rbcd-attack

Abusing Kerberos Resource-Based Constrained Delegation TL;DR This repo is about a practical attack against Kerberos Resource-Based Constrained Delegation in a Windows Active Directory Domain. The difference from other common implementations is that we are launching the attack from outside of the...

CVE-2020-26259

CVE-2020-26259 CVE-2020-26259: XStream1.4.14 es vulnerable a una eliminación arbitraria de archivos en el host local al realizar el unmarshalling, siempre que el proceso en ejecución tenga permisos suficientes. https://x-stream.github.io/CVE-2020-26259.html XStream 1.4.14 pom.xml...

MalSCCM

MalSCCM 此工具允许你利用本地或远程的SCCM服务器向它们管理的客户端部署恶意应用程序。使用此工具时，当前进程必须对SCCM服务器拥有管理员权限。 通常情况下，SCCM的部署会将管理服务器和主服务器放在同一台主机上，此时locate命令返回的主机即可用作主服务器。 如果不是这种情况，你需要先攻陷locate返回的管理主机，然后在那台主机上再次运行locate以获取主服务器的主机名。一旦你获得了主机名和管理员权限，就可以继续操作了！ 博客 关于工具用法的更多信息，请参考下面的博客。 https://labs.nettitude.com/blog/introducing-malsccm...

simplewall

simplewall Definitely for advanced users. Description: Simple tool to configure Windows Filtering Platform WFP which can configure network activity on your computer. The lightweight application is less than a megabyte, and it is compatible with Windows 7 SP1 and higher operating systems. You can...

Umbrella_android

Umbrella Umbrella 是一款由 Security First 开发的 Android 移动应用，为人权捍卫者提供在任何安全情况下该做什么的信息以及执行这些操作的工具。它允许用户选择他们想要做的事情，例如：保护数据；安全地打电话/发邮件；安全地访问互联网；计划安全出行；保护办公室/住所；进行反监控；或应对绑架、逮捕或疏散。一旦选择了某种情况，应用会根据用户的具体情况概述该做什么以及使用哪些工具。随后是一个简单的推荐行动清单，可以自定义、保存并安全共享。Umbrella 的资讯推送还为用户提供其选定位置潜在风险的最新实时信息。 Android 安装 F-Droid...

netstat2neo4j

Netstat Visualization with Neo4j Description Graphs help to spot anomalies and patterns in large datasets. This script takes netstat information from multiple hosts and formats them in a way to make them importable into Neo4j. Neo4j can be queried for find connections to certain hosts, from certa...

investigations

Investigaciones Este repositorio contiene indicadores de compromiso extraídos de algunas de las investigaciones técnicas de Amnistía Internacional sobre amenazas dirigidas contra defensores de derechos humanos. Estos indicadores se comparten bajo la licencia CC-BY...

fastfinder

FastFinder A lightweight incident response tool for threat hunting and forensic triage ✨ Overview FastFinder is a powerful, lightweight incident response tool designed for cybersecurity professionals conducting threat hunting, live forensics, and endpoint triage. Built for both Windows and Linux...

LAPSToolkit

LAPSToolkit 用PowerShell编写的函数，利用PowerView来审计和攻击已部署微软本地管理员密码解决方案（LAPS）的Active Directory环境。包括查找由系统管理员专门委派的组、查找拥有“所有扩展权限”可查看密码的用户，以及查看所有启用了LAPS的计算机。 如有任何问题或性能改进建议，请提交问题或评论。此项目使用了旧版PowerView中的代码。 有关LAPS工作原理的更多信息，请参阅 https://adsecurity.org/?p=1790。 Get-LAPSComputers: 显示所有已启用LAPS的计算机、密码过期时间，以及用户有权访问时的密码...

SharpGPOAbuse

SharpGPOAbuse SharpGPOAbuse 是一个用 C 编写的 .NET 应用程序，可用于利用用户对组策略对象（GPO）的编辑权限，来破坏该 GPO 所控制的对象。 更多详细信息可在以下博客文章中找到：https://labs.mwrinfosecurity.com/tools/sharpgpoabuse 编译说明 确保必要的 NuGet 包已正确安装，然后在 Visual Studio 中直接生成项目。 使用方法 用法： SharpGPOAbuse.exe 攻击类型 目前 SharpGPOAbuse 支持以下选项： 选项| 描述 ---|---...

rakkess

rakkess Review Access - kubectl plugin to show an access matrix for server resources Intro Have you ever wondered what access rights you have on a provided kubernetes cluster? For single resources you can use kubectl auth can-i list deployments, but maybe you are looking for a complete overview?...

AnythingLLM - Information Disclosure

AnythingLLM suffers from an information disclosure vulnerability through the /api/setup-complete API endpoint. By accessing this endpoint, a remote and unauthenticated attacker can access sensitive configuration of the target AnythingLLM instance. This detection is included in the AI and LLM...

Vulnerabilities in Cisco License On-Prem

Cisco has identified several vulnerabilities in Cisco License On-Prem. These vulnerabilities reside in the web-based management interface and API endpoints of Cisco License On-Prem. Unauthorized attackers can reset passwords, write files, or create DoS conditions. Authorized attackers with...

CVE-2026-28326-check

SolarWinds Access Rights Manager RCE no autenticado — Script de detección de vulnerabilidades Una comprobación del estado de parcheo sin autenticación para CVE-2026-28326, la vulnerabilidad de ejecución remota de código sin autenticación en SolarWinds Access Rights Manager ARM, corregida en ARM...

CVE-2009-0229-PoC

CVE-2009-0229-PoC PoC para CVE-2009-0229 "Vulnerabilidad de lectura de archivos del Print Spooler" LPE AFR relacionado con CVE-2020-1048 Detalles Autor: Andrei Costin [email protected] https://twitter.com/costinandrei/ Fecha del PoC: 2010-xx-xx Fecha de publicación: 2020-05-14...

Kestrel

Kestrel BloodHound shows you the path. Kestrel shows you what's already inside. Everyone maps the same thing: the attack path - who can reach Domain Admin. It's the right question, and the tools that answer it are excellent. But a graph of "who can reach whom" is blind to an entire class of...

CVE-2024-21107

CVE-2024-21107 Oracle VM VirtualBox para Windows anterior a 7.0.16 - Elevación de Privilegios Descripción: Se ha identificado una vulnerabilidad en Oracle VM VirtualBox en Windows donde el instalador no establece los permisos de acceso adecuados para su carpeta de instalación si se eligió una rut...

PT-2026-103993

GetSimple CMS is a content management system CMS, and GetSimple CMS CE is the community edition of that CMS. In versions 3.3.22 and prior, an authenticated user with page-editing rights can store an arbitrary filesystem path in a page's template attribute. On the public front-end, this value is...

CVE-2026-71426: Improper Limitation of a Pathname to a Restricted Directory

GetSimple CMS is a content management system CMS, and GetSimple CMS CE is the community edition of that CMS. In versions 3.3.22 and prior, an authenticated user with page-editing rights can store an arbitrary filesystem path in a page's template attribute. On the public front-end, this value is...

PT-2026-99789

Name of the Vulnerable Software and Affected Versions Apache Roller version 6.1.5 Description Improper restriction of XML External Entity XXE references allows a user with entry-editing rights on a weblog to force the server to parse a trackback response using an XML parser that does not disable...