ssh_Enum_vaild

sshEnumvaild Ein Bash-Skript zur Aufzählung gültiger SSH-Benutzernamen unter Verwendung der CVE-2018-15473-Schwachstelle. Es überprüft gültige Benutzernamen auf einem OpenSSH-Server durch Analyse der Authentifizierungsantworten. Funktionen ✅ Erkennt gültige SSH-Benutzernamen basierend auf dem...

CVE-2026-23744

CVE-2026-23744 — MCPJam Inspector RCE non autenticata PoC per esecuzione di codice in remoto non autenticata per CVE-2026-23744. MCPJam Inspector 1.4.2 e versioni precedenti espongono funzionalità tramite /api/mcp/connect che possono avviare un comando server MCP controllato dall'attaccante senza...

ZeroTrace

ZeroTrace ZeroTrace ist ein leistungsstarkes ethisches Hacking-Tool zur Anonymisierung, entwickelt in Bash. Es hilft Ihnen, online anonym zu bleiben, indem es den gesamten Netzwerkverkehr Ihres Systems – nicht nur den Browserverkehr – über das Tor-Netzwerk leitet. Dadurch wird es extrem schwierig...

shellshock-poc-cve-2014-7169

CVE-2014-6271 - Shellshock PoC Riepilogo CVSS 10.0. Bash interpreta erroneamente i comandi finali dopo una definizione di funzione memorizzata in una variabile d'ambiente, eseguendoli durante l'inizializzazione della shell. Causa principale Le variabili d'ambiente di Bash possono codificare...

wp2shell-scan

wp2shell-scan Detect and clean upwp2shell CVE‑2026‑63030 compromise across one or many WordPress sites. wp2shell is the pre‑authentication remote‑code‑execution vulnerability fixed in WordPress 7.0.2 / 6.9.5 / 6.8.6 2026‑07‑17. A public PoC appeared within a day and mass‑exploitation followed...

NVMS-1000-Directory-Traversal-Bash

NVMS-1000-Directory-Traversal-Bash Exploit di Directory Traversal scritto in Bash per NVMS-1000 CVE-2019-20085. Utilizzo root@kitploit: ./cve-2019-20085-poc.sh -u TARGETURL -f TARGETFILE Esempio root@kitploit: ./cve-2019-20085-poc.sh -u http://127.0.0.1/ -f path/to/file.txt Dichiarazione di non...

shellshocker-android

shellshocker-android यह एक Android एप्लीकेशन है जो आपको यह पता लगाने में मदद करता है कि आपकी मशीन जो bash चलाती है, CVE-2014-6271 के प्रति संवेदनशील है या नहीं। Stefano Belli, C Copyleft, साझा करें, पुनर्निर्माण करें, संशोधित करें, पुनर्वितरित करें जैसा आप सोचते हैं कि यह बेहतर होना चाहिए Google+...

puppet-shellshock

Questo modulo determina la vulnerabilità di un binario bash agli exploit shellshock CVE-2014-6271 o CVE-2014-7169 e poi applica la patch dove possibile. Piattaforme supportate: Debian 5, 6, 7 Ubuntu 12.04 LTS, 14.04 LTS, 14.10 RHEL/CentOS 5, 6 Utilizzo root@kitploit: class 'shellshock': Facter...

ImageMagick-CVE-2022-44268-PoC

ImageMagick-CVE-2022-44268-PoC Ein Bash-Skript zum einfachen Ausnutzen der ImageMagick-Sicherheitslücke CVE-2022-44268 Arbitrary File Read – Lesen beliebiger Dateien Betroffene ImageMagick-Version root@kitploit: Version: ImageMagick 6.9.11-60 Q16 x8664 2021-01-25 https://imagemagick.org Copyright...

httprobe

httprobe Take a list of domains and probe for working http and https servers. Install root@kitploit: ▶ go install github.com/tomnomnom/httprobe@latest Basic Usage httprobe accepts line-delimited domains on stdin: root@kitploit: ▶ cat recon/example/domains.txt example.com example.edu example.net ▶...

dsh2shell

dsh2shell Unauthenticated RCE PoC for expo...

SEcraper

SEcraper Strumento di scraping per motori di ricerca con script BASH. Dipendenze curl cli Motori di ricerca disponibili Ask.com Search.yahoo.com Bing.com Installazione root@kitploit: git clone https://github.com/zerobyte-id/SEcraper.git cd SEcraper/ Esecuzione root@kitploit: bash secraper.bash...

LazyDroid

Lazydroid 0.4 von Dani Martinez @dan1t0 Lazydroid ist ein als Bash-Skript geschriebenes Tool, das einige Aspekte eines Android-Assessments erleichtert. Es bietet einige gängige Aufgaben wie: Das Debug-Flag einer Anwendung auf true setzen Das Backup-Flag einer Anwendung auf true setzen Die Anwendu...

ROOT-OS-DEBIAN-11-CVE-2022-3715 CVE-2022-3715 in bash - Patched by Root

Root has patched CVE-2022-3715 in the bash package for Root:Debian:11. Multiple fixed versions available...

GHSA-FJ27-X67R-V4G5 vulnerabilities

Vulnerabilities for packages: busybox...

ROOT-OS-UBUNTU-2510-CVE-0000-0000 CVE-0000-0000 in bash - Patched by Root

Root has patched CVE-0000-0000 in the bash package for Root:Ubuntu:25.10. Multiple fixed versions available...

GHSA-FHGH-WQ4Q-R37X uniget CLI: Metadata signature verification only runs when UNIGET_IGNORE_METADATA_SIGNATURE is set

Summary The sigstore check on metadata.json is gated on the wrong side of the condition. LoadMetadata in internal/config/update.go:81 verifies the bundle only when UNIGETIGNOREMETADATASIGNATURE is non-empty, so in a normal run, where nobody sets that variable, the signature is never checked...

Hack-The-Box-Connected-Full-Machine-Walkthrough

Hack The Box — Connected Platform: Hack The Box Mac...

CVE-2026-73036

Bash-it 3.2.0 contains a terminal escape sequence injection vulnerability in the barbuk theme's Python virtualenv prompt segment that allows local attackers to inject arbitrary terminal control sequences by embedding escape sequences in the requires-python field of a pyproject.toml file. When a...

CVE-2026-73036 Bash-it barbuk Theme 3.2.0 Terminal Escape Sequence Injection via pyproject.toml

Bash-it 3.2.0 contains a terminal escape sequence injection vulnerability in the barbuk theme's Python virtualenv prompt segment that allows local attackers to inject arbitrary terminal control sequences by embedding escape sequences in the requires-python field of a pyproject.toml file. When a...