CVE-2023-41898_Lab

CVE-2023-41898 Unvalidated Deep Link Lab È un Lab educativo di riproduzione ridotta basato sul report di vulnerabilità pubblico GHSL-2023-142 di Home Assistant Companion for Android e sulla struttura open source della versione vulnerabile 2023.8.2. Non utilizza server, account o token reali di Ho...

langflow-cors-scanner

CVE-2025-34291 — Langflow Origin Validation / CORS Panoramica Una configurazione CORS eccessivamente permissiva abbinata alla configurazione del cookie di refresh token consente il furto di credenziali...

CVE-2026-22015-Serverless-Function-Environment-Variable-Injection-via-Event

CVE-2026-22015 – Injektion von Umgebungsvariablen in Serverless-Funktionen über Events Programmcode Python-Lambda-Simulation root@kitploit: lambdaenvinject.py - Vulnerable function that reads env from event import os, json def handlerevent, context: The event contains environment variable overrid...

TP-Link-Archer-CR-700-XSS-Exploit

TP-Link-Archer-CR-700-XSS-Exploit Sfruttamento del router TP-Link Archer CR-700. Divulgato responsabilmente a TP-Link Passaggio 1- Sulla tua macchina Linux Kali o Ubuntu digita il seguente comando gedit /etc/dhcp/dhclient.conf Commenta la riga qui sotto send host-name = gethostname; Copiala nella...

SCAT

SCAT Strumento di acquisizione credenziali HP SiteScope Che cos'è? Uno strumento che sfrutta una vulnerabilità di esecuzione remota di codice nelle installazioni predefinite di HP SiteScope v11.32 e successive per rubare le credenziali memorizzate in SiteScope. Quale vulnerabilità di esecuzione...

MAL-2026-14851 Malicious code in 3layerdipstacko89fkl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6dd3e617994aeeb1caf198bf507291025fb64a8806480fd15933167e7c70eeb8 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

MAL-2026-14963 Malicious code in 3layerdipstackvld3fr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ff67ac203126e35f9404ce01eccdf8ec2297632b0b11dd8e8140bfbf4c3b376 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in 3layerdipstackwqo67k (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 864e56b4902469edeaaf89c3ccec9f8889b63aa7a0c23f00419542deceeaad86 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in 3layerdipstackposh4n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e285d6a749b37b4af081400d21c2d65c9b6cca18c85df585f033c079b4576cd0 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

MAL-2026-14930 Malicious code in 3layerdipstacktfp41b (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fbeba58f65ce0555af04c96550f18ac2589acab83c353556b9b4d625a1669be9 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

MAL-2026-14627 Malicious code in 3layerdipstack4wsms0 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c375da30bd4dc753181260b33918aec7b17b0c4bc5ecd3ac06dc3676055d84f0 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Moniker-Link-Lab-Setup

Configurazione del Laboratorio Moniker Link - CVE-2024-21413 🎯 Panoramica del Progetto Laboratorio pratico di penetration testing che dimostra lo sfruttamento del moniker link CVE-2024-21413 per il furto di credenziali NTLM. Questo progetto documenta l'intera catena di attacco, dalla configurazio...

CVE-2026-82249

gitoxide before 0.38.2 fails to validate carriage return characters in URL values passed to credential helpers. Attackers can supply URLs containing bare carriage returns to inject additional helper protocol fields and cause credential helpers to return credentials for attacker-specified hosts...

CVE-2024-21413

CVE-2024-21413 Anmeldeinformationen durch Ausnutzen der Schwachstelle CVE-2024-21413 abrufen Zunächst einmal Hallo. Dank einer Schwachstelle in Microsoft Outlook können Sie die folgenden Schritte ausführen, um Windows-Benutzerinformationen zu erhalten. Ich sende die E-Mail über die PHP-Bibliothek...

CVE-2026-82249 gitoxide before 0.38.2 Credential Helper Protocol Field Injection

gitoxide before 0.38.2 fails to validate carriage return characters in URL values passed to credential helpers. Attackers can supply URLs containing bare carriage returns to inject additional helper protocol fields and cause credential helpers to return credentials for attacker-specified hosts...

MAL-2026-14588 Malicious code in yaml-report-formatter (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd762621d7d279a25921e8f8c7d1a7e8040948bd3ac445ca9cabd8f200ce36f0 Package presents itself as a YAML report formatter but its top-level src/yamlreportformatter/init.py starts a daemon thread on import that reads a...

LsassReflectDumping

LsassReflectDumping Questo strumento sfrutta la tecnica di Process Forking utilizzando l'API RtlCreateProcessReflection per clonare il processo lsass.exe. Una volta creato il clone, utilizza i callback MINIDUMPCALLBACKINFORMATION per generare un memory dump del processo clonato. Passaggi Ottenere...

CVE-2024-21413-Vulnerabilidad-Outlook-LAB

CVE-2024-21413 – Vulnerabilità Outlook LAB Descrizione della vulnerabilità CVE-2024-21413 è una vulnerabilità critica scoperta in Microsoft Outlook che consente a un attaccante remoto di eseguire collegamenti dannosi tramite un'email attentamente costruita. Questo exploit utilizza il protocollo...

BlackNET

BlackNET 😈 Botnet Windows gratuito, avançado e moderno, com um painel PHP bonito e seguro desenvolvido usando VB.NET. Sobre o BlackNET 🤓 Botnet Windows gratuito, avançado e moderno, com um painel PHP bonito e seguro construído usando VB.NET. este controlador de botnet vem com muitos recursos e o...

sshLooter

NON USARE QUESTO Esiste una versione C che è molto migliore sshLooterC sshLooter Script per rubare password da ssh. Installazione root@kitploit: git clone https://github.com/mthbernardes/sshLooter.git cd sshLooter Configurazione root@kitploit: Edit the script on install.sh, and add your telegram...