ADLab

AD Penetration Testing Lab Autore: @browninfosecguy Versione: 1.0 Utilizzo: Questo script può essere utilizzato per configurare sia il Domain Controller che la Workstation. OPZIONI APPLICABILI AL SERVER: Opzione 1: Configurare il nome della macchina e l'indirizzo IP statico per il Domain...

ChaosKobra

ChaosKobra 🐍 Un altro strumento per l'enumerazione dei sottodomini per i normali, scritto in Python3. 🔧 Tecnologie e Strumenti 📚 Requisiti Python 3.9+ pip3 Installazione Usa il gestore di pacchetti pip per installare i requisiti. Se non è installato, installalo con il seguente comando...

cypheroth

Cypheroth Automated, extensible toolset that runs cypher queries against Bloodhound's Neo4j backend and saves output to spreadsheets. Description This is a bash script that automates running cypher queries against Bloodhound data stored in a Neo4j database. I found myself re-running the same...

scriptkiddi3

Streamline your recon and vulnerability detection process with SCRIPTKIDDI3, A recon and initial vulnerability detection tool built using shell script and open source tools. How it works • Installation • Install with Docker • Usage • MODES • Important Notes | Webhook configurations • For Develope...

ad-honeypot-autodeploy

ad-honeypot-autodeploy Deploy a small, intentionally insecure, vulnerable Windows Domain for RDP Honeypot fully automatically. Runs on self-hosted virtualization using libvirt with QEMU/KVM but it can be customized easily for cloud-based solutions. Used for painlessly set up a small Windows Domai...

dns_amplification_scanner

Ferramenta de Detecção e Verificação de DDoS por Amplificação de DNS Este script foi projetado para identificar e verificar servidores DNS potencialmente vulneráveis à exploração em ataques de negação de serviço distribuída DDoS por amplificação de DNS. Ele aborda as limitações de scanners...

htrace.sh

Description htrace.sh is a shell script for http/https troubleshooting and profiling. It's also a simple wrapper around several open source security tools. For a more detailed understanding of htrace.sh, its parameters, functions and how it all works, run htrace.sh --examples or see the Wiki...

dcrawl

dcrawl dcrawl is a simple, but smart, multi-threaded web crawler for randomly gathering huge lists of unique domain names. How it works? dcrawl takes one site URL as input and detects all links in the site's body. Each found link is put into the queue. Successively, each queued link is crawled in...

uptux

uptux Specialized privilege escalation checks for Linux systems. Implemented so far: Writable systemd paths, services, timers, and socket units Disassembles systemd unit files looking for: References to executables that are writable References to broken symlinks pointing to writeable directories...

Malicious code in dpg-media-7ehemel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a904ad03d7041e21fe41a101c6a2db4a6aa3106f7b36394208bb4a5a39ee594 npm package [email protected] executes node index.js from a preinstall lifecycle script that harvests installer identity and environment...

MAL-2026-14411 Malicious code in dpg-media-7ehemel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a904ad03d7041e21fe41a101c6a2db4a6aa3106f7b36394208bb4a5a39ee594 npm package [email protected] executes node index.js from a preinstall lifecycle script that harvests installer identity and environment...

MAL-2026-14410 Malicious code in @temptation.js/utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b8ac41747a5c926627c28c9f1a651df91cd3447b07ca4cafabc1916004d1e70 The package registers a preinstall hook node index.js that runs on npm install and harvests installer-side data: os.hostname, OS username, home...

Malicious code in @temptation.js/utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b8ac41747a5c926627c28c9f1a651df91cd3447b07ca4cafabc1916004d1e70 The package registers a preinstall hook node index.js that runs on npm install and harvests installer-side data: os.hostname, OS username, home...

attack_range

Splunk Attack Range v5 The Splunk Attack Range builds instrumented cloud environments AWS, Azure, GCP, simulates attacks, and forwards data into Splunk for detection development and testing. What it does: Build labs — Deploy a small, production-like lab Splunk, Windows/Linux servers, optional Kal...

CVE-2026-54121

🛡️ CVE-2026-54121 — Indagine CTI su Certighost Privilege Escalation dei Servizi certificati di Active Directory / Rischio di compromissione del dominio Creato da Pratik Chhetri Data del report: 2026-07-28 📌 Sintesi esecutiva...

CVE-2026-41089-Netlogon-RCE

🚨 CVE-2026-41089: RCE critica di Windows Netlogon Esecuzione remota di codice non autenticata sui controller di dominio Active Directory 🧠 Panoramica concettuale Pubblico questa analisi tecnica di CVE-2026-41089 , una vulnerabilità estremamente critica che risiede in profondità nel servizio Windo...

adaudit

adaudit This PowerShell script is designed to conduct a comprehensive audit of Microsoft Active Directory, focusing on identifying common security vulnerabilities and weaknesses. Its execution facilitates the pinpointing of critical areas that require reinforcement, thereby fortifying your...

ZeroLogon-CVE-2020-1472-lab

ZeroLogon-CVE-2020-1472 Explicação e demonstração da vulnerabilidade ZeroLogon CVE-2020-1472 O objetivo deste laboratório é estritamente educacional. A sua execução não é recomendada em ambientes de produção ou que não lhe pertençam. Sobre a Vulnerabilidade Contexto da vulnerabilidade Esta...

magisk-renef

MagiskRenef Un modulo Magisk / KernelSU / APatch che impacchetta e avvia automaticamente renef — un toolkit di instrumentazione dinamica per Android. Ispirato da magisk-frida. Requisiti Dispositivo Android con root Magisk / KernelSU / KernelSU Next / APatch Solo ARM64 — renef supporta solo Androi...

Domain-Controller-DC-Exploitation-with-Metasploit-Impacket

Domain-Controller-DC-Ausnutzung-mit-Metasploit-Impacket End-to-End-Domain-Controller-Ausnutzung mit Metasploit und Impacket: DC10 entdeckt, Zerologon CVE-2020-1472 ausgenutzt, NTLM-Hashes extrahiert, SYSTEM-Shell erlangt und eine Meterpreter-Sitzung eingerichtet. Zusammenfassung Diese Übung...