kwetza

Introduction By Chris Le Roy @brompwnie [email protected] Kwetza is a tool that allows you to infect an existing Android application with a Meterpreter payload. What does it do? Kwetza infects an existing Android application with either custom or default payload templates to avoid detection ...

PipeViewer

A GUI tool for viewing Windows Named Pipes and searching for insecure permissions. The tool was published as part of a research about Docker named pipes: "Breaking Docker Named Pipes SYSTEMatically: Docker Desktop Privilege Escalation – Part 1" "Breaking Docker Named Pipes SYSTEMatically: Docker...

CVE-2024-36539

Here’s a README.md for a Proof of Concept PoC demonstrating the insecure permissions vulnerability in Contour v1.28.3: Proof of Concept PoC for Insecure Permissions Vulnerability in Contour v1.28.3 This repository contains a Proof of Concept PoC script demonstrating an insecure permissions...

mimic

mimic mimic is a tool for covert execution on Linux x8664. What is "covert execution"? Covert execution is the art of hiding a process. In this case, mimic hides the process in plain sight. mimic can launch any program and make it look like any other program. Any user can use it. It does not...

Reg1c1de

Reg1c1de: Windows Registry Privesc Scanner Summary from help output: Reg1c1de is a tool that scans specified registry hives and reports on any keys where the user has write permissions In addition, if any registry values are found that contain file paths with certain file extensions and they are...

gundog

gundog gundog - PowerShell based guided hunting in Microsoft 365 Defender Gundog provides you with guided hunting in Microsoft 365 Defender. Especially if not only for Email and Endpoint Alerts at the moment. Functionality You provide an AlertID you might received via Email notification and gundo...

BadBlood

BadBlood BadBlood by Secframe fills a Microsoft Active Directory Domain with a structure and thousands of objects. The output of the tool is a domain similar to a domain in the real world. After BadBlood is ran on a domain, security analysts and engineers can practice using tools to gain an...

CVE-2024-34329

CVE-2024-34329 테스트 제품: Datacard XPS Card Printer Driver 버전: = 8.4 설명: 이 애플리케이션은 기본 설치 시 불안전한 파일/폴더 권한으로 인해 로컬 권한 상승LPE 취약점에 노출되며, 이를 통해 모든 사용자에게 C:\ProgramData\Datacard\XPS Card Printer\Service 경로에 대한 완전한 제어 권한이 부여됩니다. "C:\ProgramData\Datacard" 경로의 파일과 폴더는 권한이 없는 사용자, 악성 프로세스 및/또는 위협 행위자가 수정할 수...

CVE-2024-9950-PoC

CVE-2024-9950-PoC Forescout SecureConnector = 11.3.07 Detail My Blog Info Vulnerability: Creation of Temporary Script in Directory with Insecure Permissions Severity: Medium to High Vector: Local Windows OS machine Attack Complexity: Low Privileges Required: Low Categories: Local Privilege...

SecretsStalker

secretstalker / / / / / / / / / / / \ / - / - -/ /\ \ / / // / ' / -/ / // // / / / / /, /// /\// root@kitploit: ╔╦╦╬╬╬╬╬╬╦╦╗ ╔╬╬╬╝╝┘ ╚╝╝╬╬╬┐ ╬╬╝╚╩╬╗╔ ╚╬╬╬ ╬╝ ╚╬╬╗╗ ╔ ╚╬╗ ╬╬ ╔╗ ╚╬╬╬╬╬╬╦ ╬╬ we found your secret... ╔╬┤ ╬╬╬ ╬╬╬╬╬╬╬╬╝╝╝╬╬╗ ...now let's see what it ╬╬┤ ╚╩┘ ╚╬╬╬╬╬╩ ╠╬╬ can REALLY do...

