nccfsas

Introduction This repository holds information released publicly by NCC Group's Full Spectrum Attack Simulation FSAS team...

CVE-2022-0441

A vulnerability classified as critical was found in MasterStudy LMS Plugin up to 2.7.5 on WordPress WordPress Plugin. This vulnerability affects an unknown part of the component New Account Handler. The manipulation with an unknown input leads to a privileges management vulnerability. The CWE...

multitor

multitor Create multiple TOR instances with load-balancing. Description • Introduction • How To Use • Parameters • Requirements • Docker • Other • License • Wiki Description It provides one single endpoint for clients. Supports HAProxy , socks protocol and http-proxy servers: polipo , privoxy and...

https-nj.gov---CVE-2018-14041

https-nj.gov---CVE-2018-14041 Vulnearability Report of the New Jersey official site The data-target attribute is vulnerable to Cross-Site Scripting attacks. Test RECOMMENDATION The fix for this specific issue could be changing getTargetFromTrigger function. return $target to: return...

https-nj.gov---CVE-2018-14042

https-nj.gov---CVE-2018-14042 Vulnearability Report of the New Jersey official site In Bootstrap prior to 4.1.2, XSS is possible in the main collapse data attribute. The data-target attribute, the data-parent attribute and the data-container is vulnerable to Cross-Site Scripting attacks. Test...

DomainAlerting

DomainAlerting Daily alert when a new domain name is registered and contains your keywords. Description DomainAlerting tool allows you to perform two main actions for educational purposes only: Download newly registered domains Send automatic email alert You can setup a wordlist and be alerted by...

ssh-audit

ssh-audit ssh-audit is a tool for ssh server auditing. Features SSH1 and SSH2 protocol server support; grab banner, recognize device or software and operating system, detect compression; gather key-exchange, host-key, encryption and message authentication code algorithms; output algorithm...

ketshash

Ketshash A little tool for detecting suspicious privileged NTLM connections, in particular Pass-The-Hash attack, based on event viewer logs. The tool was published as part of the "Pass-The-Hash detection" research - more details on "Pass-The-Hash detection" are in the blog post:...

CVE-2019-0708

New vuln exploit...

TelnetdBypass-

TelnetdBypass — CVE-2026-24061 Scanner A Python-based security scanner that detects and exploits CVE-2026-24061 , a critical CVSS 9.8 authentication bypass vulnerability in GNU InetUtils telnetd versions 1.9.3 through 2.7. How it Works The scanner injects a malicious USER=-f root value via the...

CVE-2026-24061

Docker Telnet Auto-Login Lab A lightweight Docker lab for experimenting with Telnet protocol negotiation , explained in the CVE-2026-24061 exploit, which contains automatic username injection using the NEW-ENVIRON option. This project creates an isolated client–server environment to study how...

CVE-2026-24061

CVE-2026-24061 GNU Inetutils telnetd Remote Authentication Bypass Seriously, telnet in 2026? Come on guys, it's time to move on. SSH exists since 1995. 🤦 Description A critical authentication bypass vulnerability in GNU Inetutils telnetd affecting versions 1.9.3 through 2.7. The vulnerability...

CVE-2026-24061

CVE-2026-24061 Telnet NEW-ENVIRON authentication bypass vulnerability PoC. Build Windows MinGW: root@kitploit: gcc -o exploit.exe exploit.c -lws232 Linux: root@kitploit: gcc -o exploit exploit.c -lpthread Usage root@kitploit: ./exploit port Example root@kitploit: ./exploit 192.168.1.1 23 Disclaim...

telnetd_CVE-2026-24061_tester

Telnetd CVE-2026-24061 Test Script A Python security testing tool to detect vulnerability to environment variable injection in telnetd servers via the NEW-ENVIRON telnet option. Overview This script tests telnetd servers for CVE-2026-24061 , a vulnerability that allows attackers to inject...

CVE-2024-20931

CVE-2024-20931 The Poc for CVE-2024-20931 Vulnerability Analysis A New Attack Surface for JNDI Injection - CVE-2024-20931 Analysis...

CVE-2026-83031

creationtimestamp| type| source ---|---|--- 2026-09-15 22:13:42+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mvlnikmkba2b 2026-09-15 23:50:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mvlsuuari52t...

CVE-2026-70913

creationtimestamp| type| source ---|---|--- 2026-09-15 21:30:07+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mvll2mhszo25 2026-09-15 22:08:30+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mvln7b4kau25...

CVE-2026-70748

creationtimestamp| type| source ---|---|--- 2026-09-15 21:20:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mvlkinfysa2g 2026-09-15 22:08:04+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mvln6hnuci2b 2026-09-16 12:05:07+00:00| seen|...

CVE-2026-39919

creationtimestamp| type| source ---|---|--- 2026-09-15 16:08:20+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mvkz3a5diy24 2026-09-15 17:40:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mvl67bo4er2r 2026-09-17 02:19:54+00:00| seen|...

CVE-2026-77179

creationtimestamp| type| source ---|---|--- 2026-09-15 16:08:12+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mvkz2y4arn2f 2026-09-15 17:30:07+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mvl5nhq73n2r 2026-09-16 12:00:19+00:00| seen|...