61441 matches found
ssh-mitm
SSH MITM v2.3-dev Author: Joe Testa @therealjoetesta Overview This penetration testing tool allows an auditor to intercept SSH connections. A patch applied to the OpenSSH v7.5p1 source code causes it to act as a proxy between the victim and their intended SSH server; all plaintext passwords and...
ShadowSpray
ShadowSpray Uma ferramenta para pulverizar Shadow Credentials por todo um domínio na esperança de abusar de DACLs GenericWrite/GenericAll há muito esquecidas sobre outros objetos no domínio. Por que esta ferramenta Em muitos engajamentos, vejo no BloodHound que o grupo "Everyone" / "Authenticated...
kyocera-cve-2022-1026
kyocera-cve-2022-1026 क्योसेरा प्रिंटर में एक अनधिकृत डेटा निष्कर्षण भेद्यता, जो क्लियरटेक्स्ट एड्रेस बुक और डोमेन से जुड़े पासवर्ड को पुनर्प्राप्त करने की अनुमति देती है। भेद्यता अवलोकन 2021 में एक पेन टेस्ट के दौरान, मैं क्योसेरा के थिक क्लाइंट एप्लिकेशन के साथ छेड़छाड़ कर रहा था जिसका उपयोग...
CVE-2026-71206-PoC
CVE-2026-71206 — Shiori: JWT CheckToken खाते की स्थिति को कभी पुनः सत्यापित नहीं करता उत्पाद: go-shiori/shiori फ़ाइल: internal/domains/auth.go CWE: CWE-613 — Insufficient Session Expiration CVSS 3.1: AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L — 8.2 High CNA: Turan Security · CVE रिकॉर्ड विवरण Shiori का...
Exploit for CVE-2026-18963
CVE-2026-18963 — Lab tái dựng lại Keycloak reset-credentials...
gitlab-watchman
GitLab Watchman Sobre o GitLab Watchman GitLab Watchman é uma aplicação que usa a API do GitLab para detectar segredos expostos e dados pessoais. Também enumera a instância do GitLab para qualquer informação útil. Funcionalidades Detecção de Segredos Pesquisa no GitLab por projetos compartilhados...
solarflare
solarflare Credential Dumping Tool for SolarWinds Orion Blog post: https://malicious.link/post/2020/solarflare-release-password-dumper-for-solarwinds-orion/ Credit to @asolino, @gentilkiwi, and @skelsec for helping me figuring out DPAPI. root@kitploit: ============================================...
solarflare
solarflare Ferramenta de Extração de Credenciais para SolarWinds Orion Blog post: https://malicious.link/post/2020/solarflare-release-password-dumper-for-solarwinds-orion/ Créditos para @asolino, @gentilkiwi, e @skelsec por me ajudarem a descobrir o DPAPI. root@kitploit:...
o365enum
Office 365 User Enumeration Enumerate valid usernames from Office 365 using ActiveSync, Autodiscover, or office.com login page. Usage o365enum will read usernames from the file provided as first parameter. The file should have one username per line. The output is CSV-based for easier parsing. Val...
eaphammer
by Gabriel Ryan s0lst1c3 Current release: v1.14.1 Supports Python 3.9+. Overview EAPHammer is a toolkit for performing targeted evil twin attacks against WPA2-Enterprise networks. It is designed to be used in full scope wireless assessments and red team engagements. As such, focus is placed on...
Poc-CVE-2024-57040
Poc-CVE-2024-57040 CVE-2024-57040 एक सुरक्षा भेद्यता है जो कुछ TP-Link TL-WR845N राउटर मॉडल में पाई जाती है। विशेष रूप से, इसमें राउटर के रूट खाते के लिए एक "hardcoded" पासवर्ड शामिल है। इसका मतलब है कि एक डिफ़ॉल्ट, अपरिवर्तनीय पासवर्ड राउटर के सॉफ़्टवेयर में बनाया गया है। प्रभावित उपकरण: भेद्यता...
prowler
Prowler Prowler is a Network Vulnerability Scanner implemented on a Raspberry Pi Cluster, first developed during Singapore Infosec Community Hackathon - HackSmith v1.0. Capabilities Scan a network a particular subnet or a list of IP addresses for all IP addresses associated with active network...
Exploit for CVE-2026-18963
CVE-2026-18963 — Keycloak Reset-Credentials Bypass → Account T...
HPE-Aruba-AOS8-Vulnerabilities
⚠️ प्रकटीकरण स्थिति: इस रिपॉजिटरी के सभी निष्कर्ष प्रस्तुत किए गए थे HPE Networking Bug Bounty Program Bugcrowd को मई–जून 2026 के बीच। छह में से पांच प्रस्तुतियों को ट्राइएज स्तर पर "लागू नहीं" Not Applicable के रूप में बंद किया गया प्रस्तुत साक्ष्य के तकनीकी रूप से मिलान किए बिना। जून 2026 तक कोई...
CentralizedFirewall
Projeto da API do Firewall Manager Instalação Siga estes passos para configurar e executar o projeto da API: 1. Clone o Repositório root@kitploit: git clone https://github.com/adriyansyah-mf/CentralizedFirewall cd CentralizedFirewall 2. Edite o Arquivo .env Atualize as variáveis de ambiente no...
s3sec
s3sec Test AWS S3 buckets for read/write/delete access This tool was developed to quickly test a list of s3 buckets for public read, write and delete access for the purposes of penetration testing on bug bounty programs. Screenshot Found a bug bounty using this tool? Feel free to add me as a...
cred_scanner
credscanner A simple command line tool for finding AWS credentials in files. Optimized for use with Jenkins and other CI systems. I suspect there are other, better tools out there such as git-secrets, but I couldn't find anything to run a quick and dirty scan that also integrates well with Jenkin...
CVE-2026-75542 OAuth token exchange grants repository scopes for organizations the principal cannot access
Incorrect Authorization vulnerability in the OAuth token endpoint in hexpm hexpm allows an API key holding the repositories permission to read another organization's private packages. When an API key is exchanged for a token through the OAuth clientcredentials grant, validatescopesagainstkey/2 in...
CVE-2022-24716
CVE-2022-24716 Icinga Web 2 2.8.6, 2.9.6, 2.10 में मनमानी फ़ाइल प्रकटीकरण भेद्यता Icinga Web 2 एक ओपन सोर्स मॉनिटरिंग वेब इंटरफ़ेस, फ्रेमवर्क और कमांड-लाइन इंटरफ़ेस है। अप्रमाणित उपयोगकर्ता वेब-सर्वर उपयोगकर्ता के लिए सुलभ स्थानीय सिस्टम की फ़ाइलों की सामग्री लीक कर सकते हैं, जिसमें डेटाबेस...