CVE-2024-23724

Installation Installation automatique empfohlen Um die Schwachstelle zu testen, benötigen wir zwei Konten: ein Konto mit der Rolle eines Administrators Eigentümer und ein Konto mit der Rolle eines Beitragenden. In Ghost CMS müssen Sie zuerst auf das Admin-Panel zugreifen, um das Eigentümerkonto z...

CVE-2023-38831-KQL

CVE-2023-38831 - WinRAR Dateierweiterungs-Spoofing-Schwachstelle Beschreibung Cyberkriminelle haben eine Schwachstelle ausgenutzt, die es ihnen ermöglicht, Dateierweiterungen zu fälschen. Das bedeutet, sie können den Start von schädlichen Skripten in Archiven verbergen, die als gängige Dateitypen...

CVE-2021-34527

PrintNightmare CVE-2021-34527 Diese Version des PrintNightmare-Exploits basiert auf dem Code, der von Cube0x0 erstellt wurde, und bietet die folgenden Funktionen: Fähigkeit, mehrere Hosts anzugreifen. Integrierter SMB-Server für die Zustellung der Payload, wodurch offene Dateifreigaben nicht mehr...

PixelCode-Attack

Malicious PixelCode Delivery Technique Bösartige PixelCode-Zustellungstechnik Malicious PixelCode ist ein Sicherheitsforschungsprojekt, das eine verdeckte Technik demonstriert, um ausführbare Dateien in Pixeldaten zu kodieren und in Bildern oder Videos zu speichern. Ein leichtgewichtiger Loader...

pycrypt

pycrypt Crypter basato su Python che può bypassare qualsiasi tipo di prodotto antivirus Nota: root@kitploit: Se lo stub viene rilevato, utilizza le seguenti offuscazioni:- 1. https://github.com/machine1337/fudcrypt 2. https://github.com/machine1337/pyobfuscate Importante: root@kitploit: 1...

CVE-2024-21413

CVE-2024-21413 | PoC della vulnerabilità di esecuzione remota di codice in Microsoft Outlook 🚀 Utilizzo Assicurati di avere i permessi e l'autorizzazione necessari dal proprietario del sistema di destinazione prima di utilizzare questo script. Prerequisiti Python 3.x impacket-smbserver Esempio di...

MacroShop

MacroShop Raccolta di script per aiutare nella distribuzione di payload tramite macro di Office. La maggior parte sono in Python. Vedi http://khr0x40sh.wordpress.com per i dettagli. 1. macrosafe.py Genera codice VB sicuro per l'inclusione in un foglio di calcolo Excel. Richiede un file batch...

frostbyte

FrostByte Progolue: In the past few days I've been experimenting with the AppDomain manager injection technique had a decent success with it in my previous Red Team engagements against certain EDRs. Although, this is really good for initial access vector, I wanted to release a POC which will help...

device-activity-tracker

Device Activity Tracker Tracker dell'attività di WhatsApp e Signal tramite analisi RTT ⚠️ DISCLAIMER : Solo proof-of-concept a scopo educativo e di ricerca sulla sicurezza. Dimostra vulnerabilità della privacy in WhatsApp e Signal. Panoramica Questo progetto implementa la ricerca dell'articolo...

provisioner

Provisioner Panoramica Provisioner è un assistente di provisioning orientato agli sviluppatori per computer a scheda singola SBC, in particolare piattaforme basate su U-Boot. Fornisce un ambiente autonomo per: Accedere alle schede in remoto Automatizzare i flussi di lavoro di avvio Provisionare...

rpi-hunter

rpi-hunter Automatisiertes Finden und Ausliefern von Payloads an LAN-Raspberry Pis per SSH Oder der ehrliche Titel: Automatisierung von sshpass für die Befehlsauslieferung. Rpi-hunter ist nützlich, wenn sich mehrere Raspberry Pis mit Standard- oder bekannten Anmeldedaten in Ihrem LAN befinden, um...

E4del and PINHOLE RATs Turn FTP Banners Into Dead Drops for Malware Commands

Cybersecurity researchers are calling attention to a new campaign that employs FTP banners as dead drop resolvers DDRs to deliver two previously unreported remote access trojans RATs tracked as E4del and PINHOLE. While threat actors are known to abuse legitimate services to point to additional...

PyStegosploit

PyStegosploit - Consegna di Exploit tramite Steganografia e Poliglotti video1 | video2 | page di Charmve - yidazhang1 at gmaildotcom, @Charmve @therealsaumil @amichael Maggio 2021 Stegosploit crea un nuovo modo per codificare exploit browser "drive-by" e consegnarli attraverso file immagine. Ques...

GitLab - Account Takeover via Password Reset

An issue has been discovered in GitLab CE/EE affecting all versions from 16.1 prior to 16.1.6, 16.2 prior to 16.2.9, 16.3 prior to 16.3.7, 16.4 prior to 16.4.5, 16.5 prior to 16.5.6, 16.6 prior to 16.6.4, and 16.7 prior to 16.7.2 in which user account password reset emails could be delivered to a...

bucky

Project is on temporary hold. Bucky Bucky is an automatic tool designed to discover S3 bucket misconfiguration, Bucky consists up of two modules Bucky firefox addon and Bucky backend engine. Bucky addon reads the source code of the webpages and uses Regular ExpressionRegex to match the S3 bucket...

polyshell

PolyShell: a Bash/Batch/PowerShell polyglot What It Is PolyShell is a script that's simultaneously valid in Bash, Windows Batch, and PowerShell i.e. a polyglot. This makes PolyShell a useful template for penetration testing as it can be executed on most systems without the need for target-specifi...

CVE-2026-51788

Avviso di sicurezza: CVE-2026-51788 Vulnerabilità Denial of Service DoS in cleverangeauth v0.1.10 ID CVE: CVE-2026-51788 Stato: Assegnato Data di scoperta: 2026-04-27 Ricercatore: Aykhan Isgandarli Gravità: Alta CVSS v3.1: 7.5 Vettore CVSS: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Prodotto...

CVE-2026-56708

Grav API plugin before 1.0.16 contains a server-side request forgery vulnerability in webhook delivery that allows attackers to bypass hostname validation by DNS rebinding. Attackers controlling authoritative DNS for a configured webhook hostname can answer validation lookups with public addresse...

CVE-2022-4616-POC

CVE-2022-46169 Pseudo Shell Descrizione Questo script Python funge da strumento ausiliario per semplificare il processo di sfruttamento della vulnerabilità CVE-2022-46169. Avvia un server HTTP che rimane in ascolto delle richieste in arrivo e fornisce una semplice interfaccia per consentire...

CVE-2026-56708 Grav API Plugin before 1.0.16 SSRF via DNS Rebinding

Grav API plugin before 1.0.16 contains a server-side request forgery vulnerability in webhook delivery that allows attackers to bypass hostname validation by DNS rebinding. Attackers controlling authoritative DNS for a configured webhook hostname can answer validation lookups with public addresse...