tachyon

Tachyon Tachyon is a fast web application security reconnaissance tool. It is specifically meant to crawl a web application and look for left over or non-indexed files with the addition of reporting pages or scripts leaking internal data. User Requirements Linux Python 3.6+ User Installation...

CVE-2024-28995

CVE-2024-28995 PoC y Escáner Masivo Descripción general Este repositorio contiene una prueba de concepto PoC y un escáner masivo para la vulnerabilidad de traversal de directorios SolarWinds Serv-U CVE-2024-28995. Esta vulnerabilidad permite el acceso no autorizado para leer archivos sensibles en...

http-protocol-exfil

http-protocol-exfil Use the HTTP protocol version to send a file bit by bit "HTTP/1.0" is a 0 and "HTTP/1.1" is a 1. It uses GET requests so the Blue Team would only see the requests to your IP address. However, it takes a long time to send bigger files, for example it needs 1 hour to send 200 KB...

caplets

Caplets bettercap's interactive sessions can be scripted with .cap files, or caplets, the following are a few basic examples, look at this repo for more. To install / update the caplets on your computer: root@kitploit: git clone https://github.com/bettercap/caplets.git cd caplets sudo make instal...

CVE-2020-27603-bbb-libreoffice-poc

CVE-2020-27603-bbb-libreoffice-poc Prueba de concepto de la vulnerabilidad de exfiltración de archivos de Libreoffice en Big Blue Button Estos archivos ODT muestran cómo explotar una vulnerabilidad de exfiltración de archivos que puede ocurrir con el renderizado de Libreoffice del lado del...

digital-forensics-lab

Digital Forensics Lab & Shared Cyber Forensic Intelligence Repository Features of Repository Interactive Digital Forensics Labs: Tailored for students and faculty engagement Linux-Centric Lab Environment: Utilizes Kali Linux exclusively for all labs Visual Learning Support: Each lab includes...

distro

REMnux Distro Repository This repository contains supplemental files for the REMnux distro and the source files for the Debian packages that the distro installs from the REMnux package repository on Launchpad. Repository Structure files/ Supplemental files used by the REMnux distribution,...

CVE-2022-36537-EXPLOIT

CVE-2022-36537 Resumen R1Soft Server Backup Manager utiliza el framework ZK como su framework principal. Su seguridad requiere que todas las partes de proyectos Web3 presten más atención a las vulnerabilidades de seguridad de diversas infraestructuras Web3 y las parcheen a tiempo para evitar...

Malimite

Description Malimite is an iOS and macOS decompiler designed to help researchers analyze and decode IPA files and Application Bundles. Built on top of Ghidra decompilation to offer direct support for Swift, Objective-C, and Apple resources. Features Multi-Platform Mac, Windows, Linux Direct suppo...

scout

Scout Scout is a URL fuzzer and spider for discovering undisclosed VHOSTS, files and directories on a web server. A full word list is included in the binary, meaning maximum portability and minimal configuration. Aim and fire! Usage root@kitploit: Usage: scout command Available Commands: help Hel...

arya

Arya - El YARA Inverso Arya es una herramienta única que produce archivos pseudo-maliciosos diseñados para activar reglas YARA. Puedes pensar en ella como un YARA inverso porque hace exactamente lo opuesto: crea archivos que coinciden con tus reglas. Puedes leer más sobre Arya y cómo funciona en...

CVE-2020-29666

CVE-2020-29666 Listado de directorios Descripción sugerida En Lan ATMService M3 ATM Monitoring System 6.1.0, debido a una vulnerabilidad de listado de directorios, un atacante remoto puede ver archivos de registro, ubicados en /websocket/logs/, que contienen los valores de cookies de un usuario y...

pwnspoof

pwnSpoof from Punk Security generates realistic spoofed log files for common web servers with customisable attack scenarios. Every log bundle is unique and completely customisable, making it perfect for generating CTF scenarios and for training serials. Can you find the attacker session and build...

IDA2Obj

IDA2Obj IDA2Obj is a tool to implement SBI Static Binary Instrumentation. The working flow is simple: Dump object files COFF directly from one executable binary. Link the object files into a new binary, almost the same as the old one. During the dumping process, you can insert any data/code at an...

CVE-2020-27955-LFS

Exploit de ejecución remota de código RCE en Git-lfs CVE-2020-27955 versión .bat / powershell Vulnerables: git, GitHub CLI gh, GitHub Desktop, Visual Studio Code, SourceTree, SmartGit, GitKraken, etc. Descubierto por Dawid Golunski https://legalhackers.com https://exploitbox.io Probado en Windows...

kubebot

Kubebot A security testing Slackbot built with a Kubernetes backend on the Google Cloud Platform NOTE: I am not actively maintaining this project anymore. I am working on v2 of Kubebot along with a couple other folks which will likely be presented at one of the upcoming security conferences...

dismember

🔪 Dismember Dismember is a command-line toolkit for Linux that can be used to scan the memory of all processes or particular ones for common secrets and custom regular expressions, among other things. It will eventually become a full /proc toolkit. Using the grep command, it can match a regular...

sops

SOPS: Operaciones de Secretos SOPS es un editor de archivos cifrados que soporta los formatos YAML, JSON, ENV, INI y BINARY, y cifra con AWS KMS, GCP KMS, Azure Key Vault, HuaweiCloud KMS, age y PGP. demostración .. image:: https://i.imgur.com/X0TM5NI.gif .. image::...

fuzzuli

fuzzuli Motivación • Antecedentes • Instalación • Uso • Ejecutar fuzzuli • Página de la herramienta fuzzuli es una herramienta de fuzzing de URL que tiene como objetivo encontrar archivos de respaldo críticos creando una lista de palabras dinámica basada en el dominio. Motivación...

droidlysis

DroidLysis DroidLysis is a pre-analysis tool for Android apps : it performs repetitive and boring tasks we'd typically do at the beginning of any reverse engineering. It disassembles the Android sample, organizes output in directories, and searches for suspicious spots in the code to look at. The...