authelia

Authelia is an open-source authentication and authorization server providing two-factor authentication and single sign-on SSO for your applications via a web portal. It acts as a companion for reverse proxies by allowing, denying, or redirecting requests. Documentation is available at...

adfly

adfly Active Directory查询工具，使用LDAP协议，帮助红队成员/渗透测试人员验证用户凭据，检索有关AD用户、AD组的信息。 AD fly是一款使用LDAP协议进行用户身份验证访问和信息查询的工具。由于AD fly使用LDAP进行连接，它只需要一个有效账户进行身份验证，无需是AD域的一部分即可使用AD fly。从攻击机出发，红队成员能够通过LDAP访问Active Directory并检索操作所需的信息。 版本1.0包含以下模块： 查询用户组成员资格 列出组成员 列出所有域控制器 root@kitploit: \// \ | |/ $ $ || + AD Fly +...

Set-ZerologonMitigation

Set-ZerologonMitigation Zerologon CVE-2020-1472 からドメインコントローラーを保護します。 使用方法 2020年8月のセキュリティ更新プログラム（またはそれ以降の累積更新プログラム）をインストールした後、各ドメインコントローラーでスクリプトを実行するだけです。 root@kitploit: .\Set-ZerologonMitigation.ps1 ヘルプを表示するには、Get-Help を実行します： root@kitploit: Get-Help .\Set-ZerologonMitigation.ps1...

FineCMS <=5.0.10 - Cross-Site Scripting

FineCMS through 5.0.10 contains a cross-site scripting vulnerability in controllers/api.php via the function parameter in a c=api&m=data2 request. id: CVE-2017-11629 info: name: FineCMS =5.0.11 which includes a fix for this vulnerability. reference: -...

Cisco IOS XE WLC - Arbitrary File Upload

A vulnerability in the Out-of-Band Access Point AP Image Download feature of Cisco IOS XE Software for Wireless LAN Controllers WLCs could allow an unauthenticated, remote attacker to upload arbitrary files to an affected system.This vulnerability is due to the presence of a hard-coded JSON Web...

Zerologon_CVE-2020-1472

Zerologon CVE-2020-1472 这个脚本用于批量检查你的域控制器是否存在Zerologon漏洞。 注意 Zerologon漏洞对域控制器非常危险，请勿在生产服务器上使用此漏洞利用程序。 参数 --ip 用于检查CVE-2020-1472的IP地址 --file 包含IP地址的文件路径 --threads 线程数 --name NetBIOS计算机名，与--ip标志一起使用 示例 python3 checkcve-2020-1472.py ---ip python3 checkcve-2020-1472.py ---ip ---name python3...

ZyXel USG - Hardcoded Credentials

A hardcoded credential vulnerability was identified in the 'zyfwp' user account in some Zyxel firewalls and AP controllers. The account was designed to deliver automatic firmware updates to connected access points through FTP. id: CVE-2020-29583 info: name: ZyXel USG - Hardcoded Credentials autho...

APOLOGEE

🌀 APOLOGEE - シーメンスフィールドパネルスキャナー: APOLOGEEは、シーメンスAPOGEE PXC BACnet自動制御コントローラ（V3.5より前の全バージョン）およびTALON TC BACnet自動制御コントローラ（V3.5より前の全バージョン）の隠しディレクトリを列挙するPythonスクリプトおよびMetasploitモジュールです。CVSS 7.5のこのエクスプロイトにより、攻撃者は代替パスまたはチャネルを使用して認証バイパスを実行し、Webサーバーの隠しディレクトリにアクセスできます。このリポジトリはCVE-2017-9947を利用しています。...

nginx-cve-2026-42945

CVE-2026-42945 NGINX Rift — 防御性扫描器 运行 NGINX Open Source 、NGINX Plus 或基于 NGINX 的 Ingress/控制器的组织，应确认其是否受到 CVE-2026-42945 的影响，并在利用尝试触及生产边缘之前进行修补或重新配置。 本仓库提供了一个只读、非利用 的扫描器，供你在自有或获准测试的系统上进行授权的防御性使用。 漏洞是什么 项目| 详情 ---|--- CVE| CVE-2026-42945 名称| NGINX Rift 组件| ngxhttprewritemodule（堆缓冲区溢出） 受影响版本| NGINX...

