kerbrute

kerbrute Impacketライブラリを使用してKerberosのブルートフォース攻撃を行うスクリプトです。 実行時には、ユーザー（またはユーザーリスト）とパスワード（またはパスワードリスト）を入力として受け取り、以下の情報を列挙するブルートフォース攻撃を実行します。 有効なユーザー名/パスワードのペア 有効なユーザー名 事前認証が不要なユーザー名 結果として、スクリプトは発見された有効な認証情報のリストと、それらの有効な認証情報によって生成されたTGTを生成します。 インストール pypiから: root@kitploit: pip3 install kerbrute...

plown

关于 Plown 是一款针对 Plone CMS 的安全扫描器。尽管 Plone 在所有主流 CMS 中拥有最佳的安全记录，且被认为高度安全，但错误配置和弱密码仍可能导致系统入侵。Plown 旨在简化用户名和密码的发现过程，并作为系统管理员的助手，帮助加强其 Plone 网站的安全性。 安装 Plown 使用 Python 编写，无需安装。只需克隆 GitHub 仓库并运行即可。 user@user:/Desktop$ git clonehttps://github.com/unweb/plown user@user:/Desktop$ cd plown...

OracleOTM

OracleOTM CVE-2021-35616をエクスプロイトするためのPythonツール スクリプトはモジュールで動作し、以下の順序で実装しています。 ► ユーザー名列挙 ► デフォルト認証情報の検索 ► DBXMLサーブレットを使用したSQLクエリの実行 ► 完全なエクスプロイトとJSP実行 スクリプトの構文は次のとおりです。 .\OracleOTM.py module host TXT file additional parameters ユーザー名列挙: .\OracleOTM.py enum hosts TXT file -u users.txt デフォルト認証情報の検索:...

Bludit-3-9-2-bb

Bludit-3-9-2-bb Bludit 3.9.2 - ブルートフォースバイパス - CVE-2019-17240 CVE-2019-17240 に基づく非常にシンプルなスクリプト。 元のPOCと解説: https://github.com/bludit/bludit/pull/1090. root@kitploit: usage: python ./bludit-3-9-2-bb.py -l 'http://sitename.com/admin/login' -u ./usernamesfilelist.txt -p ./passwordsfilelist.txt -l :...

azbelt

azbelt 用于枚举 Azure 相关凭据的独立 DLL 和 sliver 扩展，主要针对已加入 AAD 的机器 模块 aadjoin - 通过 NetGetAadJoinInformation 获取机器的 AAD 状态信息 credman - 从凭据管理器获取凭据 env - 查找可能包含机密的 Azure/AAD 特定环境变量 managed - 调用 IMDS 端点获取具有托管身份的机器的信息 msal - 在各个 MSAL 缓存中查找令牌。解析令牌以显示作用域和有效性 sso - 如果机器已加入 AAD，获取已签名的 PRT cookie tbres - 从...

Atlas

Atlas Atlas is a cross-platform Windows/Linux network execution and security assessment toolkit built on top of TrustedSec's Titanis protocol library. It is inspired by the workflow of NetExec/CrackMapExec: target lists, credential sets, modular enumeration, and compact HH:mm:ss + host - message...

CVE-2025-26788

CVE-2025-26788 環境構築 ステップ1 - Docker Desktopの実行確認 docker version ステップ2 - イメージのビルド cd C:\Users\jhcho\Desktop\passkey\CVE-2025-26788 docker build -t skfs . ステップ3 - コンテナの実行 docker run -d --name skfs --hostname skfs.localdomain --privileged --cgroupns=host -v /sys/fs/cgroup:/sys/fs/cgroup:rw --tmpfs...

EUVD-2026-74846

CyberPanel versions 2.4.3 through 2.4.5 expose unauthenticated AI Scanner debugging endpoints that disclose administrator usernames, API-key prefixes, scan identifiers, target domains, and account metadata. Unauthenticated attackers can enumerate panel administrators and recent scanner activity t...

CVE-2026-84674

Missing permission checks in Jenkins XebiaLabs XL Deploy Plugin 26.1.0 and earlier allow attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins...

CVE-2026-84674

Missing permission checks in Jenkins XebiaLabs XL Deploy Plugin 26.1.0 and earlier allow attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins...

CVE-2026-84674

Missing permission checks in Jenkins XebiaLabs XL Deploy Plugin 26.1.0 and earlier allow attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins...

CVE-2026-84674

Missing permission checks in Jenkins XebiaLabs XL Deploy Plugin (version 26.1.0 and earlier) allow an attacker with Overall/Read permission to enumerate the IDs of credentials stored in Jenkins. The CVSS v3.1 base score is 5.4 (Medium) , reflecting a network-vector attack with low complexity and ...

EUVD-2026-70147

Missing permission checks in Jenkins XebiaLabs XL Deploy Plugin 26.1.0 and earlier allow attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins...

CVE-2026-48767

TypeBot is a chatbot builder tool. Versions prior to 3.17.0 allow a low-privilege guest member of a workspace to obtain a live Google Sheets OAuth access token for that workspace by calling the Google Sheets helper getAccessToken. The vulnerable path checks only whether the caller has read access...

CVE-2026-48767 Google Sheets OAuth access token disclosure to guest members via getAccessToken

TypeBot is a chatbot builder tool. Versions prior to 3.17.0 allow a low-privilege guest member of a workspace to obtain a live Google Sheets OAuth access token for that workspace by calling the Google Sheets helper getAccessToken. The vulnerable path checks only whether the caller has read access...

CVE-2026-48767 Google Sheets OAuth access token disclosure to guest members via getAccessToken

TypeBot is a chatbot builder tool. Versions prior to 3.17.0 allow a low-privilege guest member of a workspace to obtain a live Google Sheets OAuth access token for that workspace by calling the Google Sheets helper getAccessToken. The vulnerable path checks only whether the caller has read access...

CVE-2026-70444

A missing permission check in Jenkins Violation Comments to GitLab Plugin 2.62.0 and earlier allows attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins...

CVE-2026-70447

Missing permission checks in Jenkins AWS CodeBuild Plugin 0.59 and earlier allow attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins...

CVE-2026-70433

Missing permission checks in Jenkins HCL AppScan Plugin 1.8.3 and earlier allow attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins...

CVE-2026-70447

Missing permission checks in Jenkins AWS CodeBuild Plugin 0.59 and earlier allow attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins...