domainhunter

Domain Hunter Authors Joe Vest @joevest & Andrew Chiles @andrewchiles Domain name selection is an important aspect of preparation for penetration tests and especially Red Team engagements. Commonly, domains that were used previously for benign purposes and were properly categorized can be purchas...

IOCs

//////////////// ////////////////////// // //////////////////////// // /// /////// ///// /////// /////// /////// /////// //////// //////// //////// //////// //////// //////// //////// //////// //////// //////// /////// /////// /////// /////// ///// // ////// // // /////////////////////////...

kratos

Chat · Discussions · Newsletter · Docs · Try Ory Network · Jobs Ory Kratos is an API first identity and user management system for cloud native applications. It centralizes login, registration, recovery, verification, and profile management flows so your services consume them instead of...

clamav

ClamAV ClamAV® is an open source antivirus engine for detecting trojans, viruses, malware & other malicious threats. Documentation & FAQ ClamAV documentation is hosted at docs.clamav.net. The source archive for each release also includes a copy of the documentation for offline reading. You can...

mitaka

Mitaka Mitaka is a browser extension that makes your OSINT Open Source Intelligence search & scan easier. Key features: Auto IoC indicators of compromise selection with refanging. E.g. example.com to example.com, testatexample.com to [email protected], hxxp://example.com to http://example.co...

WWBN AVideo 11.6 - Cross-Site Scripting

A reflected XSS vulnerability exists in the functiongetOpenGraph videoName functionality of WWBN AVideo 11.6 and dev master commit 3c6bb3ff, allowing arbitrary Javascript execution. id: CVE-2023-48728 info: name: WWBN AVideo 11.6 - Cross-Site Scripting author: ritikchaddha severity: medium...

remcos-decoder

Talos Decryptor POC for Remcos RAT version 2.0.5 and earlier Check ./remcosdecryptor.py -h for help. Disclaimer: This tool comes without any warranties. Use it at your own risk...

CVE-2017-4878-Samples

CVE-2017-4878-Samples CVE-2017-4878 Samples - http://blog.talosintelligence.com/2018/02/group-123-goes-wild.html Flash exploits fec71b8479f3a416fa58580ae76a8c731c2294c24663c601a1267e0e5c2678a0 -...

mutiny-fuzzer

Inicio rápido: Tutorial de Mutiny Publicación del blog aquí: http://blog.talosintelligence.com/2018/01/tutorial-mutiny-fuzzing-framework-and.html Enlaces a esta demostración en video de YouTube: https://www.youtube.com/watch?v=FZyR6MgJCUs Para más características orientadas a campañas de...

cve-2018-4013

cve-2018-4013 cve-2018-4013 poc Brief Reproduction Reference TALOS-2018-0684 || Cisco Talos Intelligence Group - Comprehensive Threat Intelligence TODO : exploit...

CVE-2018-7854

CVE-2018-7854 Affected Products Schneider Electric Modicon M580 Version 2.90 Schneider Electric Modicon M340 Version 3.10 References https://www.se.com/ww/en/download/document/SEVD-2019-134-11/ https://www.talosintelligence.com/vulnerabilityreports/TALOS-2019-0765 Usage root@kitploit: python...

CVE-2018-7845

CVE-2018-7845 Affected Products Schneider Electric Modicon M580 Version 2.80 Schneider Electric Modicon M340 Version 3.01 Schneider Electric Modicon Premium Version 3.20 Schneider Electric Modicon Quantum Version 3.60 References https://www.se.com/ww/en/download/document/SEVD-2019-134-11/...

CVE-2018-7849

CVE-2018-7849 Affected Products Schneider Electric Modicon M580 Version 2.90 Schneider Electric Modicon M340 Version 3.10 Schneider Electric Modicon Premium All Versions Schneider Electric Modicon Quantum All Versions References https://www.se.com/ww/en/download/document/SEVD-2019-134-11/...

EUVD-2026-62954

In Cisco Talos Intelligence for Enterprise Security Cloud versions below 1.0.3, a user that holds a role with the gettalosenrichment capability could send a crafted request to the Talos intelligence enrichment Representational State Transfer REST API endpoint and cause the instance to make an...

EUVD-2026-62955

In Cisco Talos Intelligence for Enterprise Security Cloud versions below 1.0.3, an unauthenticated user could access the add-on OpenAPI specification through Splunk Web static file paths. The exposed specification could allow for reconnaissance of the add-on Representational State Transfer REST A...

CVE-2026-76389

In Cisco Talos Intelligence for Enterprise Security Cloud versions below 1.0.3, a user that holds a role with the gettalosenrichment capability could send a crafted request to the Talos intelligence enrichment Representational State Transfer REST API endpoint and cause the instance to make an...

CVE-2026-76390

In Cisco Talos Intelligence for Enterprise Security Cloud versions below 1.0.3, an unauthenticated user could access the add-on OpenAPI specification through Splunk Web static file paths. The exposed specification could allow for reconnaissance of the add-on Representational State Transfer REST A...

CVE-2026-76390

Cisco Talos Intelligence for Enterprise Security Cloud versions below 1.0.3 expose the add-on's OpenAPI specification through Splunk Web static file paths without requiring authentication. The root cause is that the generated OpenAPI spec is packaged in a static file path that Splunk Web serves u...

CVE-2026-76390 Information Disclosure through Splunk Web in Cisco Talos Intelligence for Enterprise Security Cloud

In Cisco Talos Intelligence for Enterprise Security Cloud versions below 1.0.3, an unauthenticated user could access the add-on OpenAPI specification through Splunk Web static file paths. The exposed specification could allow for reconnaissance of the add-on Representational State Transfer REST A...

CVE-2026-76389

In Cisco Talos Intelligence for Enterprise Security Cloud versions below 1.0.3, the Talos enrichment REST endpoint accepts the destination for authenticated Splunk management requests from request data, enabling an SSRF attack. A user with the get_talos_enrichment capability can force the instanc...