osintnet-public

OsintNET è una piattaforma OSINT basata su browser per intelligence sui domini, scansione dei rischi dei siti web, scoperta SERP, OSINT su email e username, intelligence sulle immagini, verifica dell'autenticità delle immagini e rilevamento di immagini AI. Sito web · Strumenti OSINT · Migliori...

Active-Directory-Exploitation-Cheat-Sheet

Active Directory Cheat Sheet Questa repository contiene una metodologia generale per l'ambiente Active Directory. È fornita con una selezione di comandi rapidi tratti dagli strumenti più efficienti basati su Powershell, C, .Net 3.5 e .Net 4.5. Processo Generale: Ricognizione Enumerazione del...

DEBIAN-CVE-2026-13097

A privilege escalation flaw was found in FreeIPA. The uniqueness constraint enforced on Kerberos principal name attributes in the 389-ds directory server does not properly account for equivalent representations of the same principal name, allowing a user with sufficient LDAP write privileges to...

CVE-2026-13097

A privilege escalation flaw in FreeIPA 's 389-ds directory server allows a user with sufficient LDAP write privileges to create a service principal that impersonates an existing privileged one. The root cause is that the uniqueness constraint on Kerberos principal name attributes (specifically kr...

CVE-2026-13097

A privilege escalation flaw was found in FreeIPA. The uniqueness constraint enforced on Kerberos principal name attributes in the 389-ds directory server does not properly account for equivalent representations of the same principal name, allowing a user with sufficient LDAP write privileges to...

Goohak

GooHak INFORMAZIONI: Lancia automaticamente query di Google hacking contro un dominio target per trovare vulnerabilità ed enumerare un target. DIPENDENZE Linux: xdg-open Linux USO SU LINUX: root@kitploit: ./goohak domain.com LICENZA: Questo software è liberamente distribuibile, modificabile e...

Malicious code in expect-dotenv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ffc39d28e4d33afe723182c097769f087bf528732e5468b1511bf2bff41db01e The package's main entry runs a worker that performs an HTTPS GET to https://realase-0626.vercel.app/api/v1 and passes the response's parser string...

refreshing-mcp-tool

Questo non è ancora del tutto finito o pronto, ma volevo mettere il codice nel repository. Implementa sostanzialmente il protocollo di database di F5, "mcp", che opera tramite un socket UNIX domain. Ciò significa che serve una shell sul dispositivo F5 prima di poter usare uno qualsiasi di questi...

cngo

cngo v1 Strumento Golang veloce che prende un file con domini e ottiene il cname per ogni dominio s Installazione root@kitploit: $ go get -u github.com/yghonem14/cngo Utilizzo Base cngo accetta solo file di testo: root@kitploit: $ cngo -f /targets/spotify.txt creativeservice.spotify.com -...

PT-2026-78916

Name of the Vulnerable Software and Affected Versions FreeIPA affected versions not specified Description A privilege escalation flaw exists in FreeIPA due to a failure in the 389-ds directory server to properly enforce uniqueness constraints on Kerberos principal name attributes. The server does...

Linux Distros Unpatched Vulnerability : CVE-2026-13097

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A privilege escalation flaw was found in FreeIPA. The uniqueness constraint enforced on Kerberos principal name attributes in the 389-ds directory server does n...

EUVD-2026-62704

Download of code without integrity check, inclusion of functionality from untrusted control sphere, and cleartext transmission of sensitive information vulnerability in Ozols Grupa OZOLS on Windows caused by an abandoned auto-update domain. Affected component: the automatic update channel...

The_big_Zero

AVISO: Ainda não construí este repositório e seus respectivos scripts corretamente e o uso deste "exploit kit" exigirá algumas alterações nos caminhos de arquivos e que você tenha a versão correta do imnpacket instalada em seu dispositivo. Por favor, note que nenhum código neste repositório deve...

bluebox

Nota: este repositório faz referências a repositórios externos conhecidos como submodules do Git. Após clonar este repositório, certifique-se de executar os seguintes comandos para clonar esses submodules: root@kitploit: git submodule init git submodule update BlueBox BlueBox é uma coleção de...

CVE-2021-34527

CVE-2021-1675 / CVE-2021-34527 Dois mini scripts para verificar se o serviço PrintSpooler está em execução dentro da Floresta. CVE-2021-1675: https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2021-1675 CVE-2021-34527 também conhecido como PrintNightmare...

PT-2026-78641

Name of the Vulnerable Software and Affected Versions Ozols Grupa OZOLS versions prior to 1.1.1233 Description The software contains a flaw in its automatic update channel, specifically affecting the OzolsSQL client update path, the serv update.vbs file, and the update SQL Server Agent job using...

CVE-2026-72324

A flaw was found in the Linux kernel's Marvell EBU mvebu General Purpose Input/Output GPIO driver. The driver fails to properly free allocated generic chip data when an interrupt domain is removed during the unbind process. This oversight can lead to a resource leak, which may impact system...

CVE-2026-55593

creationtimestamp| type| source ---|---|--- 2026-08-18 22:35:23+00:00| published-proof-of-concept| https://github.com/froxlor/froxlor/security/advisories/GHSA-xpr4-8vp6-c87j 2026-08-19 11:32:39+00:00| seen| https://gist.github.com/alon710/3948341428804c685cf1bc5b4fc0d3f1...

CVE-2026-55717

A flaw in Unbound allows a remote attacker controlling a delegated domain to trigger a NULL pointer dereference and crash the daemon. Exploitation occurs when serve-expired: yes and specific response-ip or RPZ rules are configured, resulting in a denial of service. Mitigation Ensure serve-expired...

DEBIAN-CVE-2026-17084

The "stringprep" module didn't process characters from RFC 3454 tables B.2 or B.3 correctly: the latest Unicode codepoint attributes were used instead of the specified Unicode 3.2.0. This behavior would cause mismatches when processing domain names using IDNA 2003 the "idna" codec and the intable...