goodoldsearch-oss

Good Old Search Build precise search queries with exact phrases, site filters, exclusions, date ranges, filetypes, and one-click links across search engines and vertical search targets. This is not a search engine, metasearch aggregator, scraper, or API proxy. It is a local static query builder...

Persistence-Survivability

持久化生存能力评级 本项目将 Duqu 风格的持久化作为 TTP，并在 Bsides Augusta – RAT 上进行了展示。本项目基于 PowerShell，可配合凭据使用，也可在不使用凭据的情况下使用。更多信息请阅读 .ps1 文件。 基本用法： root@kitploit: Invoke-FindPersitence Invoke-FindPersitence -MaxHosts 100 -Top 5 Invoke-FindPersitence -Domain tester.org -OperatingSystem 7 Invoke-FindPersitence -Domain...

Zetsu

A personal offline RAG system for offensive security knowledge. Ingest your writeups, lab solutions, bug bounty reports, and security blogs, then query them in natural language during engagements. No cloud, no SaaS, your knowledge stays yours. What it does ZETSU turns your accumulated knowledge...

Syborg

Syborg Syborg is a Recursive DNS Domain Enumerator which is neither active nor completely passive. This tool simply constructs a domain name and queries it with a specified DNS Server. Syborg has a Dead-end Avoidance system inspired from @Tomnomnom's ettu. When you run subdomain enumeration with...

hacks

Hacks Hacky one-off scripts, tests etc...

CVE-2019-12189

CVE-2019-12189 - Zoho ManageEngine ServiceDesk Plus 9.3 XSS 漏洞 信息 描述：在 ManageEngine ServiceDesk Plus 版本中发现 XSS 漏洞 受影响版本：9.3 研究人员：Dang The Tuyen 概念验证 该漏洞源于 URL 查询字符串中单引号和分号的混淆。 payload：';alert'XSS';' 攻击向量：http:///SearchN.do 截图...

h8mail

h8mail is an email OSINT and breach hunting tool using different breach and reconnaissance services, or local breaches such as Troy Hunt's "Collection1" and the infamous "Breach Compilation" torrent. 📖 Table of Content Table of Content Features APIs Usage Usage examples Thanks & Credits Related...

Sentinel-Queries

KQL para Microsoft Sentinel Algunos consejos, trucos y ejemplos para usar KQL con Microsoft Sentinel. 1. Introducción 2. La anatomía de una consulta KQL 3. Los fundamentos 1. Fundamentos de tiempo 2. Fundamentos de Where 3. Fundamentos de Project 4. Fundamentos de Summarize 5. Fundamentos de Rend...

Spring_cve-2022-22980

Springcve-2022-22980 spring data mongodb ejecución remota de código | cve-2022-22980 PoC Descripción Una aplicación Spring Data MongoDB es vulnerable a inyección SpEL cuando se utilizan métodos de consulta anotados con @Query o @Aggregation con expresiones SpEL que contienen marcadores de posició...

msticpy

MSTIC Jupyter and Python Security Tools Microsoft Threat Intelligence Python Security Tools. msticpy is a library for InfoSec investigation and hunting in Jupyter Notebooks. It includes functionality to: query log data from multiple sources enrich the data with Threat Intelligence, geolocations a...

sopa

sopa A practical client for ADWS in Golang. Sopa implements the ADWS protocol stack MS-NNS + MC-NMF + SOAP, exposing the following command-line features: Object search & retrieval query: runs LDAP-filter searches via WS-Enumeration Enumerate + Pull loop with attribute projection, scope control...

CVE-2020-1472

CVE-2020-1472 CVE 2020-1472 验证脚本 假设：域控制器之间已启用 WinRM。 所需权限： root@kitploit: 如果存在子域：企业管理员 如果是单林、单域：域管理员 此脚本必须在具有所需权限的主域控制器上运行。它将使用 WMI 递归查询林中所有域控制器，以获取域控制器名称、操作系统（OS）和已安装的 KB。结果将输出到执行用户桌面上创建的名为 CISA 的文件夹中。如果服务器未安装相关修补程序之一，结果将显示 Compliance = "$False"。 用法： root@kitploit: 在提升的 PowerShell 控制台中运行脚本：PS...

batchql

BatchQL BatchQL is a GraphQL security auditing script with a focus on performing batch GraphQL queries and mutations. This script is not complex, and we welcome improvements. When exploring the problem space of GraphQL batching attacks, we found that there were a few blog posts on the internet,...

CVE-2026-44262

dedoc/scramble RCE CVE-2026-44262 PoC 📜 描述 CVE-2026-44262 是 dedoc/scramble（一个 Laravel API 文档生成器）中的一个未认证远程代码执行漏洞。 NodeRulesEvaluator::doEvaluateExpression 会在 eval"return $code;" 之前调用 extract$variables。当控制器将 赋值给名为 的变量并将其用作验证规则时，Scramble 会跟踪该变量并将其传入 eval 作用域。攻击者可以通过向 提供特制的查询参数，使用任意 PHP 覆盖 。...

retryabledns

Retryable dns resolver Based on miekg/dns and freely inspired by bogdanovich/dnsresolver. Features Supports both system default DNS resolvers and user-provided ones Retries DNS requests in case of I/O errors, timeouts, or network failures Allows arbitrary query types Resolution with random...

CVE-2017-5638

CVE-2017-5638 Google Dork : "site:com filetype:action"...

private-membership

Private Set Membership PSM Problem Statement Private Set Membership PSM is a cryptographic protocol that allows clients to privately query whether the client's identifier is a member of a set of identifiers held by a server in a privacy-preserving manner. At a high level, PSM provides the followi...

CVE-2019-11043-Docker

A docker image with a vulnerable version of PHP-FPM CVE-2019-11043 and nginx. Run docker run --rm -p8080:80 akamajoris/cve-2019-11043 You should be able to access the web application at http://your-ip:8080/. Exploitation Build a binary from https://github.com/neex/phuip-fpizdam, then root@kitploi...

graphql-threat-matrix

GraphQL Threat Matrix Why graphql-threat-matrix? graphql-threat-matrix was built for bug bounty hunters, security researchers and hackers to assist with uncovering vulnerabilities across multiple GraphQL implementations. The differences in how GraphQL implementations interpret and conform to the...

JSONPath

（另请参阅 开发依赖的许可证） JSONPath Plus 分析、转换并从 JSON 文档（以及 JavaScript 对象）中选择性地提取数据。 jsonpath-plus 在原始规范的基础上进行了扩展，新增了一些额外的运算符，并明确了原始规范未明确说明的一些行为。 试试浏览器演示或 Runkit Node。 请注意：本项目目前没有积极维护。我们可能会接受有良好文档的 PR 或一些简单的更新，但不打算自行修复问题或添加新功能。 功能 符合 原始 jsonpath 规范 原始规范未提供的便捷添加或补充 ： ^ 用于获取匹配项的父级 用于获取匹配项的属性名 （以数组形式） 类型选择器...