CVE-2023-28252

CVE-2023-28252 The TL;DR for the learnings of Windows Vulnerability CVE-2023-28252 So this weekend I was practising the Aero machine on Hack The Box. The box is so much fun playing it when you can mimic a real-world attack to a Windows 11 machine. After completing it, I was very curious and wanti...

CVE-2026-84736

In the current development version of Eclipse aeriOS, for which no official release has yet been published, the Federator component disables TLS certificate validation for outbound HTTPS connections by default. When the TLSCERTIFICATEVALIDATION environment variable is unset or set to false, the...

CBM

Car Backdoor Maker Car Backdoor Maker es un software para crear plantillas de ataque y cargarlas en The Bicho. Antes de comenzar, lea cómo Obtener el hardware de The Bicho. Captura de pantalla Instalación y uso Este proyecto tiene su wiki donde encontrará la siguiente documentación útil:...

CVE-2021-40444

EXP Ladon CVE-2021-40444 Office Vulnerability Exploitation Vulnerability Overview On September 8th Beijing time, NSFOCUS CERT monitored that Microsoft released a security advisory disclosing the Microsoft MSHTML remote code execution vulnerability. Attackers can craft malicious ActiveX controls f...

CVE-2007-2447_python

CVE-2007-2447python Exploit que usé en HTB...

the-endorser

🚨 The Endorser अब अनुरक्षित नहीं है। यदि आपको अपने OSINT प्रयासों के लिए समर्थन या परामर्श की आवश्यकता है, तो मुझे एक ई-मेल भेजें [email protected] 🚨 The Endorser एक OSINT उपकरण जो आपको LinkedIn पर लोगों के बीच संबंधों को समर्थन/कौशल के माध्यम से निकालने की अनुमति देता है। उदाहरण example...

caronte

caronte$ Caronte is a tool to analyze the network flow during capture the flag events of type attack/defence. It reassembles TCP packets captured in pcap files to rebuild TCP connections, and analyzes each connection to find user-defined patterns. The patterns can be defined as regex or using...

boofuzz

.. image:: https://github.com/jtpereyda/boofuzz/raw/master/artwork/boo-logo-dark.svg :width: 60% :alt: boofuzz logo boofuzz: Network Protocol Fuzzing for Humans .. image:: https://github.com/jtpereyda/boofuzz/actions/workflows/test.yml/badge.svg?branch=master :target:...

EUVD-2026-70599

In the current development version of Eclipse aeriOS, for which no official release has yet been published, the Federator component disables TLS certificate validation for outbound HTTPS connections by default. When the TLSCERTIFICATEVALIDATION environment variable is unset or set to false, the...

CVE-2026-84736

In the current development version of Eclipse aeriOS, for which no official release has yet been published, the Federator component disables TLS certificate validation for outbound HTTPS connections by default. When the TLSCERTIFICATEVALIDATION environment variable is unset or set to false, the...

sam-the-admin

Explotando CVE-2021-42278 y CVE-2021-42287 para suplantar a DA desde un usuario de dominio estándar Problemas conocidos no funcionará fuera de Kali, lo actualizaré más tarde : Echa un vistazo a Armamento de CVE-2021-42287/CVE-2021-42278 sAMAccountName spoofing...

CVE-2026-85221

MISP contains an improper TLS certificate validation vulnerability in CurlClient. The CurlClient::$verifyPeer property was not explicitly initialized and therefore defaulted to null. When passed to cURL, this value effectively disabled TLS peer verification unless the calling code explicitly...

noPac

noPac यह परियोजना noPac के सिद्धांत सीखने के लिए शुरू की गई थी, cube0x0 की परियोजना के आधार पर कुछ बदलाव किए गए। स्रोत कोड में व्यक्तिगत समझ की टिप्पणियाँ जोड़ी गईं। Scan फीचर हटा दिया गया, मेरी राय में Scan फीचर बहुत कम काम का है। MachineAccountQuota मान की जाँच जोड़ी गई, यदि यह 0 है तो प्रोग्रा...

CVE-2023-38831

CVE-2023-38831 - Vulnerabilidad de Ejecución de Código en RARLAB WinRAR ⚠️ Solo con fines educativos y de investigación de seguridad autorizados Autores del Exploit Original Muy agradecido al autor original del PoC b1tg y a Group-IB Threat Intelligence Descripción RARLAB WinRAR anterior a la...

EUVD-2026-70494

MISP contains an improper TLS certificate validation vulnerability in CurlClient. The CurlClient::$verifyPeer property was not explicitly initialized and therefore defaulted to null. When passed to cURL, this value effectively disabled TLS peer verification unless the calling code explicitly...

CVE-2026-85221

MISP 's CurlClient class contains an improper TLS certificate validation flaw. The CurlClient::$verifyPeer property was not explicitly initialized and defaulted to null, which effectively disabled TLS peer verification when passed to cURL. As a result, HTTPS connections made through affected inst...

redsnarf

. \ |// /\ |// \ / | \ / \ \ \ \ | | \ // / / |/ \ | / | | /| | || / / /| /| | | / / / / / / [email protected] @redsnarf RedSnarf एक पेन-टेस्टिंग / रेड-टीमिंग टूल है, जिसे एड विलियम्स द्वारा बनाया गया है। यह OpSec सुरक्षित तकनीकों का उपयोग करके विंडोज वर्कस्टेशन, सर्वर और डोमेन कंट्रोलर से ह...

redsnarf

root@kitploit: . \ \ | / / / \ | // \ / |\ \ / \ \ \ \ | | \ // // |/ \ | / | | /| | || /\ / /| /| || / / / / / / [email protected] @redsnarf RedSnarf is a pen-testing / red-teaming tool by Ed Williams for retrieving hashes and credentials from Windows workstations, servers and...

CVE-2020-25748

CVE-2020-25748 Descripción sugerida Se descubrió un problema de transmisión en texto claro en las cámaras Rubetek RV-3406, RV-3409 y RV-3411 versiones de firmware v342, v339. Un atacante en el medio puede interceptar y modificar los datos de video de la cámara, que se transmiten sin cifrar. Tambi...

ZeroLogon-Exploit

ZeroLogon - Exploit y ejemplo Se modificó el PoC de prueba de Secura, CVE-2020-1472, para cambiar la contraseña de la máquina a nula. El cambio de contraseña en la máquina utiliza la función NetrServerPasswordSet2 de Microsoft. Este exploit se aprovecha del módulo nrpc.py de Impacket para llamar ...