netstat2neo4j

Netstat Visualization with Neo4j Description Graphs help to spot anomalies and patterns in large datasets. This script takes netstat information from multiple hosts and formats them in a way to make them importable into Neo4j. Neo4j can be queried for find connections to certain hosts, from certa...

simplewall

simplewall Definitely for advanced users. Description: Simple tool to configure Windows Filtering Platform WFP which can configure network activity on your computer. The lightweight application is less than a megabyte, and it is compatible with Windows 7 SP1 and higher operating systems. You can...

Umbrella_android

Umbrella Umbrella is an Android mobile app developed by Security First that provides human rights defenders with the information on what to do in any given security situation and the tools to do it. It allows the user to choose what they want to do, such as: protect data; securely make a...

MalSCCM

MalSCCM यह उपकरण आपको स्थानीय या दूरस्थ SCCM सर्वरों का दुरुपयोग करके उनके द्वारा प्रबंधित होस्ट पर दुर्भावनापूर्ण एप्लिकेशन तैनात करने की अनुमति देता है। इस उपकरण का उपयोग करने के लिए आपकी वर्तमान प्रक्रिया के पास SCCM सर्वर पर व्यवस्थापक अधिकार होने चाहिए। आमतौर पर SCCM की तैनाती में प्रबंधन...

fastfinder

FastFinder A lightweight incident response tool for threat hunting and forensic triage ✨ Overview FastFinder is a powerful, lightweight incident response tool designed for cybersecurity professionals conducting threat hunting, live forensics, and endpoint triage. Built for both Windows and Linux...

rakkess

rakkess Review Access - kubectl plugin to show an access matrix for server resources Intro Have you ever wondered what access rights you have on a provided kubernetes cluster? For single resources you can use kubectl auth can-i list deployments, but maybe you are looking for a complete overview?...

CVE-2020-26259

CVE-2020-26259 CVE-2020-26259: XStream1.4.14 عرضة لحذف ملفات تعسفي على المضيف المحلي عند إلغاء التسلسل unmarshalling طالما أن العملية المنفذة تمتلك الصلاحيات الكافية. https://x-stream.github.io/CVE-2020-26259.html XStream 1.4.14 pom.xml root@kitploit: com.thoughtworks.xstream xstream 1.4.14 إثبات...

LAPSToolkit

LAPSToolkit Functions written in PowerShell that leverage PowerView to audit and attack Active Directory environments that have deployed Microsoft's Local Administrator Password Solution LAPS. It includes finding groups specifically delegated by sysadmins, finding users with "All Extended Rights"...

rbcd-attack

Abusing Kerberos Resource-Based Constrained Delegation TL;DR This repo is about a practical attack against Kerberos Resource-Based Constrained Delegation in a Windows Active Directory Domain. The difference from other common implementations is that we are launching the attack from outside of the...

investigations

Investigations This repository contains indicators of compromise extracted from some of Amnesty International's technical investigations in targeted threats against human rights defenders. These indicators are shared under the license CC-BY...

AnythingLLM - Information Disclosure

AnythingLLM suffers from an information disclosure vulnerability through the /api/setup-complete API endpoint. By accessing this endpoint, a remote and unauthenticated attacker can access sensitive configuration of the target AnythingLLM instance. This detection is included in the AI and LLM...

SharpGPOAbuse

SharpGPOAbuse SharpGPOAbuse is a .NET application written in C that can be used to take advantage of a user's edit rights on a Group Policy Object GPO in order to compromise the objects that are controlled by that GPO. More details can be found at the following blog post:...

CVE-2009-0229-PoC

CVE-2009-0229-PoC PoC لثغرة CVE-2009-0229 "ثغرة قراءة الملفات في مؤقت الطباعة" LPE AFR مرتبطة بـ CVE-2020-1048 التفاصيل المؤلف: Andrei Costin [email protected] https://twitter.com/costinandrei/ تاريخ PoC: 2010-xx-xx تاريخ الإصدار: 2020-05-14 تم التذكير/الإلهام من CVE-2020-1048 - نعم، لقد تأخ...

CVE-2024-21107

CVE-2024-21107 Oracle VM VirtualBox for Windows prior to 7.0.16 - Elevation of Privileges विवरण: Oracle VM VirtualBox Windows में एक भेद्यता पाई गई है, जहां यदि स्थापना के दौरान कोई गैर-डिफ़ॉल्ट स्थापना पथ चुना गया था, तो सेटअप अपने स्थापना फ़ोल्डर के लिए उचित अभिगम अधिकार निर्धारित करने में विफल...

Kestrel

Kestrel BloodHound shows you the path. Kestrel shows you what's already inside. Everyone maps the same thing: the attack path - who can reach Domain Admin. It's the right question, and the tools that answer it are excellent. But a graph of "who can reach whom" is blind to an entire class of...

CVE-2026-71508 Dolibarr < 24.0.0 REST API Improper Authorization via User Update Endpoint

Dolibarr before 24.0.0 contains an improper authorization vulnerability in the user REST API update endpoint that allows attackers with user-write rights to modify payroll fields by exploiting an incomplete credential denylist that omits payroll columns. Attackers can rewrite salary, bonus, hourl...

EUVD-2026-65080

Dolibarr before 24.0.0 contains a broken object-level authorization vulnerability in the REST API company bank account write routes that allows authenticated attackers with third-party creation rights to create, replace, or delete bank account details of any company without requiring read access ...

CVE-2026-71504

Dolibarr versions prior to 24.0.0 contain an improper authorization flaw in the Members REST API . The API fails to verify password-change permissions, allowing an attacker who holds only member-creation rights to supply an arbitrary user identifier and new password in the request body, thereby r...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, Linux, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: iouring: Any code related to SCMRIGHTS has been removed. This is dead code after we stopped supporting the use of iouring for handling file I/O via SCMRIGHTS; it can now be discarded...

GHSA-45PH-GXXR-GWGW XWiki Platform Live Data Live Table Connector has privilege escalation from edit to script right through Live Data editing

Impact Any user who can edit a page in XWiki can use Live Data's edit REST API in XWiki to change the rights on that page. This allows the user to obtain script right on the page. Script right allows the user to execute potentially dangerous Velocity scripts and send unfiltered HTML and JavaScrip...