Symfony-CVE-Scanner-PoC-

Symfony Vulnerability Scanner Automated scanning tool to detect multiple known vulnerabilities CVE in Symfony applications exposed to the Internet. Developed by m10sec. Features 🔍 Detection of multiple vulnerabilities in Symfony : Validation of Symfony vulnerabilities ✅ Real exploitation validati...

CVE-2026-54121-Certighost

🛡 AI Security Tool Module CVE-2026-54121: Active Directory Certificate Services Impersonation Certighost Official Security Audit Module for AI Security Tool Ecosystem 🌐 Web Demo • 📚 Project Website • 💬 Community Chat Website Navigation: Home • Updates • Downloads • Modules 🧠 Conceptual Overview...

Cisco_CVE-2023-20198

CVE-2023-20198 CVE-2023-20198 Checkscript based on: Technical analysis: https://blog.talosintelligence.com/active-exploitation-of-cisco-ios-xe-software/ First script version: https://github.com/Atea-Redteam/CVE-2023-20198/ Thanks to Atea Redteam for their work. Requires: Python3.7+ Python libs:...

Burp-Log4j-HammerTime

Log4j-HammerTime This Burp Suite Active Scanner extension validates exploitation of the Apache Log4j CVE-2021-44228 and CVE-2021-45046 vulnerabilities. This extension uses the Burp Collaborator to verify the issue. Usage Enable this extension Launch an Active Scan on a specific target if you want...

tanuki

Tanuki Linux Active Directory triage for AI coding agents. Protocol-first, zero noise. Quick Start • Dual-Engine Architecture • Live Lab Validation • Demo Video • Decision Ladder • Before & After • Tooling & Usage • Agent Setup • Lineage & Credits Quick Start 1-Line Universal Install Tanuki is 10...

rails-forensics-CVE-2026-66066

rails-forensics-CVE-2026-66066 Tooling and method for answering two questions about a Rails application and CVE-2026-66066, the Active Storage and libvips arbitrary file read known as KindaRails2Shell: 1. Was I vulnerable, and for how long? 2. Was I exploited, and if so, what left the building? T...

cypherhound

CypherHound Un'applicazione terminale Python3 che contiene cypher Neo4j per i set di dati di BloodHound con uno script per automatizzare l'importazione in BloodHound CE. Esempi di Output Terminale Report HTML Report HTML continua Perché? BloodHound è uno strumento fondamentale per ogni penetratio...

caOptics

Note Project archived due to shifting development priorities and refocusing my community efforts to other areas PoCs, other tools and demos/presentation, project is set to read-only. CA Optics - Azure AD Conditional Access Gap Analyzer What is Conditional Access? Notes for early testers Release...

active_c2_ioc_public

+OPTIONS: ^: +TITLE: Active C2 IOCs Note Be careful with the firstseen/lastseen dates in each entry. Don't judge based on just an IP address...

BOF_Collection

BOFCollection Various Cobalt Strike BOFs Requirements beacon.h For compilation instructions and BOF overview help-bof ActiveDirectory GetDomainInfo.c Returns information on the current domain and domain controller. inline-execute GetDomainInfo.o Collection GetClipboard.c Prints any text on the...

burp-text4shell

Text4Shell scanner for Burp Suite Detailed description can be found in our blog post about this plugin. Note about detection capabilities: this plugin will only supply the built-in active scanner with payloads, thus for optimal coverage vs. performance, you'll have to configure your scan properly...

esp32_bluetooth_classic_sniffer

BrakTooth ESP32 BR/EDR Active Sniffer/Injector Simple "Monitor mode" for Bluetooth Classic. Sniff or inject BR/EDR Baseband packets in ESP32 BT connections. This is a reverse engineered active BR/EDR sniffer and ESP32 patching framework, which can be used to explore the Bluetooth BT BR/EDR...

impersonate

Impersonate Beschreibung Dieses Repository enthält die Werkzeuge, die beim Schreiben des folgenden Blogbeitrags https://sensepost.com/blog/2022/abusing-windows-tokens-to-compromise-active-directory-without-touching-lsass/ entwickelt wurden. Der Blogbeitrag enthält alle notwendigen Informationen, ...

CVE-2026-50522

🛡️ CVE-2026-50522 — Microsoft SharePoint RCE Investigation Critical SharePoint Deserialization Vulnerability Under Active Exploitation Created by Pratik Chhetri Report Date: 2026-07-27 📌 Executive Snapshot Field| Finding ---|--- Vulnerability| CVE-2026-50522 Product| Microsoft SharePoint Server...

EUVD-2026-96020

Trident versions v25.02.1 through v26.06.1 are susceptible to a vulnerability that could allow an authenticated attacker with access to debug logs to view LUKS passphrases or SMB Active Directory credentials...

CVE-2025-33073

Obscura$ DNS Relay Injector + NTLM Coercion Tool A stealthy proof-of-concept that chains DNS injection, NTLM relay, and RPC-based coercion to test authentication relay paths in Windows Active Directory environments. ⚠️ DISCLAIMER: For authorized security testing and educational use only. ❌...

CVE-2026-22061

Trident versions v25.02.1 through v26.06.1 are susceptible to a vulnerability that could allow an authenticated attacker with access to debug logs to view LUKS passphrases or SMB Active Directory credentials...

Purple-Team-Automation

Purple-Team-Automation Automated purple-team validation of the Sigma detection rules built in detection-as-code-repo, using MITRE Caldera to execute a chained Active Directory credential-access attack path against an existing domain lab, and an ATT&CK Navigator heatmap to visualize coverage. Why...

CVE-2026-22061

Trident versions v25.02.1 through v26.06.1 are vulnerable to a Debug Log Information Disclosure vulnerability (CWE-215 ). An authenticated attacker who gains access to the system's debug logs could potentially view highly sensitive information, specifically LUKS passphrases or SMB Active Director...

CVE-2026-22061 CVE-2026-22061 Debug Log Information Disclosure Vulnerability in Trident

Trident versions v25.02.1 through v26.06.1 are susceptible to a vulnerability that could allow an authenticated attacker with access to debug logs to view LUKS passphrases or SMB Active Directory credentials...