killshot

This project is no longer maintained ! KILLSHOT A Penetration Testing Framework, Information gathering tool & Website Vulnerability Scanner Why KillShot? You can use this tool to spider your website, gather important information, and automate data collection using tools such as WhatWeb, Host,...

RdpThief

RdpThief RdpThief 本身是一个独立的 DLL，当注入到 mstsc.exe 进程时，会执行 API 挂钩，提取明文凭据并将其保存到文件中。 它附带一个攻击脚本，用于管理状态、监控新进程并将 shellcode 注入到 mstsc.exe 中。该 DLL 已使用 sRDI 项目 https://github.com/monoxgas/sRDI 转换为 shellcode。启用后，RdpThief 将每 5 秒获取一次进程列表，搜索 mstsc.exe 并注入其中。 当攻击脚本加载到 Cobalt Strike 中时，将提供三个新命令： rdpthiefenable –...

CVE-2026-97612

In the Linux kernel, the following vulnerability has been resolved: n...

chromecookiestealer

Chrome Cookie Stealer and injector Attaches to Chrome using its Remote DevTools protocol and steals/injects/clears/deletes cookies. Heavily inspired by WhiteChocolateMacademiaNut. Cookies are dumped as JSON objects using Chrome's own format. The same format is used for cookies to be loaded. For...

rConfig <=3.9.4 - SQL Injection

rConfig 3.9.4 and prior has unauthenticated snippets.inc.php SQL injection. Because nodes' passwords are stored in cleartext by default, this vulnerability leads to lateral movement, granting an attacker access to monitored network devices. id: CVE-2020-10549 info: name: rConfig 3.9.4 or apply th...

c0ntextomy

c0ntextomy una falacia informal y un tipo de atribución falsa en la que se extrae un pasaje de su contexto circundante de manera que se distorsiona su significado previsto Wikipedia - Contextomy Una Prueba de Concepto que demuestra la vulnerabilidad con un secuestro de sesión de depuración,...

SMWYG-Show-Me-What-You-Got

SMWYG-Show-Me-What-You-Got 该工具允许你对组织或个人进行OSINT和侦察。它可以搜索作为BreachCompilation泄露一部分被转储的14亿条明文凭证。此数据库使得查找密码比以往更快、更容易。 截图 上图搜索了uber.com的凭证，并找到了203个账户。 前提条件 请确保已安装以下内容： root@kitploit: - Python 3.0 or later. - pip3 sudo apt-get install python3-pip 如何安装？ root@kitploit: git clone...

mimipenguin

MimiPenguin 2.0 一种用于从当前 Linux 桌面用户转储登录密码的工具。改编自流行 Windows 工具 mimikatz 背后的思路。此漏洞被分配了 CVE-2018-20781 https://vulners.com/cve/CVE-2018-20781。有趣的是，它在 GNOME Keyring 3.27.2 之后仍未修复，并且在 3.28.0.2-1ubuntu1.18.04.1 中仍然有效。 详细信息 通过转储进程并提取包含明文密码概率较高的行，利用内存中的明文凭据。将尝试通过检查 /etc/shadow...

CVE-2025-60791

CVE-2025-60791 CVE-2025-60791: Almacenamiento en texto claro de información sensible en memoria. Easywork Enterprise 2.1.3.354 es vulnerable al almacenamiento en texto claro de información sensible en memoria. La aplicación deja claves de licencia válidas vinculadas al dispositivo en la memoria d...

CVE-2026-18179

IBM Financial Transaction Manager FTM for RedHat OpenShift could allow a remote attacker to clear active chat sessions due to improper authorization...

CVE-2026-18179

The IBM Financial Transaction Manager (FTM) for RedHat OpenShift is vulnerable to an issue where a remote attacker can clear active chat sessions. This is caused by improper authorization (CWE-862). The vulnerability impacts versions 4.0.6.0 - 4.0.6.0 iFix6 Refresh (Operator 4.4.6+20260807.081800...

EUVD-2026-85325

IBM Financial Transaction Manager FTM for RedHat OpenShift could allow a remote attacker to clear active chat sessions due to improper authorization...

keepassxc-fzf

keepassxc-fzf Interfaz de terminal interactiva para gestionar bases de datos KeePass usando keepassxc-cli y fzf. Características Búsqueda interactiva de entradas con buscador difuso fzf Vista previa en tiempo real de la entrada contraseña oculta Copiar al portapapeles con borrado automático:...

keepass_poc

CVE-2022-0725 KeePass CVE-2022-0725 的概念验证（PoC） 复现步骤： 步骤1：在终端窗口中运行 "journalctl -f"。 步骤2：在KeePass中双击一个密码。 步骤3：等待清除超时触发。 实际结果： 在终端窗口中看到明文字密码被记录。 预期结果： 在任何地方都不应看到明文字密码被记录。 参考： https://bugzilla.redhat.com/showbug.cgi?id=2052696 注意：漏洞仅存在于KeePass中，不存在于KeePassXC和其他软件包中。...

EUVD-2025-210960

IBM Controller 11.0.0 through 11.0.1 FP7, and 11.1.0 through 11.1.3 FP1 transmits data in clear text that could allow an attacker to obtain sensitive information using man in the middle techniques...

CVE-2025-36421 Multiple vulnerabilities in IBM Controller

IBM Controller 11.0.0 through 11.0.1 FP7, and 11.1.0 through 11.1.3 FP1 transmits data in clear text that could allow an attacker to obtain sensitive information using man in the middle techniques...

CVE-2025-36421 Multiple vulnerabilities in IBM Controller

IBM Controller 11.0.0 through 11.0.1 FP7, and 11.1.0 through 11.1.3 FP1 transmits data in clear text that could allow an attacker to obtain sensitive information using man in the middle techniques...

CVE-2025-36421

IBM Controller versions 11.0.0 through 11.0.1 FP7 and 11.1.0 through 11.1.3 FP1 are affected by a cleartext transmission vulnerability (CWE-319 ). The product transmits data without encryption, allowing an attacker positioned between the client and server to intercept and obtain sensitive informa...

DEBIAN-CVE-2026-90211

In the Linux kernel, the following vulnerability has been resolved: bpf, s390: Clear fetch destination on faulting arena atomic Same missing register clear as on riscv64. A RMW atomic on an arena pointer is converted to BPFPROBEATOMIC and gets an exception table entry, but bpfjitprobeatomicpre on...

CVE-2026-90211

In the Linux kernel, the following vulnerability has been resolved: bpf, s390: Clear fetch destination on faulting arena atomic Same missing register clear as on riscv64. A RMW atomic on an arena pointer is converted to BPFPROBEATOMIC and gets an exception table entry, but bpfjitprobeatomicpre on...