ZeroLogon-CVE-2020-1472-lab

ZeroLogon-CVE-2020-1472 Explicação e demonstração da vulnerabilidade ZeroLogon CVE-2020-1472 O objetivo deste laboratório é estritamente educacional. A sua execução não é recomendada em ambientes de produção ou que não lhe pertençam. Sobre a Vulnerabilidade Contexto da vulnerabilidade Esta...

magisk-renef

MagiskRenef Un modulo Magisk / KernelSU / APatch che impacchetta e avvia automaticamente renef — un toolkit di instrumentazione dinamica per Android. Ispirato da magisk-frida. Requisiti Dispositivo Android con root Magisk / KernelSU / KernelSU Next / APatch Solo ARM64 — renef supporta solo Androi...

Domain-Controller-DC-Exploitation-with-Metasploit-Impacket

Domain-Controller-DC-Ausnutzung-mit-Metasploit-Impacket End-to-End-Domain-Controller-Ausnutzung mit Metasploit und Impacket: DC10 entdeckt, Zerologon CVE-2020-1472 ausgenutzt, NTLM-Hashes extrahiert, SYSTEM-Shell erlangt und eine Meterpreter-Sitzung eingerichtet. Zusammenfassung Diese Übung...

opensquat

openSquat Core 📑 Table of Contents What is openSquat? Featured In Open-Core Model Key Features Quick Start Requirements Usage Premium and API Modes Configuration Automation CLI Reference Contributing Author License 🎯 What is openSquat? openSquat is an Open Source Intelligence OSINT security tool...

OSINT-with-LLM

POC : OSINT mit LLM Dieses Repository demonstriert Domain-, IP- und E-Mail-Aufklärung mit LLM-gestützter Sicherheitsberichterstattung.. Übersicht Das Projekt ist in zwei Hauptkomponenten unterteilt: 1. Aufklärungsmodule 2. LLM-Analyse und Berichterstellung Aufklärungsmodule Zweck Sammeln von...

go-secdump

go-secdump Description Package go-secdump is a tool built to remotely extract hashes from the SAM registry hive as well as LSA secrets and cached hashes from the SECURITY hive without any remote agent and without touching disk. The tool is built on top of the library go-smb and use it to...

endsfuzzer

endsfuzzer endsfuzzer ist ein einfaches Werkzeug, um eine Liste von Domains auf bestimmte Endpunkte zu fuzzen. Es prüft alle Domains in einer Liste auf einen einzelnen Endpunkt und wechselt dann zum nächsten Endpunkt. Funktionen Schnell. Nutzt Go-Routinen. Schonender für Server. Fuzzt alle Hosts...

linkedin2username

linkedin2username OSINT Tool: Generate username lists from companies on LinkedIn. This is a pure web-scraper, no API key required. You use your valid LinkedIn username and password to login, it will create several lists of possible username formats for all employees of a company you point it at...

Active-Directory-BadSuccessor

Active-Directory-BadSuccessor Panoramica In questa stanza, esploriamo la tecnica di escalation dei privilegi BadSuccessor, una vulnerabilità che abusa degli Account di Servizio Gestiti Delegati dMSA in Active Directory. L'attacco consente a un utente con sufficiente controllo su un oggetto dMSA d...

udpx

Fast and lightweight, UDPX is a single-packet UDP scanner written in Go that supports the discovery of over 45 services with the ability to add custom ones. It is easy to use and portable, and can be run on Linux, Mac OS, and Windows. Unlike internet-wide scanners like zgrab2 and zmap, UDPX is...

waymore

About - v8.9 The idea behind waymore is to find even more links from the Wayback Machine plus other sources than other existing tools. 👉 The biggest difference between waymore and other tools is that it can also download the archived responses for URLs on wayback machine and URLScan so that you c...

sqlmc

SQLMC - SQL Injection Massive Checker Demo Information This tool is for educational purpose only, usage of SQLMC for attacking targets without prior mutual consent is illegal. Developers assume no liability and are not responsible for any misuse or damage cause by this program. Overview SQLMC SQL...

sqlmc

SQLMC - Controllo Massivo di SQL Injection Demo Informazioni Questo strumento è solo per scopi educativi, l'uso di SQLMC per attaccare target senza il preventivo consenso reciproco è illegale. Gli sviluppatori non si assumono alcuna responsabilità e non sono responsabili per qualsiasi uso impropr...

CVE-2026-41089-Netlogon-RCE

🛡️ CVE-2026-41089-Netlogon-RCE - Analyze critical Windows service security vulnerabilities This repository provides tools to analyze and test the Netlogon vulnerability known as CVE-2026-41089. This tool helps security professionals identify if their Windows Domain Controllers face risks from this...

xsubfind3r

xsubfind3r xsubfind3r is a command-line utility designed to discover subdomains for a given domain in a simple, efficient way. It works by gathering information from a variety of passive sources, meaning it doesn't interact directly with the target but instead gathers data that is already publicl...

CVE-2026-43499-A36

CVE-2026-43499-A36 Eigenständiger, am Gerät getesteter CVE-2026-43499-Port für das kanadische Galaxy A36 5G SM-A366W auf exakter Firmware A366WVLS3AYG1, einschließlich KernelSU-Late-Load- und Root-My-Galaxy-Integration. Dieses Repository enthält die gerätespezifische native Seite von Root My...

reverse-ip-new-api

reverse-ip-new-api Esta ferramenta é usada para realizar consultas reversas de IP — pesquisando todos os domínios hospedados em um endereço IP. Funcionalidades Processamento multi-threading Processamento baseado em API Tratamento de erros Personalizar o número de threads Compre um café : Bitcoin ...

Find-AdminAccess

FindAdminAccess Un'utilità in C che enumera i computer del dominio e verifica l'accesso amministrativo ad essi, inclusi controlli di connettività, verifica dei privilegi di amministratore e test di scrittura sulla condivisione C$. Funzionalità Enumera tutti i computer in un dominio Active Directo...

SharpHound

SharpHound Ottieni SharpHound L'ultima build di SharpHound si trova sempre qui. Per determinare la versione di SharpHound compatibile con un'istanza BloodHound CE distribuita, accedi all'interfaccia web di BloodHound CE e fai clic su ⚙️ Impostazioni → Scarica i Collector. Quindi, fai clic sul...

Malicious code in @opap/player-kyc-widget (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector abfe2a5c5b34e28b415fb39f20acea1ec320ef85aeb9577c9a52153630f964fc The package's postinstall script runs automatically on npm install and collects host identifiers hostname, username, cwd, platform, arch from the...