Medusa

Medusa Medusa is a cross-platform agent compatible with both Python 3.8 and Python 2.7. Installation To install Medusa, you'll need Mythic v3 installed on a remote computer. You can find installation instructions for Mythic at the Mythic project page. From the Mythic install root, run the command...

wavecrack

Wavecrack Description A user-friendly Web interface to share an hashcat cracking box among multiple users with some pre-defined options. Screenshots The homepage Adding an hash to crack Seeing the results and some stats Outline This Web application can be used to launch asynchronous password crac...

solarflare

solarflare Credential Dumping Tool for SolarWinds Orion Blog post: https://malicious.link/post/2020/solarflare-release-password-dumper-for-solarwinds-orion/ Credit to @asolino, @gentilkiwi, and @skelsec for helping me figuring out DPAPI. ============================================ | Collecting...

CVE-2019-11287

CVE-2019-11287: DoS via Heap Overflow in RabbitMQ Web Management Plugin Pivotal RabbitMQ, versions 3.7.x prior to 3.7.21 and 3.8.x prior to 3.8.1, and RabbitMQ for Pivotal Platform, 1.16.x versions prior to 1.16.7 and 1.17.x versions prior to 1.17.4, contain a web management plugin that is...

RabbitMQ Management - OAuth 2 Client Secret Disclosure

RabbitMQ 3.13.15, 4.0.20, 4.1.11, and 4.2.6 contains an information disclosure caused by the obsolete GET /api/auth endpoint exposing OAuth 2 client secrets when management.oauthclientsecret is configured, letting unauthenticated attackers access sensitive credentials, exploit requires management...

Amazon rabbitmq-aws 0.1.0 through 0.2.0 - Arbitrary File Read

Amazon rabbitmq-aws versions 0.1.0 through 0.2.0 contain active debug code in the ARN resolver. An authenticated RabbitMQ user with management API access can submit an arn:aws-debug:file ARN to the validation endpoint and read arbitrary files accessible to the RabbitMQ process. id: CVE-2026-9133...

CVE-2026-67234

A flaw was found in rabbitmq-server. When clearing authentication preferences, the server generates a non-compliant cookie name containing invalid characters that standard web browsers reject when attempting deletion. This issue prevents the browser from properly removing the cookie, allowing sta...

CVE-2026-66078

A flaw was found in RabbitMQ. A remote authenticated user with administrative privileges can bypass account deletion safeguards by removing accounts using the bulk-delete API endpoint. Because this endpoint fails to check whether a user account has the protected tag, protected service accounts ca...

CVE-2026-67413

A flaw was found in rabbitmq-server. An authenticated user with permissions to bind and publish messages can cause a Denial of Service DoS by submitting specially crafted pattern-matching expressions to the Java Message Service JMS topic exchange plugin. Because the message broker evaluates these...

CVE-2026-67407

A flaw was found in rabbitmq-server. Due to improper regular expression character escaping, topic permission templates for Message Queuing Telemetry Transport MQTT clients fail to sanitize hyphen characters. An authenticated, low-privileged attacker controlling their client identifier can exploit...

CVE-2026-67239

A flaw was found in rabbitmq-server. The stream-management interface fails to properly sanitize peer certificate fields, leading to a stored Cross-Site Scripting XSS vulnerability. A remote attacker with a valid Transport Layer Security TLS certificate containing a crafted Distinguished Name DN c...

CVE-2026-67237

A flaw was found in rabbitmq-server. When Open Authorization OAuth is enabled for the management interface, the application fails to properly sanitize authentication tokens before embedding them into the bootstrap script. A remote attacker could exploit this cross-site scripting XSS vulnerability...

CVE-2026-67227

A flaw was found in rabbitmq-server. An authenticated remote user with policymaker privileges can cause a Denial of Service DoS by sending repeated HTTP requests with unique parameter names to the global parameters API endpoint. Because user-supplied parameter names are unsafely converted into...

CVE-2026-67230

A flaw was found in RabbitMQ. When the Web STOMP plugin is enabled, the WebSocket handler fails to enforce maximum frame size limits or login timeouts prior to client authentication. An unauthenticated remote attacker can exploit this vulnerability by sending a continuous stream of small frames t...

CVE-2026-67225

A flaw was found in rabbitmq-server. The stream protocol fails to validate the declared length of incoming frames against the negotiated maximum frame size before buffering them into memory. When the stream plugin is enabled, a remote attacker can exploit this issue by declaring an oversized fram...

CVE-2026-67226

A flaw was found in rabbitmq-server. An authenticated user with administrative privileges can cause a Denial of Service DoS by submitting user definitions containing an excessive number of unique tag names. Because the application converts each tag string into an internal Erlang identifier that...

CVE-2026-67223

A flaw was found in rabbitmq-server. When the service uses the Lightweight Directory Access Protocol LDAP authentication plugin with a configured user Distinguished Name DN pattern, it fails to properly escape special characters in the username. A remote attacker can exploit this vulnerability by...

CVE-2026-67222

A flaw was found in rabbitmq-server. An authenticated remote attacker with policymaker privileges can exploit this issue when the Shovel or Federation plugin is enabled by supplying a specially crafted authentication mechanism value. This causes the server to permanently exhaust Erlang virtual...

CVE-2026-66073

A flaw was found in rabbitmq-server. An authenticated user with management API access can cause a Denial of Service DoS by sending requests containing arbitrary node names to queue, exchange, or binding endpoints. Because untrusted input is converted into internal system identifiers atoms without...

CVE-2026-61837

A flaw was found in RabbitMQ. The Advanced Message Queuing Protocol AMQP 1.0 management interface fails to perform proper authorization checks when processing requests for message bindings. An authenticated user without administrative privileges can exploit this issue to enumerate the complete...