Lucene search
+L

353 matches found

Kitploit
Kitploit
added 2026/09/22 10:12 a.m.12 views

kerbrute

kerbrute Impacketライブラリを使用してKerberosのブルートフォース攻撃を行うスクリプトです。 実行時には、ユーザー(またはユーザーリスト)とパスワード(またはパスワードリスト)を入力として受け取り、以下の情報を列挙するブルートフォース攻撃を実行します。 有効なユーザー名/パスワードのペア 有効なユーザー名 事前認証が不要なユーザー名 結果として、スクリプトは発見された有効な認証情報のリストと、それらの有効な認証情報によって生成されたTGTを生成します。 インストール pypiから: root@kitploit: pip3 install kerbrute...

6AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/22 6:02 a.m.10 views

plown

关于 Plown 是一款针对 Plone CMS 的安全扫描器。尽管 Plone 在所有主流 CMS 中拥有最佳的安全记录,且被认为高度安全,但错误配置和弱密码仍可能导致系统入侵。Plown 旨在简化用户名和密码的发现过程,并作为系统管理员的助手,帮助加强其 Plone 网站的安全性。 安装 Plown 使用 Python 编写,无需安装。只需克隆 GitHub 仓库并运行即可。 user@user:/Desktop$ git clonehttps://github.com/unweb/plown user@user:/Desktop$ cd plown...

5.6AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/21 2:10 p.m.10 views

OracleOTM

OracleOTM CVE-2021-35616をエクスプロイトするためのPythonツール スクリプトはモジュールで動作し、以下の順序で実装しています。 ► ユーザー名列挙 ► デフォルト認証情報の検索 ► DBXMLサーブレットを使用したSQLクエリの実行 ► 完全なエクスプロイトとJSP実行 スクリプトの構文は次のとおりです。 .\OracleOTM.py module host TXT file additional parameters ユーザー名列挙: .\OracleOTM.py enum hosts TXT file -u users.txt デフォルト認証情報の検索:...

5.5CVSS6.8AI score0.27974EPSS
SaveExploits0
Kitploit
Kitploit
added 2026/09/19 2:56 p.m.8 views

Bludit-3-9-2-bb

Bludit-3-9-2-bb Bludit 3.9.2 - ブルートフォースバイパス - CVE-2019-17240 CVE-2019-17240 に基づく非常にシンプルなスクリプト。 元のPOCと解説: https://github.com/bludit/bludit/pull/1090. root@kitploit: usage: python ./bludit-3-9-2-bb.py -l 'http://sitename.com/admin/login' -u ./usernamesfilelist.txt -p ./passwordsfilelist.txt -l :...

9.8CVSS6.4AI score0.39598EPSS
SaveExploits9References1
Kitploit
Kitploit
added 2026/09/18 11:44 p.m.9 views

azbelt

azbelt 用于枚举 Azure 相关凭据的独立 DLL 和 sliver 扩展,主要针对已加入 AAD 的机器 模块 aadjoin - 通过 NetGetAadJoinInformation 获取机器的 AAD 状态信息 credman - 从凭据管理器获取凭据 env - 查找可能包含机密的 Azure/AAD 特定环境变量 managed - 调用 IMDS 端点获取具有托管身份的机器的信息 msal - 在各个 MSAL 缓存中查找令牌。解析令牌以显示作用域和有效性 sso - 如果机器已加入 AAD,获取已签名的 PRT cookie tbres - 从...

5.9AI score
SaveExploits0References2
Kitploit
Kitploit
added 2026/09/18 11:49 a.m.14 views

Atlas

Atlas Atlas is a cross-platform Windows/Linux network execution and security assessment toolkit built on top of TrustedSec's Titanis protocol library. It is inspired by the workflow of NetExec/CrackMapExec: target lists, credential sets, modular enumeration, and compact HH:mm:ss + host - message...

5.9AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/17 5:09 a.m.11 views

CVE-2025-26788

CVE-2025-26788 環境構築 ステップ1 - Docker Desktopの実行確認 docker version ステップ2 - イメージのビルド cd C:\Users\jhcho\Desktop\passkey\CVE-2025-26788 docker build -t skfs . ステップ3 - コンテナの実行 docker run -d --name skfs --hostname skfs.localdomain --privileged --cgroupns=host -v /sys/fs/cgroup:/sys/fs/cgroup:rw --tmpfs...

