sap-netweaver-0day-CVE-2025-31324

Scattered Lapsus$ Huntersとして知られるスーパーグループ — ShinyHunters、Scattered Spider、Lapsus$ のグループの組み合わせが、この0dayのPOCをリークしました。 この0dayはShinyHuntersによって作成され、実際に悪用中の中国の国家主体から盗まれたものです。 リーク先：https://t.me/leavemealonefbi/185...

Leaked-Credentials

Google Chromeの開発者ツール（DevTools）と正規表現を使用して漏洩した認証情報を検索するには、以下の簡単な手順に従ってください： 1. DevToolsを開く： Chromeで調査対象のサイトに移動し、Ctrl+Shift+I（Windows/Linux）またはCmd+Option+I（macOS）で開発者ツールを開きます。 2. Networkタブに移動： 「Network」タブをクリックします。 3. 正規表現検索を有効化： フィルターバーの正規表現アイコンをクリックして、正規表現モードを有効にします。 4. ページを更新：...

EQGRP

eqgrp-auction-file.tar.xz のブラウズ可能なコンテンツ 元ファイル: https://mega.nz/!zEAU1AQL!oWJ63n-D6lCuCQ4AY0Cv405hX8kn7MEsa1iLH5UjKU パスフレーズ: CrDj";Va.NdlnzB9M?@K2deB7mN ShadowBrokersによって開示されたもの、ソース この要約はコミュニティによって提供されています: 苦情/クレジットは jvoisin @ dustri.org と @x0rz へ ⚠️ 一部のバイナリはウイルス対策ソフトに検出される可能性があります 入れ子になったTarアーカイブは...

pmanager

Pmanager Demo Description Store and retrieve your passwords from a secure offline database. Check if your passwords has leaked previously to prevent targeted password reuse attacks. Why develop another password manager ? This project was initially born from my desire to learn Rust. I was tired of...

trufflehog

TruffleHog Find leaked credentials. 🔎 Now Scanning ...and more To learn more about TruffleHog and its features and capabilities, visit our product page. 🌐 TruffleHog Enterprise Are you interested in continuously monitoring Git, Jira, Slack, Confluence, Microsoft Teams, Sharepoint and more for...

trufflehog

TruffleHog 유출된 자격 증명을 찾습니다. 🔎 현재 스캔 중 ...그리고 더 많은 TruffleHog와 그 기능 및 성능에 대해 더 알아보려면 제품 페이지를 방문하세요. 🌐 TruffleHog Enterprise Git, Jira, Slack, Confluence, Microsoft Teams, Sharepoint 그 외 등의 자격 증명을 지속적으로 모니터링하는 데 관심이 있으신가요? 저희는 도움이 될 수 있는 엔터프라이즈 제품을 제공합니다! 자세한 내용은 에서 확인하세요...

pepe

PEPE - Post Exploitation Pastebin Emails Collect information about leaked email addresses from Pastebin About Script parses Pastebin email:password dumps and gather information about each email address. It supports Google, Trumail, Pipl, FullContact and HaveIBeenPwned. Moreover, it allows you to...

pwndb

pwndb 流出メール検索ツール。提供元: pwndb2am4tzkvold.onion インストール 前提条件 root@kitploit: sudo apt install tor インストール root@kitploit: git clone https://github.com/jxlil/pwndb.git; cd pwndb virtualenv venv source venv/bin/activate pip3 install -r requirements.txt 使い方 root@kitploit: usage: pwndb.py -h -t EMAIL...

turkce-wordlist

Questo progetto non contiene alcun dato personale come indirizzi email, nomi, numeri di telefono. Le password sono elencate solo a scopo accademico. Non è possibile associare le password a persone reali. Wordlist Turca È uno studio effettuato per analizzare le scelte delle password degli utenti...

pantagrule

Pantagrule Enormi set di regole hashcat generati da password compromesse Avviso di manutenzione del progetto : Questo progetto è considerato completato. Non verranno accettate pull request o modifiche a questo progetto in futuro a meno che non si tratti di veri bug o migrazioni per consentire a...

MalSeclogon

MalSeclogon Ein kleines Tool, um mit dem Seclogon-Dienst zu spielen. Vollständige technische Details unter: https://splintercod3.blogspot.com/p/the-hidden-side-of-seclogon-part-2.html https://splintercod3.blogspot.com/p/the-hidden-side-of-seclogon-part-3.html Verwendung root@kitploit: MalSeclogon...

conti-pentester-guide-leak

conti-pentester-guide-leak Questo repository è stato creato per archiviare materiali trapelati materiali di pentesting trapelati, che in precedenza venivano forniti agli affiliati del gruppo ransomware Conti: obraz I materiali citati trattano argomenti come: configurare il software Rclone con un...

CVE-2024-21626

उपयोग: 1. git clone https://github.com/cdxiaodong/CVE-2024-21626 2. docker-compose up सत्यापन: यदि होस्ट का /etc/passwd प्राप्त हो जाता है, तो यह भेद्यता मौजूद है वातावरण: runc: =v1.0.0-rc93,=1.1.11 हमले के विवरण का सिद्धांत: runc के प्रभावित संस्करणों में, प्रारंभिकरण initialization प्रक्रिया के...

hdcp-genkey

Esempio di generazione della chiave HDCP Questo script implementa una versione semplice dell'algoritmo di generazione delle chiavi HDCP in Python utilizzando la chiave master HDCP trapelata che si trova in master-key.txt. root@kitploit: Usage: generatekey.py options Options: -h, --help show this...

emploleaks

EmploLeaks EmploLeaks is an OSINT Open Source Intelligence tool with a CLI interface, designed to discover and correlate information about employees of a target company. It allows collecting LinkedIn profiles, generating potential corporate emails, searching for leaked credentials in leak databas...

vibe-coding-security

Sicurezza del Vibe Coding Prima di twittare il tuo lancio, esegui questi 69 controlli. Corrispondono esattamente ai pattern alla base della CVE RLS di Lovable CVE-2025-48757, 170+ app, 2025, della fuga di Moltbook 1,5 milioni di token API, feb 2026 e della violazione della piattaforma Lovable...

CVE-2026-46358 OpenBao's Inline Auth Incorrectly Redacted Headers

OpenBao is an open source identity-based secrets management system. Prior to version 2.5.4, OpenBao's inline auth functionality incorrectly redacted audit log entries, resulting in non-auth headers being removed and auth-related headers being retained in cleartext. This requires an attacker to...

EUVD-2026-45980

dataCycle is a data management system for centrally storing, managing, searching, finding, and distributing data. In dataCycle-CORE, the module handling core processing and framework rules, before and including version 25.07.3, anyone with a DataLink UUID can fetch the attached text file directly...

CVE-2026-63862 PCI: mediatek-gen3: Prevent leaking IRQ domains when IRQ not found

In the Linux kernel, the following vulnerability has been resolved: PCI: mediatek-gen3: Prevent leaking IRQ domains when IRQ not found In mtkpciesetupirq, the IRQ domains are allocated before the controller's IRQ is fetched. If the latter fails, the function directly returns an error, without...

EUVD-2026-42266

Grav API plugin before v1.0.0-rc.16 accepts JWT tokens via the ?token= URL query parameter and responds with Access-Control-Allow-Origin: , allowing unauthenticated attackers to make fully authenticated cross-origin API requests from any malicious website. Attackers who obtain a leaked JWT token...