CVE-2025-24893

XWiki CVE-2025-24893 Prova de Conceito Autores : Net.Doge & Infinit3i Este script em Python explora a CVE-2025-24893 , uma vulnerabilidade de execução remota de código RCE no XWiki causada por sandboxing inadequado em macros Groovy renderizadas de forma assíncrona. Permite execução arbitrária de...

ktr

ktr Programma traceroute altamente asincrono scritto in Rust con ricerche ASN WHOIS e PeeringDB. Messo insieme principalmente per how-did-i-get-here.net : Componenti: ktrlib: codice della libreria principale, gestisce traceroute, ricerche WHOIS degli ASN e supporto SQLite per PeeringDB ktragent:...

PSAsyncShell

PSAsyncShell PSAsyncShell è una Reverse Shell TCP Asincrona scritta in puro PowerShell. A differenza di altre reverse shell, tutto il flusso di comunicazione ed esecuzione è asincrono, permettendo di bypassare alcuni firewall e alcune contromisure contro questo tipo di connessioni remote. Inoltre...

Http-Asynchronous-Reverse-Shell

HTTP/S Asynchrone Reverse Shell ✨ Einführung In einer Zeit, in der fortschrittliche Erkennungssysteme wie IDS, IPS, EDR, AV und Firewalls in Unternehmensnetzwerken dominieren, ist es eine Herausforderung, sie bei Sicherheitsbewertungen zu umgehen. Die meisten Reverse Shells nutzen TCP-Tunnel L4,...

CVE-2024-38077-check

अतुल्यकालिक पीडीएफ फाइल का भेद्यता विश्लेषण। मेरी क्षमता सीमित है, अभी तक RCE नहीं कर पा रहा हूँ। कृपया विशेषज्ञ मार्गदर्शन करें। भेद्यता सत्यापन के लिए केवल IP बदलना आवश्यक है। root@kitploit: if name == 'main': printlogo connecttolicenseserver"192.168.6.132"...

bscan

:mag: أداة تعداد أهداف غير متزامنة :magright: الملخص bscan هي أداة سطر أوامر تستخدم لجمع المعلومات النشطة وتعداد الخدمات. في جوهرها، تقوم bscan بشكل غير متزامن بتشغيل عمليات لأدوات مسح معروفة، وتعيد استخدام نتائج المسح في مخرجات وحدة تحكم مظللة وهيكل دليل محدد جيدًا. الترخيص bscan مخصصة للأغراض...

bscan

:mag: an asynchronous target enumeration tool :magright: Synopsis bscan is a command-line utility to perform active information gathering and service enumeration. At its core, bscan asynchronously spawns processes of well-known scanning utilities, repurposing scan results into highlighted console...

nodriver

NODRIVER nodriver fornisce una libreria di web scraping asincrono e automazione del browser di livello successivo per Python, con un'interfaccia facile che ha semplicemente senso ™ Questo è il successore ufficiale del pacchetto Python Undetected-Chromedriver. Niente più webdriver, niente più...

nightHawkResponse

nightHawk Response Applicazione personalizzata per la presentazione asincrona di dati forensi su un backend Elasticsearch. Questa applicazione è progettata per ingerire un file di "collezioni" Mandiant Redline e offrire flessibilità nella ricerca/stack e nell'etichettatura. L'applicazione è nata...

ProxyBroker

ProxyBroker .. image:: https://img.shields.io/pypi/v/proxybroker.svg?style=flat-square :target: https://pypi.python.org/pypi/proxybroker/ .. image:: https://img.shields.io/travis/constverum/ProxyBroker.svg?style=flat-square :target: https://travis-ci.org/constverum/ProxyBroker .. image::...

masscan

MASSCAN: Massen-IP-Port-Scanner Dies ist ein Port-Scanner für das Internet-Maßstab. Er kann das gesamte Internet in weniger als 5 Minuten scannen, indem er 10 Millionen Pakete pro Sekunde überträgt, von einer einzigen Maschine. Seine Verwendung Parameter, Ausgabe ähnelt nmap, dem bekanntesten...

EUVD-2026-42399

asyncssh has SCP Path Traversal to Arbitrary File Write...

CVE-2024-6387

CVE-2024-6387 : Tool zur Erkennung von regreSSHion Remote Unauthenticated Code Execution im OpenSSH Server CVEHunter-Tool zur Erkennung von Schwachstellen für CVE-2024-6387 mit asynchroner Leistung. 💻 Installation root@kitploit: git clone https://github.com/th3gokul/CVE-2024-6387.git cd...

vajra

An automated web hacking framework for web applications Table of Content About Vajra What is Vajra Key Feaures What Vajra does Installation Running with docker-compose Tools Used by Vajra Contributing License Future Plans/Under Development Credits Disclaimer FAQ Detailed insight about Vajra can b...

Formidable Form Builder < 2.05.03 - Unauthenticated Information Disclosure

The Formidable Form Builder plugin for WordPress is vulnerable to Sensitive Data Exposure in versions up to, and including, 2.05.03 via the frmformspreview AJAX action. This makes it possible for unauthenticated attackers to export all of the form entries for a given form. id: CVE-2017-20194 info...

Avada (Fusion) Builder <= 3.15.3 - Unauthenticated Arbitrary File Deletion

The Avada Fusion Builder plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the maybedeletefiles function. An unauthenticated attacker can delete arbitrary files on the server by manipulating the filepath parameter in the...

url-status-checker

Status Checker URL Status Checker v2.1 Status Checker è uno script Python che controlla lo stato di uno o più URL/domini e li categorizza in base ai loro codici di stato HTTP. Versione 2.1.0 Funzionalità Controlla lo stato di uno o più URL/domini. Richieste HTTP asincrone per prestazioni...

weebdns

WeebDNS أداة تعداد DNS مع اللاتزامنية هل تحب C4RR075؟ قم بالتنزيل من هنا فقط، لا تثق في الأماكن الأخرى. هذا هو المستودع الرسمي والوحيد لمشروع WeebDNS. كتبه: FuzzyRabbit - تويتر: @rabbitfuzzy، جيت‌هب: @FuzzyRabbit إخلاء مسؤولية: هذا مخصص لأغراض الاختبار فقط ولا يمكن استخدامه إلا في حالة الحصول على...

crawpy

Crawpy Yet another content discovery tool written in python. What makes this tool different than others: Sends asynchronous HTTP requests, fast Calibration mode, applies filters on its own Recursive scan mode with additional flags Report generation, you can later go and check your results Multipl...

CVE-2024-29973

CVE-2024-29973 مستغل أداة اكتشاف واستغلال الثغرات لـ CVE-2024-29973 مع أداء غير متزامن. التثبيت: root@kitploit: git clone https://github.com/RevoltSecurities/CVE-2024-29973 pip install -r requirements.txt python3 exploit.py --help الاستخدام: root@kitploit: python3 exploit.py -h / / / / / / / / |...