wodat

wodat Инструмент для атак на базы данных Oracle под Windows Простая переработка популярного инструмента для атак на базы данных Oracle ODAT https://github.com/quentinhardy/odat на C .Net Framework. Благодарность https://github.com/quentinhardy/odat, так как большая часть функциональности перенесе...

evtx

EVTX A cross-platform parser for the Windows XML EventLog format Features 🔒 Implemented using 100% safe rust - and works on all platforms supported by rust that have stdlib. ⚡ Fast - see benchmarks below. It's faster than any other implementation by orders of magnitude! 🚀 Multi-threaded. ✨ Suppor...

pulledpork

PulledPork PulledPork for Snort and Suricata rule management from Google code Find us on Libera.Chat IRC pulledpork Copyright C 2009-2021 JJ Cummings, Michael Shirk and the PulledPork Team! Thank you for choosing to use PulledPork! This file provides some basic guidance on the usage of PulledPork...

Invoke-SessionHunter

Invoke-SessionHunter Получает и отображает информацию об активных пользовательских сессиях на удаленных компьютерах. Административные привилегии не требуются. Инструмент использует службу удаленного реестра для запроса куста реестра HKEYUSERS на удаленных компьютерах. Он находит и извлекает...

zBang

zBang — это специальный инструмент оценки рисков, который выявляет потенциальные угрозы для привилегированных учетных записей в сканируемой сети. Организации и участники красных команд могут использовать zBang для выявления потенциальных векторов атак и повышения уровня безопасности сети...

CVE-2020-0665

CVE-2020-0665 - SID 필터 우회 CVE-2020-0665에 대한 개념 증명으로, Active Directory 포리스트에서 SID 필터링을 우회할 수 있게 합니다 교차 포리스트 공격. 공격 요구 사항 대상 도메인 컨트롤러 머신은 2020년 2월 이후에 패치되지 않아야 합니다. 신뢰하는 포리스트의 도메인 컨트롤러를 사전에 장악해야 합니다 이 공격은 SYSTEM 사용자와 같은 높은 권한이 필요합니다. 신뢰하는 포리스트와 양방향 전이 신뢰 관계가 설정되어 있어야 합니다. 장악된 DC에 python2.7이 설치되어 있어...

GlobalUnProtect

GlobalUnProtect Windows 클라이언트 설치에서 GlobalProtect 구성, 쿠키 및 HIP 파일을 복호화하고 수집하기 위한 PoC 도구입니다. 블로그 게시물: https://rotarydrone.medium.com/4a1d8fc7773e 사용법 독립 실행형 또는 execute-assembly 또는 이에 상응하는 방식으로 메모리 내에서 실행합니다. 모든 콘텐츠를 메모리 내 zip으로 수집하여 지정된 위치에 씁니다. root@kitploit: GlobalUnProtect.exe Usage:...

CVE-2024-3495-POC

CVE-2024-3495-POC Country State City Dropdown CF7 WordPress 플러그인2.7.2 이하 버전은 'cnt' 및 'sid' 매개변수를 통한 SQL 인젝션에 취약합니다. SQL 쿼리의 불충분한 이스케이프 처리와 준비 부족으로 인해 인증되지 않은 공격자가 쿼리를 추가하여 잠재적으로 민감한 데이터베이스 정보를 추출할 수 있습니다...

Astra Linux – Vulnerability found in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: SELinux: The use of both GFPKERNEL and GFPATOMIC in convertcontext was enabled. The following warning was triggered in a hardware environment: SELinux: Converting 162 SID table entries... BUG: The sleeping function was called...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: Networking: dsa: mv88e6xxx: Fix –ENOENT when deleting VLANs and MST is not supported. Russell King reported that on version ZII dev rev B, deleting a bridge VLAN from a user port results in the error –ENOENT:...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: ksmbd: An out-of-bounds access issue in parsesecdesc has been fixed. If osidoffset, gsidoffset, and dacloffset can be greater than smbntsdstruct.size. If they are smaller, it could lead to an out-of-bounds situation. Additionally...

PT-2026-90354

In the Linux kernel, the following vulnerability has been resolved: smb: client: clear setuid/setgid bit on write with cifsacl/modefromsid/posix extensions When a file has the setuid or setgid bit set and is written to, the VFS strips those bits and issues a setattr with ATTR KILL SUID/ATTR KILL...

NPM: Socket.IO: Engine.IO WebTransport SID DoS

NPM: Socket.IO: Engine.IO WebTransport SID DoS vulnerability discovered by ? in WordPress Npm engine.io versions = 6.5.0, 6.6.7...

CVE-2026-81576

If configured as a server, CodeMeter Runtime before versions 8.41a and 9.10 issues handles per connection and relies on a cryptographically weak SID as sole authenticator. An attacker can brute-force the SID, recover another session's handle number, and read license information belonging to anoth...

CVE-2026-81576 Improper Authentication of Session Handles

If configured as a server, CodeMeter Runtime before versions 8.41a and 9.10 issues handles per connection and relies on a cryptographically weak SID as sole authenticator. An attacker can brute-force the SID, recover another session's handle number, and read license information belonging to anoth...

EUVD-2026-66983

If configured as a server, CodeMeter Runtime before versions 8.41a and 9.10 issues handles per connection and relies on a cryptographically weak SID as sole authenticator. An attacker can brute-force the SID, recover another session's handle number, and read license information belonging to anoth...

CVE-2026-81576 Improper Authentication of Session Handles

If configured as a server, CodeMeter Runtime before versions 8.41a and 9.10 issues handles per connection and relies on a cryptographically weak SID as sole authenticator. An attacker can brute-force the SID, recover another session's handle number, and read license information belonging to anoth...

CVE-2026-81576

CodeMeter Runtime (WIBU), when configured as a server in versions before 8.41a and 9.10 , issues a per-connection session handle and relies on a cryptographically weak SID as the sole authenticator. An attacker with network access can brute-force the SID , recover another session's handle number,...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-099718)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099718 advisory. In the Linux kernel, the following vulnerability has been resolved: smb: client: harden POSIX SID length parsing posixinfosidsize reads sid1 to obtain the subauthori...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100498)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100498 advisory. In the Linux kernel, the following vulnerability has been resolved: smb: client: mask server-provided mode to 07777 in modefromsid When modefromsid is active,...