kerbrute

Kerbrute A tool to quickly bruteforce and enumerate valid Active Directory accounts through Kerberos Pre-Authentication Grab the latest binaries from the releases page to get started. Background This tool grew out of some bash scripts I wrote a few years ago to perform bruteforcing using the...

kerbrute

Kerbrute Un outil pour bruteforcer et énumérer rapidement des comptes Active Directory valides via la pré-authentification Kerberos Téléchargez les derniers binaires depuis la page des versions pour commencer. Contexte Cet outil est né de quelques scripts bash que j'ai écrits il y a quelques anné...

ACLight

ACLight A tool for advanced discovery of Privileged Accounts - including Shadow Admins. ACLight2 is the improved version of the tool. Shadow Admins Research The tool version 1 was published as part of the "Shadow Admins" research - more details on "Shadow Admins" are in the blog post:...

dicozorus

Dicozorus Dicozorus — это инструмент для генерации и поддержки веб-словников wordlist. Он устраняет необходимость управления множеством словников, сохраняя пути, обогащённые метаданными, в локальной базе данных SQLite. Нужен просто отличный словник без инструмента? Пропустите установку и...

kit_hunter

Kit Hunter: A basic phishing kit detection tool Version 2.6.0 28 September 2021 Testing and development took place on Python 3.7.3 Linux What is Kit Hunter? Kit Hunter is a personal project to learn Python, and a basic scanning tool that will search directories and locate phishing kits based on...

CVE-2021-41773

CVE-2021-41773 Эксплуатация CVE-2021-41773 — Directory Traversal в Apache 2.4.49...

evil-ssdp

Overview This tool responds to SSDP multicast discover requests, posing as a generic UPNP device. Your spoofed device will magically appear in Windows Explorer on machines in your local network. Users who are tempted to open the device are shown a configurable phishing page. This page can load a...

dirsearch

dirsearch - Découverte de chemins web Un outil avancé de brute-force de chemins web dirsearch est activement développé par @maurosoria et @shelld3v. Rejoignez le serveur Discord pour communiquer avec l'équipe. Quick Start dirsearch nécessite Python 3.11 ou supérieur. git clone...

CVE-2021-41773

CVE-2021-41773 Инструмент проверки уязвимости обхода пути в Apache 2.4.49 Пример Платформа Linux и Windows...

CVE-2026-42720

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Sarah Giles Dynamic User Directory dynamic-user-directory allows Blind SQL Injection.This issue affects Dynamic User Directory: from n/a through 2.4...

Apachuk

Apachuk - CVE-2021-41773 Grabber with Shodan Grabber Apache Directory traversal with Shodan. Rewrite code from : https://github.com/mohwahyudi/cve-2021-41773 How To Use pip3 install requirements.txt python3 main.py -a Shodan Api Key -k Keyword for shodan Shodan API Key ? Login / Register to Get...

ldsview

ldsview Outil de recherche hors ligne pour les exports d'annuaire LDAP au format LDIF. Fonctionnalités Analyse rapide et économe en mémoire des fichiers LDIF Construire des commandes ldapsearch pour extraire un LDIF d'un annuaire Afficher la structure de l'annuaire Traduction des formats UAC et d...

ldsview

ldsview Offline search tool for LDAP directory dumps in LDIF format. Features Fast and memory efficient parsing of LDIF files Build ldapsearch commands to extract an LDIF from a directory Show directory structure UAC and directory time format translation Config Config options can be passed as CLI...

Pentest-Tools-Collection

Pentest-Tools-Collection Active Directory AMSI https://amsi.fail/ Подборки инструментов WinPwn https://github.com/S3cur3Th1sSh1t/WinPwn Import-Module .\WinPwn.ps1 iexnew-object net.webclient.downloadstring'https://raw.githubusercontent.com/S3cur3Th1sSh1t/WinPwn/master/WinPwn.ps1' Ghostpack...

CVE-2026-42720 WordPress Dynamic User Directory plugin <= 2.4 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Sarah Giles Dynamic User Directory dynamic-user-directory allows Blind SQL Injection.This issue affects Dynamic User Directory: from n/a through 2.4...

CVE-2026-42720

The Dynamic User Directory WordPress plugin (versions up to and including 2.4 ) is vulnerable to a Blind SQL Injection due to improper neutralization of special elements used in an SQL command. This vulnerability allows an attacker to execute unauthorized database queries. No specific remediation...

EUVD-2026-94263

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Sarah Giles Dynamic User Directory dynamic-user-directory allows Blind SQL Injection.This issue affects Dynamic User Directory: from n/a through 2.4...

WordPress Dynamic User Directory plugin <= 2.4 - SQL Injection vulnerability

SQL Injection vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin Dynamic User Directory versions = 2.4...

adidnsdump

Outil de vidage DNS intégré à Active Directory Par défaut, tout utilisateur dans Active Directory peut énumérer tous les enregistrements DNS dans les zones DNS du domaine ou de la forêt, similaire à un transfert de zone. Cet outil permet l'énumération et l'exportation de tous les enregistrements...

adidnsdump

Active Directory Integrated DNS dump tool By default any user in Active Directory can enumerate all DNS records in the Domain or Forest DNS zones, similar to a zone transfer. This tool enables enumeration and exporting of all DNS records in the zone for recon purposes of internal networks. For mo...