Gheist: Attempted Scaled Abuse of Stolen GitHub Tokens Stumbles

An automated campaign is planting secret-dumping workflows in every repository that stolen GitHub tokens can reach. It uses no C2 server, is actively evolving, and has been significantly disrupted by recent GitHub security improvements...

ntlm_relay_gat

NTLM Relay Gat Descripción NTLM Relay Gat es una herramienta potente diseñada para automatizar la explotación de retransmisiones NTLM utilizando ntlmrelayx.py del conjunto de herramientas Impacket. Al aprovechar las capacidades de ntlmrelayx.py, NTLM Relay Gat simplifica el proceso de explotación...

CVE-2025-30154: Embedded Malicious Code

reviewdog/action-setup is a GitHub action that installs reviewdog. reviewdog/action-setup@v1 was compromised March 11, 2025, between 18:42 and 20:31 UTC, with malicious code added that dumps exposed secrets to Github Actions Workflow Logs. Other reviewdog actions that use reviewdog/action-setup@v...

Exploit for CVE-2018-1002105

CVE-2018-1002105 PoC Authenticated PoCauthenticated-poc...