Trendnet AC2600 TEW-827DRU - Credentials Disclosure

Trendnet AC2600 TEW-827DRU version 2.08B01 improperly discloses information via redirection from the setup wizard. A user may view information as Admin by manually browsing to the setup wizard and forcing it to redirect to the desired page. id: CVE-2021-20150 info: name: Trendnet AC2600 TEW-827DR...

Nginx UI <= 2.3.7 - Unauthenticated Installer Exposure

Nginx UI 2.0.0 to 2.3.8 contains an authentication bypass caused by unauthenticated access to /api/install during first-run setup, letting remote attackers claim the initial admin account, exploit requires attacker to access the service before legitimate operator. id: CVE-2026-42221 info: name:...

OpenCATS - Command Injection

OpenCATS prior to commit 3002a29 contains a command injection caused by injection of PHP statements into the installer AJAX endpoint's databaseConnectivity action parameter, letting unauthenticated attackers execute arbitrary code, exploit requires incomplete installation wizard. id: CVE-2026-277...

SolarWinds Web Help Desk - Authentication Bypass

SolarWinds Web Help Desk 12.8.8 HF1 and earlier contains an authentication bypass vulnerability in the WebObjects session handling. By crafting a request with a manipulated path component to an internal admin page endpoint, an unauthenticated attacker can access privileged administrative function...

flan

Flan Scan is a lightweight network vulnerability scanner. With Flan Scan you can easily find open ports on your network, identify services and their version, and get a list of relevant CVEs affecting your network. Flan Scan is a wrapper over Nmap and the vulners script which turns Nmap into a...

retoolkit

Reverse Engineer's Toolkit What? This is a collection of tools you may like if you are interested in reverse engineering and/or malware analysis on x86 and x64 Windows systems. After installing this program, you'll have two ways to access the tools: Double-click the retoolkit icon in the Desktop...

Kali-Linux

Kali-Linux ハックとセットアップ 現在のリリース Kali-weekly イメージ： href 単一 inode をダウンロード root@kitploit: apt install subversion -y svn checkout https://github.com/nu11secur1ty/Kali-Linux/trunk/$inode はじめに： Kali Linux はあなたに適していますか？ このディストリビューションの開発者として、私たちが皆さんに Kali Linux の使用を勧めると期待するかもしれません。しかし実際のところ、Kali...

python-uncompyle6

|buildstatus| |Pypi Installs| |Latest Version| |Supported Python Versions| |packagestatus| .. contents:: uncompyle6 A native Python cross-version decompiler and fragment decompiler. The successor to decompyle, uncompyle, and uncompyle2. I gave a talk on this at BlackHat Asia 2024 . Introduction...

sish

sish Open source SSH tunneling for HTTPS, WSS, TCP, aliases, and SNI. If you like the simplicity of serveo/ngrok-style sharing but want to use plain SSH and run your own infrastructure, sish is built for that. No custom client required for end users Public and private tunnel workflows Docker and...

RSA-Backdoor

RSA バックドア ジェネレータ このリポジトリには、Young & Yung（1996）によって提案されたRSA鍵生成に対するSETUP（Secretly Embedded Trapdoor with Universal Protection）攻撃を再現するコードが含まれています。この攻撃の可能性を考慮すると、ブラックボックス鍵生成システムを決して信頼しないでください。 参考文献： - アルゴリズムのプレゼンテーション - オリジナルの完全な論文 使用方法 まず攻撃者の鍵を生成し、次にバックドア付きの鍵を生成します。 root@kitploit: build go build...

seekr

A multi-purpose toolkit for gathering and managing OSINT-Data with a neat web-interface. Introduction Seekr is a multi-purpose toolkit for gathering and managing OSINT-data with a sleek web interface. Our desktop view enables you to have all of your favourite OSINT tools integrated in one. The...

s3tk

s3tk A security toolkit for Amazon S3 🍊 Battle-tested at Instacart Installation Run: root@kitploit: pip install s3tk You can use the AWS CLI or AWS Vault to set up your AWS credentials: root@kitploit: pip install awscli aws configure See IAM policies needed for each command. Commands Scan Scan yo...

wappalyzer-next

Wappalyzer Next This project is a command line tool and python library that uses the Wappalyzer browser extension and its fingerprints to detect technologies. Other projects that emerged after the discontinuation of the official open-source project are using outdated fingerprints and lack accurac...

algo

Algo VPN Algo VPNは、個人用のWireGuardおよびIPsec VPNのセットアップを簡素化するAnsibleスクリプトのセットです。利用可能な最も安全なデフォルト設定を使用し、一般的なクラウドプロバイダーで動作します。 詳細については、リリース発表をご覧ください。 機能 iOS、MacOS、Linux向けに、強力な暗号化（AES-GCM、SHA2、P-256）を備えたIKEv2のみをサポート 上記すべてに加え、AndroidとWindows 11でもWireGuardをサポート...

revshellgen

🚀 RevShellGen Reverse Shell Generator Automate reverse shell generation with style Generate, encode, and catch reverse shells without the hassle Features • Installation • Usage • Shell Types • Contributing 📖 About RevShellGen is a powerful command-line tool that simplifies the process of generati...

CVE-2023-38646-PoC

CVE-2023-38646 - Metabase 事前認証RCE Metabaseオープンソース版 0.46.6.1 より前、および Metabase Enterprise 1.46.6.1 より前のバージョンでは、攻撃者がサーバの権限レベルで任意のコマンドを実行できます。認証は不要です。その他の修正バージョンは 0.45.4.1、1.45.4.1、0.44.7.1、1.44.7.1、0.43.7.2、1.43.7.2 です。 PoC 手順 1. http://vulnerablehost.com/api/session/properties に移動する 2...

Hipcam-RTSP-Format-Validation-Vulnerability

Hipcam RealServer/V1.0 RTSP 形式検証の脆弱性の概念実証 | CVE-2023-50685 Hipcam RealServer/V1.0 の RTSP サービスにおける形式検証の脆弱性の概念実証（PoC）。 説明 この PoC は、Hipcam RealServer/V1.0 の RTSP（Real Time Streaming Protocol）サービスにおける形式検証の脆弱性を悪用するものです。この脆弱性は、RTSP SETUP リクエスト内の 'clientport' パラメータに対する不十分な入力検証と処理に起因します。 脆弱性の詳細 RTSP SETU...

scannerl

Scannerl Scannerl is a modular distributed fingerprinting engine implemented by Kudelski Security. Scannerl can fingerprint thousands of targets on a single host, but can just as easily be distributed across multiple hosts. Scannerl is to fingerprinting what zmap is to port scanning. Scannerl wor...

stackrox

목차 StackRox 쿠버네티스 보안 플랫폼 목차 커뮤니티 StackRox 배포 Helm을 사용한 빠른 설치 Helm을 사용한 수동 설치 Operator를 사용한 설치 스크립트를 통한 설치 쿠버네티스 배포판 EKS, AKS, GKE OpenShift Docker Desktop, Colima 또는 minikube StackRox 사용자 인터페이스UI 접근 개발 빠른 시작 빌드 도구 StackRox 클론 로컬 개발 일반적인 Makefile 대상 생산성 GoLand 설정 sqlintegration 테스트 실행 디버깅 이식 가능한 설...

pyt

.. image:: https://travis-ci.org/python-security/pyt.svg?branch=master :target: https://travis-ci.org/python-security/pyt .. image:: https://readthedocs.org/projects/pyt/badge/?version=latest :target: http://pyt.readthedocs.io/en/latest/?badge=latest .. image::...