lxd-group-privesc-report

LXD Root Escalação de Privilégio Local para root através da associação padrão ao grupo lxd e do pacote lxd-installer no Ubuntu. Demonstração executada no AWS EC2 Ubuntu Server 26.04 O bug é que a instalação padrão do Ubuntu Server 26.04 concede silenciosamente ao usuário primário a associação ao...

Fortigate-Belsen-Leak-Dump-CVE-2022-40684-

Fortigate-Belsen-Leak-Dump-CVE-2022-40684 So funktioniert dieses Skript: 1. Das Skript durchläuft alle Unterordner unter rootfolder und sucht nach vpn-passwords.txt. 2. Überspringt alle Zeilen mit dem Banner '-=-= Belsen Group -=-=.' 3. Bei Zeilen im Format username:password Extrahiert den Teil...

ict279-cve-2025-54793

ict279-cve-2025-54793 Progetto di gruppo — rilevamento e mitigazione di CVE-2025-54793 Bhuvanesh, Shiva, Emma...

NoEyes

NoEyes 🔒 Chat da terminale sicura Chat di gruppo crittografata end-to-end, messaggi privati e trasferimento file nel tuo terminale. Il server è un forwarder cieco: non può leggere i tuoi messaggi, non conosce il tuo nome utente, non conosce la stanza in cui ti trovi e non può collegare due messag...

SSH-Weak-DH

Informazioni Questo strumento crea connessioni SSH a un server e passa attraverso diverse configurazioni client per verificare se il server consente uno scambio di chiavi Diffie-Hellman DH utilizzando un gruppo debole. Il nostro obiettivo è aiutare a valutare i server SSH per impostazioni di...

GPOddity

GPOddity Il progetto GPOddity, volto ad automatizzare i vettori di attacco GPO attraverso l'NTLM relaying e altro. Per maggiori dettagli riguardo l'attacco e una dimostrazione su come utilizzare lo strumento, consultare l'articolo associato disponibile all'indirizzo:...

ad-ldap-enum

ad-ldap-enum ad-ldap-enum è uno script Python sviluppato per raccogliere utenti, computer e le loro appartenenze ai gruppi da Active Directory. In ambienti Active Directory di grandi dimensioni, strumenti come NBTEnum non erano abbastanza veloci. Eseguendo query LDAP su un controller di dominio,...

CVE-2025-29927-test

Test-App für CVE-2025-29927 Wir haben diese Schwachstelle auf dem 51. Sicherheitslernkreis für Anfänger vorgestellt. Die Präsentationsfolien finden Sie hier. Verwendung Greifen Sie auf die App auf eine der folgenden Weisen zu. Ausführliche Anweisungen finden Sie auf der Startseite der App. Method...

GPOHound

GPOHound GPOHound è uno strumento per scaricare e analizzare oggetti Criteri di Gruppo GPO estratti dalla condivisione SYSVOL. Fornisce un formato strutturato e formalizzato per aiutare a individuare configurazioni errate, impostazioni insicure e percorsi di escalation dei privilegi in ambienti...

GPOZaurr

GPOZaurr Group Policy Eater è un modulo PowerShell che mira a raccogliere informazioni sulle Criteri di gruppo, ma permette anche di risolvere i problemi che potresti trovare in esse. GPOZaurr fornisce 360 gradi di informazioni sulle Criteri di gruppo e le loro impostazioni. Un solo comando...

jarm

JARM Please read the initial JARM blog post for more information. JARM is an active Transport Layer Security TLS server fingerprinting tool. JARM fingerprints can be used to: Quickly verify that all servers in a group have the same TLS configuration. Group disparate servers on the internet by...

slsa

SLSA "salsa" is Supply-chain Levels for Software Artifacts SLSA pronounced "salsa" is a security framework from source to service, giving anyone working with software a common language for increasing levels of software security and supply chain integrity. It’s how you get from safe enough to bein...

duf

duf Disk Usage/Free Utility Linux, BSD, macOS & Windows Features User-friendly, colorful output Adjusts to your terminal's theme & width Sort the results according to your needs Groups & filters devices...

CVE-2026-80538

In the Linux kernel, the following vulnerability has been resolved: xfs: propagate errors from xfsrtginodeload xfsrtginodeensure treats every xfsrtginodeload error other than -ENOENT as success. This can leave the realtime group inode unset after an I/O, allocation, or corruption error. Growfs th...

CVE-2026-74753

In the Linux kernel, the following vulnerability has been resolved: perf: Reject exited events as group leaders perfeventremoveonexec sets remove-on-exec events to the EXIT state and detaches their group relationships. The event's file descriptor can remain open, however, and perfeventopen...

CVE-2026-74753 perf: Reject exited events as group leaders

In the Linux kernel, the following vulnerability has been resolved: perf: Reject exited events as group leaders perfeventremoveonexec sets remove-on-exec events to the EXIT state and detaches their group relationships. The event's file descriptor can remain open, however, and perfeventopen...

CVE-2026-74753 perf: Reject exited events as group leaders

In the Linux kernel, the following vulnerability has been resolved: perf: Reject exited events as group leaders perfeventremoveonexec sets remove-on-exec events to the EXIT state and detaches their group relationships. The event's file descriptor can remain open, however, and perfeventopen...

CVE-2026-74753

This use-after-free vulnerability in the Linux kernel's perf subsystem occurs because perf_event_open() accepts events in the EXIT state as group leaders, rejecting only REVOKED and DEAD events. After perf_event_remove_on_exec() detaches group relationships, a new sibling can be linked to the det...

CVE-2023-30765

CVE-2023-30765 CVE-2023-30765 / ZDI-23-905 - Delta Electronics Infrasuite Device Master Privilegieneskalation Bug-Credit: Piotr Bazydlo @chudypb Links: https://www.zerodayinitiative.com/advisories/ZDI-23-905/ https://www.cisa.gov/news-events/ics-advisories/icsa-23-180-01 Verwendung root@kitploit:...

CPSC253_CybersecurityFinalProjectReports

Einleitung Diese Unterlagen waren Teil meines Abschlussprojekts für meinen Cybersicherheitskurs: CPSC 253 - Grundlagen und Prinzipien der Cybersicherheit Die Prämisse meines Abschlussprojekts war, dass ich ein neu eingestellter Berater in einem Forschungszentrum war und half, deren Sicherheit run...