cdb

Pown CDB Pown CDB is a Chrome Debug Protocol utility. The main goal of the tool is to automate common tasks to help debug web applications from the command-line and actively monitor and intercept HTTP requests and responses. This is particularly useful during penetration tests and other types of...

Chrome-V8-RCE-CVE-2021-38003

Chrome-V8-RCE-CVE-2021-38003 CVE-2021-38003 exploit estratti da https://twitter.com/WhichbufferArda/status/1609604183535284224...

should-i-trust

should-i-trust Summary should-i-trust is a tool to evaluate OSINT signals for a domain. Requirements should-i-trust requires API keys from the following sources: Censys.io - Free for for first 250/quries/month VirusTotal - Free GrayHatWarFare - Free with limited results Use Case You're part of a...

widevine-l3-decryptor

चेतावनी: अप्रचलन इस रिपॉजिटरी में पहले विंडोज मशीनों पर Chrome में Widevine L3 DRM को बायपास करने का कोड था। यह 31 मई 2021 से काम नहीं कर रहा है, लेकिन आप रिवर्सिंग राइटअप पढ़ सकते हैं। अपडेट Google ने इस रिपॉजिटरी के अधिकांश फोर्क्स के खिलाफ DMCA हटाने का अनुरोध जारी किया। उस समय रिपॉजिटरी की मू...

widevine-l3-decryptor

Deprecation Warning This repository used to contain code to circumvent Widevine L3 DRM in Chrome on Windows machines. It's not working anymore as of May 31st 2021, but you can read the reversing writeup. Update Google issued a DMCA takedown request against most forks of this repository. The...

dorkish

Dorkish Durante la fase di ricognizione o quando si fa OSINT, usiamo spesso google dorking e shodan e da qui l'idea di Dorkish. Dorkish è uno strumento come estensione Chrome che facilita la creazione di dork personalizzati per Google e Shodan tramite il builder e offre dork predefiniti per una...

authcov

AuthCov Web app authorisation coverage scanning. Introduction AuthCov crawls your web application using a Chrome headless browser while logged in as a pre-defined user. It intercepts and logs API requests as well as pages loaded during the crawling phase. In the next phase it logs in under a...

authcov

AuthCov Scansione della copertura dell'autorizzazione per app web. Introduzione AuthCov esegue la scansione della tua applicazione web utilizzando un browser headless Chrome mentre è connesso come utente predefinito. Intercetta e registra le richieste API e le pagine caricate durante la fase di...

lk_scraper

LinkedIn Scraper Scrapes Any LinkedIn Data Installation root@kitploit: $ pip install git+git://github.com/jqueguiner/lkscraper Setup Using Docker compose root@kitploit: $ docker-compose up -d $ docker-compose run lkscraper python3 Using Docker only for Selenium server First, you need to run a...

PoC

PoC Una raccolta di codici proof-of-concept di DARKNAVY. CVE-2025-43300 Target: iOS && macOS Versione: precedente a iOS 18.6.2 && macOS 14.7.8 CVE-2025-6554 Target: Chrome Renderer Versione: precedente a 138.0.7204.96 CVE-2024-5274 Target: Chrome Renderer Versione: precedente a 125.0.6422.112 Blo...

ChromeSHELFLoader

Chrome SHELF Loader Ein Exploit für CVE-2020-6418, der einen SHELF Loader implementiert. Veröffentlicht als Teil von Tmp.0ut volume 2...

CVE-2021-22555

CVE-2021-22555 Dieses Repository enthält das Linux-Privilege-Escalation-Exploit von TUKRU CVE-2021-22555. Es demonstriert das Erlangen von Root-Rechten über eine Schwachstelle. Getestet auf Ubuntu 5.8.0-48-generic und COS 5.4.89+. Nutze es verantwortungsvoll und ethisch. CVE-2021-22555:...

chrome_v8_ndays

...

kostebek

Reconnaissance Tool Introduction The Kostebek is a reconnaissance tool which uses firms' trademark information to discover their domains. Reference : https://evren.ninja/en/post/recon-is-everywhere/ Demo video : Setup Downloading Kostebek git clone https://github.com/esecuritylab/kostebek...

CVE-2025-27363

CVE-2025-27363 su Chrome 113 Nota: In chrome, questa non è una nuova vulnerabilità, è stata corretta roll-up commit a marzo 2023. Questa PoC mira solo alla modalità headless di chrome. Tuttavia, penso che sia una lettura interessante se vuoi esplorare alcuni dettagli interni e vedere lo...

CVE-2019-5825

Exploit per Chrome 73.0.3683.86 --no-sandbox Versione V8 6.9.0 https://github.com/exodusintel/Chromium-941743 https://lordofpwn.kr/cve-2019-5825-v8-exploit/ https://github.com/rapid7/metasploit-framework/pull/12574/files...

CVE-2023-6702

Chrome Renderer 1-Day-RCE durch Typverwechslung im asynchronen Stack-Trace CVE-2023-6702 Zusammenfassung Diese Schwachstelle erlaubte es einem entfernten Angreifer, beliebigen Code im Chrome-Renderer-Prozess auszuführen. In der Verarbeitung der asynchronen Stack-Traces fehlte eine ausreichende...

GHunt

🌐 GHunt Online version : https://osint.industries 🐍 Now Python 3.13 compatible ! 😊 Description GHunt v2 is an offensive Google framework, designed to evolve efficiently. It's currently focused on OSINT, but any use related with Google is possible. Features : CLI usage and modules Python library...

CVE-2019-0808

CVE-2019-5786 e CVE-2019-0808 catena di exploit per Chrome 72.0.3626.119 stabile Windows 7 x86. Questo exploit utilizza l'isolamento del sito per forzare brute-force CVE-2019-5786. host1wrapper/iframe.html è lo script wrapper che carica l'exploit ripetutamente in un iframe. La catena effettiva...

scrying

NCC Group Scrying A new tool for collecting RDP, web and VNC screenshots all in one place This tool is still a work-in-progress and should be mostly usable but is not yet complete. Please file any bugs or feature requests as GitHub issues Motivation Since Eyewitness recently dropped support for R...