CVE-2026-31431

Ubuntu 24.04.3 LTS Kernel: Linux 6.6.87.1-microsoft-standard-WSL2 Kali GNU/Linux Rolling Kernel: Linux 6.6.87.1-microsoft-standard-WSL2...

CVE-2026-50656

🚨 CVE-2026-50656 — Microsoft Defender „RoguePlanet" Elevation of Privilege-Sicherheitslücke in der Microsoft Malware Protection Engine ⚠️ Nur für Bildungs- und defensive Sicherheitsforschung 📖 Übersicht CVE-2026-50656 ist eine hochgradige Elevation of Privilege EoP -Sicherheitslücke, die die...

CVE-2023-36802

CVE-2023-36802 CVE-2023-36802 ITW случай Объяснение Использование примитива перезаписи PreviousMode https://cwresearch.tistory.com/entry/Microsoft-Streaming-Service-Proxy-Elevation-of-Privilege-Vulnerability-CVE-2023-36802 Благодарности chompie Google Project 0...

WhatTheHack

What The Hack - Repository Willkommen im What The Hack Repository auf GitHub. Dieses Repository enthält Coach-Inhalte, die für Personen entwickelt wurden, die planen, ein What The Hack Event mit Teilnehmern in einer Organisation zu veranstalten. Falls Sie eine Organisation sind, die Interesse hat...

AzureHound

AzureHound Il raccoglitore di dati BloodHound per Microsoft Azure Scarica AzureHound Binari delle release Scarica il binario appropriato per la tua piattaforma da una delle nostre Releases. Rolling Release La rolling release contiene binari precompilati che vengono mantenuti automaticamente...

MFASweep

MFASweep MFASweep è uno script PowerShell che tenta di accedere a vari servizi Microsoft utilizzando un set di credenziali fornito e cerca di identificare se l'MFA è attivo. A seconda di come sono configurati i criteri di accesso condizionale e altre impostazioni di autenticazione multifattore,...

oletools

python-oletools oletools is a package of python tools to analyze Microsoft OLE2 files also called Structured Storage, Compound File Binary Format or Compound Document File Format, such as Microsoft Office 97-2003 documents, MSI files or Outlook messages, mainly for malware analysis, forensics and...

msticpy

MSTIC Jupyter e Strumenti di Sicurezza Python Strumenti di sicurezza Python di Microsoft Threat Intelligence. msticpy è una libreria per indagini e hunting in ambito InfoSec nei Jupyter Notebook. Include funzionalità per: interrogare dati di log da più fonti arricchire i dati con Threat...

msticpy

MSTIC Jupyter and Python Security Tools Microsoft Threat Intelligence Python Security Tools. msticpy is a library for InfoSec investigation and hunting in Jupyter Notebooks. It includes functionality to: query log data from multiple sources enrich the data with Threat Intelligence, geolocations a...

ProcDump-for-Linux

ProcDump ProcDump is a Linux and Mac reimagining of the classic ProcDump tool from the Sysinternals suite of tools for Windows. ProcDump provides a convenient way for Linux and Mac developers to create core dumps of their application based on performance triggers. ProcDump for Linux and Mac is pa...

cloudsploit

CloudSploit by Aqua - Cloud Security Scans Quick Start Generic root@kitploit: $ git clone https://github.com/aquasecurity/cloudsploit.git $ cd cloudsploit $ npm install $ ./index.js -h Docker root@kitploit: $ git clone https://github.com/aquasecurity/cloudsploit.git $ cd cloudsploit $ docker buil...

rdpscan

rdpscan for CVE-2019-0708 bluekeep vuln This is a quick-and-dirty scanner for the CVE-2019-0708 vulnerability in Microsoft Remote Desktop. Right now, there are about 900,000 machines on the public Internet vulnerable to this vulnerability, so many are to expect a worm soon like WannaCry and...

charlotte

charlotte c++ fully undetected shellcode launcher ; releasing this to celebrate the birth of my newborn description 13/05/2021: 1. c++ shellcode launcher, fully undetected 0/26 as of 13th May 2021. 2. dynamic invoking of win32 api functions 3. XOR encryption of shellcode and function names 4...

o365-attack-toolkit

What is o365-attack-toolkit o365-attack-toolkit allows operators to perform oauth phishing attacks. We decided to move from the old model of static definitions to fully "interactive" with the account in real-time. Some of the changes Interactive E-mail Search - Allows you to search for user e-mai...

BadBlood

BadBlood BadBlood by Secframe fills a Microsoft Active Directory Domain with a structure and thousands of objects. The output of the tool is a domain similar to a domain in the real world. After BadBlood is ran on a domain, security analysts and engineers can practice using tools to gain an...

CurveBall

CurveBall CVE-2020-0601 - PoC CVE-2020-0601, o comunemente chiamata CurveBall, è una vulnerabilità in cui la firma dei certificati che utilizzano la crittografia a curva ellittica ECC non viene verificata correttamente. ECC si basa su diversi parametri. Questi parametri sono standardizzati per...

Follina-CVE-and-CVE-2021-40444

Explorando as Vulnerabilidades Follina CVE e CVE-2021-40444 Sumário 1. Introdução 2. Pré-requisitos 3. Configuração e Instalação 4. Uso 5. Explicação Detalhada 6. Comandos 7. Aviso Legal Introdução Este repositório contém scripts e recursos para explorar as vulnerabilidades Follina CVE e...

PoC_CurveBall

CVE-2020-0601 - CurveBall Destaques PoC para CVE-2020-0601 Solução trivial para chave privada igual a 1 Solução não trivial para 1 chave-privada ordem-da-curva Escrito em C, usa a libcrypto do OpenSSL Requisitos Linux de alguma variedade apt install libssl libssl-dev Ou qualquer gerenciador de...

CVE-2020-0601

ChainOfFools AKA CurveBall AKA CVE-2020-0601 Sammlung von CVE-2020-0601 ChainOfFools | CurveBall Ressourcen Allgemein Eine Zusammenfassung aus der NSA-Warnung besagt. NSA hat eine kritische Schwachstelle CVE-2020-0601 entdeckt, die die kryptografische Funktionalität von Microsoft Windows®1...

CVE-2021-28480_HoneyPoC3

ExchangeRCE-CVE-2021-28480 ISTO NÃO É UM EXPLOIT REAL, É UM HONEYPOC https://blog.zsec.uk/cve-2020-1350-honeypoc/ PoC para explorar RCE nos CVEs do Exchange: CVE-2021-28480, CVE-2021-28481, CVE-2021-28482 e CVE-2021-28483. Uso Alcança RCE em servidores Exchange Para executar, a partir de um host...