CryKeX

Properties: Cross-platform Minimalism Simplicity Interactivity Compatibility/Portability Application Independable Process Wrapping Process Injection Dependencies: Unix - should work on any Unix-based OS BASH - the whole script root privileges optional Limitations: AES and RSA keys only Fails most...

chaps

CHAPS: Configuration Hardening Assessment PowerShell Scripts CHAPS is a set of read-only scripts for checking Windows system security configuration where additional assessment software such as Microsoft Policy Analyzer or commercial tools cannot be installed. It is designed for Industrial Control...

webmin_CVE-2019-15107

webminCVE-2019-15107 webminCVE-2019-15107...

gattacker

A Node.js package for BLE Bluetooth Low Energy Man-in-the-Middle & more. Prerequisites see: https://github.com/sandeepmistry/noble https://github.com/sandeepmistry/bleno Install root@kitploit: npm install gattacker Usage Configure Running both components Set up variables in config.env:...

pentest_lab

Pentest Lab I'm not actively developing on this anymore, but will fix bugs and look at issues and pull requests. Help is appreciated : This local pentest lab leverages docker compose to spin up multiple victim services and an attacker service running Kali Linux. If you run this lab for the first...

cloud

Cloud Monitoring the Cloud Landscape Our mission with this project is to provide an always up-to-date and freely accessible map of the cloud landscape for every major cloud service provider. We've decided to kick things off with collecting SSL certificate data of AWS EC2 and GCP machines,...

CVE-2022-39802

3242933 – CVE-2022-39802 Vulnerabilidad de recorrido de rutas de archivo en SAP Manufacturing Execution Información general Riesgo: CRÍTICO Versiones afectadas: root@kitploit: SAP MFG EXECUTION CORE 15.1 SAP MFG EXECUTION CORE 15.2 SAP MFG EXECUTION CORE 15.3 URL del proveedor: https://sap.com Bu...

htrace.sh

Description htrace.sh is a shell script for http/https troubleshooting and profiling. It's also a simple wrapper around several open source security tools. For a more detailed understanding of htrace.sh, its parameters, functions and how it all works, run htrace.sh --examples or see the Wiki...

awesome-shodan-queries

Awesome Shodan Search Queries Over time, I've collected an assortment of interesting, funny, and depressing search queries to plug into Shodan, the literal internet search engine. Some return facepalm-inducing results, while others return serious and/or ancient vulnerabilities in the wild. Most...

trajan

Trajan: CI/CD Security Scanner Trajan scans CI/CD pipelines for security vulnerabilities that attackers use to compromise software supply chains. It supports GitHub Actions, GitLab CI, Azure DevOps, Jenkins, and JFrog. What it does Trajan parses workflow YAML files, builds dependency graphs, runs...

SpringSource__spring-security-oauth_CVE-2018-1260_2-3-2-RELEASE

This project provides support for using Spring Security with OAuth 1a and OAuth2. It provides features for implementing both consumers and providers of these protocols using standard Spring and Spring Security programming models and configuration idioms. Code of Conduct This project adheres to th...

RTFM

RTFM RTFM. Copyright © 2013 by Ben Clark All rights reserved. No part of this work may be reproduced or transmitted in any form or by any means, without prior written permission of the copyright owner. ISBN-10: 1494295504 ISBN-13: 9 7 8-1494295509 Technical Editor: Joe Vest Graphic: Joe Vest...

iotmap

IoTMap IoTMap 是一个使用一个或多个协议同时建模物联网网络的工具。 这是一项正在进行的工作，作为物联网安全博士论文的一部分。 此存储库定期更新，随着获得新结果。 该项目目前支持3种协议：BLE、ZigBee 和 OS4I。更多协议即将推出。 依赖项： Python 3 依赖项 Python 3.5 Scapy（可以通过requirements文件安装，但建议从最新源码构建） neo4j-1.7.6 docopt-0.6.2 prompt-toolkit-3.0.5 terminaltables-3.1.0 pycryptodomex-3.9.7 您可以使用...

DELTA

DELTA：SDN安全评估框架 DELTA是什么？ DELTA是一个渗透测试框架，可针对多种测试用例重现已知攻击场景。该框架还通过运用模糊测试技术，提供发现SDN中未知安全问题的能力。 Agent-Manager（代理管理器）是控制塔。它完全控制部署到目标SDN网络的所有代理。 Application-Agent（应用代理）是一种合法的SDN应用程序，它执行攻击流程且依赖于控制器。已知的恶意功能以应用代理函数的形式实现。 Channel-Agent（通道代理）部署在控制器与支持OpenFlow的交换机之间。该代理嗅探并修改未加密的控制消息。它不依赖于控制器。...

CVE-2019-5596

このリポジトリには README がありません。...

combobulator

Dependency Combobulator Dependency Combobulator es un framework de código abierto, modular y extensible para detectar y prevenir fugas de confusión de dependencias y posibles ataques. Esto facilita un enfoque holístico para garantizar lanzamientos de aplicaciones seguros que pueden evaluarse fren...

kube-score

kube-score kube-score is a tool that performs static code analysis of your Kubernetes object definitions. The output is a list of recommendations of what you can improve to make your application more secure and resilient. You can test kube-score out in the browser with the...

CVE-2020-17519-Exp

CVE-2020-17519-Exp CVE-2020-17519 EXP...

linux-4.1.15_CVE-2018-5873

Linux kernel release 4.x http://kernel.org/ These are the release notes for Linux version 4. Read them carefully, as they tell you what this is all about, explain how to install the kernel, and what to do if something goes wrong. WHAT IS LINUX? Linux is a clone of the operating system Unix, writt...

Astra

Astra REST API penetration testing is complex due to continuous changes in existing APIs and newly added APIs. Astra can be used by security engineers or developers as an integral part of their process, so they can detect and patch vulnerabilities early during development cycle. Astra can...