346 matches found
Bludit-3-9-2-bb
Bludit-3-9-2-bb Bludit 3.9.2 - bypass bruteforce - CVE-2019-17240 Script molto semplice basato su CVE-2019-17240. POC originale e spiegazione: https://github.com/bludit/bludit/pull/1090. root@kitploit: usage: python ./bludit-3-9-2-bb.py -l 'http://sitename.com/admin/login' -u...
kerbrute
kerbrute Uno script per eseguire brute forcing di Kerberos utilizzando la libreria Impacket. Quando viene eseguito, riceve come input un utente o una lista di utenti e una password o una lista di password. Quindi esegue un attacco di forza bruta per enumerare: Coppie nome utente/password valide...
plown
Über Plown ist ein Sicherheitsscanner für das Plone-CMS. Obwohl Plone die beste Sicherheitsbilanz aller großen CMS-Systeme aufweist und als hochsicher gilt, können Fehlkonfigurationen und schwache Passwörter Systemeinbrüche ermöglichen. Plown wurde entwickelt, um das Auffinden von Benutzernamen u...
azbelt
azbelt DLL standalone ed estensione per sliver per l'enumerazione di credenziali correlate ad Azure, principalmente su macchine AAD joined Moduli aadjoin - Recupera informazioni sullo stato AAD della macchina tramite NetGetAadJoinInformation credman - Recupera le credenziali da Credential Manager...
Atlas
Atlas Atlas è un toolkit multipiattaforma Windows/Linux per l'esecuzione di operazioni di rete e valutazione della sicurezza, costruito sulla libreria di protocollo Titanis di TrustedSec. È ispirato al flusso di lavoro di NetExec/CrackMapExec: elenchi di target, set di credenziali, enumerazione...
OracleOTM
OracleOTM Strumento Python per sfruttare CVE-2021-35616 Lo script funziona a moduli, che ho implementato nel seguente ordine: ► Enumerazione degli username ► Ricerca di credenziali predefinite ► Esecuzione di una query SQL tramite il servlet DBXML ► Sfruttamento completo ed esecuzione di JSP La...
CVE-2025-26788
CVE-2025-26788 Configuração do Ambiente Passo 1 - Verificar se o Docker Desktop está em execução docker version Passo 2 - Construir a imagem cd C:\Users\jhcho\Desktop\passkey\CVE-2025-26788 docker build -t skfs . Passo 3 - Executar o contêiner docker run -d --name skfs --hostname skfs.localdomain...
CVE-2026-48767 Google Sheets OAuth access token disclosure to guest members via getAccessToken
TypeBot is a chatbot builder tool. Versions prior to 3.17.0 allow a low-privilege guest member of a workspace to obtain a live Google Sheets OAuth access token for that workspace by calling the Google Sheets helper getAccessToken. The vulnerable path checks only whether the caller has read access...
CVE-2026-48767 Google Sheets OAuth access token disclosure to guest members via getAccessToken
TypeBot is a chatbot builder tool. Versions prior to 3.17.0 allow a low-privilege guest member of a workspace to obtain a live Google Sheets OAuth access token for that workspace by calling the Google Sheets helper getAccessToken. The vulnerable path checks only whether the caller has read access...
CVE-2026-70444
A missing permission check in Jenkins Violation Comments to GitLab Plugin 2.62.0 and earlier allows attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins...
CVE-2026-70447
Missing permission checks in Jenkins AWS CodeBuild Plugin 0.59 and earlier allow attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins...
CVE-2026-70433
Missing permission checks in Jenkins HCL AppScan Plugin 1.8.3 and earlier allow attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins...
CVE-2026-70447
Missing permission checks in Jenkins AWS CodeBuild Plugin 0.59 and earlier allow attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins...
CVE-2026-70445
Missing permission checks in Jenkins Sauce OnDemand Plugin 2.2.0 and earlier allow attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins...
CVE-2026-70445
The CVE-2026-70445 entry concerns Jenkins Sauce OnDemand Plugin (2.2.0 and earlier). The root cause is missing permission checks in HTTP endpoints, enabling users with Overall/Read permission to enumerate credentials IDs stored in Jenkins. Reported impact is credential enumeration; exploitation s...
CVE-2026-70444
A missing permission check in Jenkins Violation Comments to GitLab Plugin 2.62.0 and earlier allows attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins...
CVE-2026-70438
A missing permission check in Jenkins Parameterized Remote Trigger Plugin 3.2.2 and earlier allows attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins...
CVE-2026-70438
A missing permission check in Jenkins Parameterized Remote Trigger Plugin 3.2.2 and earlier allows attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins...