Lucene search
+L

353 matches found

Kitploit
Kitploit
added 2026/09/22 10:12 a.m.12 views

kerbrute

kerbrute 一个通过使用 Impacket 库执行 Kerberos 暴力破解的脚本。 执行时,输入接收一个用户或用户列表以及一个密码或密码列表。然后进行暴力破解攻击以枚举: 有效的用户名/密码组合 有效的用户名 不需要预认证的用户名 结果,脚本会生成发现的凭证列表,以及由这些有效凭证生成的 TGT。 安装 从 pypi: root@kitploit: pip3 install kerbrute 从仓库: root@kitploit: git clone https://github.com/TarlogicSecurity/kerbrute cd kerbrute pip...

6AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/22 6:02 a.m.10 views

plown

Acerca de Plown es un escáner de seguridad para el CMS Plone. Aunque Plone tiene el mejor historial de seguridad de cualquier CMS importante y se considera altamente seguro, las configuraciones incorrectas y las contraseñas débiles podrían permitir intrusiones en el sistema. Plown ha sido...

5.6AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/21 2:10 p.m.10 views

OracleOTM

OracleOTM Herramienta en Python para explotar CVE-2021-35616 El script funciona por módulos, los cuales implementé en el siguiente orden: ► Enumeración de nombres de usuario ► Búsqueda de credenciales por defecto ► Ejecución de una consulta SQL usando el servlet DBXML ► Explotación completa y...

5.5CVSS6.8AI score0.27974EPSS
SaveExploits0
Kitploit
Kitploit
added 2026/09/19 2:56 p.m.8 views

Bludit-3-9-2-bb

Bludit-3-9-2-bb Bludit 3.9.2 - bruteforce bypass - CVE-2019-17240 Very simple script based on CVE-2019-17240. Original POC and explanation: https://github.com/bludit/bludit/pull/1090. root@kitploit: usage: python ./bludit-3-9-2-bb.py -l 'http://sitename.com/admin/login' -u ./usernamesfilelist.txt...

9.8CVSS6.4AI score0.39598EPSS
SaveExploits9References1
Kitploit
Kitploit
added 2026/09/18 11:44 p.m.9 views

azbelt

azbelt DLL independiente y extensión sliver para enumerar credenciales relacionadas con Azure, principalmente en máquinas unidas a AAD Módulos aadjoin - Obtiene información sobre el estado de AAD de la máquina mediante NetGetAadJoinInformation credman - Obtiene credenciales del Administrador de...

5.9AI score
SaveExploits0References2
Kitploit
Kitploit
added 2026/09/18 11:49 a.m.14 views

Atlas

Atlas Atlas is a cross-platform Windows/Linux network execution and security assessment toolkit built on top of TrustedSec's Titanis protocol library. It is inspired by the workflow of NetExec/CrackMapExec: target lists, credential sets, modular enumeration, and compact HH:mm:ss + host - message...

5.9AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/17 5:09 a.m.11 views

CVE-2025-26788

CVE-2025-26788 Configuración del entorno Paso 1 - Verificar la ejecución de Docker Desktop docker version Paso 2 - Construir la imagen cd C:\Users\jhcho\Desktop\passkey\CVE-2025-26788 docker build -t skfs . Paso 3 - Ejecutar el contenedor docker run -d --name skfs --hostname skfs.localdomain...

8.4CVSS5.9AI score0.00463EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/09/09 11:21 a.m.8 views

EUVD-2026-74846

CyberPanel versions 2.4.3 through 2.4.5 expose unauthenticated AI Scanner debugging endpoints that disclose administrator usernames, API-key prefixes, scan identifiers, target domains, and account metadata. Unauthenticated attackers can enumerate panel administrators and recent scanner activity t...

6.9CVSS5.6AI score0.00522EPSS
SaveExploits0References3
NVD
NVD
added 2026/09/02 4:17 p.m.11 views

CVE-2026-84674

Missing permission checks in Jenkins XebiaLabs XL Deploy Plugin 26.1.0 and earlier allow attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins...