8.4CVSS5.9AI score0.00463EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/09/09 11:21 a.m.8 views

EUVD-2026-74846

CyberPanel versions 2.4.3 through 2.4.5 expose unauthenticated AI Scanner debugging endpoints that disclose administrator usernames, API-key prefixes, scan identifiers, target domains, and account metadata. Unauthenticated attackers can enumerate panel administrators and recent scanner activity t...

6.9CVSS5.6AI score0.00522EPSS
SaveExploits0References3
NVD
NVD
added 2026/09/02 4:17 p.m.11 views

CVE-2026-84674

Missing permission checks in Jenkins XebiaLabs XL Deploy Plugin 26.1.0 and earlier allow attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins...

5.4CVSS0.0014EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2026/09/02 3:40 p.m.16 views

CVE-2026-84674

Missing permission checks in Jenkins XebiaLabs XL Deploy Plugin 26.1.0 and earlier allow attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins...

5.9AI score0.0014EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/09/02 3:40 p.m.37 views

CVE-2026-84674

Missing permission checks in Jenkins XebiaLabs XL Deploy Plugin 26.1.0 and earlier allow attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins...

0.0014EPSS
SaveExploits0References1
CVE
CVE
added 2026/09/02 3:40 p.m.18 views

CVE-2026-84674

Missing permission checks in Jenkins XebiaLabs XL Deploy Plugin (version 26.1.0 and earlier) allow an attacker with Overall/Read permission to enumerate the IDs of credentials stored in Jenkins. The CVSS v3.1 base score is 5.4 (Medium) , reflecting a network-vector attack with low complexity and ...

5.4CVSS5.9AI score0.0014EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/09/02 3:40 p.m.12 views

EUVD-2026-70147

Missing permission checks in Jenkins XebiaLabs XL Deploy Plugin 26.1.0 and earlier allow attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins...

5.4CVSS5.9AI score0.0014EPSS
SaveExploits0References1
NVD
NVD
added 2026/08/11 6:17 p.m.14 views

CVE-2026-48767

TypeBot is a chatbot builder tool. Versions prior to 3.17.0 allow a low-privilege guest member of a workspace to obtain a live Google Sheets OAuth access token for that workspace by calling the Google Sheets helper getAccessToken. The vulnerable path checks only whether the caller has read access...

7.6CVSS0.0039EPSS
SaveExploits0References4
Cvelist
Cvelist
added 2026/08/11 5:13 p.m.34 views

CVE-2026-48767 Google Sheets OAuth access token disclosure to guest members via getAccessToken

TypeBot is a chatbot builder tool. Versions prior to 3.17.0 allow a low-privilege guest member of a workspace to obtain a live Google Sheets OAuth access token for that workspace by calling the Google Sheets helper getAccessToken. The vulnerable path checks only whether the caller has read access...

7.6CVSS0.0039EPSS
SaveExploits0References4
OSV
OSV
added 2026/08/11 5:13 p.m.20 views

CVE-2026-48767 Google Sheets OAuth access token disclosure to guest members via getAccessToken

TypeBot is a chatbot builder tool. Versions prior to 3.17.0 allow a low-privilege guest member of a workspace to obtain a live Google Sheets OAuth access token for that workspace by calling the Google Sheets helper getAccessToken. The vulnerable path checks only whether the caller has read access...

7.6CVSS5.4AI score
SaveExploits0References6
NVD
NVD
added 2026/08/05 6:17 p.m.16 views

CVE-2026-70444

A missing permission check in Jenkins Violation Comments to GitLab Plugin 2.62.0 and earlier allows attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins...

4.3CVSS0.00179EPSS
SaveExploits0References1
NVD
NVD
added 2026/08/05 6:17 p.m.12 views

CVE-2026-70447

Missing permission checks in Jenkins AWS CodeBuild Plugin 0.59 and earlier allow attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins...

4.3CVSS0.00164EPSS
SaveExploits0References1
NVD
NVD
added 2026/08/05 6:17 p.m.13 views

CVE-2026-70433

Missing permission checks in Jenkins HCL AppScan Plugin 1.8.3 and earlier allow attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins...

4.3CVSS0.0017EPSS
SaveExploits0References1
attackerkb
attackerkb
added 2026/08/05 5:40 p.m.11 views

CVE-2026-70447

Missing permission checks in Jenkins AWS CodeBuild Plugin 0.59 and earlier allow attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins...

4.3CVSS5.5AI score0.00164EPSS
SaveExploits0References2
Rows per page
Query Builder