ranger

ranger A tool to support security professionals access and interact with remote Microsoft Windows based systems. This project was conceptualized with the thought process, we did not invent the bow or the arrow, just a more efficient way of using it. Ranger is a command-line driven attack and...

CVE-2023-46304

CVE-2023-46304 Authenticated Remote Code Execution in VTiger Open Source CRM v7.5 Summary A vulnerability exists in the Users module in the current release of VTiger CRM Open Source version 7.5.0 which allows an authenticated attacker to write and execute arbitrary PHP code to config.inc.php...

EUVD-2026-78916

Shopper is a Headless e-commerce Admin Panel. Prior to 2.9.2, groupedBulkActions in packages/admin/src/Livewire/Pages/Attribute/Browse.php, packages/admin/src/Livewire/Pages/Tag/Index.php, packages/admin/src/Livewire/Pages/Brand/Index.php, packages/admin/src/Livewire/Pages/Category/Index.php, and...

kerberoast

🚩 Sponsors If you like this project, consider sponsoring it on GitHub! Sponsors kerberoast Kerberos attack toolkit -pure python- Install pip3 install kerberoast Prereqirements Python 3.6 See requirements.txt For the impatient IMPORTANT: the accepted target url formats for LDAP and Kerberos are th...

algo

Algo VPN Algo VPN is a set of Ansible scripts that simplify the setup of a personal WireGuard and IPsec VPN. It uses the most secure defaults available and works with common cloud providers. See our release announcement for more information. Features Supports only IKEv2 with strong crypto AES-GCM...

audit_couchdb

Audit CouchDB: The simple, clear, CouchDB security assessment Audit CouchDB is a simple tool with a powerful message. Given an Apache CouchDB URL, it will tell you everything you ever wanted to know about its security. Objective Audit CouchDB will perform the following actions: 1. Learn every...

turkce-wordlist

This project does not contain any personal data such as email addresses, names, phone numbers. Passwords are listed only for academic purposes. It is not possible to associate passwords with real people. Turkish Wordlist This is a study conducted for the analysis of password choices of Turkish...

EUVD-2026-78647

Vikunja before 2.6.0 fails to apply pixel decode limits to avatar and project-background upload endpoints, allowing authenticated users to upload crafted images that decode to excessive pixel counts. Attackers can upload small images with extreme aspect ratios that consume significant CPU and...

CVE-2016-0752

Exploiting CVE-2016-0752 This app serves as a vulnerable Proof of Concept for exploiting CVE-2016-0752. For more information refer to this blog post, which explains the vulnerability, the steps required to exploit, the fix, and a link to a metasploit module. Getting Started root@kitploit: echo ""...

CVE-2021-24959

CVE-2021-24959 Description The WP Email Users WordPress plugin through 1.7.6 does not escape the dataraw parameter in the weuselectedusers1 AJAX action, available to any authenticated users, allowing them to perform SQL injection attacks. root@kitploit: CVE CVE-2021-24959 CVSS 8.8 High Publicly...

CVE-2022-40684

CVE-2022-40684 CVE-2022-40684 - Auth bypass extract admin users and LDAP config - This PoC do only read-only actions. Run exploit root@kitploit: USE: python3 exploit.py https://target.com Ex: python3 exploit.py https://target.com Run nuclei template root@kitploit: echo https://target.com | nuclei...

Compromised-Org-Chart-Generator

Compromised Org Chart Generator Overview Active Directory is used by organization as the identity provider. It contains information of all employees including their names, job titles, departments, and their managers. Password audits can help to discover weaknesses and risks. You might try passwor...

impacket

Impacket Copyright Fortra, LLC and its affiliated companies. All rights reserved. Impacket was originally created by SecureAuth, and now maintained by Fortra's Core Security. Impacket is a collection of Python classes for working with network protocols. Impacket is focused on providing low-level...

hardcodes

hardcodes extract strings from source code hardcodes is a utility for searching strings hardcoded by developers in programs. It uses a modular tokenizer that can handle comments, any number of backslashes & nearly any syntax you throw at it. Yes, it is designed to process any syntax and following...

CVE-2026-3629

CVE-2026-3629 - WordPress 権限昇格チェッカー CVE-2026-3629 を検出するためのコマンドラインツールです。「Import and export users and customers」WordPress プラグインの重大な権限昇格脆弱性です。 📢 コミュニティに参加 最新のセキュリティツール、脆弱性、ハッキングテクニックを入手しましょう！ 参加する理由 ✅ 最新の CVE アップデート ✅ 新しいセキュリティツール ✅ ハッキングチュートリアル ✅ バグバウンティのヒント ✅ コミュニティサポート 👉 チャンネル: @PySecTools 📋...

telegram-nearby-map

Telegram Nearby Map Telegram Nearby Map uses OpenStreetMap and the official Telegram library to find the position of nearby users. Please note: Telegram's API was updated a while ago to make nearby user distances less precise, preventing exact location calculations. Therefore, Telegram Nearby Map...

telegram-nearby-map

텔레그램 주변 지도 텔레그램 주변 지도는 OpenStreetMap과 공식 텔레그램 라이브러리를 사용하여 주변 사용자의 위치를 찾습니다. 참고: 텔레그램 API가 얼마 전 업데이트되어 주변 사용자 거리를 덜 정밀하게 만들어 정확한 위치 계산을 방지합니다. 따라서 텔레그램 주변 지도는 주변 사용자를 표시하지만 정확한 위치는 보여주지 않습니다. Ahmed의 블로그 포스트와 Hacker News 토론에서 영감을 받았습니다. 개발자: github.com/tejado. 작동 원리 25초마다 TDLib를 통해 텔레그램에서 모든 주변 사용자...

john

John the Ripper This is the community-enhanced, "jumbo" version of John the Ripper. It has a lot of code, documentation, and data contributed by jumbo developers and the user community. It is easy for new code to be added to jumbo, and the quality requirements are low, although lately we've start...

sudo-snooper

sudo-snooper sudo-snooper acts like the original sudo binary to fool users into entering their passwords. It will show a fake prompt just like the original to the user to enter their sudo password. This can be useful in penetration tests or security evaluations for testing user knowledge...

simplewall

simplewall 확실히 고급 사용자용입니다. 설명: 컴퓨터의 네트워크 활동을 구성할 수 있는 Windows Filtering Platform WFP을 설정하는 간단한 도구입니다. 이 가벼운 응용 프로그램은 1MB 미만이며 Windows 7 SP1 이상 운영 체제와 호환됩니다. 설치 프로그램 또는 휴대용 버전을 다운로드할 수 있습니다. 올바른 작동을 위해 관리자 권한이 필요합니다. 참고: 기억하세요, simplewall은 Windows 방화벽의 제어 UI가 아니며 어떤 수준에서도 Windows 방화벽과 상호 작용하지 않습니다...