178480 matches found
CVE-2022-30190
CVE-2022-30190 Mitigation for CVE-2022-30190 Script requires to be run as Adminstrator. This script has been tested with Connectwise Automate RMM tool for deployment. I found this solution cleaner than backup up and deleting anything from the registry, as this can simply update the DWORD key valu...
danish-wordlists
Danish wordlists Collection of danish wordlists for cracking danish passwords See also Danish Phone Wordlist Generator for generating wordlists of Danish phone numbers by geographical area and/or usage landline, mobile, services etc.. Follow me on Mastodon: @[email protected] Filename| Lines...
ermir
Ermir Ermir es un Registro RMI Malicioso/Pícaro, explota la deserialización insegura en cualquier código Java que llame a métodos RMI estándar sobre él list/lookup/bind/rebind/unbind. Requisitos Ruby v3 o superior. Instalación Instala Ermir desde rubygems.org: root@kitploit: $ gem install ermir o...
ermir
Ermir Ermir is an Evil/Rogue RMI Registry, it exploits unsecure deserialization on any Java code calling standard RMI methods on it list/lookup/bind/rebind/unbind. Requirements Ruby v3 or newer. Installation Install Ermir from rubygems.org: root@kitploit: $ gem install ermir or clone the repo and...
SharpStay
SharpStay - Persistencia .NET Compilación Para compilar, abre el proyecto de Visual Studio y compila para release. Opciones Claves de Registro Elevadas Clave de Registro UserInit Elevada Tarea Programada Elevada Crear Servicio Elevado Suscripción a Evento WMI Elevada Clave de Registro...
CVE-2019-9730
CVE-2019-9730: Synaptics Audio Driver LPE The vulnerability in this driver package was with the CxUtilSvc system service. It hosted a COM object that low-privileged code can use to perform arbitrary reads and writes to the registry as SYSTEM. The .NET code adds the IRegistryHelper COM interface a...
malicious-devfile-registry
Malicious Devfile Registry The project contains a malicious Devfile Registry usable to exploit CVE-2024-0402 in Gitlab. The Exploit A nodejs:2.2.1 stack is indexed to expose the archive.tar file exploiting the path-traversal issue in registry-support library before v1.1.0. tar location :...
Disable-IPv6-CVE-2024-38063-Fix
Deshabilitar IPv6 para Mitigar CVE-2024-38063 Sin Instalar la Actualización KB Resumen Este script está diseñado para mitigar los efectos de la vulnerabilidad crítica CVE-2024-38063, una vulnerabilidad de ejecución remota de código RCE en la pila TCP/IP de Windows relacionada con IPv6. Al...
ictf-framework
El Framework iCTF 3.0 Este es el framework que Shellphish utiliza para alojar el iCTF. El Framework iCTF está descrito en un artículo presentado en el taller Usenix 3GSE en 2014. Publicamos esto con la esperanza de que permita a educadores y entrenadores alojar sus propios CTF A/D. Este framework...
CreateHiddenAccount
CreateHiddenAccount 创建隐藏账号 中文 | EN Introducción a la Herramienta Hay dos formas comunes de crear una cuenta oculta. Una es agregar el signo $ directamente después del nombre de usuario para crearla, y la otra es usar el registro para clonar al usuario y crearla...
Gitea Container Registry - Unauthorized Private Image Access
Gitea = 1.26.2. As a temporary workaround, set REQUIRESIGNINVIEW=true in gitea app.ini, though this blocks all anonymous access including public repos. reference: - https://blog.gitea.com/release-of-1.26.2/ - https://github.com/go-gitea/gitea/pull/37290 -...
RpcAuthnLevelPrivacyEnabled
Managing deployment of RPC printer association changes for CVE-2021-1678 KB4599464 Windows printer sharing error download and run: https://github.com/alvaciroliveira/RpcAuthnLevelPrivacyEnabled/blob/main/RpcAuthnLevelPrivacyEnabled.reg CREDITS TO:...
SharpHide
SharpHide Solo un truco de persistencia ingenioso para confundir la investigación DFIR. Utiliza la API nativa NtSetValueKey para crear una clave de registro oculta terminada en null. Esto funciona añadiendo un byte nulo delante del nombre del valor clave UNICODESTRING. Se puede encontrar más...
sn0int
sn0int sn0int pronounced /snoɪnt/ is a semi-automatic OSINT framework and package manager. It's used by IT security professionals, bug bounty hunters, law enforcement agencies and in security awareness trainings to gather intelligence about a given target or about yourself. sn0int is enumerating...
HiddenNetworks-Python
HiddenNetworks-Python v0.9 Mayo 2020 Hidden Networks es una prueba de concepto basada en el paper del mismo nombre, programada en Python 3.4. Facilita la tarea de analizar máquinas locales y remotas dentro de un dominio, usando WMI para buscar rastros de conexiones de dispositivos USB. Con la...
CVE-2026-56121_exploit
CVE-2026-56121 — Feast Registry Unauthenticated RCE dill.loads Unauthenticated remote code execution in the Feast feature store's registry gRPC server. The ApplyFeatureView RPC rebuilds an OnDemandFeatureView from the request proto. Doing so base64-decodes spec.userdefinedfunction.body and passes...
EXPLOIT-CVE-2026-56121
CVE-2026-56121 — Feast Unauthenticated RCE ApplyFeatureView gRPC Deserialization Unauthenticated remote code execution in Feast 0.63.0 via unsafe dill.loads deserialization in the registry gRPC server. This repository contains a self-contained proof-of-concept exploit and a Dockerized vulnerable...
creddump7
Information This repo is for my modifications to the original 'creddump' program available at: https://code.google.com/p/creddump/ I did not write the original program. I have combined many patches and fixes I have seen from different forums and user suggestions, as well as modified the usage to...
Shell3er
Shell3er Shell3er Shell inversa de PowerShell Las características inversas de Shell3er Función Get-RandomProcessName La función Get-RandomProcessName genera un nombre de proceso aleatorio concatenando "PS" con un nuevo GUID. Esto se utiliza para crear nombres de proceso únicos y aparentemente...