john

John the Ripper This is the community-enhanced, "jumbo" version of John the Ripper. It has a lot of code, documentation, and data contributed by jumbo developers and the user community. It is easy for new code to be added to jumbo, and the quality requirements are low, although lately we've start...

CVE-2024-25503

CVE-2024-25503 Tipo de vulnerabilidad: Cross Site Scripting XSS Producto: Aplicación de escritorio Advanced REST Client Versión vulnerable: 17.0.9 Vendedor del producto:https://www.advancedrestclient.com/ 1. Descripción La vulnerabilidad de Cross-Site Scripting XSS en Advanced REST Client v.17.0....

AdvPhishing

查看 Mp4：https://www.instagram.com/tukbuck/reel/DTBBBknj-nd/ 注意：如果你想激活此工具，或想要一个功能正常的相同项目，请先付费：ETH（ERC20）钱包地址： 0xe48df3c0e1713518096c7d2d0a2dce70aa85cd33 关注社交媒体平台 支持我们 想学习创建专业钓鱼页面、道德黑客、漏洞赏金？请访问 - https://secnhack.in 加入我们的 WhatsApp 群组，获取解答并学习黑客技术 https://chat.whatsapp.com/J6FCipjBwg76UGI7Px2oae --...

CVE-2024-40498

CVE-2024-40498 Aplicación afectada online-shopping-system-advanced 1.0 https://github.com/PuneethReddyHC/online-shopping-system-advanced Descripción El archivo register.php gestiona el registro de usuarios. En la línea 117, los parámetros POST "$address1" and $address2" no están sanitizados, a...

raven

Raven - Advanced Cyber Threat Map Simplified, customizable and responsive. It uses D3.js with TOPO JSON, has 247 countries, 100,000 cities, and can be used in an isolated environment without external lookups!. Structure Offline - Demo Firefox, Chrome or Safari Live - Regression 500 attacks at onc...

cve-2022-27438

CVE-2022-27438 Caphyon Ltd Advanced Installer 19.3: vulnerabilidad de ejecución remota de código en la comprobación de actualizaciones "CustomDetection". Uso: python3 cve-2022-27438poc.py Detalles en el informe en gerr.re. Pasos para reproducir Para otros productos afectados, debe cambiar el...

uddup

UDdup - URLs Deduplication Tool The tool gets a list of URLs, and removes "duplicate" pages in the sense of URL patterns that are probably repetitive and points to the same web template. For example: root@kitploit: https://www.example.com/product/123 https://www.example.com/product/456...

WordPress Advanced Access Manager - Path Traversal

The Advanced Access Manager plugin for WordPress is vulnerable to Unauthenticated Arbitrary File Read in versions up to, and including, 5.9.8.1 due to insufficient validation on the aam-media parameter. This allows unauthenticated attackers to read any file on the server, including sensitive file...

Advanced Responsive Video Embedder 10.8.7/10.8.8 - Hardcoded Backdoor Authentication Bypass

The compromised Advanced Responsive Video Embedder WordPress plugin releases 10.8.7 and 10.8.8 accept a hardcoded token through the wplogin parameter and establish an authenticated administrator session before normal authentication. A single unauthenticated GET request triggers the backdoor. This...

Advanced Text Widget < 2.0.2 - Cross-Site Scripting

A cross-site scripting XSS vulnerability in advancedtext.php in Advanced Text Widget plugin before 2.0.2 for WordPress allows remote attackers to inject arbitrary web script or HTML via the page parameter. id: CVE-2011-4618 info: name: Advanced Text Widget 2.0.2 - Cross-Site Scripting author:...

WordPress WP-Advanced-Search <= 3.3.9 - SQL Injection

The WordPress WP-Advanced-Search plugin for WordPress is vulnerable to SQL Injection in all versions up to, and including, 3.3.9 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for unauthenticated...

