Silhouette

Silhouette Por Gabriel Landau e Mark Mager da Elastic Security. Do Esconda Seus Bens Valiosos — Mitigando Ataques de Extração de Credenciais Físicas apresentado no Shmoocon 2023. Slides aqui. Mantendo os segredos do LSA fora da memória física O Silhouette é uma POC que mitiga o uso da memória...

refreshing-mcp-tool

यह वास्तव में पूरा या तैयार नहीं है, लेकिन मैं कोड को चेक इन करवाना चाहता था। यह मूल रूप से F5 के डेटाबेस प्रोटोकॉल "mcp" को लागू करता है, जो UNIX domain socket के माध्यम से काम करता है। इसका मतलब है कि इनमें से किसी का उपयोग करने से पहले आपको F5 डिवाइस पर शेल की आवश्यकता होती है। आप आमतौर पर...

silph

SILPH: Coletor Furtivo de Senhas Locais em Memória SILPH é uma ferramenta de red team de código aberto projetada para despejar segredos LSA, hashes SAM e credenciais DCC2 inteiramente em memória, sem gravar nenhum arquivo em disco. Diferentemente do projeto upstream go-secdump , o SILPH é criado...

SilentNimvest

SilentNimvest Im Wesentlichen ist SilentNimvest ein Parser für SAM- und Security-Hives, geschrieben in Nim. SilentNimvest liest Schlüssel unter diesen Hives mithilfe der Silent-Harvest-Technik. Mit dieser Technik kann ein einfaches Administrator-Konto, das SeBackupPrivilege aktiviert dank der...

DumpGuard

DumpGuard DumpGuard è uno strumento di credential dumping e ricerca di protocolli per sistemi Windows moderni. Abusa del protocollo Remote Credential Guard per recuperare materiale di credenziali anche quando Credential Guard è attivo, e include anche un percorso per il pacchetto di autenticazion...

CVE-2025-49132

CVE-2025-49132 - 10.0 गंभीर https://github.com/pterodactyl/panel/security/advisories/GHSA-24wv-6c99-f843 संवेदनशील संस्करण: 1.9.0 .. 1.11.10 OpSec विचार RCE शोषण सीमित है लेकिन इसके माध्यम से पता लगाया जा सकता है: cat /var/www/pterodactyl/storage/logs/laravel-2025--.log | grep...

NativeDump

NativeDump NativeDump consente di dumpare il processo lsass utilizzando solo NTAPI, generando un file Minidump con solo gli stream necessari per essere analizzati da strumenti come Mimikatz o Pypykatz Stream SystemInfo, ModuleList e Memory64List. NTOpenProcessToken e NtAdjustPrivilegeToken per...

Outpacket

📦 Outpacket क्या आप impacket से तंग आ चुके हैं? यह चीटशीट सामान्य impacket वर्कफ़्लो को उनके आधुनिक विकल्पों से मैप करती है अनुक्रमणिका प्रमाणीकरण त्वरित संदर्भ 1. रिमोट निष्पादन WMI निष्पादन · wmiexec.py DCOM निष्पादन · dcomexec.py सेवा-आधारित निष्पादन · smbexec.py · psexec.py अनुसूचित कार्य...

MicroBurst

MicroBurst: Ein PowerShell-Toolkit für Angriffe auf Azure MicroBurst enthält Funktionen und Skripte, die die Erkennung von Azure-Diensten, die Prüfung auf schwache Konfigurationen sowie Post-Exploitation-Aktionen wie das Dumping von Anmeldedaten unterstützen. Es ist für den Einsatz bei...

solarflare

solarflare Credential Dumping Tool for SolarWinds Orion Blog post: https://malicious.link/post/2020/solarflare-release-password-dumper-for-solarwinds-orion/ Credit to @asolino, @gentilkiwi, and @skelsec for helping me figuring out DPAPI. root@kitploit: ============================================...

ZerologonWithImpacket-CVE2020-1472

Combinazione di Exploit Zerologon e Impacket CVE-2020-1472 Questo repository contiene un'implementazione aggiornata 2024 dell'exploit Zerologon combinato con gli strumenti Impacket per sfruttare la CVE-2020-1472 Zerologon. Questo exploit prende di mira ambienti Windows Server per manipolare le...

Johnson Controls Simplex Incident Manager

ADVISORY SUMMARY Successful exploitation of this vulnerability could allow a local attacker with low privileges to extract user credentials passwords and authentication tokens from system memory, potentially leading to unauthorized access to the application and connected systems. 2. RECOMMENDED...

OctLurk and SilkLurk: newly identified tailored backdoors in cyber-espionage campaign in Central Asia

Introduction We have been tracking two new backdoors, OctLurk and SilkLurk , observed in attacks against government organizations primarily in Central Asia since January 2025. Identified victims are located in Afghanistan, Kyrgyzstan, Tajikistan, Uzbekistan, Kazakhstan, and the Syrian Arab...

GoSerpent: a persistent threat evolves with sophisticated data collection and exfiltration

Introduction In February 2026, we discovered a set of malicious activities that had been ongoing since late 2025. These activities involved a RAT module written in Go with proxy capabilities, which served as the main stage of the attack. The attack targeted government and diplomatic entities in...

OSCPToolkit

OSCP Toolkit Setup This is a bash script oscp-toolkit-setup...

The-Full-Attack-Chain

⚔️ The Full Attack Chain — Capstone Red Team Engagement Int...

Eternalblue-ms17-010-lab

01-EternalBlue-MS17-010-README.mdhttps://github.com/user-atta...

Tax Search Ads Deliver ScreenConnect Malware Using Huawei Driver to Disable EDR

A large-scale malvertising campaign active since January 2026 has been observed targeting U.S.-based individuals searching for tax-related documents to serve rogue installers for ConnectWise ScreenConnect that drop a tool named HwAudKiller to blind security programs using the bring your own...

System-Exploitation-Privilege-Escalation

System Exploitation & Privilege Escalation Lab 📄 Project O...

📄 HP ProCurve 4.00 Credential Disclosure

Proof of concept code that performs a credential dumping attack against vulnerable HP ProCurve SNAC systems. ============================================================================================================================================= | Title : HP ProCurve 4.00 Credential Dumping...