o365enum

Office 365 ユーザー列挙 ActiveSync、Autodiscover、または office.com のログインページを使用して、Office 365 から有効なユーザー名を列挙します。 使用方法 o365enum は、最初のパラメーターとして指定されたファイルからユーザー名を読み取ります。ファイルには1行に1つのユーザー名を記述します。出力はCSV形式で、解析が容易です。有効ステータスは、0（無効なユーザー）、1（有効なユーザー）、2（有効なユーザーかつ有効なパスワード）です。 root@kitploit: python3.6 o365enum.py -h usage:...

o365enum

Office 365 User Enumeration Enumerate valid usernames from Office 365 using ActiveSync, Autodiscover, or office.com login page. Usage o365enum will read usernames from the file provided as first parameter. The file should have one username per line. The output is CSV-based for easier parsing. Val...

PrintNightmare

Windows 打印后台处理程序服务 RCE CVE-2021-1675 PrintNightmare 如何禁用打印后台处理程序服务？ CMD 命令提示符 net start | findstr -i "spooler" net stop spooler REG ADD "HKLM\SYSTEM\CurrentControlSet\Services\Spooler" /v "Start " /t REGDWORD /d "4" /f PowerShell Get-Service -Name Spooler Stop-Service -Name Spooler -Force...

Security Bulletin: Platform Navigator in IBM Cloud Pak for Integration are vulnerable to multiple vulnerabilities in browserslist

Summary Platform Navigator in IBM Cloud Pak for Integration are vulnerable to multiple vulnerabilities in browserslist. CVE-2026-73088, CVE-2026-73089 The vulnerabilities have been addressed. Vulnerability Details CVEID:CVE-2026-73088 DESCRIPTION: Browserslist is a configuration tool for sharing...

printix-CVE-2022-25089

CVE-2022-25089 A system admin's complete nightmare, users changing the registry from anywhere and everywhere without authentication. Explore the docs » View Demo . Report Bug . Request Feature Table Of Contents About the Project Built With Getting Started Prerequisites Installation Usage Roadmap...

CVE-2022-20474

CVE-2022-20474 Analysis — Self-changed Bundle under LazyValue Preface A friendly reminder: before reading this article, you should have a basic understanding of Bundle Mismatch vulnerabilities. If you haven't read the following references, it is recommended to read them first: 1. Bundle Feng Shui...

shhgit

🚨 shhgit is no longer maintained. If you need support or consultation for your secret scanning endeavours, drop me an e-mail [email protected] 🚨 shhgit helps secure forward-thinking development, operations, and security teams by finding secrets across their code before it leads to a security...

shhgit

🚨 shhgit ya no se mantiene. Si necesitas soporte o consultoría para tus esfuerzos de escaneo de secretos, envíame un correo electrónico a [email protected] 🚨 shhgit ayuda a proteger a los equipos de desarrollo, operaciones y seguridad con visión de futuro al encontrar secretos en su código...

CVE-2024-9465

CVE-2024-9465 Checkpoint SQL Injection via Time-Based Attack CVE-2024-9465 SHODAN SEARCH root@kitploit: https://www.shodan.io/search?query=html%3A%22Expedition+Project%22 html:"Expedition Project" FOFA SEARCH root@kitploit: https://en.fofa.info/ body="Expedition Project" || title="Expedition...

ike-scan

ike-scan Discover and fingerprint IKE hosts IPsec VPN Servers Table of Contents Building and Installing Overview Usage Implementation Details Host Input and Memory Requirements Rate Limiting Cookie Generation and Remote Host Identification IKE Packet Details Backoff Fingerprinting Program Output...

ike-scan

ike-scan IKEホスト（IPsec VPNサーバ）の発見とフィンガープリント取得 目次 ビルドとインストール 概要 使い方 実装の詳細 ホスト入力とメモリ要件 レート制限 クッキー生成とリモートホスト識別 IKEパケットの詳細 バックオフフィンガープリント プログラムの出力 例 対応プラットフォーム 参考資料とRFC 連絡先 ビルドとインストール ike-scanは標準のGNU autoconfおよびautomakeツールを使用しているため、インストールは通常の手順となります。 git clone https://github.com/royhills/ike-scan.git...

netlas-cookbook

Netlas CookBook The goal of this guide is to teach anyone interested in cybersecurity, regardless of their knowledge level, how to make the most of Netlas Search Tools. This is a long read. We have collected as many simple use cases as possible and demonstrated how to automate them. ⭐️ Give us a...

netlas-cookbook

Netlas CookBook El objetivo de esta guía es enseñar a cualquier persona interesada en ciberseguridad, independientemente de su nivel de conocimiento, cómo aprovechar al máximo las herramientas de búsqueda de Netlas. Es una lectura extensa. Hemos recopilado la mayor cantidad posible de casos de us...

shortscan

🌀 Shortscan An IIS short filename enumeration tool. Functionality Shortscan is designed to quickly determine which files with short filenames exist on an IIS webserver. Once a short filename has been identified the tool will try to automatically identify the full filename. In addition to standard...

shortscan

🌀 Shortscan Una herramienta de enumeración de nombres cortos de archivos en IIS. Funcionalidad Shortscan está diseñado para determinar rápidamente qué archivos con nombres cortos existen en un servidor web IIS. Una vez identificado un nombre corto, la herramienta intentará identificar...

dorkScanner

DORK SCANNER Un típico escáner de dorks de buscadores que extrae resultados de motores de búsqueda con consultas que proporcionas para encontrar URLs vulnerables. Introducción El dorking es una técnica utilizada por redacciones, organizaciones de investigación, auditores de seguridad y delincuent...

ADenum

Enumeración de Active Directory - ADEnum.py ADEnum.py es una herramienta de pentesting que permite encontrar configuraciones incorrectas a través del protocolo LDAP y explotar algunas de esas debilidades con Kerberos. root@kitploit: █████╗ ██████╗ ███████╗███╗ ██╗██╗ ██╗███╗ ███╗ ██╔══██╗██╔══██╗...

CVE-2018-5353

CVE-2018-5353 Zoho ManageEngine ADSelfServicePlus Client Privilege Escalation/RCE Information Vendor: Zohocorp Product: ManageEngine ADSelfServicePlus Versions Affected: Before 5.5 build 5517 Researcher: Jason Juntunen aka @missing0x00 https://github.com/missing0x00 CVSS: 8.8 Description The cust...

CVE-2024-52510

Nextcloud X-E2EE-SIGNATURE Bypass POC Summary During normal operation of Nextcloud's E2EEv2 protocol, clients cryptographically sign folder-metadata before uploading to the server. This ensures the metadata has not been tampered with when it is re-fetched for the purposes of file-sharing or synci...

s6_pcie_microblaze

PCI Express DIY 黑客工具包 一般信息 内容 SP605 板卡配置 软件配置 示例 使用 Python API 实用 DMA 攻击 Option ROM 攻击 故障排除 从源代码构建项目 一般信息 本仓库包含一组与 PCI-E 总线及 DMA 攻击相关的工具和概念验证。其中包含一个 HDL 设计，可为搭载 Spartan-6 FPGA 的 Xilinx SP605 评估套件实现软件可控的 PCI-E gen 1.1 端点设备。与流行的 USB3380EVB 相比，该设计允许操作 PCI-E 总线的原始事务层数据包（TLP），并执行完整的 64...