Advanced Comment System 1.0 - Local File Inclusion

ACS Advanced Comment System 1.0 is affected by local file inclusion via an advancedcomponentsystem/index.php?ACSpath=..%2f URI. id: CVE-2020-35598 info: name: Advanced Comment System 1.0 - Local File Inclusion author: daffainfo severity: high description: ACS Advanced Comment System 1.0 is affect...

WordPress Advanced Booking Calendar <1.7.1 - Cross-Site Scripting

WordPress Advanced Booking Calendar plugin before 1.7.1 contains a cross-site scripting vulnerability. It does not sanitize and escape the room parameter before outputting it back in an admin page. An attacker can inject arbitrary script in the browser of an unsuspecting user in the context of th...

39646

39646 Plugin de WordPress Advanced Video 1.0 - Inclusión de Archivos Locales Actualización El crédito original pertenece a evait security GmbH Este script es una versión más robusta del exploit original...

ABD

高级二进制反混淆 本仓库包含了2020年在全球网络安全营（GCC）东京和安全营全国研讨会上举办的“高级二进制反混淆”课程材料。 课程简介 逆向工程并不容易，尤其当二进制代码被混淆时。一旦实施了混淆，仅凭朴素的技术将无法准确分析该二进制。在本课程中，你将学习混淆原理（特别是恶意软件使用的）、混淆代码分析的理论与实践，以及如何编写自己的反混淆工具。我们将深入探讨数据流分析和基于SAT/SMT的二进制分析（例如符号执行），以使混淆失效。 课程大纲 本课程关于二进制反混淆，面向希望将编写自己工具的技能纳入武器库的安全分析师和研究人员（萌芽阶段）。课程结束时，学员将能够：...

androguard

Androguard Do you think your phone has been pwned ? please check IsMyPhonePwned New tool: Goauld Dynamic injection tool for Linux/Android See the new version of Androguard: https://github.com/androguard/androguard/tree/ng Installation Quick installation: root@kitploit: pip install androguard...

PyStat

PyStat - 适用于Windows的高级Netstat 兼容Python 2.7版本 功能 了解进程的远程地址 了解进程的远程端口 了解哪个用户在使用进程以及标题和PID 更新日志： 在install.py中添加了自动安装python模块的支持 安装指南： 下载.zip文件 将.zip文件中的pystat文件夹解压到某个驱动器，例如C:\tools\pystat 转到C:\tools\pystat，按住SHIFT键并右键单击，选择“在此处打开命令窗口” 输入此命令python install.py，尽情享受吧 警告！安装后请勿移动pystat文件夹，否则将停止工作 正在开发中！...

octosuite

Terminal-based toolkit for GitHub data analysis. root@kitploit: $ octosuite user torvalds root@kitploit: from pprint import pprint import octosuite user = octosuite.Username="torvalds" exists, profile = user.exists if exists: pprintprofile Installation root@kitploit: pip install octosuite Usage T...

simplewall

simplewall 绝对适合高级用户。 描述： 用于配置 Windows 筛选平台 WFP 的简单工具，可以配置计算机上的网络活动。 该轻量级应用程序小于一兆字节，兼容 Windows 7 SP1 及更高版本的操作系统。 您可以下载安装版或便携版。要正确运行，您需要管理员权限。 注意： 请记住，simplewall 不是 Windows 防火墙的控制 UI，并且不与 Windows 防火墙进行任何级别的交互。它通过 Windows 筛选平台 WFP 工作，这是一组内部 API 和系统服务，为创建网络筛选应用程序提供平台。Windows 筛选平台是一种开发技术，本身不是防火墙，而...

CVE-2009-4623

CVE-2009-4623 Shell remota en CVE-2009-4623: Obtén un shell no interactivo, abre otro shell para un uso avanzado !!! uso: CVE-2009-4623.sh hostnameandPath ejemplo: CVE-2009-4623.sh http://192.168.1.24/advancedcommentsystem/admin.php opciones: -h esta basura...