ssh-enum

ssh-enum Studio di convalida statistica di CVE-2016-6210 Una ri-indagine riproducibile dell'enumerazione degli username OpenSSH utilizzando l'analisi statistica. Questo progetto riesamina CVE-2016-6210 , un side-channel temporale documentato di OpenSSH, per determinare se rimane osservabile su un...

cve-2025-32433

Erstellen root@kitploit: » git clone https://github.com/0xPThree/cve-2025-32433.git && cd cve-2025-32433 » docker build -t erlang-ssh . » docker run -d --name erlang-ssh -p 2222:2222 erlang-ssh POC root@kitploit: kdev :: /erlang/CVE-2025-32433 ‹main› » python3 cve-2025-32433.py -h usage:...

SpotifyC2

SpotifyC2 — Ricerca su Canale di Comando Basato su Cloud Esegui comandi attraverso una playlist di Spotify e ricevi l'output dei comandi tramite Telegram. Cos'è SpotifyC2? SpotifyC2 è un progetto di ricerca sulla cybersecurity basato su Windows che dimostra come servizi cloud accessibili...

Erlang-OTP-PoC_CVE-2025-32433

Confusione del Canale Pre-Autenticazione SSH Erlang/OTP 📺 Video di Prova del Concetto Descrizione: Una dimostrazione della vulnerabilità di confusione del canale pre-autenticazione SSH Erlang/OTP. Clicca qui per guardare la demo completa su YouTube Abstract Di cosa tratta questo PoC? Questa Prova...

CVE-2025-6792

Exploit: Unbefugtes Pusher-Kanal-Abonnement Abhören 1 Pusher-Zugangsdaten abrufen aus der Browser-Konsole root@kitploit: console.log window.wpguppyscriptsvars.pusherKey, window.wpguppyscriptsvars.pusherCluster ; 2 Privaten Kanal eines Opfers abonnieren root@kitploit: Pusher Eavesdrop Test Listeni...

CVE-2018-10933_ssh

CVE-2018-10933 para testar este código: obtenha a versão vulnerável do libssh na página inicial: https://www.libssh.org/files/0.7/libssh-0.7.4.tar.xz descompacte e compile; em seguida, vá para o diretório de exemplos; há um servidor sshd simples usando libssh chamado: samplesshd-cb execute este...

CVE-2021-1366

CVE-2021-1366 Cisco AnyConnect Posture HostScan Lokale Privilegieneskalation: CVE-2021-1366 Eine Sicherheitslücke im Interprozesskommunikationskanal IPC von Cisco AnyConnect Secure Mobility Client für Windows könnte es einem authentifizierten, lokalen Angreifer ermöglichen, einen...

CVE-2020-16012-PoC

Progetto M2 - Side Channel Attack Client Chrome Versione 83 Link di installazione https://commondatastorage.googleapis.com/chromium-browser-snapshots/index.html?prefix=Linuxx64/756066/ Comando di avvio root@kitploit: unzip Linux...chrome.zip cd chrome-linux/ ./chrome --disable-gpu...

cdf

CDF – crypto differential fuzzing CDF is a tool to automatically test the correctness and security of cryptographic software. CDF can detect implementation errors, compliance failures, side-channel leaks, and so on. CDF implements a combination of unit tests with "differential fuzzing", an approa...

sgx-step

A Practical Attack Framework for Precise Enclave Execution Control SGX-Step è un framework open-source per facilitare la ricerca sugli attacchi a canale laterale su processori Intel x86 in generale e su piattaforme Intel SGX in particolare. SGX-Step consiste in un driver del kernel Linux avversar...

sgx-step

A Practical Attack Framework for Precise Enclave Execution Control SGX-Step is an open-source framework to facilitate side-channel attack research on Intel x86 processors in general and Intel SGX platforms in particular. SGX-Step consists of an adversarial Linux kernel driver and a small user-spa...

dradis-ce

Welcome to the Dradis Framework An Automated Pentest Reporting Tool Dradis is an open-source collaboration framework and penetration testing report generator that helps InfoSec teams streamline reporting workflows. With support for importing data from tools like Burp Suite, Nessus, and Nmap, Drad...

loupe

Loupe Loupe è un'app per iOS e iPadOS che ti offre una panoramica pratica della superficie di fingerprinting del dispositivo. Legge valori reali dalle API pubbliche di iOS, le stesse che qualsiasi app di terze parti può chiamare, e te li mostra in forma grezza. L'obiettivo è semplice: vedere cosa...

memguard

MemGuard Software enclave for storage of sensitive information in memory. This package attempts to reduce the likelihood of sensitive data being exposed when in memory. It aims to support all major operating systems and is written in pure Go. Features Sensitive data is encrypted and authenticated...

espectre

🛜 ESPectre 👻 Bewegungserkennungssystem basierend auf Wi-Fi-Spektrumanalyse CSI, mit nativer Home-Assistant-Integration über ESPHome. !TIP Neuer ML-Detektor : Bewegungserkennung auf Basis neuronaler Netze. Keine Kalibrierung erforderlich, läuft auf dem Gerät. Dies ist eine experimentelle Funktion;...

attack_range

Splunk Attack Range v5 The Splunk Attack Range builds instrumented cloud environments AWS, Azure, GCP, simulates attacks, and forwards data into Splunk for detection development and testing. What it does: Build labs — Deploy a small, production-like lab Splunk, Windows/Linux servers, optional Kal...

GHSA-MM85-Q63V-4476

creationtimestamp| type| source ---|---|--- 2026-08-26 17:00:03+00:00| published-proof-of-concept| https://t.me/bdufstecru/3411 2026-08-27 00:00:09+00:00| published-proof-of-concept| https://t.me/bdufstecru/3411...

CVE-2026-81027

one-api gates one of its two channel-pinning paths and not the other. middleware/auth.go permits a request to name a specific channel either through a suffix on the API key or through a URL path parameter. The suffix path is reached only after model.IsAdmin succeeds and otherwise rejects the...

CVE-2026-81027

one-api (through version 0.6.10 ) contains an authorization bypass in its channel-pinning logic in middleware/auth.go. The software offers two ways to pin a request to a specific upstream channel: a suffix on the API key and a URL path parameter (channelid). Only the suffix path is gated behind a...

CVE-2026-81027 one-api through 0.6.10 Missing Authorization on URL-Parameter Channel Pinning

one-api gates one of its two channel-pinning paths and not the other. middleware/auth.go permits a request to name a specific channel either through a suffix on the API key or through a URL path parameter. The suffix path is reached only after model.IsAdmin succeeds and otherwise rejects the...