detect-secrets

detect-secrets About detect-secrets is an aptly named module for surprise, surprise detecting secrets within a code base. However, unlike other similar packages that solely focus on finding secrets, this package is designed with the enterprise client in mind: providing a backwards compatible ,...

pritunl

pritunl: enterprise vpn server Pritunl is a distributed enterprise vpn server built using the OpenVPN protocol. Documentation and more information can be found at the home page pritunl.com Install From Source Install MongoDB if running single host configuration sudo tee...

CVE-2026-105412

An SQL Injection vulnerability exists in Tuleap Enterprise Edition 17.5 . This flaw could allow an attacker with LOW privileges to gain read access to the Tuleap database. While the technical root cause is not specified, the vulnerability is categorized under CWE-89 (Improper Neutralization of Sp...

CVE-2026-105411

The Tuleap Enterprise Edition (versions 17.0 through 17.5 ) is impacted by an Authorization Bypass Through User-Controlled Key vulnerability (CWE-639). An attacker possessing tracker administration rights on a single tracker can exploit this flaw to update or delete fields of all trackers across ...

CVE-2026-105410

A Stored Cross-site Scripting (XSS) vulnerability exists in Tuleap Enterprise Edition versions 17.0 through 17.5 . This flaw allows an attacker to execute arbitrary script code within a user's browser session. The vulnerability is associated with CWE-79 (Improper Neutralization of Input During We...

CVE-2026-105409

A Stored Cross-site Scripting (XSS) vulnerability exists in Tuleap Enterprise Edition versions 17.0 through 17.5 . This flaw allows an attacker to execute arbitrary script code within a user's browser session. While the CVSS 3.1 score is 8.7 (High) , indicating high impact on confidentiality and ...

CVE-2026-105408

A Stored Cross-site Scripting (XSS) vulnerability exists in Tuleap Enterprise Edition versions 17.0 through 17.5 . This flaw allows an attacker to execute arbitrary script code within a user's browser session. The vulnerability is categorized under CWE-79 (Improper Neutralization of Input During ...

CVE-2026-105407

An OS Command Injection vulnerability (CWE-78) affects Tuleap Enterprise Edition versions 17.0 through 17.5 . This flaw could allow an attacker to execute arbitrary commands on the server. The vulnerability has a High base severity score of 8.8. Exploitation details and specific remediation steps...

eaphammer

by Gabriel Ryan s0lst1c3 Current release: v1.14.1 Supports Python 3.9+. Overview EAPHammer is a toolkit for performing targeted evil twin attacks against WPA2-Enterprise networks. It is designed to be used in full scope wireless assessments and red team engagements. As such, focus is placed on...

Phoenix

Homepage | Wiki | Contributing Phoenix Phoenix is a suite of configurations & advanced modifications for Mozilla Firefox, designed to put the user first - with a focus on privacy, security, freedom, functionality, & usability. Here a detailed list of Phoenix's features & enhancements. !TIP Find a...

chapcrack

chapcrack A tool for parsing and decrypting MS-CHAPv2 network handshakes. 1. The first thing you'll need to do is obtain the network traffic for the MS-CHAPv2 handshake you'd like to crack. For PPTP VPN connections, simply use a tool such as tcpdump or wireshark in order to obtain a network...

publications

Publications A home for publications, including slides/papers, proof-of-concepts, videos and tools. For blog posts, see the elttam blog, and for our services, see our website. Date| Type| Event| Title| Resources ---|---|---|---|--- 2026| adv| -| Home Assistant Authenticated Arbitrary File Read vi...

CVE-2024-36991

CVE-2024-36991 POC for CVE-2024-36991: This exploit will attempt to read Splunk /etc/passwd file. Overview This is a bulk scanning and exploitation tool for CVE-2024-36991: Path traversal that affects Splunk Enterprise on Windows versions below 9.2.2, 9.1.5, and 9.0.10. This vulnerability was...

CVE-2024-29849

CVE-2024-29849 Veeam Backup Enterprise Manager Authentication Bypass CVE-2024-29849 by Sina Kheirkhah @SinSinology of SummoningTeam @SummoningTeam Technical Analysis A root cause analysis of the vulnerability can be found on my blog Summary Supported versions? According to Veeam official advisory...

macOS-enterprise-privileges

Privileges Transparent, free, and secure admin rights management for macOS. Privileges is a free macOS application designed for modern enterprise environments. It gives users temporary administrator privileges when needed without granting permanent admin rights. The application is built with...

CMLoot

CMLoot CMLoot was created to easily find interesting files stored on System Center Configuration Manager SCCM/CM SMB shares. The shares are used for distributing software to Windows clients in Windows enterprise environments and can contains scripts/configuration files with passwords, certificate...

SCMKit

SCMKit Description S ource C ode M anagement Attack Toolkit - SCMKit is a toolkit that can be used to attack SCM systems. SCMKit allows the user to specify the SCM system and attack module to use, along with specifying valid credentials username/password or API key to the respective SCM system...

grr

GRR Rapid Response is an incident response framework focused on remote live forensics. GRR is a python client agent that is installed on target systems, and python server infrastructure that can manage and talk to clients. Documentation Please visit our documentation website if you want to know...

user.js

This repo and the interative webpage linked below are the only official sources - do not trust any other sites claiming to be Arkenfox 🟪 user.js A user.js is a configuration file that can control Firefox settings - for a more technical breakdown and explanation, you can read more in the wiki 🟩 th...

gh-dork

gh-dork Supply a list of dorks and, optionally, one of the following: a user -u a file with a list of users -uf an organization -org a file with a list of organizations -of a repo -r You can also pass: an output directory to store results -o a filename to store valid items, if your users or org...