redsnarf

. \ \ | / / / \ | // \ / |\ \ / \ \ \ \ | | \ // // |/ \ | / | | /| | || /\ / /| /| || / / / / / / [email protected] @redsnarf RedSnarf is a pen-testing / red-teaming tool by Ed Williams for retrieving hashes and credentials from Windows workstations, servers and domain controllers...

go-secdump

go-secdump Description Package go-secdump is a tool built to remotely extract hashes from the SAM registry hive as well as LSA secrets and cached hashes from the SECURITY hive without any remote agent and without touching disk. The tool is built on top of the library go-smb and use it to...

CVE-2022-28368-handler

CVE-2022-28368-handler 이 저장소는 dompdf 캐시된 글꼴 취약점CVE-2022-28368을 대부분 처리하는 Python 스크립트를 포함하고 있습니다. 여러분이 해야 할 일은 요청을 생성하는 것뿐입니다. 또한 익스플로잇을 시작하기 위한 트리거 문자열을 제공합니다 : Usage usage: CVE-2022-28368.py -h -d DOMPDFLOCATION -f FONTNAME -i HTTPIP -p HTTPPORT -P PHP -w -r This script handles the majority of th...

CVE-2018-7600

CVE-2018-7600 - Drupal 7 원격 코드 실행 CVE-2018-7600 취약점에 노출된 Drupal 7 설치를 호출함으로써 페이로드를 트리거합니다. Drupal이 캐시된 요소를 렌더링할 때 postrender 콜백이 공격자가 제어하는 마크업으로 실행되어 명령 실행을 가능하게 합니다. 설명 이 Rust CLI는 대상 Drupal 7 사이트 요청 매개변수에 대해 2단계 시퀀스오염 후 트리거를 구성 및 수행하고, HTML 응답에서 formbuildid를 파싱한 다음, file/ajax 엔드포인트를 트리거하여 공격자가...

dnspooq

dnspooq DNSpooq PoC - dnsmasq 캐시 중독 CVE-2020-25686, CVE-2020-25684, CVE-2020-25685 교육 목적으로만 사용하세요 요구 사항 Docker compose Docker 익스플로잇 컨테이너 실행 $ docker-compose up -d exploit.py 실행 $ docker-compose exec attacker bash bash-5.0 python exploit.py Querying non-cached names... Generating spoofed packets...

mscache

mscache 윈도우 레지스트리에서 dcc도메인 캐시 자격 증명를 조작하는 도구로, 주로 mimikatz와 impacket의 작업을 기반으로 합니다. 요구 사항 python2 pycrypto passlib impacket 예제 python mscache.py --security security --system system dumping domain cached credentials reg query "HKEYLOCALMACHINE\SECURITY\Cache" /v "NL$1" 2018-08-22 06:27:58 username...

NeuVector - Information Disclosure

NeuVector through 5.4.9 contains an information disclosure vulnerability caused by missing authentication and cached sensitive data in the manager /network/graph API, letting remote attackers access sensitive information, exploit requires no special privileges. id: CVE-2026-25703 info: name:...

CVE-2025-14269

CVE-2025-14269 Headlamp의 클러스터 내in-cluster 버전에서 보안 문제가 발견되었습니다. 인증되지 않은 사용자가 캐시된 자격 증명을 재사용하여 Headlamp UI를 통해 Helm 기능에 접근할 수 있습니다. Kubernetes 클러스터는 Headlamp가 설치되어 있고 config.enableHelm: true로 구성되어 있으며, 인증된 사용자가 이전에 Helm 기능에 접근한 적이 있는 경우에만 영향을 받습니다. PoC Headlamp 버전 = v0.38.0을 설치합니다. config.enableHel...

CVE-2026-97637

The JSON API Auth plugin for WordPress is vulnerable to Authentication Bypass via Cached Session Cookie Disclosure in all versions up to, and including, 3.1.2. The vulnerability exists because the required PI-Media/json-api parent plugin caches controller dispatch results in transients keyed sole...

CVE-2026-97637

The JSON API Auth plugin for WordPress (versions up to and including 3.1.2 ) is vulnerable to an Authentication Bypass via cached session cookie disclosure. The root cause is that the required PI-Media/json-api parent plugin caches controller dispatch results using only the URI and query string, ...

EUVD-2026-91259

The JSON API Auth plugin for WordPress is vulnerable to Authentication Bypass via Cached Session Cookie Disclosure in all versions up to, and including, 3.1.2. The vulnerability exists because the required PI-Media/json-api parent plugin caches controller dispatch results in transients keyed sole...

CVE-2026-97637 JSON API Auth <= 3.1.2 - Unauthenticated Authentication Bypass via Cached 'generate_auth_cookie' Response

The JSON API Auth plugin for WordPress is vulnerable to Authentication Bypass via Cached Session Cookie Disclosure in all versions up to, and including, 3.1.2. The vulnerability exists because the required PI-Media/json-api parent plugin caches controller dispatch results in transients keyed sole...

msi-search

MSI 검색 Windows는 문자와 숫자로 구성된 무작위 파일 이름에 ".msi" 확장자가 붙은 MSI 파일을 C:\Windows\Installer\에 캐시합니다. 이 도구는 레드 팀 운영자와 보안 팀이 어떤 MSI 파일이 어떤 소프트웨어에 해당하는지 식별하는 작업을 단순화하고, MSI 복구를 통한 로컬 권한 상승 취약점을 조사하기 위해 관련 파일을 다운로드할 수 있게 해줍니다. MSI 복구 취약점에 대한 자세한 내용은 타사 Windows Installer를 통한 권한 상승에서 확인하세요. 작성자: Andrew Oliveau...

PT-2026-104152

Name of the Vulnerable Software and Affected Versions JSON API Auth plugin for WordPress versions prior to 3.1.3 Description An authentication bypass exists due to cached session cookie disclosure. The PI-Media/json-api parent plugin caches controller dispatch results in transients based only on...

CVE-2026-96577

A vulnerability exists in oc-mirror (specifically identified in release-4.21 ) where the embedded local cache registry binds to all network interfaces during mirroring operations. The service lacks authentication and encryption , failing to restrict access to the local system. An unauthenticated ...

EUVD-2026-90590

A flaw was found in oc-mirror. During mirroring operations, the embedded local cache registry binds to all network interfaces without authentication or encryption instead of restricting access to the local system. An unauthenticated attacker on an adjacent network can connect to the exposed servi...

CVE-2026-103651 MISP HOTP Token Replay via Stale Session-Cached Counter Allows Second-Factor Authentication Bypass

MISP contains a vulnerability in its one-time password OTP authentication flow that allows replay of a consumed HOTP paper token and rewinding of the token counter. The HOTP verification logic compared the submitted token against a counter value that was cached in the user's session at the time t...

CVE-2026-103651 MISP HOTP Token Replay via Stale Session-Cached Counter Allows Second-Factor Authentication Bypass

MISP contains a vulnerability in its one-time password OTP authentication flow that allows replay of a consumed HOTP paper token and rewinding of the token counter. The HOTP verification logic compared the submitted token against a counter value that was cached in the user's session at the time t...

CVE-2026-103651

MISP (versions

CVE-2026-103651 MISP HOTP Token Replay via Stale Session-Cached Counter Allows Second-Factor Authentication Bypass

MISP contains a vulnerability in its one-time password OTP authentication flow that allows replay of a consumed HOTP paper token and rewinding of the token counter. The HOTP verification logic compared the submitted token against a counter value that was cached in the user's session at the time t...