Dropper-GCleaner-C2-Infrastructure-Kernel-Driver-PowerShell-Conhost-Payload-Analysis

1. Infraestructura C2: servidores resilientes y redundantes El análisis de memoria con Process Hacker revela una lista completa de dominios utilizados por el Dropper GCleaner para la comunicación C2. Estos dominios están alojados en varias plataformas Scaleway, Render, Replit, etc., lo que indica...

CVE-2023-44487-HTTP-2-Rapid-Reset-Attack

PoC - CVE-2023-44487: HTTP/2 快速重置攻击 该仓库包含一个概念验证（PoC）代码，用于演示利用漏洞 CVE-2023-44487 （也称为 HTTP/2 Rapid Reset Attack ）。该漏洞影响 HTTP/2 协议，攻击者可通过快速关闭 RSTSTREAM 的流（streams）来使 web 服务器过载。 📌 描述 CVE-2023-44487 是 HTTP/2 协议中的一个漏洞，允许攻击者发动大规模分布式拒绝服务（DDoS）攻击。该攻击通过在单个 HTTP/2 连接内打开多个流，然后使用 RSTSTREAM...

OWASP-Top-10-AI-Infrastructure-Security-Risks

Los 10 Principales Riesgos de Seguridad en Centros de Datos e Infraestructura de IA FORGE - Endurece el metal debajo del modelo. 🌐 Sitio web: https://forge-framework.io Resumen Ejecutivo Los centros de datos de IA se están construyendo más rápido de lo que se están asegurando. La rápida expansión...

Multi-VLAN-Enterprise-Network-Security-Infrastructure

此存储库没有 README。...

azure-vulnerability-remediation-project

漏洞研究与修复：Azure 云基础设施 项目概述 本项目记录了云托管的 Windows Server 2025 实例（CyberVM）端到端的漏洞管理生命周期。该实验展示了一种主动式方法，通过直接软件修补和架构性补偿控制相结合，来识别、分析并消除高危安全风险。 1. 识别与基线评估 使用 Nessus Essentials 执行了首次凭据扫描，以建立安全基线。扫描共发现 66 个漏洞，其中包括两个高优先级目标。 严重级别| ID| 描述| CVSS v3.0 ---|---|---|--- 高| KB5075899| 缺少 Windows Server 2026 累积更新| 7.0 高|...

CVE-2026-27636

Herramienta pasiva de reconocimiento y fingerprinting para detectar despliegues de FreeScout y analizar la exposición relacionada con CVE-2026-28289. Este script se centra en la recopilación segura de inteligencia de infraestructura en lugar de la explotación. Ayuda a investigadores y defensores ...

CVE-2026-33634-Scanner

CVE-2026-33634-Scanner Scanner automatizado para la detección de indicadores de compromiso IOCs asociados al ataque a la cadena de suministro TeamPCP CVE-2026-33634 📋 Tabla de Contenidos Descripción General Vulnerabilidad Características IOCs Detectados Instalación Uso Ejemplos Formato de Reporte...

cpra

CPRA - Concurrent Pulse-Remediation-Alerting System Monitor millions of services concurrently with automated remediation and dynamic worker scaling. CPRA is a high-performance infrastructure monitoring system designed for platform teams managing large-scale microservice architectures. Built on...

veeam-cve-2023-27532-mock

CVE-2023-27532 - Veeam Backup & Replication 漏洞 漏洞描述 Veeam Backup & Replication 存在一个漏洞，可获取存储在配置数据库中的加密凭据，从而使攻击者能够访问备份基础设施主机。 Nuclei 模板 模板 veeam-cve-2023-27532.yaml 提供了使用多种检测方法对该漏洞进行全面的检测。 测试环境搭建 使用 Docker（推荐） root@kitploit: 构建 Docker 镜像 docker build -t veeam-cve-test . 运行容器 docker run -p 8080:8080...

commvault-cve2025-34028-check

infra-monitor infra-monitor es un script NSE de Nmap ligero para probar silenciosamente la consistencia de respuestas en rutas de infraestructura web. Ayuda a detectar anomalías en el control de acceso, discrepancias de configuración o posibles inconsistencias en cómo responden los diferentes...

CVE-2026-69391

Stack-based buffer overflow in Windows Broker Infrastructure Service allows an authorized attacker to elevate privileges locally...

CVE-2026-69391

CVE-2026-69391 is a stack-based buffer overflow in the Windows Broker Infrastructure Service that allows an authorized attacker to achieve local privilege escalation . The vulnerability requires low privileges and local access, with no user interaction needed. Microsoft rates it CVSS 7.8 (High) ,...

CVE-2026-79576

An issue in the Single-Sign On SSO component of Digital-Infrastructure v9.6.7 allows attackers to authenticate as any user, including the Admin, without a password...

Windows Broker Infrastructure Service Elevation of Privilege Vulnerability

Stack-based buffer overflow in Windows Broker Infrastructure Service allows an authorized attacker to elevate privileges locally...

CVE-2021-41773

CVE-2021-41773 The GREENDARK hospital infrastructure was configured by Dr. Gusto Rogue prior to his termination. No further details are provided. Usage: python3 greendark.py...

CVE-2026-79576

An issue in the Single-Sign On SSO component of Digital-Infrastructure v9.6.7 allows attackers to authenticate as any user, including the Admin, without a password...

EUVD-2026-72848

An issue in the Single-Sign On SSO component of Digital-Infrastructure v9.6.7 allows attackers to authenticate as any user, including the Admin, without a password...

CVE-2026-79576

Digital-Infrastructure v9.6.7 has a vulnerability in its Single-Sign On (SSO) component that allows an unauthenticated, remote attacker to authenticate as any user, including the Admin, without a password . The flaw is network-exploitable with no user interaction or prior privileges required, rat...

Cisco Prime Infrastructure and Cisco Evolved Programmable Network Manager - Remote Code Execution

Cisco Prime Infrastructure PI and Cisco Evolved Programmable Network EPN Manager could allow an authenticated, remote attacker to execute code with root-level privileges on the underlying operating system. This vulnerability exist because the software improperly validates user-supplied input. An...

cve-2026-25541-fuel-analysis

CVE-2026-25541：燃油基础设施影响分析 安全公告 字段| 值 ---|--- CVE| CVE-2026-25541 包| bytes 包 Rust 影响版本| 1.2.1 ≤ 版本 = 1.11.1 受影响仓库 FuelLabs/fuel-block-committer 使用了 bytes 1.9.0（通过 Cargo.lock），该版本存在漏洞。 自 2026 年 4 月 14 日 起，已通过 PR 254 提供修复，但至今未合并（已超过 68 天）。 技术分析 漏洞 BytesMut::reserve 在唯一回收路径中存在整数溢出： root@kitploit: //...