cve-2014-6287.py

CVE-2014-6287 pythonスクリプトの修正版...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.22.12 bug fix and security update

Red Hat OpenShift Container Platform release 4.22.12 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.22. Red Hat Product Security has rated this update as having a...

Juiceshopgl

Juice Shop Logo OWASP Juice Shop Test Coverage Maintainability The most trustworthy online shop out there. @dschadow — The best juice shop on the whole internet! @shehackspurple — Actually the most bug-free vulnerable application in existence! @vanderaj — First you 😂😂then you 😢 @kramse — But this...

CVE-2019-15107

CVE-2019-15107 CVE-2019-15107（Webmin のバックドア）のために書いたものです。...

CVE-2026-84371

creationtimestamp| type| source ---|---|--- 2026-09-01 21:35:23+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/brv6imqhpe426 2026-09-01 22:35:05+00:00| published-proof-of-concept| https://github.com/apostrophecms/apostrophe/security/advisories/GHSA-g8qq-57p8-ggw5 2026-09-02...

pyt

.. image:: https://travis-ci.org/python-security/pyt.svg?branch=master :target: https://travis-ci.org/python-security/pyt .. image:: https://readthedocs.org/projects/pyt/badge/?version=latest :target: http://pyt.readthedocs.io/en/latest/?badge=latest .. image::...

cve-2013-3319

cve-2013-3319 CVE-2013-3319 / SAP Security Note 1816536 用の metasploit モジュール 非推奨 : metasploit の saphostctrlgetcomputersystem を使用してください。これは履歴保存のみを目的として保持されています。 アドバイザリ全文: http://labs.integrity.pt/advisories/cve-2013-3319/...

CVE-2024-32002

実行中のPoC...

Zeus

Zeus AWS 監査 & 強化ツール Zeus は、AWS EC2 / S3 / CloudTrail / CloudWatch / KMS のベストプラクティス強化のための強力なツールです。ユーザーが作成したプロファイルに従ってセキュリティ設定をチェックし、ユーザーの要求に応じて CIS AWS Benchmark ソースに基づいた推奨設定に変更します。 現在はログメカニズムのみを含んでいます。 Identity and Access Management 「root」アカウントの使用を避ける すべての IAM ユーザーにコンソールパスワードがある場合は多要素認証 MFA を有効にす...

sniffles

Sniffles--Packet Capture Generator for IDS and Regular Expression Evaluation Sniffles is a tool for creating packet captures that will test IDS that use fixed patterns or regular expressions for detecting suspicious behavior. Sniffles works very simply. It takes a set of regular expressions or...

CryKeX

Properties: Cross-platform Minimalism Simplicity Interactivity Compatibility/Portability Application Independable Process Wrapping Process Injection Dependencies: Unix - should work on any Unix-based OS BASH - the whole script root privileges optional Limitations: AES and RSA keys only Fails most...

chaps

CHAPS: Configuration Hardening Assessment PowerShell Scripts CHAPS is a set of read-only scripts for checking Windows system security configuration where additional assessment software such as Microsoft Policy Analyzer or commercial tools cannot be installed. It is designed for Industrial Control...

gattacker

A Node.js package for BLE Bluetooth Low Energy Man-in-the-Middle & more. Prerequisites see: https://github.com/sandeepmistry/noble https://github.com/sandeepmistry/bleno Install root@kitploit: npm install gattacker Usage Configure Running both components Set up variables in config.env:...

pentest_lab

Pentest Lab I'm not actively developing on this anymore, but will fix bugs and look at issues and pull requests. Help is appreciated : This local pentest lab leverages docker compose to spin up multiple victim services and an attacker service running Kali Linux. If you run this lab for the first...

cloud

Cloud Monitoring the Cloud Landscape Our mission with this project is to provide an always up-to-date and freely accessible map of the cloud landscape for every major cloud service provider. We've decided to kick things off with collecting SSL certificate data of AWS EC2 and GCP machines,...

CVE-2022-39802

3242933 – CVE-2022-39802 SAP Manufacturing Execution におけるファイルパス横断の脆弱性 一般情報 リスク：CRITICAL 影響を受けるバージョン： root@kitploit: SAP MFG EXECUTION CORE 15.1 SAP MFG EXECUTION CORE 15.2 SAP MFG EXECUTION CORE 15.3 ベンダーURL：https://sap.com バグ：ファイルパス横断の脆弱性 報告日：2022年9月 公開アドバイザリ発行日：2022年10月12日 参照：SAP Security Note...

htrace.sh

Description htrace.sh is a shell script for http/https troubleshooting and profiling. It's also a simple wrapper around several open source security tools. For a more detailed understanding of htrace.sh, its parameters, functions and how it all works, run htrace.sh --examples or see the Wiki...

awesome-shodan-queries

Awesome Shodan Search Queries Over time, I've collected an assortment of interesting, funny, and depressing search queries to plug into Shodan, the literal internet search engine. Some return facepalm-inducing results, while others return serious and/or ancient vulnerabilities in the wild. Most...

trajan

Trajan: CI/CD Security Scanner Trajan scans CI/CD pipelines for security vulnerabilities that attackers use to compromise software supply chains. It supports GitHub Actions, GitLab CI, Azure DevOps, Jenkins, and JFrog. What it does Trajan parses workflow YAML files, builds dependency graphs, runs...

SpringSource__spring-security-oauth_CVE-2018-1260_2-3-2-RELEASE

本项目提供对在Spring Security中使用OAuth 1a和OAuth2的支持。它提供了实现这些协议的消费者和提供者的功能，使用标准的Spring和Spring Security编程模型及配置习惯用法。 行为准则 本项目遵循贡献者公约行为准则。参与即表示您同意遵守该准则。如有不可接受的行为，请向[email protected]报告。 开始使用 下载 或从GIT克隆，然后使用Maven 3.0.和Java 1.6或更高版本: root@kitploit: $ git clone ... $ mvn install -P bootstrap 仅首次使用 bootstrap...