75 matches found
nullinux
nullinux Nullinux 是一款 Linux 内部渗透测试工具，可用于通过 SMB 枚举操作系统信息、域信息、共享、目录和用户。如果在命令行参数中未提供用户名和密码，则会尝试匿名登录（即空会话）。Nullinux 是 Samba 工具 smbclient 和 rpcclient 的一个封装，通过多种技术枚举主机。 主要功能： 单主机或多主机枚举 枚举共享并列出根目录中的文件 枚举用户和组 多线程 RID 循环枚举 生成去重后的格式化 nullinuxusers.txt 输出文件，用于进一步利用 兼容 Python 2.7 和 3 更多信息和示例输出，请访问 wiki 页面。...
enumdb
enumdb Enumdb 是一款针对 MySQL 和 MSSQL 的关系型数据库暴力破解及后利用工具。当提供用户名和/或密码列表时，它会轮询每个主机以查找有效凭据。默认情况下，enumdb 会使用新发现的凭据自动通过关键词搜索表名或列名来查找敏感数据字段。这些信息可以被提取并输出到 .csv 或 .xlsx 报告文件中。 近期新增： 能够在目标上生成模拟 shell，执行 edb 或自定义 SQL 查询。 在标准枚举和暴力破解过程中增加了线程支持，以获得更快的速度。 默认不生成报告，数据提取需要 -r csv 或 -r xlsx。 默认不显示失败的登录尝试（需要 -v）。...
ridrelay
RidRelay 快速简便的方法，在内部网络中获取域用户名。 联系我：@skorov8 工作原理 RidRelay 结合了NTLM中继攻击、常见的lsarpc查询和RID循环来获取域用户名列表。它执行以下步骤： 1. 启动SMB和HTTP服务器，等待传入连接 2. 将传入的凭据中继到指定目标，以中继用户的上下文建立连接 3. 通过SMB连接向lsarpc管道发出查询，以获取域用户名列表。这是通过循环最多50000个RID完成的 4. 通过samr管道提取密码策略 （为获得最佳效果，请与Responder一起使用） 依赖 Python 3.6 Impacket v0.9.20-dev或更高...
ridrelay
RidRelay Quick and easy way to get domain usernames while on an internal network. Hit me up: @skorov8 How it works RidRelay combines the NTLM Relay attack, common lsarpc based queries and RID cycling to get a list of domain usernames. It takes these steps: 1. Spins up an SMB and HTTP servers and...
ridenum
RIDENUM - Un método simple de código abierto para realizar ataques de fuerza bruta en sesiones nulas Copyright 2018 TrustedSec Escrito por: David Kennedy ReL1K Twitter: @HackingDave y @TrustedSec Sitio web: https://www.trustedsec.com root@kitploit: . . . . . | \ | | | \ | || \ | | | | | | | / | |...
wyze-bulb-color-pwned
wyze-bulb-color-pwned Wireless exploit for the Wyze WLPA19CV2 color bulb Overview The Wyze Color WLPA19CV2 bulbs have a factory test mode which allows a custom OTA image to be flashed wirelessly through a specific sequence of power cycling. This project provides An implementation and guide to...
PT-2026-89872
@BitcoinBrabant @TimDraper Antoine Riard, "Replacement Cycling Attacks," disclosure on Bitcoin-Dev and Lightning-Dev mailing lists, Linux Foundation, 20 October 2023. CVE-2023-40231, CVE-2023-40232, CVE-2023-40233, CVE-2023-40234. Not CTO to be fair. 😉...
PT-2026-89871
@BitcoinBrabant @TimDraper Antoine Riard, "Replacement Cycling Attacks," disclosure on Bitcoin-Dev and Lightning-Dev mailing lists, Linux Foundation, 20 October 2023. CVE-2023-40231, CVE-2023-40232, CVE-2023-40233, CVE-2023-40234. Not CTO to be fair. 😉...
CVE-2026-72007
A flaw was found in the Linux kernel's power management domain pmdomain component, specifically impacting the i.MX8MP VC8000E. A timing issue during the power up and down cycling of the VC8000E/VPUMIX can cause the VPUNOC power down handshake to hang. This can lead to system instability and a...
Amazon Linux 2 : kernel, --advisory ALAS2KERNEL-5.10-2026-127 (ALASKERNEL-5.10-2026-127)
The version of kernel installed on the remote host is prior to 5.10.260-259.1054. It is, therefore, affected by a vulnerability as referenced in the ALAS2KERNEL-5.10-2026-127 advisory. In the Linux kernel, the following vulnerability has been resolved: xfs: resample the data fork mapping after...
Important: kernel
Issue Overview: In the Linux kernel, the following vulnerability has been resolved: xfs: resample the data fork mapping after cycling ILOCK CVE-2026-64600 Affected Packages: kernel Note: This advisory is applicable to Amazon Linux 2 - Kernel-5.4 Extra. Visit this page to learn more about Amazon...
Important: kernel
Issue Overview: In the Linux kernel, the following vulnerability has been resolved: xfs: resample the data fork mapping after cycling ILOCK CVE-2026-64600 Affected Packages: kernel Note: This advisory is applicable to Amazon Linux 2 AL2 Core repository. Visit this FAQ section for the difference...
UBUNTU-CVE-2026-64600
In the Linux kernel, the following vulnerability has been resolved: xfs: resample the data fork mapping after cycling ILOCK xfsreflinkfillcowhole,delalloc are both presented with an inode, a data fork mapping, and a cow fork mapping. Unfortunately, these two helpers cycle the ILOCK to grab a...
RHEL 9 : kernel update (Important) (RHSA-2026:40425)
The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:40425 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: rtmutex: Use waiter::task...
Automated Logic Zone Controllers 安全漏洞
Automated Logic Zone Controllers is a hardware controller in a building automation system from Automated Logic USA. A security vulnerability exists in Automated Logic Zone Controllers that stems from the BACnet protocol causing the device to crash and may require manual power cycling to recover...
Malicious code in pyxis-rigel-janus-arcturus (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 149143ea758c2f50f0c3caf2cec3676d63130450fede977297122d2e51b81f11 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in pretty-sapphire-mole (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 18b70a577e962c0ab5c74fa4976a934bfe27aa0140d60e0deec0de56b1126aa9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2014-7390
Malware in sbrugna...