Kestrel

Kestrel BloodHound shows you the path. Kestrel shows you what's already inside. Everyone maps the same thing: the attack path - who can reach Domain Admin. It's the right question, and the tools that answer it are excellent. But a graph of "who can reach whom" is blind to an entire class of...

SharpGPOAbuse

SharpGPOAbuse SharpGPOAbuse è un'applicazione .NET scritta in C che può essere utilizzata per sfruttare i diritti di modifica di un utente su un Oggetto Criterio di Gruppo GPO al fine di compromettere gli oggetti controllati da tale GPO. Maggiori dettagli sono disponibili nel seguente post del...

Umbrella_android

Umbrella Umbrella è un'applicazione mobile Android sviluppata da Security First che fornisce ai difensori dei diritti umani informazioni su cosa fare in qualsiasi situazione di sicurezza e gli strumenti per farlo. Permette all'utente di scegliere cosa vuole fare, come: proteggere i dati; effettua...

investigations

Indagini Questo repository contiene indicatori di compromissione estratti da alcune delle indagini tecniche di Amnesty International sulle minacce mirate contro i difensori dei diritti umani. Questi indicatori sono condivisi sotto la licenza CC-BY...

MalSCCM

MalSCCM Questo strumento permette di abusare di server SCCM locali o remoti per distribuire applicazioni dannose agli host che gestiscono. Per utilizzare questo strumento, il processo corrente deve avere diritti di amministrazione sul server SCCM. Tipicamente, le distribuzioni di SCCM hanno il...

LAPSToolkit

LAPSToolkit Funzioni scritte in PowerShell che sfruttano PowerView per auditare e attaccare ambienti Active Directory in cui è stata implementata la soluzione Local Administrator Password Solution LAPS di Microsoft. Include la ricerca di gruppi delegati specificamente dagli amministratori di...

AnythingLLM - Information Disclosure

AnythingLLM suffers from an information disclosure vulnerability through the /api/setup-complete API endpoint. By accessing this endpoint, a remote and unauthenticated attacker can access sensitive configuration of the target AnythingLLM instance. This detection is included in the AI and LLM...

CVE-2020-26259

CVE-2020-26259 CVE-2020-26259: XStream1.4.14 è vulnerabile alla cancellazione arbitraria di file sull'host locale durante l'unmarshalling, purché il processo in esecuzione abbia i diritti sufficienti. https://x-stream.github.io/CVE-2020-26259.html XStream 1.4.14 pom.xml root@kitploit:...

rakkess

rakkess Review Access - kubectl plugin to show an access matrix for server resources Intro Have you ever wondered what access rights you have on a provided kubernetes cluster? For single resources you can use kubectl auth can-i list deployments, but maybe you are looking for a complete overview?...

rbcd-attack

Abusing Kerberos Resource-Based Constrained Delegation TL;DR This repo is about a practical attack against Kerberos Resource-Based Constrained Delegation in a Windows Active Directory Domain. The difference from other common implementations is that we are launching the attack from outside of the...

CVE-2009-0229-PoC

CVE-2009-0229-PoC PoC für CVE-2009-0229 "Druckerwarteschlangen-Dateileseschwachstelle" LPE AFR verwandt mit CVE-2020-1048 Details Autor: Andrei Costin [email protected] https://twitter.com/costinandrei/ PoC-Datum: 2010-xx-xx Veröffentlichungsdatum: 2020-05-14 erinnert/inspiriert durch...

simplewall

simplewall Definitely for advanced users. Description: Simple tool to configure Windows Filtering Platform WFP which can configure network activity on your computer. The lightweight application is less than a megabyte, and it is compatible with Windows 7 SP1 and higher operating systems. You can...

netstat2neo4j

Netstat Visualization with Neo4j Description Graphs help to spot anomalies and patterns in large datasets. This script takes netstat information from multiple hosts and formats them in a way to make them importable into Neo4j. Neo4j can be queried for find connections to certain hosts, from certa...

CVE-2024-21107

CVE-2024-21107 Oracle VM VirtualBox per Windows precedente alla 7.0.16 - Elevazione dei privilegi Descrizione: È stata identificata una vulnerabilità in Oracle VM VirtualBox su Windows in cui il programma di installazione non riesce a impostare corretti diritti di accesso per la propria cartella ...

CVE-2026-71508 Dolibarr < 24.0.0 REST API Improper Authorization via User Update Endpoint

Dolibarr before 24.0.0 contains an improper authorization vulnerability in the user REST API update endpoint that allows attackers with user-write rights to modify payroll fields by exploiting an incomplete credential denylist that omits payroll columns. Attackers can rewrite salary, bonus, hourl...

EUVD-2026-65080

Dolibarr before 24.0.0 contains a broken object-level authorization vulnerability in the REST API company bank account write routes that allows authenticated attackers with third-party creation rights to create, replace, or delete bank account details of any company without requiring read access ...

CVE-2026-71504

Dolibarr versions prior to 24.0.0 contain an improper authorization flaw in the Members REST API . The API fails to verify password-change permissions, allowing an attacker who holds only member-creation rights to supply an arbitrary user identifier and new password in the request body, thereby r...

fastfinder

FastFinder A lightweight incident response tool for threat hunting and forensic triage ✨ Overview FastFinder is a powerful, lightweight incident response tool designed for cybersecurity professionals conducting threat hunting, live forensics, and endpoint triage. Built for both Windows and Linux...

GHSA-45PH-GXXR-GWGW XWiki Platform Live Data Live Table Connector has privilege escalation from edit to script right through Live Data editing

Impact Any user who can edit a page in XWiki can use Live Data's edit REST API in XWiki to change the rights on that page. This allows the user to obtain script right on the page. Script right allows the user to execute potentially dangerous Velocity scripts and send unfiltered HTML and JavaScrip...

CVE-2026-47230

Admidio is an open-source user management solution. Prior to version 5.0.10, modules/documents-files.php mode filerenamesave shares the same root-cause shape as the cross-folder move bug 05-documents-cross-folder-move-idor.md: the top-level rights check at lines 79-89 validates hasUploadRight on...