adPEAS

adPEAS v2 — Active Directory Berechtigungserweiterung – Fantastische Skripte Umfassende Active Directory-Sicherheitsbewertung – keine Abhängigkeiten, einzelne Datei, sofort einsatzbereit. Was ist adPEAS? adPEAS ist ein PowerShell-basiertes Sicherheitsbewertungstool, das Fehlkonfigurationen,...

self-service-password

LDAP Tool Box Self Service Password Presentazione Self Service Password è un'applicazione PHP che consente agli utenti di modificare la propria password in una directory LDAP. L'applicazione può essere utilizzata con directory LDAPv3 standard OpenLDAP, OpenDS, ApacheDS, Sun Oracle DSEE, Novell,...

FinalRecon

Twitter - Telegram - thewhiteh4t's Blog FinalRecon is an all in one automatic web reconnaissance tool written in python. Goal of FinalRecon is to provide an overview of the target in a short amount of time while maintaining the accuracy of results. Instead of executing several tools one after...

EUVD-2026-66668

The Apple profile generated for the Apple built-in Mail, Calendar and Contacts account to synchronize with HCL Traveler requires the Logon Name and Mail Address to be embedded in them. The values cannot be changed later on, so the Apple profile generation page asks for those values and reflects...

mad-metasploit

Metasploit custom modules, plugins, resource script and.. awesome metasploit collection https://www.hahwul.com/p/mad-metasploit.html Awesome open awesome.md Add mad-metasploit to metasploit framework...

GitHacker

GitHacker एक मल्टी-थ्रेडेड .git फ़ोल्डर शोषण उपकरण। लक्ष्य रिपॉजिटरी को पूरी तरह से पुनर्निर्मित करता है — स्रोत कोड, कमिट इतिहास, शाखाएँ, स्टैश, रिमोट, टैग — यहाँ तक कि जब DirectoryListings अक्षम हो, तब भी ज्ञात रेफ़्स को ब्रूट-फोर्स करके। सहायक शोध साइट https://githacker.pages.dev पर प्रकाशित...

Snaffler

Snaffler A cosa serve? Snaffler è uno strumento per penetration tester e red teamer per aiutare a trovare deliziosi aghi di caramella principalmente credenziali, ma è flessibile in un mucchio di orribili e noiosi pagliai un enorme ambiente Windows/AD. Potrebbe anche essere utile per altre persone...

linWinPwn

linWinPwn - Canivete Suíço para Testes de Penetração no Active Directory usando Linux Descrição linWinPwn é um script bash que encapsula várias ferramentas do Active Directory para enumeração LDAP, RPC, ADCS, MSSQL, Kerberos, SCCM, verificações de vulnerabilidade noPac, ZeroLogon, MS17-010,...

bloodyAD

⚠️ autobloody wurde in ein eigenes Repository verschoben bloodyAD bloodyAD ist ein Schweizer Taschenmesser für die Privilegienerhöhung in Active Directory. Beschreibung Dieses Tool kann spezifische LDAP-Aufrufe an einen Domänencontroller durchführen, um AD-Privilegienerhöhung zu erreichen. bloodyA...

CVE-2026-47836

The base directory spring.cloud.config.server.svn.basedir used by the Spring Cloud Config Server to clone SVN repositories to is susceptible to time-of-check-time-of-use TOCTOU attacks. Spring Cloud Config 5.0.0 - 5.0.4 Spring Cloud Config 4.3.0 - 4.3.4 Spring Cloud Config 4.0.0 - 4.2.8 Spring...

pingcastle

PingCastle di Netwrix Resta in contatto e contribuisci Accogliamo tutti gli utenti di PingCastle: contributor open source, amministratori IT e professionisti della sicurezza, per coinvolgersi e contribuire a plasmare il futuro di PingCastle. Unisciti alla community Netwrix : community.netwrix.com...

LogonTracer

Conceito LogonTracer v2 é uma ferramenta para investigar logons maliciosos, visualizando e analisando logs de eventos do Active Directory do Windows. Esta ferramenta associa um nome de host ou endereço IP e um nome de conta encontrados em eventos relacionados a logon e os exibe como um grafo. Des...

rengine

reNgine: The Ultimate Web Reconnaissance & Vulnerability Scanner 🚀 reNgine 2.2.0 is released! reNgine 2.2.0 comes with bounty hub where you can sync and import your hackerone programs, in app notifications, chaos as subdomain e...

gobuster

Gobuster 💻 परिचय Go में लिखा गया एक तेज़ और लचीला ब्रूट-फोर्सिंग टूल Gobuster एक उच्च-प्रदर्शन डायरेक्ट्री/फ़ाइल, DNS और वर्चुअल होस्ट ब्रूट-फोर्सिंग टूल है जो Go में लिखा गया है। इसे सुरक्षा पेशेवरों और पेनिट्रेशन टेस्टर्स के लिए तेज़, विश्वसनीय और उपयोग में आसान बनाने के लिए डिज़ाइन किया गया है...

zerologon

ZeroLogon exploitation script Exploit code based on https://www.secura.com/blog/zero-logon and https://github.com/SecuraBV/CVE-2020-1472. Original research and scanner by Secura, modifications by RiskSense Inc. To exploit, clear out any previous Impacket installs you have and install Impacket fro...

CVE-2026-80535

A flaw was found in the Linux kernel's XFS filesystem. When a local user or process attempts to delete a directory that refers to itself, the directory tree repair code incorrectly tries to acquire a lock on the same inode twice. This double-locking issue can lead to system instability or...

CVE-2026-47836 Spring Cloud Config Server Susceptible To TOCTOU Attack When Using SVN

The base directory spring.cloud.config.server.svn.basedir used by the Spring Cloud Config Server to clone SVN repositories to is susceptible to time-of-check-time-of-use TOCTOU attacks. Spring Cloud Config 5.0.0 - 5.0.4 Spring Cloud Config 4.3.0 - 4.3.4 Spring Cloud Config 4.0.0 - 4.2.8 Spring...

domain_analyzer

Domain Analyzer v0.8.3 What Domain analyzer is a security analysis tool that automatically discovers and reports information about a given domain. Its main purpose is to analyze domains in an unattended way. It has many crazy features, such as getting more domains from DNS zones, automatic nmap,...

BadBlood

BadBlood BadBlood by Secframe fills a Microsoft Active Directory Domain with a structure and thousands of objects. The output of the tool is a domain similar to a domain in the real world. After BadBlood is ran on a domain, security analysts and engineers can practice using tools to gain an...

lazyrecon

root@kitploit: / \ / / \ /// / // Y / \ /| | | | / | / / \ / | /|| \ | / | / || |\ || | |/| |-||/ / / / | /| / | | /|| | || // |/// /\\|// | Usage ./lazyrecon.sh -d domain.com To exclude particular subdomains: ./lazyrecon.sh -d domain.com -e...