456 matches found
kerbrute
kerbrute An script to perform kerberos bruteforcing by using the Impacket library. When is executed, as input it receives a user or list of users and a password or list of password. Then is performs a brute-force attack to enumerate: Valid username/passwords pairs Valid usernames Usernames withou...
plown
حول Plown هو ماسح أمني لنظام إدارة المحتوى Plone. على الرغم من أن Plone يتمتع بأفضل سجل أمني بين أنظمة إدارة المحتوى الرئيسية ويُعتبر آمنًا للغاية، فإن سوء الإعداد وكلمات المرور الضعيفة قد تتيح اختراق الأنظمة. تم تطوير Plown لتسهيل اكتشاف أسماء المستخدمين وكلمات المرور، والعمل كمساعد لمسؤولي...
azbelt
azbelt Extension DLL autonome et extension sliver pour énumérer les identifiants liés à Azure, principalement sur les machines jointes à AAD Modules aadjoin - Obtient des informations sur l'état AAD de la machine via NetGetAadJoinInformation credman - Obtient les identifiants du Gestionnaire...
Atlas
Atlas Atlas is a cross-platform Windows/Linux network execution and security assessment toolkit built on top of TrustedSec's Titanis protocol library. It is inspired by the workflow of NetExec/CrackMapExec: target lists, credential sets, modular enumeration, and compact HH:mm:ss + host - message...
CVE-2025-26788
CVE-2025-26788 إعداد البيئة الخطوة 1 - التحقق من تشغيل Docker Desktop docker version الخطوة 2 - بناء الصورة cd C:\Users\jhcho\Desktop\passkey\CVE-2025-26788 docker build -t skfs . الخطوة 3 - تشغيل الحاوية docker run -d --name skfs --hostname skfs.localdomain --privileged --cgroupns=host -v...
OracleOTM
OracleOTM أداة بايثون لاستغلال CVE-2021-35616 يعمل السكربت عبر وحدات modules، وقد نفّذتها بالترتيب التالي: ► تعداد أسماء المستخدمين ► البحث عن بيانات اعتماد افتراضية ► تنفيذ استعلام SQL باستخدام DBXML servlet ► الاستغلال الكامل وتنفيذ JSP بناء جملة السكربت كما يلي: .\OracleOTM.py module host TXT...
Bludit-3-9-2-bb
Bludit-3-9-2-bb Bludit 3.9.2 - contournement de brute force - CVE-2019-17240 Script très simple basé sur CVE-2019-17240. POC et explication originaux : https://github.com/bludit/bludit/pull/1090. usage: python ./bludit-3-9-2-bb.py -l 'http://sitename.com/admin/login' -u ./usernamesfilelist.txt -p...
EUVD-2026-74846
CyberPanel versions 2.4.3 through 2.4.5 expose unauthenticated AI Scanner debugging endpoints that disclose administrator usernames, API-key prefixes, scan identifiers, target domains, and account metadata. Unauthenticated attackers can enumerate panel administrators and recent scanner activity t...
CVE-2026-84674
Missing permission checks in Jenkins XebiaLabs XL Deploy Plugin 26.1.0 and earlier allow attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins...
CVE-2026-84674
Missing permission checks in Jenkins XebiaLabs XL Deploy Plugin 26.1.0 and earlier allow attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins...
EUVD-2026-70147
Missing permission checks in Jenkins XebiaLabs XL Deploy Plugin 26.1.0 and earlier allow attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins...
CVE-2026-84674
The Jenkins XebiaLabs XL Deploy Plugin (version 26.1.0 and earlier) is vulnerable to a missing permission check in several HTTP endpoints. This flaw allows users with Overall/Read permissions to enumerate credentials IDs for credentials stored in Jenkins. Attackers can leverage these identified I...
CVE-2026-84674
Missing permission checks in Jenkins XebiaLabs XL Deploy Plugin 26.1.0 and earlier allow attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins...
PT-2026-84797
Missing permission checks in Jenkins XebiaLabs XL Deploy Plugin 26.1.0 and earlier allow attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins...
CVE-2026-53548: Improper Authorization
Termix is a web-based server management platform with SSH terminal, tunneling, and file editing capabilities. Prior to 2.6.1, the GET /host/db/host/:id/password endpoint in src/backend/database/routes/host.ts accepts an authenticated user's numeric host ID and the field=password or...
CVE-2026-48767
TypeBot is a chatbot builder tool. Versions prior to 3.17.0 allow a low-privilege guest member of a workspace to obtain a live Google Sheets OAuth access token for that workspace by calling the Google Sheets helper getAccessToken. The vulnerable path checks only whether the caller has read access...
CVE-2026-48767 Google Sheets OAuth access token disclosure to guest members via getAccessToken
TypeBot is a chatbot builder tool. Versions prior to 3.17.0 allow a low-privilege guest member of a workspace to obtain a live Google Sheets OAuth access token for that workspace by calling the Google Sheets helper getAccessToken. The vulnerable path checks only whether the caller has read access...
CVE-2026-48767 Google Sheets OAuth access token disclosure to guest members via getAccessToken
TypeBot is a chatbot builder tool. Versions prior to 3.17.0 allow a low-privilege guest member of a workspace to obtain a live Google Sheets OAuth access token for that workspace by calling the Google Sheets helper getAccessToken. The vulnerable path checks only whether the caller has read access...