pythem

pythem - 渗透测试框架 pythem 是一个多用途渗透测试框架，由 Python 编写，专为安全研究人员和安全专业人士设计。该工具仅限于合法行为使用。对于因使用本工具而导致的任何不当或违法行为，本人概不负责。更多信息请阅读许可协议。 安装 链接： 创建桌面快捷方式 Linux 安装 依赖安装 注意： 仅在基于 Debian 的发行版上测试过，如果你使用 Redhat 或 SUSE 类系统，可以尝试使用 yum 或 zypper 安装依赖。 root@kitploit: sudo apt-get update sudo apt-get install -y...

php-app-race-condition

Aplicación PHP Vulnerable Condición de Carrera Configuración del entorno: root@kitploit: docker-compose up Verificación del entorno: Prueba de conexión: http://localhost/test.php Endpoint vulnerable: http://localhost/poc.php Explotación de la condición de carrera: root@kitploit: echo...

slipstream

NAT Slipstreaming NAT Slipstreaming allows an attacker to remotely access any TCP/UDP service bound to any system behind a victim's NAT, bypassing the victim's NAT/firewall remote arbitrary firewall pinhole control, just by the victim visiting a website. v1 developed by : @SamyKamkar //...

XSS-Bypass-Filters

XSS-Bypass-Filters Redirección root@kitploit: document.location= document'location'= window.location= this"window""location"= document.location.href= location.href= location= window.location.assign window'location''href'= document.location.replace window.open"link", "blank"; Enlace root@kitploit:...

F5-CVE-2022-1388-Exploit

F5-CVE-2022-1388-Exploit Exploit y script de verificación para CVE 2022-1388 Uso Verificar contra un solo host root@kitploit: python3 CVE-2022-1388.py -v true -u targeturl Atacar un host y probar comando root@kitploit: python CVE20221388.py -a true -u targeturl -c command Atacar lista de hosts...

tarian

Tarian Protect your applications running on Kubernetes from malicious attacks by pre-registering your trusted processes and trusted file signatures. Tarian will detect unknown processes and changes to the registered files, then it will send alerts and take an automated action. Save your K8s...

Security update for util-linux (important)

openSUSE security update: security update for util-linux ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21905-1 Rating: important References: bsc1261606 bsc1268886 bsc1269583 bsc1270219 bsc1275441 bsc1278347 bsc1278348 bsc1278349 Cross-References:...

Security update for the Linux Kernel (important)

openSUSE security update: security update for the linux kernel ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21910-1 Rating: important References: bsc1236344 bsc1240890 bsc1240957 bsc1249104 bsc1255225 bsc1255531 bsc1256629 bsc1256671 bsc1258278...

ViewSonic vCast media streaming service allows unauthenticated screen exfiltration and device compromise

Overview ViewSonic vCast software, which is included in ViewBoard smartboard devices, contains multiple vulnerabilities that an attacker can chained to achieve full device compromise. Description ViewSonic ViewBoards are widely used smart display devices smartboard, typically deoloyed in enterpri...

Microsoft Windows Cloud Files Mini Filter Driver CldiStreamPrepareRequestForMoreProcessing Type Confusion vulnerability

Summary A type confusion vulnerability exists in the CldiStreamPrepareRequestForMoreProcessing functionality of Windows Cloud Files Mini Filter Driver versions: 10.0.26100.8457 WinBuild.160101.0800 and 10.0.26100.8655 WinBuild.160101.0800. A specially crafted sequence of Cloud Filter API calls ca...

Security update for rabbitmq-server (important)

openSUSE security update: security update for rabbitmq-server ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21903-1 Rating: important References: bsc1266465 bsc1271318 bsc1271336 bsc1271337 bsc1271338 bsc1271339 bsc1271340 bsc1271343 bsc1271344...

whids

IMPORTANT: this README and other documentation is not updated to reflect the changes made to latest beta releases as a lot of changes happened. All this will be updated in time when a stable version will be released see Roadmap until next release. Feel free to run beta releases on your own and as...

dissect

dissect Dissect is a digital forensics & incident response framework and toolset that allows you to quickly access and analyse forensic artefacts from various disk and file formats, developed by Fox-IT part of NCC Group. This project is a meta package, it will install all other Dissect modules wi...

SQLRecon

SQLRecon SQLRecon es un conjunto de herramientas para Microsoft SQL Server diseñado para reconocimiento ofensivo y post-explotación. Para obtener información detallada sobre cómo usar cada técnica, consulte la wiki. Puede descargar una copia de SQLRecon desde la página de versiones...

PCLink

PCLink Server The secure backbone for your personal PC remote control ecosystem. PCLink is a modern, web-first server designed for secure remote PC management and high-performance screen streaming. Featuring a high-performance FastAPI backend, a responsive Web UI, and an extensible plugin system...

AMSIext

AMSIext AMSIext es un complemento para Firefox y Chrome que te permite enviar cualquier flujo de datos desde el navegador a AMSI. AMSI es la forma de comunicar la memoria RAM con Windows Defender o cualquier otro sistema de seguridad de endpoint. Esto significa que, mientras navegas por la web,...

scannerl

Scannerl Scannerl is a modular distributed fingerprinting engine implemented by Kudelski Security. Scannerl can fingerprint thousands of targets on a single host, but can just as easily be distributed across multiple hosts. Scannerl is to fingerprinting what zmap is to port scanning. Scannerl wor...

scannerl

Scannerl Scannerl 是一个模块化分布式指纹识别引擎，由 Kudelski Security 实现。Scannerl可以在单个主机上对数千个目标进行指纹识别，并且可以轻松地分布在多个主机上。Scannerl对于指纹识别的意义，就如同zmap对于端口扫描的意义。 Scannerl 适用于 Debian/Ubuntu/Arch（但也可能在其他发行版上运行）。它采用主从架构，主节点将工作（待指纹识别的主机）分配给其从节点（本地或远程）。整个部署对用户透明。 为什么使用 Scannerl...

damn-vulnerable-MCP-server

Compatibilidad SSE de Cursor para Damn Vulnerable MCP Este documento proporciona una visión general de las actualizaciones realizadas en el proyecto Damn Vulnerable Model Context Protocol DVMCP para hacerlo compatible con la implementación de Server-Sent Events SSE de Cursor. Resumen El proyecto...

GhostTask

Ghost Scheduled Task Inspired by WithSecure's research on Scheduled Task Tampering, they explained the feasibility of creating a scheduled task solely through registry key manipulation. Such an approach can bypass the generation of scheduled task creation event logs, such as 4698 and 106, providi...