ZackAttack

===== ZackAttack! - Realying NTLM Like Nobody's Business ======= WTF Is This? tl;dr version - ZackAttack! is a new Tool Set to do NTLM Authentication relaying unlike any other tool currently out there. = So how is ZackAttack! different / better? Compared to other tools... Supports NTLMv2 : Brings...

CVE-2025-24071_PoCExtra

CVE-2025-24071Pocextra Alternativa a CVE-2025-24071PoC Codice Originale https://github.com/0x6rss/CVE-2025-24071PoC Durante alcuni test con un'altra estensione simile ho provato con ".searchconnector-ms" usando la stessa struttura, ma l'inconveniente del primo PoC affliggeva anche questo. python...

CVE-2026-56224

Capgo console.capgo.app/login before 12.128.2 accepts accesstoken and refreshtoken in URL query parameters, automatically authenticating users without confirmation. Attackers can craft malicious links to force victims into attacker-controlled sessions, exposing tokens in browser history and logs...

CVE-2026-56224

Capgo console.capgo.app/login before 12.128.2 accepts accesstoken and refreshtoken in URL query parameters, automatically authenticating users without confirmation. Attackers can craft malicious links to force victims into attacker-controlled sessions, exposing tokens in browser history and logs...