CVE-2021-1675-PrintNightmare-Analysis

漏洞研究：通过 Windows Print Spooler 实现本地权限提升与 RCE（PrintNightmare / CVE-2021-1675） 该仓库包含一份详细的技术报告（Write-up）以及对 Windows 打印后台处理程序（Print Spooler）服务中关键漏洞的利用概念验证分析，该漏洞允许低权限域用户以最高系统权限远程执行任意代码。 🛑 警告与免责声明： 本材料仅用于教育目的和合法的安全审计（渗透测试）。未经所有者事先书面同意，针对系统使用所述技术将受到法律追究。 📌 研究的现实意义与背景 PrintNightmare 系列漏洞对基于 Windows Server...

zerologon

zerologon script zerologon para explotar CVE-2020-1472 CVSS 10/10 Código de explotación basado en https://www.secura.com/blog/zero-logon y https://github.com/SecuraBV/CVE-2020-1472. Investigación original y escáner por Secura, modificaciones por RiskSense Inc. https://github.com/risksense/zerolog...

zerologon

zerologon 互換性のないデバイスを示すイベントを確認します - CVE-2020-1472 EventID 5827 EventID 5828 EventID 5829 EventID 5830 EventID 5831 2020年8月、MicrosoftはCVE-2020-1472にパッチを適用しました。このパッチでは、安全でない接続が受け入れられる2021年2月9日までの猶予期間があります。 2021年2月9日のパッチ以降、安全でないクライアントは拒否されます。...

CVE-2026-86665

A vulnerability was identified in aircheng-org iWebShop-5 up to 5.15. This issue affects the function Update::index of the file controllers/update.php. The manipulation leads to missing authorization. Remote exploitation of the attack is possible. The exploit is publicly available and might be...

Astra Linux – Vulnerability in Samba

A design flaw was identified in Samba’s DirSync control implementation, which exposes passwords and secrets in Active Directory to privileged users and Read-Only Domain Controllers RODCs. This flaw allows RODCs and users with the GETCHANGES permission to access all attributes, including sensitive...

Astra Linux – Vulnerability in Intel Microcode

Incorrect default permissions in some IntelR XeonR processor memory controller configurations when using IntelR SGX may allow a privileged user to potentially enable escalation of privileges through local access...

Siemens Desigo DXR and PXC Controllers

SUMMARY A vulnerability in Desigo DXR and PXC controllers has been identified that could allow an attacker to cause denial of service conditions by sending malformed BACnet packets. Recovery requires a device reset or reboot to restore normal functionality. Siemens has released new versions for...

CVE-2025-71412

Injection of false emergency or status messages over CPDLC may lead to misallocation of resources, operational confusion, and improper response actions by flight crews, traffic controllers, and ground operations. This type of attack can be carried out remotely over radio frequency...

EUVD-2025-210651

Injection of false emergency or status messages over CPDLC may lead to misallocation of resources, operational confusion, and improper response actions by flight crews, traffic controllers, and ground operations. This type of attack can be carried out remotely over radio frequency...

CVE-2026-53985

Ground Station prior to 0.6.0 contains an unauthenticated denial-of-service vulnerability in the Socket.IO server's servicecontrol event handler that allows any unauthenticated network peer to forcibly terminate the ground-station process by sending a single restartservice command. Attackers can...

Over 4,400 Rockwell PLCs Exposed Online, 22 Found in Water Attack Cities

Forescout found 22 internet-facing Rockwell Automation programmable logic controllers PLCs in cities hit by recent cyberattacks on US water utilities. Nineteen used the same mobile carrier network. Its August 3 scan counted 4,407 exposed Rockwell controllers worldwide, including 2,844 in the Unit...