CacheData_decrypt

CacheDatadecrypt Un semplice toolkit per il brute force e la decrittazione della CacheData di Windows EntraId. root@kitploit: usage: decryptcachedata.py -h pin,password ... CacheData bruteforcer. On a live windows host, to copy the folders with all subfolders and files: xcopy /H /E /G /C as SYSTE...

ADFT

ADFT v1.0 ADFT é um kit de ferramentas offline de investigação do Active Directory / Windows com uma interface web local integrada. Esta versão oficial v1.0 traz uma superfície de produto coerente: o motor canónico ADFT a CLI a GUI integrada servida pelo backend O ADFT ingere evidências exportada...

gemma_crackme_tutorial

Usare il modello AI locale Gemma 4 E4B di Google per fare Reverse Engineering di un semplice Crackme Stavo giocando con il nuovo modello locale open weights Gemma E4B rilasciato da Google, e con mia sorpresa ho riscontrato un grande successo nell'usarlo per scenari di reverse engineering offline...

PatchaPalooza

PatchaPalooza patchapalooza.com — la versione interattiva è live! Questo strumento CLI è stato sostituito da patchapalooza.com , un sito web interattivo completo per esplorare e analizzare i dati del Patch Tuesday di Microsoft. Copre tutto ciò che questo strumento fa — e molto altro. Vai lì per l...

BloodBash

BloodBash Un progetto open source di SquidSec SquidOffense.com · GitHub BloodBash è un analizzatore JSON offline open source per SharpHound e AzureHound, creato e gestito da SquidSec. Costruisce un grafo, mette in evidenza percorsi di attacco e configurazioni errate di AD/Entra e stampa i risulta...

regipy

regipy ⚠️ Modifiche importanti in v6.0.0 La versione 6.0.0 include importanti modifiche di modernizzazione: Richiede Python 3.9+ - Supporto terminato per Python 3.6, 3.7 e 3.8 Rimossa la libreriaattrs - Le classi data ora usano il modulo dataclasses integrato di Python Se il tuo codice importa...

A Prompt-Based Framework for Loop Vulnerability Detection Using Local LLMs

Loop vulnerabilities are one major risky construct in software development. They can easily lead to infinite loops or executions, exhaust resources, or introduce logical errors that degrade performance and compromise security. The problem are often undetected by traditional static analyzers becau...

EUVD-2024-46501

Malicious code in bioql PyPI...

CVE-2024-5264 Network Key Transfer with AES KHT vulnerability in Luna EFT

Network Transfer with AES KHT in Thales Luna EFT 2.1 and above allows a user with administrative console access to access backups taken via offline analysis...

CVE-2024-5264

CVE-2024-5264 concerns Thales Luna EFT 2.1 and newer, where a user with administrative console access can access backups taken via offline analysis due to a vulnerability in the network transfer using AES Key History Transport. The available documents state the affected product and the underlying...

CVE-2024-5264 Network Key Transfer with AES KHT vulnerability in Luna EFT

Network Transfer with AES KHT in Thales Luna EFT 2.1 and above allows a user with administrative console access to access backups taken via offline analysis...

Windows Process Memory Dump

This module creates a memory dump of a process to disk and downloads the file for offline analysis. Options for DUMPTYPE affect the completeness of the dump: "full" retrieves the entire process address space all allocated pages; "standard" excludes image files e.g. DLLs and EXEs in the address...

Downloading entire Vulners.com database in 5 minutes

Today I once again would like to talk about Vulners.com and why, in my opinion, it is the best vulnerability database that exist nowadays and a real game-changer. The main thing is transparency. Using Vulners you not only can search for security content see "Vulners – Google for hacker", but...

[NetworkMiner v1.4.1] Network Forensic Analysis Tool (NFAT)

NetworkMiner is a Network Forensic Analysis Tool NFAT for Windows but also works in Linux / Mac OS X / FreeBSD. NetworkMiner can be used as a passive network sniffer/packet capturing tool in order to detect operating systems, sessions, hostnames, open ports etc. without putting any traffic on the...

[NetSleuth] Open source Network Forensics And Analysis Tools

NetSleuth identifies and fingerprints network devices by silent network monitoring or by processing data from PCAP files. NetSleuth is an opensource network forensics and analysis tool, designed for triage in incident response situations. It can identify and fingerprint network hosts and devices...