melting-cobalt

melting-cobalt 👀 A tool to hunt/mine for Cobalt Strike beacons and "reduce" their beacon configuration for later indexing. Hunts can either be expansive and internet wide using services like SecurityTrails, Shodan, or ZoomEye or a list of IP's. Getting started 1. Install melting-cobalt 2. Configu...

melting-cobalt

melting-cobalt 👀 Uno strumento per cercare/minare beacon di Cobalt Strike e "ridurre" la loro configurazione dei beacon per un'indicizzazione successiva. Le ricerche possono essere estese e su Internet ampio utilizzando servizi come SecurityTrails, Shodan o ZoomEye oppure un elenco di IP. Per...

Git-Secret

Git-Secret रिपॉजिटरी में API कुंजी / कुछ कीवर्ड खोजने के लिए Go स्क्रिप्ट्स अपडेट V1.0.2 🚀 कुछ चेकर्स हटाना गिटहब डॉर्क्स वाली उदाहरण फ़ाइल जोड़ना go install कमांड के लिए समर्थन जोड़ना issue 5 स्क्रीनशॉट 📷 कैसे इंस्टॉल करें नवीनतम संस्करण स्थापित करने के लिए: root@kitploit: go install...

dumpscan

Public development on this tool has been paused but is still being worked on privately. Expect a massive update Q3/Q4 2024. Dumpscan is a command-line tool designed to extract and dump secrets from kernel and Windows Minidump formats. Kernel-dump parsing is provided by volatility3. Features x509...

dumpscan

Lo sviluppo pubblico di questo strumento è stato sospeso ma si sta ancora lavorando in privato. Aspettatevi un enorme aggiornamento nel Q3/Q4 2024. Dumpscan è uno strumento a riga di comando progettato per estrarre e scaricare segreti da formati di dump kernel e Windows Minidump. L'analisi dei du...

KnockKnock

DIESES REPOSITORY WURDE ARCHIVIERT Um die neueste Version von KnockKnock anzuzeigen oder ein Issue zu melden, siehe https://github.com/waffl3ss/KnockKnock. KnockKnock - v0.9.9 Bitte lesen Sie die README gründlich durch. Entwickelt, um potenzielle Benutzernamen zu validieren, indem OneDrive und/od...

CVE-2026-73267

A flaw was found in the clusterclaims-controller component of multicluster engine MCE. A tenant with standard permissions to create and delete ClusterClaim resources can exploit this by manipulating the spec.namespace field. This allows the tenant to specify and delete any ManagedCluster, includi...

dmi-tcat

DMI TCAT Il Twitter Capture and Analysis Toolset DMI-TCAT della Digital Methods Initiative consente di recuperare e raccogliere tweet da Twitter e analizzarli in vari modi. Installazione Puoi trovare istruzioni dettagliate per l'installazione nel wiki Requisiti Credenziali API di Twitter possono...

gradle-static-analysis-plugin

DEPRECATO Plugin di analisi statica per Gradle ⚠️ Un fork di questo progetto è mantenuto su https://github.com/GradleUp/static-analysis-plugin/ Si prega di migrare utilizzando l'ID del plugin com.gradleup.static-analysis. Un plugin Gradle per applicare facilmente la stessa configurazione di...

CVE-2026-74975

A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issue: Spoofing issue in the Downloads component in Firefox for Android...

PANIX

PANIX - Persistenza contro NIX PANIX è un framework di persistenza Linux potente, modulare e altamente personalizzabile, progettato per ricercatori di sicurezza, ingegneri di detection, penetration tester, appassionati di CTF e altri. Pensato con la versatilità in mente, PANIX enfatizza la...

kurasagi

kurasagi kurasagi ist ein vollständiger POC für den PatchGuard-Bypass für Windows 24H2 - 25H2. Weitere Informationen finden Sie im product-Zweig, der das PDF-Dokument mit den Details zum Bypass enthält. Falls ein BSOD im Zusammenhang mitCRITICALSTRUCTURECORRUPTION PatchGuard auftritt, erstellen S...

Exploit for OS Command Injection in Atlassian Bitbucket

CVE-2022-36804 Bitbucket PoC This repository contains a Pytho...

CVE-2026-76131

Use of hard-coded credentials issue exists in VOCALOID6 , which may allow an attacker to impersonate a legitimate VOCALOID6 Editor and gain access to Yamaha's activation and content servers...

CVE-2026-76131

Hard-coded credentials in VOCALOID6 Editor allow network-based impersonation of the legitimate client, enabling unauthorized access to Yamaha's activation and content servers. CVSS 3.1 scores this MEDIUM (5.3). No exploit code or in-the-wild exploitation is documented; monitor Yamaha and JPCERT a...

CVE-2026-76131

Use of hard-coded credentials issue exists in VOCALOID6 , which may allow an attacker to impersonate a legitimate VOCALOID6 Editor and gain access to Yamaha's activation and content servers...

EUVD-2026-63798

Use of hard-coded credentials issue exists in VOCALOID6 , which may allow an attacker to impersonate a legitimate VOCALOID6 Editor and gain access to Yamaha's activation and content servers...

Security Bulletin: Multiple vulnerabilities have been identified with the DS8900F and DS8A00 Hardware Management Console (HMC)

Summary DS8900F and DS8A00 updates have been released to remediate vulnerabilities in various components like IBM Java Quarterly Update, IBM WebSphere Application Server, IBM Power HMC, Linux Kernel, OpenSSL, libsoup, libssh, OpenSSH, net-snmp, Apache HTTP Server httpd, Expat libexpat, libpng,...

CVE-2026-43679

This issue was addressed with improved permissions checking. This issue is fixed in watchOS 26.4. An attacker with physical access to a locked Apple Watch may be able to view user contacts...

CVE-2026-20679

The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.7.5, macOS Sonoma 14.8.5, macOS Tahoe 26.4. Processing a maliciously crafted file may lead to unexpected app termination...