metabadger

Metabadger Prevent SSRF attacks on AWS EC2 via automated upgrades to the more secure Instance Metadata Service v2 IMDSv2. Metabadger Purpose and functionality Diagnose and evaluate your current usage of the AWS Instance Metadata Service along with understanding how the service works Prepare you t...

makes

⚠️ Hinweis zur Einstellung ⚠️ Nach einer gründlichen Überprüfung von Makes und anderen Build-System-Alternativen hat sich Fluid Attacks entschieden, vollständig auf Nix Flakes für all unsere Builds umzusteigen. Diese Entscheidung bringt erhebliche Vorteile mit sich, darunter die Möglichkeit, sich...

ca-clone

Script di Clonazione CA Script per clonare certificati CA da utilizzare in attacchi client HTTPS. Attualmente include script per clonare una CA root Comodo e una CA Digicert, entrambe abbastanza ampiamente considerate affidabili nei dispositivi IoT. Utilizzo Esegui uno dei due script in loco per...

Active-Directory-Exploitation-Cheat-Sheet

Active Directory Cheat Sheet Questa repository contiene una metodologia generale per l'ambiente Active Directory. È fornita con una selezione di comandi rapidi tratti dagli strumenti più efficienti basati su Powershell, C, .Net 3.5 e .Net 4.5. Processo Generale: Ricognizione Enumerazione del...

AzureAD-Attack-Defense

Microsoft Entra ID - Playbook di attacco e difesa Questa pubblicazione è una raccolta di vari scenari di attacco comuni su Microsoft Entra e di come possono essere mitigati o rilevati. Tutti gli scenari, le intuizioni e i commenti inclusi si basano sulle esperienze dei contributori durante le lor...

EQGRP_Lost_in_Translation

EQGRP Lost in Translation Contenuto decriptato di odd.tar.xz.gpg, swift.tar.xz.gpg e windows.tar.xz.gpg Scaricato da https://yadi.sk/d/NJqzpqo3GxZA4 Post originale dei ShadowBrokers https://steemit.com/shadowbrokers/@theshadowbrokers/lost-in-translation windows : contiene exploit, implant e paylo...

AI-PASSWORD-TESTING-AGENT

AI Password Attack Orchestrator - Repository di Ricerca Difensiva ⚠️ DISCLAIMER LEGALE & SCOPO DELLA RICERCA QUESTA REPOSITORY È SOLO PER RICERCA DIFENSIVA IN SICUREZZA INFORMATICA E SCOPI EDUCATIVI NESSUN CODICE SFRUTTABILE - Questa repository contiene solo ricerca teorica, analisi concettuale e...

Hackers Compromised 14,500+ Dahua Devices Using Credential Attacks, Auth Bypasses, and P2P

Cybersecurity researchers at Hunt.io have disclosed details of a campaign that they say compromised more than 14,530 Dahua devices between June 17 and July 22, 2026, using credential attacks, two authentication-bypass flaws, and a peer-to-peer P2P relay technique. The activity, codenamed Operatio...

Spectre-PoC

Spectre-PoC Nicht von mir. Gesammelt aus einem Buch. Spectre-Angriffe: Ausnutzung spekulativer Ausführung...

CVE-2026-74889 openssl_encrypt before 1.4.0 Weak Key Derivation via HKDF

opensslencrypt versions before 1.4.0 use HKDF with no salt and static info parameter in key normalization functions, reducing entropy extraction and determinism. Attackers can exploit predictable key derivation with identical inputs to weaken cryptographic security against multi-target attacks...

CVE-2026-74889

The openssl_encrypt library (PHP package) before version 1.4.0 uses HKDF with no salt and a static info parameter in its key normalization functions, producing deterministic, low-entropy derived keys. Attackers with identical inputs can predict derived keys, weakening cryptographic security again...

New Passkey Attacks Can Recover Synced Private Keys or Bypass Phishing-Resistant MFA

Three separate research efforts last week demonstrated ways to defeat passkey protections without breaking the cryptography they rest on. Passkeys are designed to replace reusable passwords and resist phishing. The attacks instead reused signed authentication material that Windows had exposed,...

CVE-2026-72690

CVE-2026-72690 | Attendize : An improper authorization vulnerability allows an authenticated remote attacker to inject persistent mandatory survey questions into another organizer’s events via POST /event/{event_id}/question/create. The root cause is that postCreateEventQuestion loads the target ...

CVE-2026-21073

Improper input validation in Galaxy Themes prior to SMR Aug-2026 Release 1 allows physical attackers to launch arbitrary activity...

Imperva Customers Protected Against Novel HTTP Desync Attacks

TL;DR: Recent Portswigger research introduced novel HTTP desync techniques discovered through an AI-assisted research system called the HTTP Terminator. The findings expand the range of unusual HTTP behaviors that can cause front-end and back-end systems to interpret the same traffic differently...

UNC6671 Vishing Attacks Target Personal Phones to Steal SaaS Data

A recent wave of cyber attacks targeting financial services, private equity, and professional services has been attributed to a data extortion group known as UNC6671. "UNC6671 continues to rely on voice phishing vishing to target enterprise employees, posing as IT help desk staff facilitating...

CVE-2026-48084 OpenReception doesn't rate limit passphrase login attempts

OpenReception's appointment booking software provides an end-to-end encrypted appointment booking platform. Versions prior to 1.0.2 don't throttle failed passphrase login attempts. An attacker can submit unlimited wrong passphrase guesses against any known email address, capped only by the Argon2...

Over 4,400 Rockwell PLCs Exposed Online, 22 Found in Water Attack Cities

Forescout found 22 internet-facing Rockwell Automation programmable logic controllers PLCs in cities hit by recent cyberattacks on US water utilities. Nineteen used the same mobile carrier network. Its August 3 scan counted 4,407 exposed Rockwell controllers worldwide, including 2,844 in the Unit...

CVE-2026-57817 Apache CXF: The authorization code hash (c_hash) is not enforced for the hybrid OIDC flow

The OpenID Connect Core 1.0 specification mandates that the RP MUST validate the chash parameter when operating in the Hybrid Flow. If an Apache CXF RP is integrated with a non-compliant or misconfigured Identity Provider IdP that omits the chash, the RP becomes vulnerable to Authorization Code...

CVE-2024-6832 Account Lockout Failure via Secondary User Store Inaccessibility in Multiple WSO2 Products Allows Brute Force Attacks

The account locking mechanism fails to trigger when secondary user stores are inaccessible. The software does not maintain a consistent state for account locking if it cannot reach all configured user stores, allowing an attacker to repeatedly attempt authentication with invalid credentials witho...