Whisker

Whisker Whisker è uno strumento C per prendere il controllo di account utente e computer di Active Directory manipolando il loro attributo msDS-KeyCredentialLink, aggiungendo di fatto "Shadow Credentials" all'account target. Questo strumento si basa sul codice di DSInternals di Michael Grafnetter...

ldapdomaindump

LDAPDomainDump LDAP के माध्यम से सक्रिय निर्देशिका जानकारी डंप करने वाला उपकरण परिचय एक सक्रिय निर्देशिका डोमेन में, कोई भी प्रमाणित उपयोगकर्ता या मशीन LDAP के माध्यम से बहुत सी रोचक जानकारी प्राप्त कर सकता है। यह LDAP को आंतरिक नेटवर्क के पेनटेस्ट के पुनर्संरचना चरण में जानकारी एकत्र करने के लिए...

PSPKIAudit

PSPKIAudit Toolkit PowerShell per il controllo di Active Directory Certificate Services AD CS. È costruito sulla base del toolkit PSPKI di PKISolution licenza pubblica Microsoft. Questo repository contiene una versione più recente di PSPKI rispetto a quella disponibile in PSGallery vedi la...

capsulecorp-pentest

Blog Twitter: Discord: Buch: 1. Capsulecorp Pentest Das Capsulecorp Pentest ist ein kleines virtuelles Netzwerk, das mit Vagrant und Ansible verwaltet wird. Es enthält fünf virtuelle Maschinen, darunter ein Linux-Angriffssystem mit Xubuntu und vier Windows 2019 Server, die mit verschiedenen...

ADModule

ADModule DLL firmata da Microsoft per il modulo PowerShell ActiveDirectory Solo un backup del modulo PowerShell ActiveDirectory di Microsoft da Server 2016 con RSAT e modulo installati. La DLL si trova solitamente in questo percorso:...

pyt

.. image:: https://travis-ci.org/python-security/pyt.svg?branch=master :target: https://travis-ci.org/python-security/pyt .. image:: https://readthedocs.org/projects/pyt/badge/?version=latest :target: http://pyt.readthedocs.io/en/latest/?badge=latest .. image::...

C2-Tool-Collection

Outflank - Raccolta di Strumenti C2 Questo repository contiene una raccolta di strumenti che si integrano con Cobalt Strike e possibilmente altri framework C2 attraverso tecniche di caricamento BOF e DLL riflessive. Questi strumenti non fanno parte del nostro prodotto commerciale OST e sono scrit...

Powermad

PowerShell MachineAccountQuota und DNS-Exploit-Tools Wiki https://github.com/Kevin-Robertson/Powermad/wiki Blog-Beitrag Jenseits von LLMNR/NBNS-Spoofing – Ausnutzen von Active Directory-integriertem DNS Funktionen MachineAccountQuota-Funktionen DNS-Funktionen Dynamic-Updates-Funktionen...

XXEinjector

XXEinjector XXEinjector प्रत्यक्ष और आउट ऑफ बैंड विधियों का उपयोग करके फ़ाइलों को पुनर्प्राप्त करने को स्वचालित करता है। निर्देशिका सूचीकरण केवल Java अनुप्रयोगों में काम करता है। अन्य अनुप्रयोगों के लिए ब्रूटफोर्सिंग विधि का उपयोग करने की आवश्यकता है। विकल्प: root@kitploit: --host Mandatory - our...

domain_analyzer

Domain Analyzer v0.8.3 What Domain analyzer is a security analysis tool that automatically discovers and reports information about a given domain. Its main purpose is to analyze domains in an unattended way. It has many crazy features, such as getting more domains from DNS zones, automatic nmap,...

BadBlood

BadBlood BadBlood by Secframe fills a Microsoft Active Directory Domain with a structure and thousands of objects. The output of the tool is a domain similar to a domain in the real world. After BadBlood is ran on a domain, security analysts and engineers can practice using tools to gain an...

BadBlood

BadBlood BadBlood, Secframe द्वारा, एक Microsoft Active Directory डोमेन को एक संरचना और हजारों ऑब्जेक्ट्स से भर देता है। इस टूल का आउटपुट एक ऐसा डोमेन है जो वास्तविक दुनिया के डोमेन के समान होता है। BadBlood को डोमेन पर चलाने के बाद, सुरक्षा विश्लेषक और इंजीनियर टूल का उपयोग करके समझ हासिल करने औ...

lazyrecon

root@kitploit: / \ / / \ /// / // Y / \ /| | | | / | / / \ / | /|| \ | / | / || |\ || | |/| |-||/ / / / | /| / | | /|| | || // |/// /\\|// | Usage ./lazyrecon.sh -d domain.com To exclude particular subdomains: ./lazyrecon.sh -d domain.com -e...

kerbrute

Kerbrute Ein Tool zum schnellen Bruteforcen und Aufspüren gültiger Active-Directory-Konten durch Kerberos-Pre-Authentication Laden Sie die neuesten Binärdateien von der Releases-Seite herunter, um loszulegen. Hintergrund Dieses Tool entstand aus einigen bash-Skripten, die ich vor ein paar Jahren...

EUVD-2026-66604

ZLMediaKit confines the downloadFile API to a configured set of root directories with a prefix comparison that does not account for directory boundaries. The configuration loader in server/WebApi.cpp builds each root with File::absolutePath"", item, true; because the relative-path argument is emp...

CVE-2026-81028

ZLMediaKit 's downloadFile API in server/WebApi.cpp suffers a root-directory confinement bypass caused by a string prefix comparison that does not enforce directory boundaries. The loader builds each configured root via File::absolutePath("", item, true), which omits the trailing separator; the h...

EUVD-2026-42399

asyncssh has SCP Path Traversal to Arbitrary File Write...

EUVD-2026-44688

Cloudreve WebDAV /dav has Path Traversal / Broken Access Control — scoped DAV credential escapes its configured account root...

CVE-2026-54550

IzPack is a widely used tool for packaging applications on the Java platform as cross-platform installers. In 5.2.6 and earlier, UnpackerBase.unpack in izpack-installer/src/main/java/com/izforge/izpack/installer/unpacker/UnpackerBase.java obtains an attacker-controlled PackFile targetPath, passes...

CVE-2026-80535

CVE-2026-80535 affects the Linux kernel XFS file system. The dirtree scrubber can detect a directory that refers to itself; in that case, the directory tree repair code incorrectly attempts to iolock/ilock both sc->ip and dp, which are the same inode, resulting in a double-lock . The fix detec...