whose skip-verify field is set to true unconditionally, directly beneath a comment stating that the setting should be false in production. No...

CVE-2026-81029 OpenMetadata before 2.0.0 JWT Disclosure via Unvalidated SAML and OIDC Redirect URI

OpenMetadata accepts a caller-supplied post-authentication redirect target and appends the issued token to it. SamlLoginServlet reads the callback request parameter and stores it in the HTTP session without comparing it against any configured or registered destination, and the assertion consumer...

EUVD-2026-66605

OpenMetadata accepts a caller-supplied post-authentication redirect target and appends the issued token to it. SamlLoginServlet reads the callback request parameter and stores it in the HTTP session without comparing it against any configured or registered destination, and the assertion consumer...

CVE-2026-81027

one-api gates one of its two channel-pinning paths and not the other. middleware/auth.go permits a request to name a specific channel either through a suffix on the API key or through a URL path parameter. The suffix path is reached only after model.IsAdmin succeeds and otherwise rejects the...

CVE-2026-81027 one-api through 0.6.10 Missing Authorization on URL-Parameter Channel Pinning

one-api gates one of its two channel-pinning paths and not the other. middleware/auth.go permits a request to name a specific channel either through a suffix on the API key or through a URL path parameter. The suffix path is reached only after model.IsAdmin succeeds and otherwise rejects the...

CVE-2026-39912

CVE-2026-39912 - Xboard / V2Board Account Takeover non autenticato Fuga del token del link magico in loginWithMailLink | ---|--- CVE| CVE-2026-39912 CVSS| 9.1 Critical CWE| CWE-201 Insertion of Sensitive Information Into Sent Data Interessati| V2Board = 1.6.1 through 1.7.4 / Xboard all versions...

HTB-Silentium-Writeup

HTB - Writeup di Silentium Informazioni sulla macchina Nome: Silentium OS: Linux Difficoltà: Facile CVE: CVE-2025-58434, CVE-2025-59528, CVE-2025-8110 Enumerazione Scansione Nmap root@kitploit: nmap -sC -sV -p- --min-rate 5000 -oN nmap.txt Porte aperte: 22 SSH, 80 HTTP Host...

CVE-2024-9933

CVE-2024-9933 WatchTowerHQ = 3.10.1 - Authentifizierungsumgehung zum Administrator aufgrund fehlender Prüfung auf leeren Wert Beschreibung: Das WatchTowerHQ-Plugin für WordPress ist in Versionen bis einschließlich 3.9.6 anfällig für eine Authentifizierungsumgehung. Dies liegt daran, dass der...