5.4CVSS0.0014EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2026/09/02 3:40 p.m.16 views

CVE-2026-84674

Missing permission checks in Jenkins XebiaLabs XL Deploy Plugin 26.1.0 and earlier allow attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins...

5.9AI score0.0014EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/09/02 3:40 p.m.37 views

CVE-2026-84674

Missing permission checks in Jenkins XebiaLabs XL Deploy Plugin 26.1.0 and earlier allow attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins...

0.0014EPSS
SaveExploits0References1
CVE
CVE
added 2026/09/02 3:40 p.m.18 views

CVE-2026-84674

Missing permission checks in Jenkins XebiaLabs XL Deploy Plugin (version 26.1.0 and earlier) allow an attacker with Overall/Read permission to enumerate the IDs of credentials stored in Jenkins. The CVSS v3.1 base score is 5.4 (Medium) , reflecting a network-vector attack with low complexity and ...

5.4CVSS5.9AI score0.0014EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/09/02 3:40 p.m.12 views

EUVD-2026-70147

Missing permission checks in Jenkins XebiaLabs XL Deploy Plugin 26.1.0 and earlier allow attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins...

5.4CVSS5.9AI score0.0014EPSS
SaveExploits0References1
NVD
NVD
added 2026/08/11 6:17 p.m.13 views

CVE-2026-48767

TypeBot is a chatbot builder tool. Versions prior to 3.17.0 allow a low-privilege guest member of a workspace to obtain a live Google Sheets OAuth access token for that workspace by calling the Google Sheets helper getAccessToken. The vulnerable path checks only whether the caller has read access...

7.6CVSS0.0039EPSS
SaveExploits0References4
Cvelist
Cvelist
added 2026/08/11 5:13 p.m.34 views

CVE-2026-48767 Google Sheets OAuth access token disclosure to guest members via getAccessToken

TypeBot is a chatbot builder tool. Versions prior to 3.17.0 allow a low-privilege guest member of a workspace to obtain a live Google Sheets OAuth access token for that workspace by calling the Google Sheets helper getAccessToken. The vulnerable path checks only whether the caller has read access...

7.6CVSS0.0039EPSS
SaveExploits0References4
OSV
OSV
added 2026/08/11 5:13 p.m.20 views

CVE-2026-48767 Google Sheets OAuth access token disclosure to guest members via getAccessToken

TypeBot is a chatbot builder tool. Versions prior to 3.17.0 allow a low-privilege guest member of a workspace to obtain a live Google Sheets OAuth access token for that workspace by calling the Google Sheets helper getAccessToken. The vulnerable path checks only whether the caller has read access...

7.6CVSS5.4AI score
SaveExploits0References6
NVD
NVD
added 2026/08/05 6:17 p.m.16 views

CVE-2026-70444

A missing permission check in Jenkins Violation Comments to GitLab Plugin 2.62.0 and earlier allows attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins...

4.3CVSS0.00179EPSS
SaveExploits0References1
NVD
NVD
added 2026/08/05 6:17 p.m.12 views

CVE-2026-70447

Missing permission checks in Jenkins AWS CodeBuild Plugin 0.59 and earlier allow attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins...

4.3CVSS0.00164EPSS
SaveExploits0References1
NVD
NVD
added 2026/08/05 6:17 p.m.13 views

CVE-2026-70433

Missing permission checks in Jenkins HCL AppScan Plugin 1.8.3 and earlier allow attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins...

4.3CVSS0.0017EPSS
SaveExploits0References1
attackerkb
attackerkb
added 2026/08/05 5:40 p.m.11 views

CVE-2026-70447

Missing permission checks in Jenkins AWS CodeBuild Plugin 0.59 and earlier allow attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins...

4.3CVSS5.5AI score0.00164EPSS
SaveExploits0References2
Rows per page
Query Builder