trident

trident Trident 项目是一个自动化密码喷射工具，旨在满足以下需求： 能够在多个云平台/执行提供商上部署 能够根据目标的帐户锁定策略安排喷射活动 能够增加身份验证请求来源的 IP 池，以提升操作安全性 能够快速扩展功能以支持新遇到的身份验证平台 目录 trident 目录 架构 部署 安装 使用 配置 活动 结果 架构 该图使用 Diagrams 生成。 Go gopher 由 Renee French 设计， 并采用 CC BY 3.0 许可协议。 部署 部署 trident 需要 Google Cloud 项目、一个域名（用于编排器 API），以及针对该域名的...

trident

trident The Trident project is an automated password spraying tool developed to meet the following requirements: the ability to be deployed on several cloud platforms/execution providers the ability to schedule spraying campaigns in accordance with a target’s account lockout policy the ability to...

Spray365

What is Spray365? Spray365 is a password spraying tool that identifies valid credentials for Microsoft accounts Office 365 / Azure AD. How is Spray365 different from the many other password spraying tools that are already available? Spray365 enables passwords to be sprayed from an "execution plan...

RemoteMonologue

RemoteMonologue RemoteMonologue es una técnica de recolección de credenciales de Windows que permite comprometer usuarios de forma remota aprovechando la clave RunAs del usuario interactivo y forzando autenticaciones NTLM mediante DCOM. Lea RemoteMonologue: Weaponizing DCOM for NTLM Authenticatio...

OWA-Password-Sprayer

OWA-Password-Sprayer Sprayer de contraseñas OWA Este script de Python facilita el rociado de contraseñas password spraying contra endpoints de Outlook Web Access OWA. El rociado de contraseñas es una técnica utilizada para probar una única contraseña contra múltiples usuarios, con el objetivo de...

Python-precise-heap-spraying-

Python-precise-heap-spraying- Python heap spraying preciso 0c0c0c0c...

captaincredz

CaptainCredz TL;DR CaptainCredz es una herramienta de rociado de contraseñas modular y discreta, con funciones avanzadas como un mecanismo de caché y un control de temporización de grano fino. Para empezar a usar captaincredz, las siguientes líneas pueden ser útiles: root@kitploit: TEXTEDITOR=nan...

CVE-2010-2883

CVE-2010-2883 PoC for CVE-2010-2883 using TTD research, Metasploit techniques, BOF+ROP and HEAP spraying for educational purposes only...

CVE-2025-65899

CVE-2025-65899：Kalmia CMS v0.2.0 - 存在可观察响应差异漏洞 漏洞概述 CVE ID： CVE-2025-65899 产品： DifuseHQ Kalmia CMS 受影响版本： 0.2.0 漏洞类型： 可观察响应差异 所需权限： 无 影响 允许未经身份验证的攻击者枚举有效用户名，从而实施有针对性的密码喷洒、凭证填充和账户发现攻击。 修复版本 待维护者审批 - https://github.com/DifuseHQ/Kalmia/pull/34 描述 Kalmia CMS 0.2.0...

Linux_LPE_io_uring_CVE-2021-41073

LinuxLPEiouringCVE-2021-41073 Exploit de LPE para la vulnerabilidad de confusión de tipos iouring CVE-2021-41073. Consulta el writeup Put an iouring on it: Exploiting the Linux Kernel. autor: @chompie1337 Solo con fines educativos/de investigación. No apto para pruebas o evaluaciones de seguridad...

L4sh

Exploit RCE Log4Shell Exploit totalmente independiente que no requiere binarios de terceros. El exploit distribuye el payload a todos los encabezados HTTP registrados posibles, como X-Forwarding , Server-IP , User-Agent Uso root@kitploit: python main.py -i lhost -u http://target:targetport -c...

onedrive_user_enum

onedriveuserenum v2.10 enumerate valid onedrive users For a full rundown of the enumeration technique and OneDrive enum, check out the blog here: https://www.trustedsec.com/blog/onedrive-to-enum-them-all/ If you are looking for the old, non-database vesion of OneDrive Enum, you can find it here:...

CVE-2025-62215

CVE-2025-62215 INTEGRATED EXPLOIT SUITE v4.5 1. 项目概述 本项目是一个针对Windows内核的竞态条件（Race Condition）和双重释放（Double-Free）漏洞的自动化漏洞利用工具套件。它结合了利用WinDbg JS引擎进行动态偏移量提取和C++漏洞利用引擎的实时二进制加载技术，旨在灵活应对环境变化。 2. 主要组件 AutoGenerator.js WinDbg Automation Script 从目标系统的内核内存中实时提取EPROCESS偏移量（PID、ActiveProcessLinks、Token）。...

Breeze Comet Executes Hundreds of Fraudulent Transactions via Brazilian Payment Systems

Brazilian financial services, retail, and e-commerce organizations have become the target of a financially motivated threat actor dubbed Breeze Comet formerly UNC5669 since 2024. Google Threat Intelligence Group GTIG and Mandiant teams described the threat actor as "specializing in manipulating...

SUSE CVE-2026-64508

In the Linux kernel, the following vulnerability has been resolved: bpf: Support for hardening against JIT spraying The BPF JIT allocator packs many small programs into larger executable allocations and reuses space within those allocations as programs are loaded and freed. When fresh code is...

AZL-93809 CVE-2026-64507 affecting package kernel for versions less than 6.6.145.2-1

In the Linux kernel, the following vulnerability has been resolved: x86/bugs: Enable IBPB flush on BPF JIT allocation Enable hardening against JIT spraying when Spectre-v2 mitigations are in use. Specifically, issue an IBPB flush on BPF JIT memory reuse. Skip enabling the IBPB flush if the BPF...

CVE-2026-64507

In the Linux kernel, the following vulnerability has been resolved: x86/bugs: Enable IBPB flush on BPF JIT allocation Enable hardening against JIT spraying when Spectre-v2 mitigations are in use. Specifically, issue an IBPB flush on BPF JIT memory reuse. Skip enabling the IBPB flush if the BPF...

CVE-2026-64508

In the Linux kernel, the following vulnerability has been resolved: bpf: Support for hardening against JIT spraying The BPF JIT allocator packs many small programs into larger executable allocations and reuses space within those allocations as programs are loaded and freed. When fresh code is...

UBUNTU-CVE-2026-64507

In the Linux kernel, the following vulnerability has been resolved: x86/bugs: Enable IBPB flush on BPF JIT allocation Enable hardening against JIT spraying when Spectre-v2 mitigations are in use. Specifically, issue an IBPB flush on BPF JIT memory reuse. Skip enabling the IBPB flush if the BPF...

CVE-2026-64508

In the Linux kernel, the following vulnerability has been resolved: bpf: Support for hardening against JIT spraying The BPF JIT allocator packs many small programs into larger executable allocations and reuses space within those allocations as programs are loaded and freed. When fresh code is...