96325 matches found
Awesome-WAF
Awesome WAF Everything about web application firewalls WAFs from a security perspective. π₯ Foreword: This was originally my own collection on WAFs. I am open-sourcing it in the hope that it will be useful for pentesters and researchers out there.As the saying goes, "the community just learns from...
XSS-CVE-2022-30489
WAVLINK WN535G3 POST XSS Usar CVE-2022-30489 CARGA root@kitploit: POST /cgi-bin/login.cgi HTTP/1.1 Host: 98.127.66.193 Content-Length: 255 Cache-Control: max-age=0 Upgrade-Insecure-Requests: 1 Origin: http://98.127.66.193 Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0...
Fennec
Fennec π¦ fennec es una herramienta de recolecciΓ³n de artefactos escrita en Rust para ser utilizada durante la respuesta a incidentes en sistemas basados en nix. fennec permite escribir un archivo de configuraciΓ³n que contiene cΓ³mo recolectar artefactos. CaracterΓsticas π π¦ Un ΓΊnico binario...
MozCache
MozCache Script Bash Script de shell simple para realizar anΓ‘lisis forense de la cachΓ© de navegadores Mozilla Firefox, Iceweasel y Seamonkey. El script ordena por fecha los archivos cacheados de un navegador de la familia Mozilla usando la versiΓ³n 2 de la cachΓ©. Junto con el nombre de cada archiv...
CVE-2024-37791
CVE-2024-37791 CVE-2024-37791 DirecciΓ³n del proyecto: PreparaciΓ³n: Iniciar sesiΓ³n en el backend - obtener cookie URL de la vulnerabilidad: http://127.0.0.1:8093/s/article/Content/index?classid=&keyword= ParΓ‘metro vulnerable: keyword payload:...
anubis
Anubis root@kitploit: d8888 888 d8b d88888 888 Y8P d88P888 888 d88P 888 88888b. 888 888 88888b. 888 .d8888b d88P 888 888 "88b 888 888 888 "88b 888 88K d88P 888 888 888 888 888 888 888 888 "Y8888b. d8888888888 888 888 Y88b 888 888 d88P 888 X88 d88P 888 888 888 "Y88888 88888P" 888 88888P' Anubis is...
box-js
box.js Una utilidad para analizar JavaScript malicioso. InstalaciΓ³n Simplemente instala box-js desde npm: root@kitploit: npm install box-js --global box-js tambiΓ©n estΓ‘ disponible: como mΓ³dulo de Cuckoo consulta el directorio integrations y Nwinternights/CuckooBoxjs; como Dockerfile consulta...
swarm
swarm v0.6.0 English | δΈζ. Swarm is an open source modular distributed penetration testing Tool that use distributed task queue to implement communication in the master-slave mode system and use MongoDB for data storage. It consists of a distributed framework and function modules. The function...
rr
Overview rr is a lightweight tool for recording, replaying and debugging execution of applications trees of processes and threads. Debugging extends gdb with very efficient reverse-execution, which in combination with standard gdb/x86 features like hardware data watchpoints, makes debugging much...
thunderbird security update
An update is available for thunderbird. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Mozilla Thunderbird is a standalone mail and newsgroup client. Security...
nginx-ultimate-bad-bot-blocker
REPO| BECOME A SPONSOR ---|--- | Your logo and link to your domain will appear here if you become a sponsor. Simply email me on [email protected] if you would like to sponsor this project as South Africa is not supported yet under the Github sponsor program. | Help Support Me at...
CF-Hero
CF-Hero CF-Hero What's it? β’ Features β’ Background β’ Installation β’ Usage β’ Running cf-hero β’ ZoomEye Sponsor β’ To Do What's it? CF-Hero is a comprehensive reconnaissance tool developed to discover the real IP addresses of web applications protected by Cloudflare. It performs multi-source...
ApiHunter
Support Development If this project helps your work, support ongoing maintenance and new features. ETH Donation Wallet 0x11282eE5726B3370c8B480e321b3B2aA13686582 Scan the QR code or copy the wallet address above. π― ApiHunter πΊ Video Demo Click to watch the full demo on YouTube π₯οΈ Desktop App...
androidqf
androidqf NOTA: este proyecto actualmente no tiene mantenimiento. Se puede encontrar un fork independiente bajo elProyecto MVT. androidqf Android Quick Forensics es una herramienta portΓ‘til para simplificar la adquisiciΓ³n de datos forenses relevantes de dispositivos Android. Descargar androidqf...
CVE-2019-15107
CVE-2019-15107 Webmin RCE Error al cambiar la contraseΓ±a: La contraseΓ±a actual es incorrectauid=0root gid=0root groups=0root...
CVE-2021-26085
CVE-2021-26085 Atlassian Confluence Server 7.5.1 Pre-Authorization Arbitrary File Read vulnerability POC Vulnerable Endpoints: root@kitploit: WEB-INF/web.xml WEB-INF/decorators.xml WEB-INF/classes/seraph-config.xml META-INF/maven/com.atlassian.confluence/confluence-webapp/pom.properties...
CVE-2023-49471
CVE-2023-49471 Vulnerability Type Blind SSRF Affected Product and Version Bar assistant / -----------------------------8290129562507108753887567115 Content-Disposition: form-data; name="images0copyright" ------------------------...
Daily-dose-of-malware
Dosis diaria de malware DDOM o Dosis Diaria de Malware te permite recopilar malware y c&c de inteligencia de fuentes abiertas. Puede mostrar informaciΓ³n, exportar resultados a un archivo de texto o descargar software malicioso. Quiero que sea lo mΓ‘s fresco posible, por eso todos los malwares estΓ‘...
CVE-2025-52688
CVE-2025-52688 Affected Products Alcatel AP13161 - Enterprise WIFI access point Summary There are 2 main vulnerabilities being addressed here: Lack of input sanization on multiple JSON web parameters that allows malicious characters such as ; to be injected to caused a command injection attack La...