ZackAttack

ZackAttack! - Ritrasmettendo NTLM Come Nessun Altro ======= Che Cos'è Questo? versione tl;dr - ZackAttack! è un nuovo set di strumenti per effettuare il relaying dell'autenticazione NTLM in modo diverso da qualsiasi altro strumento attualmente disponibile. = Allora, in cosa ZackAttack! è...

CVE-2025-24071_PoCExtra

CVE-2025-24071PoCExtra Alternative CVE-2025-24071PoC Originalcode https://github.com/0x6rss/CVE-2025-24071PoC Bei Tests mit einer ähnlichen Erweiterung habe ich „.searchconnector-ms“ mit derselben Struktur ausprobiert, aber das Problem des ersten PoC wirkte sich ebenfalls aus. python poc2.py Gebe...

CVE-2026-56224

Capgo console.capgo.app/login before 12.128.2 accepts accesstoken and refreshtoken in URL query parameters, automatically authenticating users without confirmation. Attackers can craft malicious links to force victims into attacker-controlled sessions, exposing tokens in browser history and logs...

CVE-2026-56224

Capgo console.capgo.app/login before 12.128.2 accepts accesstoken and refreshtoken in URL query parameters, automatically authenticating users without confirmation. Attackers can craft malicious links to force victims into attacker-controlled sessions, exposing tokens in browser history and logs...

PT-2026-54022

Capgo console.capgo.app/login before 12.128.2 accepts access token and refresh token in URL query parameters, automatically authenticating users without confirmation. Attackers can craft malicious links to force victims into attacker-controlled sessions, exposing tokens in browser history and log...