netmap.js

netmap.js Fast browser-based network discovery module This project is no longer maintained. Description netmap.js provides browser-based host discovery and port scanning capabilities to allow you to map website visitors' networks. It's quite fast, making use of es6-promise-pool to efficiently run...

GTranslate < 2.8.65 - Cross-Site Scripting

In the Pro and Enterprise versions of GTranslate 2.8.65, the gtranslaterequesturivar function runs at the top of all pages and echoes out the contents of $SERVER'REQUESTURI'. Although this uses addslashes, and most modern browsers automatically URLencode requests, this plugin is still vulnerable ...

Adamantium-Thief

🔓 Adamantium-Thief Get chromium based browsers: passwords, credit cards, history, cookies, bookmarks, autofill. Chrome 80 is supported! Need firefox passwords decryptor? 🌿 Examples: 🔑 Get passwords from browsers: root@kitploit: Stealer.exe PASSWORDS 💳 Get credit cards from browsers: root@kitploit...

SharpChromium

SharpChromium Introduction SharpChromium is a .NET 4.0+ CLR project to retrieve data from Google Chrome, Microsoft Edge, and Microsoft Edge Beta. Currently, it can extract: Cookies in JSON format History with associated cookies for each history item Saved Logins Note: All cookies returned are in...

DumpBrowserSecrets

DumpBrowserSecrets Extracts browser-stored data such as refresh tokens, cookies, saved credentials, credit cards, autofill entries, browsing history, and bookmarks from modern Chromium-based and Gecko-based browsers Chrome, Microsoft Edge, Firefox, Opera, Opera GX, and Vivaldi. Quick Links Maldev...

EvilSelenium

EvilSelenium EvilSelenium is a new project that weaponizes Selenium to abuse Chromium-based browsers. The current features right now are: Steal stored credentials via autofill Steal cookies Take screenshots of websites Dump Gmail/O365 emails Dump WhatsApp messages Download & exfiltrate files Add...

ChromeKatz

ChromeKatz ChromeKatzは、Chromiumベースのブラウザのメモリから機密情報をダンプするためのソリューションです。 現時点では、ChromeKatzは次の3つのプロジェクトで構成されています： 1. CookieKatz - Cookieダンパー 2. CredentialKatz - 非推奨... とりあえず 3. ElevationKatz - エレベーションサービスから復号鍵を取得 CookieKatzには、実行ファイル、Beacon Object File、ミニダンプパーサーがあります。また、ElevationKatzには実行ファイルとBeacon...

chromepass

Chromepass - Chrome 저장된 비밀번호 및 쿠키 해킹 데모 보기 · 버그 신고 · 기능 요청 목차 프로젝트 소개 AV 탐지 시작하기 사전 요구사항 설치 사용법 이메일 오류, 버그 및 기능 요청 더 알아보기 라이선스 데모 프로젝트 소개 Chromepass는 다음과 같은 기능을 제공하는 Windows 실행 파일을 생성하는 Python 기반 콘솔 애플리케이션입니다. Google Chrome, Chromium, Edge, Brave, Opera 및 Vivaldi의 저장된 비밀번호와 쿠키 복호화 원격으로 로그인/비밀번호 조...

domato

Domato 🍅 A DOM fuzzer Written and maintained by Ivan Fratric, [email protected] Copyright 2017 Google Inc. All Rights Reserved. Licensed under the Apache License, Version 2.0 the "License"; you may not use this file except in compliance with the License. You may obtain a copy of the License ...

CVE-2017-8641_chakra_Js_GlobalObject

サイトCVEからの詳細な説明 !!はい Microsoft Windows 7 SP1、Windows Server 2008 R2 SP1、Windows 8.1 および Windows RT 8.1、Windows Server 2012 および R2、Windows 10 Gold、1511、1607、1703、Windows Server 2016 上の Microsoft ブラウザでは、メモリ内のオブジェクトを処理する際に Microsoft ブラウザの JavaScript...

IFA

IFA IndexedDB를 통한 디스크 플러딩 공격 IFA 는 인기 있는 웹 브라우저에서 IndexedDB API를 악용하여 디스크 플러딩 공격을 수행할 수 있는 방법을 보여주는 개념 증명PoC입니다. 이 공격은 특히 IndexedDB의 제한 부족을 활용하여 브라우저가 효과적인 제한 없이 데이터를 저장할 수 있게 하여, 초당 수백 MB를 주입함으로써 사용자의 디스크 공간을 빠르게 소모시킵니다. 이로 인해 시스템 성능이 크게 저하되고, 저장 공간이 고갈되며, 극단적인 경우 시스템 전체가 충돌할 수 있습니다. 왜 우려해야 하는가?...

cve-2025-4664

CVE-2025-4664 このリポジトリには、ChromiumベースのブラウザがLinkヘッダーのプリロードリクエストを通じて機密性の高いURLパラメータを漏えいさせる脆弱性であるCVE-2025-4664を悪用するPoCが含まれています。 リソース このエクスプロイトがどのように機能するかについての詳細な説明は、ブログ記事をご覧ください: https://amalmurali.me/posts/cve-2025-4664e。 フローを理解するには、このビデオをご覧ください: ファイル target.py - 脆弱なWebアプリケーション idp.py -...

temcrypt

The Next-gen Encryption Try temcrypt on the Web → temcrypt SDK Focused on protecting highly sensitive data, temcrypt is an advanced multi-layer data evolutionary encryption mechanism that offers scalable complexity over time, and is resistant to common brute force attacks. You can create your own...

exploits

Exploits n-day、CTF、0day、カーネル、ブラウザなどの私の個人用エクスプロイトコレクション、そしてクールなものがたくさん :D...

hm-surf

HM-Surf 評価ツール CVE-2024-44133 に対する一般的なmacOSブラウザの影響を受けやすさを評価します。 また、スクリーンショットを撮影してダウンロードし、位置情報の抽出も行うHTMLも含まれています。 使用方法 - 評価ツール CVE-2024-44133 についてすべての一般的なmacOSブラウザを評価する評価ツールを実行するには、次のコマンドを実行します: root@kitploit: python3 -m pip install -r ./requirements.txt ./hm-surf-eval.py...

ROS-20260915-73-0127

The vulnerability of JavaScript script handlers in Google Chrome and Microsoft Edge browsers is related to type conversion errors. Exploiting this vulnerability can allow an attacker to cause a service failure through a specially created HTML page...

ROS-20260915-73-0177

The vulnerability of the XR web browsers Google Chrome and Microsoft Edge is related to errors during initialization of variables. Exploiting this vulnerability can allow an attacker to gain access to confidential data through a specially created HTML page...

CVE-2026-87527

A flaw was found in the WebGL component of Chromium-based browsers. This buffer overflow vulnerability allows a remote attacker to execute arbitrary code outside of the browser's security sandbox. This can be triggered by a specially crafted HTML page, potentially leading to a complete compromise...

ROS-20260911-73-0037

The vulnerability of Google Chrome and Microsoft Edge web browsers relates to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to cause service interruptions through a specially created HTML page...

ROS-20260911-73-0079

The vulnerability of the Journeys web browsers Google Chrome and Microsoft Edge relates to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to cause a service failure through a specially created HTML page...