Invoke-DCSync

Invoke-DCSync Invoke-DCSync Riferimento: https://adsecurity.org/?p=1729 Riferimento: https://silentbreaksecurity.com/invoke-dcsync-because-we-all-wanted-it/ Obiettivo: recuperare gli hash delle password di tutti gli account utente su un controller di dominio utilizzando la funzione DCSync di...

CVE-2026-80665

This vulnerability affects the Linux kernel's KVM arm64 nested virtualization subsystem. The root cause is in kvm_handle_vncr_abort() , which incorrectly assumes that a -EFAULT return from kvm_translate_vncr() always conveys an abort. In practice, "late" failures on S1 translation output (e.g., a...

EUVD-2026-67541

In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: nv: Inject SEA if kvmtranslatevncr can't resolve PFN kvmhandlevncrabort assumes that s1walkresult conveys an abort when kvmtranslatevncr returns -EFAULT. This is not always the case as it's possible to encounter 'late...

CVE-2026-80665 KVM: arm64: nv: Inject SEA if kvm_translate_vncr() can't resolve PFN

In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: nv: Inject SEA if kvmtranslatevncr can't resolve PFN kvmhandlevncrabort assumes that s1walkresult conveys an abort when kvmtranslatevncr returns -EFAULT. This is not always the case as it's possible to encounter 'late...

CVE-2026-80665

In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: nv: Inject SEA if kvmtranslatevncr can't resolve PFN kvmhandlevncrabort assumes that s1walkresult conveys an abort when kvmtranslatevncr returns -EFAULT. This is not always the case as it's possible to encounter 'late...

CVE-2026-80665 KVM: arm64: nv: Inject SEA if kvm_translate_vncr() can't resolve PFN

In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: nv: Inject SEA if kvmtranslatevncr can't resolve PFN kvmhandlevncrabort assumes that s1walkresult conveys an abort when kvmtranslatevncr returns -EFAULT. This is not always the case as it's possible to encounter 'late...

CVE-2026-80652 crypto: ccp - Treat zero-length cert chain as query for blob lengths

In the Linux kernel, the following vulnerability has been resolved: crypto: ccp - Treat zero-length cert chain as query for blob lengths When handling a PDH export, treat a zero-length userspace cert chain buffer as a request to query the length of the relevant blobs. Failure to account for the...

CVE-2026-80652 crypto: ccp - Treat zero-length cert chain as query for blob lengths

In the Linux kernel, the following vulnerability has been resolved: crypto: ccp - Treat zero-length cert chain as query for blob lengths When handling a PDH export, treat a zero-length userspace cert chain buffer as a request to query the length of the relevant blobs. Failure to account for the...

EUVD-2026-67528

In the Linux kernel, the following vulnerability has been resolved: crypto: ccp - Treat zero-length cert chain as query for blob lengths When handling a PDH export, treat a zero-length userspace cert chain buffer as a request to query the length of the relevant blobs. Failure to account for the...

CVE-2026-80652

In the Linux kernel, the following vulnerability has been resolved: crypto: ccp - Treat zero-length cert chain as query for blob lengths When handling a PDH export, treat a zero-length userspace cert chain buffer as a request to query the length of the relevant blobs. Failure to account for the...

CVE-2026-80652

CVE-2026-80652 affects the Linux kernel 's AMD SEV/CCP driver (drivers/crypto/ccp/sev-dev.c ). When handling a PDH export, a zero-length userspace cert chain buffer is not treated as a blob-length query, causing a BUG_ON() crash at arch/x86/mm/physaddr.c due to a physical-address lookup on ZERO_S...

CVE-2021-34527

CVE-2021-1675 / CVE-2021-34527 Due mini script per verificare se il servizio PrintSpooler è in esecuzione all'interno della Forest. CVE-2021-1675: https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2021-1675 CVE-2021-34527 alias PrintNightmare...

pdbdownload

पोर्टेबल एक्ज़ीक्यूटेबल PE से संबद्ध PDB फ़ाइलें डाउनलोड करने की एक उपयोगिता। विशेषताएँ msdl.microsoft.com से PDB प्रतीक symbols डाउनलोड करें। एकल या बैच में PortableExecutable PE फ़ाइलों की प्रक्रिया करें। प्रदर्शन https://github.com/user-attachments/assets/095fb528-65a6-488e-bfa0-46101738a451...

otp-bot

SMSBotBypass Paypal, Instagram, Snapchat, Google, 3D Secure 및 기타 여러 서비스의 SMS 인증을 Discord 봇 또는 비공개 API를 사용하여 우회하세요. 정말 간단합니다. 친구가 Snapchat 계정을 가지고 있다고 상상해 보세요. sms 시스템을 사용하여 그의 비밀번호를 재설정하려고 합니다 : 그는 sms 확인 코드를 받게 될 것입니다. 그런 다음 봇을 사용합니다 !call 33612345678 snapchat. 봇이 snapchat 서비스를 사용하여 그에게 전화를 걸어 수...

SMSBotBypass

SMSBotBypass Bypassa le verifiche SMS di Paypal, Instagram, Snapchat, Google, 3D Secure e molti altri... usando un Bot Discord o l'API privata. È davvero semplice. Immagina che il tuo amico abbia un account Snapchat, provi a reimpostare la sua password usando il sistema SMS : riceverà il codice d...

CVE-2013-3900-Remediation-Script

root@kitploit: Script di remediation per CVE-2013-3900 Definisce i percorsi del Registro per le configurazioni a 32 bit e a 64 bit $regPaths = @ "HKLM:\Software\Microsoft\Cryptography\Wintrust\Config", "HKLM:\Software\Wow6432Node\Microsoft\Cryptography\Wintrust\Config" Funzione che aggiunge o...

blueXploit

blueXploit Video di blueXploit blueXploit è la mia proof-of-concept personale che riproduce CVE-2023-45866 , la vulnerabilità di iniezione dei tasti Bluetooth scoperta da Marc Newlin. Abusa di un difetto nel protocollo Bluetooth per iniettare sequenze di tasti in un dispositivo target senza pairi...

CVE-2020-14882

CVE-2020-14882 Questo script consente l'esecuzione remota di codice RCE su Oracle WebLogic Server utilizzando una richiesta GET non autenticata. Sfrutta la vulnerabilità CVE-2020-14882. Eseguendo comandi arbitrari, un attaccante può ottenere accesso non autorizzato al server. Dettagli dell'exploi...

Pentest-Command

Contesto del progetto Durante i test di penetrazione utilizziamo vari framework, ad esempio: MSF, CS, Empire, Impacket, ecc. L'obiettivo principale di questo progetto è quello di raccogliere i comandi comunemente utilizzati nella fase di post-exploitation. Concetti di base Introduzione alle...

CVE-2022-22814_PoC

Escalation dei privilegi - AsusSystemDiagnosis.exe - Proc39 Percorso completo: C:\WINDOWS\System32\DriverStore\FileRepository\asussci2.infamd64d385bdc0d33d66f9\ASUSSystemDiagnosis\AsusSystemDiagnosis.exe Problema: La porta ALPC \RPC Control\ASHWTestServer, esposta da AsusSystemDiagnosis.exe, è...