Mohnad-AL-saif-CVE-2020-11107-XAMPP-Local-Privilege-Escalation

🧨 CVE-2020-11107 – XAMPP 로컬 권한 상승 Windows 📌 개요 CVE-2020-11107 은 Windows 에서 Apache Friends XAMPP 에 영향을 미치는 로컬 권한 상승LPE 취약점입니다. 권한이 없는 사용자가 XAMPP 제어판 구성 파일xampp-control.ini을 수정하고 기본 편집기 실행 파일notepad.exe을 악성 실행 파일로 교체할 수 있습니다. 다른 사용자예: 관리자가 제어판을 통해 로그를 열면 악성 바이너리가 희생자의 권한으로 실행되어 권한 상승 이 발생합니다. ❗ 이...

reportly

Reportly is an EntraID user activity report tool. About the tool This is a tool that will help blue teams during a cloud incident. When running the tool, the researcher will enter as input a suspicious user and a time frame and will receive a report detailing the following: 1. Information about t...

Electrolink-FM-DAB-TV

Electrolink-FM-DAB-TV Для CVE-2025-51040 Уязвимость неавторизованного доступа в веб-системе управления передатчиками Electrolink FM/DAB/TV в передатчиках Electrolink 500W, 1kW, 2kW Medium DAB Transmitter Web v01.09, v01.08, v01.07 и Display v1.4, v1.2 Описание Система веб-управления передатчиками...

Safenet_SAC_CVE-2021-42056

Safenet Authentication Client 권한 상승 CVE-2021-42056 Thales 웹사이트 1에 따르면, SafeNet Authentication Client는 eTokens, SafeNet IDPrime 스마트 카드, USB 및 소프트웨어 기반 장치를 포함한 Thales의 광범위한 SafeNet 인증서 기반 인증기 포트폴리오를 관리하는 미들웨어 클라이언트입니다. 여러 파일에 잘못된 권한이 설정되어 루트 사용자로 파일을 덮어쓸 수 있을 뿐만 아니라 권한 상승도 가능합니다여러 단계 필요. 세부 정보...

CVE-2026-90546

WWBN AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 contains a missing authorization flaw in the like.json.php endpoint. The application fails to validate video access permissions before processing like requests, allowing any logged-in user to submit likes on password-protected an...

CVE-2024-22752

EaseUS MobiMover 6.0.5 Build 21620 - Небезопасные разрешения файлов и папок MobiMoverUILaunch.exe страдает от уязвимости повышения привилегий, которая может быть использована «Аутентифицированным пользователем» для изменения исполняемого файла службы на двоичный файл по его выбору в папке bin...

CVE-2020-9442

Exploit Title: OpenVPN Connect for Windows MSI - 3.1.0.361 - Повышение привилегий Дата: 2020-02-28 Автор: Andrew Hess Ссылка на ПО: https://openvpn.net/client-connect-vpn-for-windows/ Версия: 3.1.0.361 MSI CVE: CVE-2020-9442 История 2019.12.15 - Уязвимость обнаружена 2019.12.15 - Первоначальный...

wphardening

WPHardening Укрепите безопасность любой установки WordPress. ❮ ПРИМЕЧАНИЕ ❯ Этот инструмент регулярно выпускает новые версии. Убедитесь, что вы часто обновляете свои зависимости, чтобы получить последнюю версию. Ознакомьтесь с журналом изменений или CHANGELOG.md, чтобы узнать о новых функциях...

wphardening

WPHardening Fortify the security of any WordPress installation. ❮ NOTE ❯ This tool releases new versions on a regular basis. Make sure to update your dependencies frequently to get the latest version. Check out the changelog or CHANGELOG.md to learn about the new features. Installation Installing...

GitHound

GitHound 개요 GitHound 는 GitHub용 BloodHound OpenGraph 수집기로, 조직의 구조와 권한을 탐색 가능한 공격 경로 그래프로 매핑하도록 설계되었습니다. 다음을 수행합니다. 주요 GitHub 엔티티 모델링 GHOrganization : GitHub 조직 메타데이터 GHUser : 조직 내 개별 사용자 계정 GHTeam : 공유 액세스를 위해 사용자를 그룹화하는 팀 GHRepository : 조직 내 저장소 GHBranch : 각 저장소의 명명된 브랜치 GHOrgRole , GHTeamRole ,...