12157 matches found
Gitmails
Development - IMPORTANT This Gitmails version is no longer maintained. Check out the Gitmails Shell port if you want to use a version that is maintained and, hopefully, developed. If you do not want to use the shell port and prefer the Python version, feel free to fork Gitmails and direct it to...
git_rce
CVE-2024-32002：利用 git clone 实现 Git 远程代码执行 该仓库包含 CVE-2024-32002 的 PoC，该漏洞允许在 git clone 操作期间实现远程代码执行。通过以特定方式构造带有子模块的仓库，攻击者可以利用不区分大小写的文件系统上的符号链接处理，将文件写入 .git/ 目录，从而执行恶意钩子。 注意： 此 PoC 仅适用于 Windows 或 Mac 系统。 博客文章 关于此漏洞逆向分析的详细说明，请参见博客文章：https://amalmurali.me/posts/git-rce。 工作原理 1...
git_rce
CVE-2024-32002: Exploiting Git RCE via git clone This repository contains a PoC for exploiting CVE-2024-32002, a vulnerability in Git that allows RCE during a git clone operation. By crafting repositories with submodules in a specific way, an attacker can exploit symlink handling on...
vault-conductor
🗝️ vault-conductor An SSH Agent that provides SSH keys stored in Bitwarden Secret Manager as secrets. Supports SSH authentication and Git commit signing. Demo Features...
CVE-2026-32604
CVE-2026-32604 - Spinnaker GitRepo Artifact RCE CVE-2026-32604 - Remote Code Execution in Spinnaker through the git/repo artifact type. This is a command injection / remote code execution vulnerability in Spinnaker's GitRepo artifact handling. The vulnerable functionality allows user-controlled...
CVE-2024-32002-git-rce-father-poc
This repository does not have a README...
creak
creak Performs some of the most famous MITM attack on target addresses located in a local network. Among these, deny navigation and download capabilities of a target host in the local network performing an ARP poison attack and sending reset TCP packets to every request made to the router. Born a...
Git-Secret
Git-Secret Go scripts for finding an API key / some keywords in repository Update V1.0.2 🚀 Removing some checkers Adding example file contains github dorks Add support to go install command issue 5 Screenshoot 📷 How to Install To install the latest version: root@kitploit: go install...
CVE-2020-5260
CVE-2020-5260 CVE-2020-5260 Demonstration Record When git executes a command like "git clone https://example.com", it requests the protocol "https" to store credentials for the host "example.com", and when the remote side requests authentication, it appends the returned credentials to the outgoin...
heartbleedscanner
Heartbleed Scanner Network Scanner for OpenSSL Memory Leak CVE-2014-0160 -t parameter to optimize the timeout in seconds. -f parameter to log the memleak of vulnerable systems. -n parameter to scan entire network. -i parameter to scan from a list file. Useful if you already have targets. -r...
golddigger
Gold Digger Search files for gold Gold Digger is a simple tool used to help quickly discover sensitive information in files recursively. Originally written to assist in rapidly searching files obtained during a penetration test. Installation Gold Digger requires Python3. root@kitploit: virtualenv...
Gogs 0.5.5 - 0.12.2 - Remote Code Execution
Gogs 0.5.5 through 0.12.2 is susceptible to authenticated remote code execution via the git hooks functionality. There can be a privilege escalation if access to this feature is granted to a user who does not have administrative privileges. NOTE: Since this is mentioned in the documentation but n...
n8n >= 0.123.0 and < 1.121.3 - Remote Code Execution
n8n versions = 0.123.0 and = 0.123.0 and = 0.123.0 and 1.121.3 contain a critical authenticated remote code execution vulnerability via arbitrary file write. An authenticated user can exploit the Git node to overwrite critical files and execute untrusted code on the n8n server, potentially leadin...
Jenkins Git <=4.11.3 - Missing Authorization
Jenkins Git plugin through 4.11.3 contains a missing authorization check. An attacker can trigger builds of jobs configured to use an attacker-specified Git repository and to cause them to check out an attacker-specified commit. This can make it possible to obtain sensitive information, modify...
Gogs <= 0.14.2 - Authenticated RCE via git rebase Argument Injection
Gogs is an open source self-hosted Git service. Prior to 0.14.3, Gogs allows authenticated users to achieve Remote Code Execution RCE on the server by creating a pull request with a specially crafted branch name that injects the --exec flag into the git rebase command during the "Rebase before...
gitcolombo
Gitcolombo Herramienta OSINT que extrae identidades — nombres, correos electrónicos y enlaces entre cuentas aparentemente no relacionadas — de repositorios git y GitHub. CLI de Python gitcolombo.py — clona repos, recorre git log y puede llamar a la API de GitHub para señales más ricas. Versión we...
gitbleed_tools
GitBleed Tools - for extracting data from mirrorred git repositories About This repo contains shell scripts that can be used to download and analyze differences between cloned and mirror Git repositories. For more information about the underlying quirk in Git behavior, please visit read our blog...
gitbleed_tools
GitBleed Tools - para extraer datos de repositorios git reflejados Acerca de Este repositorio contiene scripts de shell que se pueden usar para descargar y analizar diferencias entre repositorios Git clonados y reflejados. Para más información sobre la peculiaridad subyacente en el comportamiento...
reposcanner
Reposcanner Reposcanner is a python script to search through the commit history of Git repositories looking for interesting strings such as API keys, inspired by truffleHog. Installation The python Git module is required python3-git on Debian. Docker root@kitploit: docker build -t reposcanner...