SharpNamedPipePTH

SharpNamedPipePTH Ce projet est un outil C permettant d'utiliser Pass-the-Hash pour l'authentification sur un tube nommé Named Pipe local en vue d'une usurpation d'identité Impersonation. Vous devez disposer de droits d'administrateur local ou de SEImpersonate pour l'utiliser. Un article de blog...

RegistrationMagic <= 5.0.1.7 - Authentication Bypass

RegistrationMagic WordPress plugin versions = 5.0.1.7 contain an authentication bypass caused by missing identity validation in socialloginusingemail, letting unauthenticated users log in as any site user, exploit requires knowing a valid username. id: CVE-2021-4073 info: name: RegistrationMagic ...

WordPress Pie Register <= 3.7.1.4 - Authentication Bypass

An authentication bypass vulnerability exists in the WordPress Pie Register plugin ≤ 3.7.1.4 that allows unauthenticated attackers to impersonate arbitrary users by submitting a crafted POST request to the login endpoint. By setting socialsite=true and manipulating the useridsocialsite parameter,...

CVE-2026-75759

erlef oidcc is an Erlang OpenID Connect client library. In versions 3.2.0-beta.1 through before 3.9.0 , an improper verification of cryptographic signature flaw allows an unauthenticated attacker to impersonate an arbitrary user by submitting an encrypted ID token or JARM response that contains n...

NamedPipePTH

NamedPipePTH Dieses Projekt ist ein PoC-Code zur Nutzung von Pass-the-Hash für die Authentifizierung bei einer lokalen Named Pipe Benutzer-Impersonation. Es gibt auch einen Blogbeitrag zur Erklärung: https://s3cur3th1ssh1t.github.io/Named-Pipe-PTH/ Es basiert stark auf dem Code der Projekte...

RISE-Ultimate_Project_Manager_e_CRM

CVE-2025-3855 - RISE Ultimate Project Manager - IDOR Sicherheitslücke: IDOR Insecure Direct Object Reference Betroffene Komponente: Profilbild-Upload-Endpunkt, teammembers-Controller Software: RISE - Ultimate Project Manager & CRM Anbieter: codecanyon Version: 3.8.2 CVE ORG :...

CVE-2023-52268

Exploração de Bypass de Autenticação do Portal do Usuário Final do FreeScout CVE-2023-52268 Visão Geral Este exploit visa uma vulnerabilidade no Módulo do Portal do Usuário Final do FreeScout versões anteriores a 1.0.65 que permite que um invasor contorne a autenticação através do gerenciamento...

CVE-2026-20896

CVE-2026-20896: Gitea Docker Image Authentication Bypass PoC !WARNING Use this PoC only in a local lab or against a system you are explicitly authorized to test. https://github.com/user-attachments/assets/b73af2fe-0e59-438b-80d6-be93fd75697b Overview CVE-2026-20896 is an authentication bypass in...

aisecplus-week01-servicenow-ai-security-incident

AISec Plus Settimana 01 - Mappa la minaccia Ricerca sugli incidenti di sicurezza AI: vulnerabilità del Virtual Agent di ServiceNow CVE-2025-12420 Cosa è successo? È stata scoperta una vulnerabilità critica nella piattaforma AI di ServiceNow che ha consentito a un attaccante non autenticato di...

CVE-2024-51996

⚠️ CVE-2024-51996 - Exploit di Bypass dell'Autenticazione Symfony RememberMe Exploit per la vulnerabilità critica CVE-2024-51996 , che consente il bypass dell'autenticazione nelle applicazioni Symfony che utilizzano il meccanismo Remember Me. 🧠 Impatto : Impersonazione di utenti privilegiati come...

CVE-2025-31161

CVE-2025-31161 ist eine kritische Schwachstelle mit hohem Schweregrad, die es Angreifern ermöglicht, die Art und Weise zu kontrollieren, wie die Benutzerauthentifizierung durch die CrushFTP Managed File Transfer MFT Software gehandhabt wird. Betroffene Versionen: 10.0.0 bis 10.8.3 und 11.0.0 bis...

watchTowr-vs-progress-moveit_CVE-2024-5806

CVE-2024-5806 Progress MOVEit Transfer CVE-2024-5806 के लिए शोषण। हमारा ब्लॉग पोस्ट TBD पर देखें। PoC कार्य में सहायता के लिए --help देखें। एक विशिष्ट रन इस प्रकार दिखना चाहिए: root@kitploit: python CVE-2024-5806.py --target-ip 192.168.1.1 --target-user user2 --ppk id.ppk --pem id / | | |\ \ \ /...

WhoWasI

WhoWasI Diese Anwendung kann die Identität eines beliebigen angemeldeten Benutzers annehmen und Befehle im Kontext des angenommenen Benutzers ausführen. Von NCC Group Plc als Open Source veröffentlicht - http://www.nccgroup.com/ Entwickelt von: Chris Thomas, chris dot Thomas at nccgroup dot com...

CVE-2024-45337

Proof of Concept exploit per CVE-2024-45337 Questa repository contiene un exploit proof of concept per CVE-2024-45337. Può essere utilizzato per incapsulare ssh quando si interagisce con un server SSH implementato usando golang.org/x/crypto = v0.30.0, che memorizza le autorizzazioni in modo non...

CVE-2026-55040-Mass-Exploit

Exploit di Bypass del Token JWT per Microsoft SharePoint CVE-2026-55040, CVSS 9.1 Forgia token di autenticazione utilizzando tre vettori di attacco: Algoritmo "none" salta la verifica della firma Segreti HS256 deboli con supporto per attacco a forza bruta tramite dizionario Sostituzione della...

getSPNless

getSPNless Strumento Python per ottenere ticket di servizio Kerberos utilizzando la tecnica SPN-less. Basato su Sfruttare RBCD Utilizzando un Account Utente Normale. Questo strumento utilizza il progetto impacket. Installazione Questi strumenti sono compatibili solo con Python 3.5+. Clona il...

pypykatz

🚩 Sponsors If you like this project, consider purchasing licenses of OctoPwn, our full pentesting suite that runs in your browser! For notifications on new builds/releases and other info, hop on to our Discord pypykatz Mimikatz implementation in pure Python. At least a part of it : Runs on all OS...

CVE-2017-11427-DEMO

CVE-2017-11427-DEMO Grundlegende Umgebung root@kitploit: $ sudo apt-get install libxml2-dev libxslt1-dev $ sudo apt-get install libxml2-dev libxmlsec1-dev libxmlsec1-openssl DEMO: root@kitploit: $ git clone https://github.com/CHYbeta/CVE-2017-11427-DEMO.git $ cd CVE-2017-11427-DEMO $ source...

CVE-2026-79787 Alluxio through 2.9.5 S3 REST Proxy Authentication Bypass via Unverified Request Signature

Alluxio's S3 REST proxy fails to verify AWS Signature Version 4 signatures in its default configuration, allowing unauthenticated attackers to spoof user identity. Attackers can extract usernames from unsigned Authorization headers and impersonate any user, including service accounts, to read,...

CVE-2026-79787

CVE-2026-79787 affects Alluxio through 2.9.5 in its S3 REST Proxy component. In the default configuration, the proxy fails to verify AWS Signature Version 4 request signatures, allowing unauthenticated network attackers to extract usernames from unsigned Authorization headers and impersonate any ...