redsnarf

. \ \ | / / / \ | // \ / |\ \ / \ \ \ \ | | \ // // |/ \ | / | | /| | || /\ / /| /| || / / / / / / [email protected] @redsnarf RedSnarf es una herramienta de prueba de penetración / equipo rojo creada por Ed Williams para recuperar hashes y credenciales de estaciones de trabajo,...

printnightmare-detection-mitigation-lab

PrintNightmare Detection and Mitigation Lab A sanitised academic case study demonstrating how a Windows domain lab was designed, monitored and hardened while investigating CVE-2021-34527 PrintNightmare in a controlled virtual environment. Safety note: This repository focuses on systems...

CVE-2025-1974

cve-2025-1974-win11-attack-defense-lab Windows 11-first educational repository for studying CVE-2025-1974 in a safe, non-weaponized ATTACK + DEFENSE lab. The project is designed for university coursework, team demos, and report-ready screenshots. It emphasizes clean-room implementation, local-onl...

CVE-2025-1974

DEMO https://youtu.be/3hYlHeaf2mQ What is CVE-2025-1974? CVE-2025-1974 IngressNightmare is a critical CVSS 9.8 unauthenticated Remote Code Execution vulnerability in the Kubernetes ingress-nginx admission controller. Attack Flow: 1. Upload : Send malicious shared library .so file to NGINX via HTT...

CVE-2025-1974

Exploit for Ingress NGINX - IngressNightmare This project provides an exploit targeting critical unauthenticated Remote Code Execution RCE vulnerabilities in the Ingress NGINX Controller for Kubernetes, collectively referred to as IngressNightmare. In the original research, the Wiz team did not...

cve-2017-5487

What is CVE-2017-5487? : A vulnerability in the REST API implementation in wp-includes/rest-api/endpoints/class-wp-rest-users-controller.php in WordPress versions prior to 4.7.1 that does not restrict the list of authors, allowing remote attackers to obtain sensitive information via a...

CVE-2020-1472-02-

ZeroLogon testing script A Python script that uses the Impacket library to test vulnerability for the Zerologon exploit CVE-2020-1472. It attempts to perform the Netlogon authentication bypass. The script will immediately terminate when successfully performing the bypass, and not perform any...

CVE-2024-43044-jenkins-creds

Intro This is an exploit for CVE-2024-43044, an arbitrary file read that allows an agent to fetch files from the controller. The exploit will use the vulnerability to read credentials.xml file and get secret keys to decrypt it. Initial code : https://github.com/convisolabs/CVE-2024-43044-jenkins...

RISE-Ultimate_Project_Manager_e_CRM

CVE-2025-3855 - RISE Ultimate Project Manager - IDOR Security vulnerability: IDOR Insecure Direct Object Reference Affected Component: profile image upload endpoint, teammembers controller Software: RISE - Ultimate Project Manager & CRM Vendor: codecanyon Version: 3.8.2 CVE ORG :...

CVE-2025-1974

🚨 Log Injection Test via Ingress-NGINX Admission Controller 🧠 Overview This script tests for annotation injection vulnerabilities in Kubernetes clusters using the NGINX Ingress Controller. It is meant for detection purposes only in relation to CVE-2025-1974, which allows malicious annotations to...

CVE-2026-54121-Certighost

🛡 AI Security Tool Module CVE-2026-54121: Active Directory Certificate Services Impersonation Certighost Official Security Audit Module for AI Security Tool Ecosystem 🌐 Web Demo • 📚 Project Website • 💬 Community Chat Website Navigation: Home • Updates • Downloads • Modules 🧠 Conceptual Overview...

Domain-Controller-DC-Exploitation-with-Metasploit-Impacket

Domain-Controller-DC-Exploitation-with-Metasploit-Impacket End-to-end Domain Controller exploitation using Metasploit and Impacket: discovered DC10, exploited Zerologon CVE-2020-1472, extracted NTLM hashes, gained SYSTEM shell, and established a Meterpreter session. Executive Summary This exercis...

CVE-2020-1472

CVE-2020-1472 POC Requiere la última versión de impacket desde GitHub con estructuras netlogon añadidas. Tenga en cuenta que, por defecto, esto cambia la contraseña de la cuenta del controlador de dominio. Sí, esto le permite realizar DCSync, pero también interrumpe la comunicación con otros...

GO-2026-6609 vulnerabilities

Vulnerabilities for packages: kyverno-policy-reporter-ui, openbao, falco-no-driver, hubble-ui, gitness, grafana-pyroscope, terragrunt, kube-arangodb, grafana-alloy, cloudprober, loki, mesosphere-vsphere-csi, continuity, spire-server, aactl, atlantis, flux, rancher-agent, juicefs, external-dns,...

GO-2026-6613 vulnerabilities

Vulnerabilities for packages: knative-serving, azure-service-operator, grafana-rollout-operator, kyverno-policy-reporter-ui, nats-server, kyverno-notation-aws, neuvector-scanner, osv-scanner, esbuild, falco-no-driver, gcsfuse, crossplane-provider-aws-cloudwatchlogs, sriov-network-device-plugin,...

GO-2026-6605 vulnerabilities

Vulnerabilities for packages: knative-serving, azure-service-operator, grafana-rollout-operator, kyverno-policy-reporter-ui, nats-server, kyverno-notation-aws, neuvector-scanner, osv-scanner, falco-no-driver, gcsfuse, crossplane-provider-aws-cloudwatchlogs, sriov-network-device-plugin, cloudprobe...

GO-2026-6607 vulnerabilities

Vulnerabilities for packages: knative-serving, azure-service-operator, grafana-rollout-operator, kyverno-policy-reporter-ui, nats-server, kyverno-notation-aws, neuvector-scanner, osv-scanner, esbuild, falco-no-driver, gcsfuse, crossplane-provider-aws-cloudwatchlogs, sriov-network-device-plugin,...

CVE-2026-94439 vulnerabilities

Vulnerabilities for packages: knative-serving, azure-service-operator, grafana-rollout-operator, kyverno-policy-reporter-ui, nats-server, kyverno-notation-aws, neuvector-scanner, osv-scanner, esbuild, falco-no-driver, gcsfuse, crossplane-provider-aws-cloudwatchlogs, sriov-network-device-plugin,...

CVE-2026-97031 vulnerabilities

Vulnerabilities for packages: knative-serving, azure-service-operator, grafana-rollout-operator, kyverno-policy-reporter-ui, nats-server, kyverno-notation-aws, neuvector-scanner, osv-scanner, esbuild, falco-no-driver, gcsfuse, crossplane-provider-aws-cloudwatchlogs, sriov-network-device-plugin,...

GHSA-F4XW-M386-M277 vulnerabilities

Vulnerabilities for packages: kyverno-policy-reporter-ui, openbao, falco-no-driver, hubble-ui, gitness, grafana-pyroscope, terragrunt, kube-arangodb, grafana-alloy, cloudprober, loki, mesosphere-vsphere-csi, continuity, spire-server, aactl, atlantis, flux, rancher-agent, juicefs, external-dns,...