rootend

rootend rootend is a python nix Enumerator & Auto Privilege Escalation tool. For a full list of our tools, please visit our websitehttps://www.twelvesec.com/ Written by: nickvourd twitter maldevel twitter servo Usage root@kitploit: . \ / | | / / | | \ / / // | |\ / // \ \ / / \ | | \ /\ /| |...

Bug-Bounty-Wordlists

Bug-Bounty-Wordlists Un repository che include tutte le wordlist importanti utilizzate durante il bug hunting. Le wordlist verranno aggiornate regolarmente Inoltre sei il benvenuto a contribuire a questo progetto e caricare le tue wordlist. Molto apprezzato. Nota : Questo repository contiene alcu...

ligolo

Ligolo : Reverse Tunneling made easy for pentesters, by pentesters Table of Contents Introduction Use case Quick Demo Performance Usage Setup / Compiling How to use? TL;DR Options Features To Do Licensing Credits Introduction Ligolo is a simple and lightweight tool for establishing SOCKS5 or TCP...

tools

Zscaler ThreatLabz Tools Tools, die vom Threat-Intelligence-Team von Zscaler ThreatLabz entwickelt wurden. Folgen Sie uns auf Twitter: @Threatlabz Blog: https://www.zscaler.com/blogs/security-research...

CVE-2024-48910-PoC

CVE-2024-48910-PoC Panoramica CVE-2024-48910 DOMPurify, un sanitizer XSS per HTML, MathML e SVG basato esclusivamente sul DOM, super veloce ed estremamente tollerante, è risultato vulnerabile alla prototype pollution CVE-2024-48910. La vulnerabilità è stata scoperta e corretta nella versione 2.4....

Super-UEFIinSecureBoot-Disk

Super UEFIinSecureBoot Disk Super UEFIinSecureBoot Disk è una proof-of-concept non più mantenuta o migliorata attivamente immagine avviabile con bootloader GRUB2 progettata per essere utilizzata come base per chiavette USB di ripristino. Caratteristica principale: il disco è completamente...

pacbot

Introduction Policy as Code Bot PacBot is a platform for continuous compliance monitoring, compliance reporting and security automation for the cloud. In PacBot, security and compliance policies are implemented as code. All resources discovered by PacBot are evaluated against these policies to...

CVE-2025-31337

CVE-2025-31337 Avviso di Sicurezza ID CVE: CVE-2025-31337 Pubblicato: 2025-03-15 Punteggio CVSS: 9,8 Critico CWE: CWE-120 Copia del Buffer senza Controllo della Dimensione dell'Input Descrizione È stata scoperta una vulnerabilità critica di buffer overflow in AIDR ChatBot Framework versione 4.2.0...

steganographer

Steganography in Python This script will hide files inside images and save the modified image to disk The maximum size of file which can be hidden inside an image depends on the dimension of the image. root@kitploit: maxfilesize = heightofimage widthofimage 6 / 8 bytes '100k words.txt' is hidden ...

credmap

credmap: The Credential Mapper Credmap is an open source tool that was created to bring awareness to the dangers of credential reuse. It is capable of testing supplied user credentials on several known websites to test if the password has been reused on any of these. An official introductionary...

Atlas

Atlas Atlas è un toolkit multipiattaforma Windows/Linux per l'esecuzione di operazioni di rete e valutazione della sicurezza, costruito sulla libreria di protocollo Titanis di TrustedSec. È ispirato al flusso di lavoro di NetExec/CrackMapExec: elenchi di target, set di credenziali, enumerazione...

xvna

XVNA Extreme Vulnerable Node Application XVNA is an extreme vulnerable node application coded in NodejsExpressjs/MongoDB that helps security enthusiasts to learn application security. it's not counseled to host this application online as it is intended to be Vulnerable. We tend to suggest hosting...

powercat

powercat Netcat: The powershell version. Powershell Version 2 and Later Supported Installation powercat is a powershell function. First you need to load the function before you can execute it. You can put one of the below commands into your powershell profile so powercat is automatically loaded...

prowler

Prowler Prowler is a Network Vulnerability Scanner implemented on a Raspberry Pi Cluster, first developed during Singapore Infosec Community Hackathon - HackSmith v1.0. Capabilities Scan a network a particular subnet or a list of IP addresses for all IP addresses associated with active network...

serverless-prey

Puma Security Serverless Prey Serverless Prey is a collection of serverless functions FaaS, that, once launched to a cloud environment and invoked, establish a TCP reverse shell, enabling the user to introspect the underlying container: Panther: AWS Lambda written in Node.js Cougar: Azure Functio...

powerob

Powerob An on-the-fly Powershell script obfuscator meant for red team engagements. Built out of necessity. This only obfuscates functions and removes found in PowerShell scripts. Roadmap includes bfuscating variables. Pull requests and collaborative welcomed. About This was built out of the need ...

tmpmail

A temporary email right from your terminal written in POSIX sh tmpmail is a command line utility written in POSIX sh that allows you to create a temporary email address and receive emails to the temporary email address. It uses 1secmail's API to receive emails. By default w3m is used to render th...

internalblue

Broadcom chips are used in approximately a billion of devices, such as all iPhones , MacBooks , the Samsung Galaxy S series, the older Google Nexus series, older Thinkpads , Raspberry Pis , various IoT devices, and more. In 2016, Cypress acquired the IoT division of Broadcom. Since then, firmware...

iptables-essentials

Iptables Essenziali: Regole e Comuni del Firewall ☑️ DA FARE Aggiungere esempi utili di configurazione di Iptables Aggiungere una configurazione utile di Kernel Settings sysctl Aggiungere link a risorse esterne utili Aggiungere esempi avanzati di configurazione, comandi, regole Indice dei contenut...

GHSA-MRPP-V6PG-P54X

creationtimestamp| type| source ---|---|--- 2026-08-28 22:19:38+00:00| seen| https://bsky.app/profile/thestandup.bsky.social/post/3mu6fgl7bp42g 2026-08-29 15:32:25+00:00| seen| https://gist.github.com/alon710/a4189f000966d11dd547e0bc128cf503...