Windows-SignedBinary

Generieren eines signierten Windows-Binaries mit einem anderen Hash Die Idee war, Endpoint-Lösungen zu umgehen, die bekannte „bösartige“ signierte Anwendungen wie „regsvr32.exe“ blockieren. Ich wollte einen Weg finden, eine gültige signierte Datei mit einem anderen Hash zu erhalten. Die Analyse M...

GetFGPP

GetFGPP Estrae le Fine Grained Password Policies FGPP da Active Directory tramite LDAP. Richiede accesso in lettura al Password Settings Container — di default solo gli admin hanno questo diritto, ma a volte è configurato in modo errato. Installazione root@kitploit: pip3 install ldap3...

CVE-2024-21413

CVE-2024-21413 | PoC della vulnerabilità di esecuzione remota di codice in Microsoft Outlook 🚀 Utilizzo Assicurati di avere i permessi e l'autorizzazione appropriati dal proprietario del sistema di destinazione prima di utilizzare questo script. Prerequisiti Python 3.x impacket-smbserver Esempio ...

CVE-2025-24071

Rapporto sulla vulnerabilità di sicurezza: CVE-2025-24071 - Vulnerabilità di spoofing di Windows File Explorer Panoramica NSFOCUS CERT ha rilevato che Microsoft ha recentemente rilasciato un aggiornamento di sicurezza per risolvere una grave vulnerabilità di spoofing in Windows File Explorer,...

CVE-2024-28000

CVE-2024-28000 - LiteSpeed Cache Privilege Escalation PoC !WARNING This repository is intended for educational and research purposes only. Use the provided PoC exclusively on systems you own or have explicit permission to test. Unauthorized access , exploitation, or misuse of any material in this...

CVE-2025-50154-Aggressor-Script

LNK Weaponizer - Script Aggressor per Cobalt Strike Uno script Aggressor completo per Cobalt Strike che weaponizza ed esegue file LNK e Library-MS dannosi per la divulgazione di hash NTLMv2-SSP tramite SMB. Include tecniche di bypass per CVE-2025-24054. ⚠️ DISCLAIMER Questo strumento è solo a scop...

MAL-2026-15529 Malicious code in bui-react-10themes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a333445d0f8345bc824161bcc7f6487a59ba9f1f7a852da2643eb7c27dd849b package.json declares a dependency whose key equals this package's own name bui-react-10themes and whose value is a bare HTTPS URL...

Malicious code in amplitude-react-native (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 489592652dd724254e29c10536019e0e03e8032e781748a73fc357bb40f50a1d package.json declares a single dependency whose source is a bare HTTPS URL https://repo.securityctrl.com/amplitude-react-native rather than a registr...

MAL-2026-15518 Malicious code in payments-ui-services (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e4b49e2f4d16837b49ca7d82e2c5a46c2a861c3f2c3d63596c730749dfec0337 package.json line 11 declares a dependency whose source is the arbitrary HTTPS URL https://repo.securityctrl.com/payments-ui-services instead of a...

hashmuncher

Hash Muncher Cattura hash NetNTLMv2 usando ETW con diritti amministrativi su Windows Richiede accesso elevato amministratore su Windows 8.1 / Windows 2016 o successivi Usa Event Tracing for Windows ETW per ottenere accesso ai dati grezzi dei pacchetti per i pacchetti di autenticazione SMB...

ntdsdotsqlite

NTDS.Sqlite Diese Software kann entweder direkt als CLI-Werkzeug oder als Bibliothek verwendet werden, um aus einer NTDS.DIT-Datei eine SQLite-Datenbank zu erzeugen. Verschlüsselte Bits können entschlüsselt werden, wenn die zugehörige System-Hive mit angegeben wird. Installation python -m pip...

LeakedWallpaper

Leaked Wallpaper Questo è uno strumento di escalation dei privilegi corretto con CVE-2024-38100 in KB5040434 che ci permette di divulgare l'hash NetNTLM di un utente da qualsiasi sessione sul computer, anche se stiamo operando da un utente con privilegi limitati. Utilizzo root@kitploit:...

mitaka

Mitaka Mitaka is a browser extension that makes your OSINT Open Source Intelligence search & scan easier. Key features: Auto IoC indicators of compromise selection with refanging. E.g. example.com to example.com, testatexample.com to [email protected], hxxp://example.com to , etc...

EUVD-2026-42696

Pimcore: SQL Injection via Column Name in DateFilter allows authenticated user to extract arbitrary database data including admin password hashes...

ShuckNT

🔐 ShuckNT : Shuck den Hash, bevor du versuchst, ihn zu knacken | Das Skript von Shuck.sh ShuckNT ist das Skript des Online-Dienstes Shuck.sh für den Einsatz vor Ort jetzt online ausprobieren!. Es wurde entwickelt, um Authentifizierungstoken auf Basis des Data Encryption Standard DES herabzustufen...

CVE-2026-55425 Graylog: System Catalog titles endpoint can be used to retrieve values of protected database fields

Graylog is a free and open log management platform. From 7.1.0 until 7.1.4 and 7.2.0-alpha.2, the System Catalog entity titles endpoint in graylog2-server/src/main/java/org/graylog2/rest/resources/system/contentpacks/titles/EntityTitleServiceImpl.java allows an authenticated user to request...

CVE-2026-55425 Graylog: System Catalog titles endpoint can be used to retrieve values of protected database fields

Graylog is a free and open log management platform. From 7.1.0 until 7.1.4 and 7.2.0-alpha.2, the System Catalog entity titles endpoint in graylog2-server/src/main/java/org/graylog2/rest/resources/system/contentpacks/titles/EntityTitleServiceImpl.java allows an authenticated user to request...

CVE-2026-55425

Graylog (free and open log management platform) has an authorization flaw in the System Catalog entity titles endpoint (EntityTitleServiceImpl.java). An authenticated user can request composite display fields without the server verifying that every selected field is readable, allowing retrieval o...

tryhackme-monikerlink-writeup

TryHackMe: Moniker Link — Guida a CVE-2024-21413 Una guida completa alla room TryHackMe "Moniker Link": sfruttare la CVE-2024-21413, una vulnerabilità di Microsoft Outlook del 2024, per rubare l'hash NTLMv2 della vittima nel momento in cui fa clic su un link in un'email di phishing — senza macro,...

CVE-2025-7775

CVE-2025-7775 PowerShell-Versionserkennung Es gibt auch eine coole Methode auf Basis von Datei-Hashes: https://github.com/fox-it/citrix-netscaler-triage/blob/main/scan-citrix-netscaler-version.py Sie können möglicherweise auch die Client-Binärdateien verwenden, um die Version zu ermitteln nicht...