BlockGuard

🛡️ BlockGuard — Agente de seguridad de acceso a archivos basado en procesos BlockGuard es un agente de prevención de pérdida de datos DLP para Windows que intercepta y controla el acceso a archivos a nivel de proceso. Garantiza que solo procesos autorizados — identificados por ruta ejecutable, has...

gibson

Gibson Network monitoring tool that maps process-to-network connections, identifies cloud providers, and generates firewall rules. Lightweight agent for collection, server for aggregation, parser for analysis. Screenshots Cross-machine overview — OS version comparison, shared IP detection,...

soc-investigation-lab

End-to-End SOC Investigation Lab Executes a complete four-phase attack chain Reconnaissance → Exploitation → Persistence → Exfiltration against Metasploitable2, collects evidence at each phase, and produces a structured incident timeline and SOC report — demonstrating simultaneous attacker and...

CVE-2026-19490

CVE-2026-19490 — NetScaler ADC/Gateway SAML authentication bypass Unauthenticated session forgery on Citrix NetScaler ADC / NetScaler Gateway via the SAML HTTP-Redirect binding handler at GET /cgi/samlauth. CVSS 4.0 9.3, CWE-288. Bulletin CTX696939 2026-08-19, no workarounds. Credit for the...

CVE-2026-31431

🚨 CVE-2026-31431: Copy Fail A critical 9-year-old flaw in the Linux kernel that allows obtaining root access in seconds 📋 Executive Summary Attribute| Details ---|--- CVE| CVE-2026-31431 Nickname| Copy Fail Type| Local Privilege Escalation LPE CVSS| 7.8 High Discovered by| Theori Xint Code...

CVE-2023-31290-Scanner-

DONATE: bc1qps62cyk9f9unmdkc9k3ccj9e2h8ywfhg2j53ec Built with ❤️ for the crypto research community. 🚀 CVE-2023-31290 Scanner - Bitcoin & Ethereum Vulnerability Exploit ⚡ The Fastest CVE-2023-31290 Milk Sad Scanner for Bitcoin & Ethereum 🔥 Up to 150,000 seeds/second on modern hardware! 📌 WHAT IS...

ADBloodHound-AI

ADBloodHound-AI AI-Powered Active Directory Attack Path Analysis Analyse de chemins d'attaque Active Directory avec Intelligence Artificielle English | Francais Architecture root@kitploit: +---------------------------+ | BloodHound JSON Export | | users, groups, ACLs | +-------------+------------...

CVE-2026-1492

CVE-2026-1492 User Registration & Membership = 5.1.2 - Unauthenticated Privilege Escalation via Membership Registration 🔴 Vulnerability Overview CVE-2026-1492 — Unauthenticated Privilege Escalation via Membership Registration Description: The User Registration & Membership plugin for WordPress is...

Impersonating IT support: how threat actors turn a remote session into enterprise-wide access

In this article 1. Risk to enterprise environments 2. Attack chain overview 3. Mitigation and response recommendations 4. Learn more Microsoft Threat Intelligence has observed a human-operated intrusion campaign that abuses Microsoft Teams external collaboration to impersonate IT or helpdesk...

CVE-2026-1729-PoC-AdForest-WordPress-Authentication-Bypass

CVE-2026-1729 - AdForest WordPress Authentication Bypass PoC Description Simple Proof of Concept for CVE-2026-1729 PoC - Authentication bypass vulnerability in AdForest WordPress Theme. Authored by f3ds cr3w est 2oo2 blog Features ✅ Direct admin access without credentials ✅ Works on production...

CVE-2025-48734

CVE-2025-48734: Apache Commons BeanUtils – enum declaringClass Information Leak & RCE Chain For educational and authorized security research purposes only. This repository provides a controlled lab environment to reproduce the CVE-2025-48734 vulnerability in Apache Commons BeanUtils and explore h...

CVE-2025-32433-available-for-windows

CVE-2025-32433 Information about the vulnerability: https://nvd.nist.gov/vuln/detail/CVE-2025-32433 POC root@kitploit: kdev :: /erlang/CVE-2025-32433 ‹main› » python3 cve-2025-32433.py -h usage: cve-2025-32433.py -h -d --host HOST --port PORT Exploit for CVE-2025-32433 Erlang OTP SSH server...

HTB-Pterodactyl-Writeup

Informe de Prueba de Penetración — HackTheBox: Pterodactyl Fecha: 8 de abril de 2026 Objetivo: Pterodactyl HackTheBox Dificultad: Media SO: Linux openSUSE Leap 15.6 Evaluador: V0idW1re Resumen Ejecutivo La máquina Pterodactyl en HackTheBox presentó un escenario de ataque realista que involucraba...

CICD-Goat-Vapt-Writeup — Updated!

CICD-Goat VAPT Writeup A full vulnerability assessment & penetration test against OWASP CICD-Goat — a deliberately vulnerable CI/CD environment Jenkins, Gitea, GitLab, CTFd — mapped end-to-end against the OWASP Top 10 CI/CD Security Risks. 🧭 How This Fits With My Other Repos Repository| What's in...

CVE-2025-24000-exploit

CVE-2025-24000 — Post SMTP Privilege Escalation Exploit Overview This script exploits CVE-2025-24000 , a high-severity broken access control vulnerability in the Post SMTP WordPress plugin versions ≤ 3.2.0. It allows any authenticated user with a low-privilege account e.g. Subscriber to access th...

CVE-2025-53580

CVE-2025-53580 El plugin WordPress Simple Business Directory Pro 15.6.9 es vulnerable a una Escalada de Privilegios de alta prioridad CVE-2025-53580 Simple Business Directory Pro — Asignación incorrecta de privilegios → Restablecimiento de contraseña → Toma de control del administrador...

CVE-2025-14364

CVE-2025-14364 Demo Importer Plus Authenticated Subscriber → Administrator viado-reinstall AJAX action 〔 1 〕 Vulnerability Root Cause: Ajax::handlerequest registers the demoimporterplus AJAX action without calling currentusercan. Any authenticated subscriber can send "demoaction":"do-reinstall" t...

CVE-2026-2441-PoC

CVE-2026-2441-PoC CVE-2026-2441 PoC Chrome CSS Use-After-Free PoC Blink CSSFontFeatureValuesMap PoC triggering UAF in CSS processing → renderer RCE inside sandbox on Chrome =144.0.x all platforms. Trigger: @font-feature-values + container-query + forced layout recalc via offsetWidth in rAF loop →...

CVE-2026-22243

CVE-2026-22243: EGroupware has SQL Injection in Nextmatch Filter Processing Overview Field| Details ---|--- CVE ID| CVE-2026-22243 Severity| HIGH Advisory| View Advisory Discovered by| Lukasz Rybak Affected Products egroupware/egroupware versions: = 26.0.20251208, 26.0.20260113 CWE Classification...

CVE-2026-25604-PoC

CVE-2026-25604 PoC Host Header Injection leading to SAML authentication bypass in Apache Airflow's AWS Auth Manager An attacker can inject a malicious Host header into the SAML login flow, causing the Assertion Consumer Service ACS URL to point to an attacker-controlled server. This allows the...