persisthunt

Linux Persistence Detection, Hunting and Artifact Collection Summary Usage Example Detections Table of Techniques Summary persisthunt.sh helps speed up investigations by collecting targeted persistence-related artifacts and highlighting suspicious patterns commonly associated with Linux persisten...

dnsrecon

DNSRecon DNSRecon is a Python port of a Ruby script that I wrote to learn the language and about DNS in early 2007. This time I wanted to learn about Python and extend the functionality of the original tool and in the process re-learn how DNS works and how could it be used in the process of a...

socks5

socks5 Socks5/Socks5h server and client This project is to add protocol support for the Bridge, or it can be used alone Usage API Documentation Example Support for the CONNECT command Support for the BIND command Support for the ASSOCIATE command License Licensed under the MIT License. See LICENS...

CVE-2019-6467

CVE-2019-6467 BIND nxdomain-redirect For educational purposes only Run root@kitploit: $ docker run --rm --name cve-2019-6467 -it -p 53:53/udp knqyf263/cve-2019-6467 Exploit Normal query root@kitploit: $ dig @127.0.0.1 nxdomain.example.com nxdomain can be replaced by anything that means non-existe...

CVE-2017-7494_SambaCry

CVE-2017-7494 SambaCry Exploit Exploit SambaCry CVE-2017-7494 to exploit Samba bind shell without Metasploit If you need to change the port, just change line 68 of bindshell-samba.c and recompile: root@kitploit: gcc -c -fpic bindshell-samba.c root@kitploit: gcc -shared -o libbindshell-samba.so...

CVE-2024-21006_jar

CVE-2024-21006jar Exploit code reference: https://github.com/momika233/CVE-2024-21006 Here, the source code has been compiled into a JAR package for ease of use. The lib directory contains dependency files. If you wish to modify the source code, you can compile it yourself. Usage root@kitploit:...

shellerator

Shellerator Shellerator es una herramienta CLI/TUI sencilla diseñada para ayudar a los pentesters a generar rápidamente shells reversas, bind y webshells en múltiples lenguajes de programación como Bash, PowerShell, Netcat, PHP, ASPX, etc. Otro proyecto similar para la generación de comandos de...

One-Lin3r

One-Lin3r One-Lin3r es un framework simple, modular y ligero que te proporciona todos los one-liners que necesitarás durante pruebas de penetración sistemas Windows, Linux, macOS o incluso BSD o hacking en general, con muchas funciones nuevas para automatizar todo esto por completo por ejemplo, n...

postshell

PostShell PostShell is a post-exploitation shell that includes both a bind and a back connect shell. It creates a fully interactive TTY which allows for job control. The stub size is around 14kb and can be compiled on any Unix like system. ScreenShots Banner and interaction with shell after a...

nginxhack

This is a tool that uses an exploit called CVE-2013-2028 to excecute a bind shell on the target server that's running Nginx 1.3.9 or 1.4.0. It can be downloaded here you will need to run it from the command line Usage: nginxhack target target port target bind port...

serval

Un backdoor estilo Netcat para pentesting y desafíos de pentest Serval es un binario ligero y fácil de usar para generar shells reversos y vinculados bind shells para pentests o ejercicios de pentesting. Serval es multiplataforma y se puede compilar tanto para Windows de 32 y 64 bits como para...

K000163379: BIND vulnerability CVE-2026-3591

Security Advisory Description A use-after-return vulnerability exists in the named server when handling DNS queries signed with SIG0. Using a specially-crafted DNS request, an attacker may be able to cause an ACL to improperly mismatch an IP address. In a default-allow ACL denying only specific I...

openclaw-hardening-check

This script only reads. It fixes nothing and does not guarantee that you are safe. Green output means only that the checks listed below passed—and nothing more. OpenClaw hardening check openclaw-hardening-check.mjs is a small, dependency-free, offline review of an OpenClaw installation. It reads...

Open WebUI 'LDAP Empty Password' - Authentication Bypass

Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.9.0, the LDAP authentication endpoint does not validate that the submitted password is non-empty before performing a Simple Bind against the LDAP server. The LdapForm Pydantic model accep...

msLDAPDump

msLDAPDump Herramienta de enumeración LDAP implementada en Python3 msLDAPDump simplifica la enumeración LDAP en un entorno de dominio al envolver la librería ldap3 de Python en una interfaz fácil de usar. Como la mayoría de mis herramientas, esta funciona mejor en Windows. Si se usa Unix, la...

CVE-2020-8617

CVE-2020-8617 PoC for CVE-2020-8617 For educational purposes only Run This image runs a standard BIND server, which automatically generates a tkey "local-ddns". root@kitploit: $ docker run --rm --name cve-2020-8617 -it -p 53:53/udp knqyf263/cve-2020-8617 Exploit root@kitploit: $ pipenv install $...

GoSH

GoSH Golang reverse/bind shell generator Description This tool generates a Go binary that launches a shell of the desired type on the targeted host. The shell binary can be compiled for multiple platforms, supports partial polymorphism unique functions' names and can use UDP protocol instead of t...

CVE-2016-2776

CVE-2016-2776 A tale of a DNS Packet, a detailed walk-thru and proof of concept of BIND's CVE-2016-2776. http://blog.infobytesec.com/2016/10/a-tale-of-dns-packet-cve-2016-2776.html In this repository you will find: Proof-of-Concept namedown.py Metasploit Auxiliary Module namedown.rb...

revsh

revsh revsh es una herramienta para establecer shells inversas con soporte de terminal, VPN inversas para pivoteo avanzado, así como tunelización de datos arbitrarios. Novedades 2018-08-09 : Nueva versión. Principalmente correcciones de errores/estabilidad y mejor documentación sobre el proceso d...

Security update for bind

This update for bind fixes the following issues: CVE-2026-19033: Unauthenticated IXFR deltas are applied to the live zone before TSIG verification bsc1280430. CVE-2026-19662: qpcache NOQNAME proof use-after-free crashes recursive resolver bsc1280432. CVE-2026-19666: Use-after-free in...