Sububy

Sububy Sububy é um conjunto de enumeração de subdomínios completo escrito em Ruby, focado em precisão e qualidade, com a flexibilidade de acessar alguns módulos individualmente sem precisar seguir o fluxo de execução da ferramenta, permitindo integrá-lo ao seu fluxo de trabalho. Sububy vem com no...

CurveballCertTool

CurveballCertTool CVE-2020-0601 Este script automatizado em bash para assinatura de código foi criado usando este repositório: https://github.com/ollypwn/CurveBall Use este script apenas para fins educacionais. Requisitos openssl ruby osslsigncode Uso ./CurveballCertTool.sh -c: Criar novo...

CVE-2026-55040

Microsoft SharePoint JWT प्रमाणीकरण बायपास CVE-2026-55040 अवलोकन CVE-2026-55040.py SharePoint प्रमाणीकरण बायपास भेद्यता, CVE-2026-55040 का लाभ उठाने के लिए एक proof-of-concept स्क्रिप्ट है। पूर्ण तकनीकी विश्लेषण के लिए, हमारा Rapid7 Analysis देखें। उपयोग $ python CVE-2026-55040.py --help usage:...

Certighost-CVE-2026-54121

Document Type: Detection Use Case Related CVE: CVE-2026-54121 Certighost Author: Youssef Benchater Detection Use Case: Certighost CVE-2026-54121 This document describes the Splunk detection built for CVE-2026-54121. It follows the standard detection use case format so it can sit in a detection...

POC-CVE-2026-54121-Certighost

CertiGhost CVE-2026-54121 - AD CS चेज़ फ़ॉलबैक शोषण टूलकिट अवलोकन CertiGhost एक गंभीर भेद्यता CVSS 8.8 है जो Active Directory Certificate Services AD CS में पाई जाती है, जो कम-विशेषाधिकार वाले डोमेन उपयोगकर्ता को Domain Controller का रूप धारण करने और पूर्ण डोमेन समझौता करने की अनुमति देती है। CVE...

unwaf

Unwaf Unwaf एक Go टूल है जो निष्क्रिय तकनीकों का उपयोग करके WAF बायपास की पहचान करने में मदद करने के लिए डिज़ाइन किया गया है। यह कई खोज विधियों को मिलाकर WAF/CDN के पीछे की असली ओरिजिन IP का पता लगाने की प्रक्रिया को स्वचालित करता है और HTML समानता तुलना, SSL प्रमाणपत्र फिंगरप्रिंटिंग, और HTTP हे...

FUCK-CDN

FUCK-CDN हर संभव तरीका अपनाकर, CDN की परतें उधेड़कर, असली IP खोजें। Claude Code के लिए बनाया गया एक स्वचालित CDN ओरिजिन ट्रेसिंग स्किल। लक्ष्य डोमेन दर्ज करें, प्राथमिकता के अनुसार स्वचालित रूप से 40+ OSINT विधियाँ निष्पादित करें, साक्ष्य श्रृंखला बनाएँ, और अंतिम निर्णय आउटपुट करें।...

Invoke-SelfSignedWebRequest

Invoke-SelfSignedWebRequest Para trabalho em InfoSec, usar HTTPS é um mecanismo incrivelmente útil para C2 e manobra dentro do espaço da rede alvo. Além disso, PowerShell é uma ferramenta de produtividade incrível que pode ajudar um operador a alcançar resultados dinâmicos. Uma próxima conclusão...

python3.14 security update

An update is available for python3.14. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Python is an interpreted, interactive, object-oriented programming...

RLSA-2026:77018 Important: python3.14 security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fixes:...

python3.14 security update

An update is available for python3.14. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Python is an interpreted, interactive, object-oriented programming languag...

CVE-2026-107938

In Apache CXF, the Netty-based HTTP client transport cxf-rt-transports-http-netty-client did not verify that the hostname in the server’s TLS certificate matched the host being called. This applied over both HTTP/1.1 and HTTP/2, even when disableCNCheck was left at its default value of false. The...

Security Bulletin: Vulnerabilities exists in IBM Netezza Appliance

Summary Vulnerabilities identified in IBM Netezza Appliance have been addressed in version 1.0.2.0 Vulnerability Details CVEID:CVE-2026-43869 DESCRIPTION: Improper Validation of Certificate with Host Mismatch vulnerability in Apache Thrift. This issue affects Apache Thrift: before 0.23.0. Users a...

EUVD-2026-95703

In Apache CXF, the Netty-based HTTP client transport cxf-rt-transports-http-netty-client did not verify that the hostname in the server’s TLS certificate matched the host being called. This applied over both HTTP/1.1 and HTTP/2, even when disableCNCheck was left at its default value of false. The...

CVE-2026-78020

Dell Secure Connect Gateway SCG Policy Manager, versions prior to 5.34.00.16, contains an Improper Certificate Validation vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Denial of service, Information disclosure, and Remote...

certificate-ripper

Certificate Ripper 🔐 A CLI tool to extract server certificates Demo Advantages It is fast Easy to use No openssl required Runs on any Operating System Can be used with or without Java, native executables are present in the releases Extracts all the sub-fields of the certificate Certificates can b...

EUVD-2026-95570

Dell Secure Connect Gateway SCG Policy Manager, versions prior to 5.34.00.16, contains an Improper Certificate Validation vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Denial of service, Information disclosure, and Remote...

CVE-2026-78020

Dell Secure Connect Gateway SCG Policy Manager, versions prior to 5.34.00.16, contains an Improper Certificate Validation vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Denial of service, Information disclosure, and Remote...

CVE-2026-78020

Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16 , contains an Improper Certificate Validation vulnerability (CWE-295). An unauthenticated attacker with remote access could potentially exploit this flaw to achieve Remote execution , Information disclosure , and Denia...

CVE-2026-0073

0-Click RCE no Android Vulnerabilidade crítica CVE‑2026‑0073 no ADB do Android, uma falha de bypass de autenticação na verificação de certificado TLS do daemon adbd, especificamente na função adbdtlsverifycert verificação do certificado TLS faz a depuração sem fio Wireless Debugging aceitar um...