CVE-2026-56547

The Apple profile generated for the Apple built-in Mail, Calendar and Contacts account to synchronize with HCL Traveler requires the Logon Name and Mail Address to be embedded in them. The values cannot be changed later on, so the Apple profile generation page asks for those values and reflects...

CVE-2019-11447-POC

sadnews CuteNews 2.1.2 - CVE-2019-11447 Proof-Of-Concept CRFSlick द्वारा POC, AkkuS द्वारा खोजा गया CutePHP CuteNews 2.1.2 में एक समस्या पाई गई। एक हमलावर प्रोफ़ाइल क्षेत्र में अवतार अपलोड प्रक्रिया के माध्यम से, avatarfile फ़ील्ड के ज़रिए index.php?mod=main&opt=personal पर सर्वर में घुसपैठ कर सक...

misp-taxonomies

MISP Taxonomies MISP Taxonomies è un insieme di librerie di classificazione comuni per etichettare, classificare e organizzare le informazioni. La tassonomia consente di esprimere lo stesso vocabolario tra un insieme distribuito di utenti e organizzazioni. Le tassonomie che possono essere...

Important: Red Hat Security Advisory: isns-utils security update

An update for isns-utils is now available for Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support and Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On. Red Hat Product Security has rated this update as having a security impact of Important. A Common...

Linux-Kodachi

Übersicht Anmeldeinformationen Terminal Server & Desktop XFCE | Username: kodachi | Password: Security4All Kodachi 9 ist voll funktionsfähig Die Entwicklung von Kodachi 9 ist abgeschlossen und die Plattform ist voll funktionsfähig. Jede Komponente – eigenständige Binärdateien,...

vxlang-page

VxLang Contenuti Documentazione Cos'è VxLang? Formati di file supportati Anteprima Anteprima Virtualizzazione Anteprima Dual-Mode Offuscamento + Virtualizzazione Anteprima Offuscamento Anteprima Code-Flattening Tutorial Utilizzo e Guida-Codice Precauzioni Come ottenere la versione completa...

rusty-hog

Rusty Hog è uno scanner di segreti sviluppato in Rust per le prestazioni, basato su TruffleHog che è scritto in Python. Rusty Hog fornisce i seguenti binari: Ankamali Hog: Scansiona i segreti in un documento Google. Berkshire Hog: Scansiona i segreti in un bucket S3. Choctaw Hog: Scansiona i...

dorkbot

dorkbot Scan Google or other search results for vulnerabilities. dorkbot is a modular command-line tool for performing vulnerability scans against sets of webpages returned by Google search queries or other supported sources. It is broken up into two sets of modules: Indexers - modules that retur...

dorkbot

dorkbot Scansiona i risultati di ricerca di Google o altri per vulnerabilità. dorkbot è uno strumento modulare da riga di comando per eseguire scansioni di vulnerabilità su gruppi di pagine web restituiti da query di ricerca di Google o altre fonti supportate. È suddiviso in due gruppi di moduli:...

Krawl

Krawl A modern, customizable web honeypot server designed to detect and track malicious activity from attackers and web crawlers through deceptive web pages, fake credentials, and canary tokens. Table of Contents Demo What is Krawl? Krawl Dashboard Deployment Modes Krawl Banlist Quickstart Docker...

cuddlephish

CuddlePhish Weaponized multi-user browser-in-the-middle BitM for penetration testers. This attack can be used to bypass multi-factor authentication on many high-value web applications. It even works for applications that do not use session tokens, and therefore would not be exploitable using...

webanalyze

webanalyze これはGoで書かれたWappalyzerの移植版です。このツールは高性能になるように設計されており、大量のホストリストをテストすることができます。 Wappalyzerがアプリ定義への公開アクセスを削除したため、webanalyzeは現在enthecから定義を読み込んでいます。 インストールと使用方法 プリコンパイル済みリリース プリコンパイル済みのリリースはこちらから直接ダウンロードできます。 ビルド 自分でビルドする場合： root@kitploit: $ go install -v...

Important: Red Hat Security Advisory: bind security update

An update for bind is now available for Red Hat Enterprise Linux 7 Extended Lifecycle Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

nomore403

NoMore403 nomore403 est un outil en ligne de commande permettant de tester les contournements du contrôle d'accès HTTP et les incohérences d'analyse autour des réponses 401, 403 et autres réponses associées. L'outil est conçu pour les travaux pratiques de sécurité web : bug bounty, tests...

e9patch

E9Patch - Ein leistungsstarker statischer Binär-Rewriter E9Patch ist ein leistungsstarkes Tool zum statischen Binär-Rewriting für x8664 Linux-ELF-Binärdateien. E9Patch ist: Skalierbar : E9Patch kann große/komplexe Binärdateien zuverlässig umschreiben, darunter Webbrowser 100 MB Größe. Kompatibel ...

uac

Unix-like Artifacts Collector UAC About • Documentation • Main Features • Supported Operating Systems • Usage • Contributing • Support • License 🔎 About UAC UAC Unix-like Artifacts Collector is a powerful and extensible incident response tool designed for forensic investigators, security analysts...

cve-2026-31431-poc

CVE 2026-31431 POC Questa vulnerabilità sfrutta un errore nel controllo della lunghezza di authencesn in Linux, che causa il write back di pagine dirty in aree a cui l'utente non ha permessi, determinando un'escalation dei privilegi Il principio di attacco si basa principalmente su questo repo, c...

AD_Miner

AD Miner è uno strumento di audit per Active Directory on-premise e Entra ID che: Utilizza query Cypher per analizzare i dati del database grafico BloodHound Neo4j. Fornisce una panoramica completa delle vulnerabilità esistenti attraverso un report statico basato sul web. Caratteristiche dei repo...

octosuite

Terminalbasiertes Toolkit für GitHub-Datenanalyse. root@kitploit: $ octosuite user torvalds root@kitploit: from pprint import pprint import octosuite user = octosuite.Username="torvalds" exists, profile = user.exists if exists: pprintprofile Installation root@kitploit: pip install octosuite...

snuffleupagus

Snuffleupagus Security module for php7 and php8 - Killing bugclasses and virtual-patching the rest! Key Features • Download • Examples • Documentation • License • Thanks Snuffleupagus is a PHP 7+ and 8+ module designed to drastically raise the cost of attacks against websites, by killing entire b...