8945 matches found
CVE-2026-16876
NEC UNIVERGE IX-R/IX-V series routers are affected by an authentication bypass in the WebGUI component, classified as Missing Authentication for Critical Function (CWE-306) . A remote unauthenticated attacker can send a specially crafted message to the WebGUI over the internet to execute arbitrar...
ChopChop
ChopChop ChopChop es una herramienta de línea de comandos para pruebas dinámicas de seguridad de aplicaciones web, inicialmente escrita por el Michelin CERT. Su objetivo es escanear varios puntos finales e identificar la exposición de servicios/archivos/carpetas a través de la raíz web. Las...
pwneye
pwneye is a focused and portable offensive security tool for working with IP cameras that expose ONVIF and RTSP services, aiming to give security researchers and hackers an easy way to handle discovery, authentication testing, metadata collection, stream validation, recording, and follow-up actio...
burpcommander
burpcommander Interfaz de línea de comandos en Ruby para la API REST de Burp Suite Uso root@kitploit: burpcommander VERSIÓN: 1.0.1 - ACTUALIZADO: 29/08/2018 -t, --target Dirección IP Por defecto 127.0.0.1 -p, --port Número de puerto Por defecto 1337 -k, --key Clave API Si necesita una clave API,...
PyJFuzz
PyJFuzz es un framework pequeño, extensible y listo para usar que se utiliza para fuzzear entradas JSON , como API REST de endpoints móviles, implementación JSON, navegadores, ejecutables de línea de comandos y mucho más. Instalación Dependencias Para funcionar, PyJFuzz necesita algunas...
barf-project
BARF : Binary Analysis and Reverse engineering Framework The analysis of binary code is a crucial activity in many areas of the computer sciences and software engineering disciplines ranging from software security and program analysis to reverse engineering. Manual binary analysis is a difficult...
stegcloak
StegCloak The Cloak of Invisibility for your texts StegCloak is a pure JavaScript steganography module designed in functional programming style, to hide secrets inside text by compressing and encrypting the secret before cloaking it with special unicode invisible characters. It can be used to...
s3-account-search
Búsqueda de Cuenta S3 Esta herramienta te permite encontrar el ID de cuenta al que pertenece un bucket de S3. Para que funcione, necesitas tener al menos uno de estos permisos: Permiso para descargar un archivo conocido del bucket s3:getObject. Permiso para listar el contenido del bucket...
socialscan
socialscan socialscan offers accurate and fast checks for email address and username usage on online platforms. Given an email address or username, socialscan returns whether it is available, taken or invalid on online platforms. Features that differentiate socialscan from similar tools e.g...
AcuAutomate
AcuAutomate AcuAutomate is an unofficial Acunetix CLI tool that simplifies automated pentesting and bug hunting across extensive targets. It's a valuable aid during large-scale pentests, enabling the easy launch or stoppage of multiple Acunetix scans simultaneously. Additionally, its versatile...
jenkins_scan
jenkinsscan Find Jenkins environment and check for CVE-2024-23897 How it works Jenkins Detection Tests the paths: /, /login, /oops, /api/json, /cli, /jenkins/, /jenkins/api/json Identifies via: 1. Header X-Jenkins — most reliable, also returns the version 2. Header X-Hudson — older instances 3...
DracOS
¿Qué es Dracos Linux? Dracos Linux www.dracos-linux.org es el sistema operativo Linux de Indonesia, de código abierto, construido basado en Linux From Scratch bajo la protección de la Licencia Pública General GNU v3.0. Este sistema operativo es una variante de las distribuciones de Linux, que se...
CVE-2024-23897
CVE-2024-23897 Jenkins CVE-2024-23897: Vulnerabilidad de Lectura Arbitraria de Archivos que Conduce a RCE Jenkins utiliza la librería args4j para analizar argumentos y opciones de comandos en el controlador de Jenkins al procesar comandos CLI. Este analizador de comandos tiene una función que...
mec
mec MassExploitConsole Intended for mass exploiting Follow thewiki to get started Features Easy-to-use CLI UI Execute adpated exploits with process-level concurrency Built-in exploits automated Hide your IP using proxychains4 and proxypool ZoomEye host scan 10 threads Simple Baidu crawler...
metasploitable3
Metasploitable3 Metasploitable3 is a VM that is built from the ground up with a large amount of security vulnerabilities. It is intended to be used as a target for testing exploits with metasploit. Metasploitable3 is released under a BSD-style license. See COPYING for more details. Quick-start To...
ForensiX
⬡ ForensiX — Digital Forensics Intelligence Framework Created by Ameer Rasim | Version 2.0.0 root@kitploit: ███████╗ ██████╗ ██████╗ ███████╗███╗ ██╗███████╗██╗██╗ ██╗ ██╔════╝██╔═══██╗██╔══██╗██╔════╝████╗ ██║██╔════╝██║╚██╗██╔╝ █████╗ ██║ ██║██████╔╝█████╗ ██╔██╗ ██║███████╗██║ ╚███╔╝ ██╔══╝ ██...
CVE-2023-1326
CVE-2023-1326 Una prueba de concepto para CVE-2023–1326 en apport-cli 2.26.0 Esta vulnerabilidad es una escalada de privilegios en apport-cli 2.26.0, similar a CVE-2023–26604, esta vulnerabilidad solo funciona si se asigna en sudoers: Se encontró un ataque de escalada de privilegios en apport-cli...
AtomShields-cli
AtomShields Cli AtomShields Cli es una Interfaz de Línea de Comandos para usar el software AtomShields .. raw:: html Instalación .. code-block:: shell pip install atomshieldscli Uso básico .. code-block:: shell ascli --target --name Los valores permitidos de action son: install : Para instalar un...
saas_enum
SaaS Enum SaaS Enum is a command line tool for discovering the SaaS platforms a company may be using. The tool looks for DNS entries that match known provider patterns and optionally performs lightweight web checks for confirmation. Installation root@kitploit: pip install -r requirements.txt Usag...