kubebox

= Kubebox small^⎈❏^ Antonin Stefanutti https://github.com/astefanutti@astefanutti // Meta :description: Terminal and Web console for Kubernetes // Settings :idprefix: :idseparator: - :experimental: // Aliases ifdef::env-github :note-caption: ℹ️ :icon-check: ✔️ :icon-edit: ✏️ endif::...

jexboss

JexBoss - JBoss and others Java Deserialization Vulnerabilities verify and EXploitation Tool JexBoss is a tool for testing and exploiting vulnerabilities in JBoss Application Server and others Java Platforms, Frameworks, Applications, etc. Requirements Python = 2.7.x urllib3 ipaddress Installatio...

binbloom

About The purpose of this project is to analyse a raw binary firmware and determine automatically some of its features. This tool is compatible with all architectures as basically, it just does simple statistics on it. Main features: Loading address : binbloom can parse a raw binary firmware and...

RawCopy

Introduction This a console application that copy files off NTFS volumes by using low level disk reading method. Syntax RawCopy /ImageFile:FullPath\ImageFilename /ImageVolume:1,2...n /FileNamePath:FullPath\Filename /OutputPath:FullPath /AllAttr:0|1 /RawDirMode:0|1|2 /WriteFSInfo:0|1 /TcpSend:0|1...

C-Game-Modding-Utility

C/C++ Game Modding Utility This utility aims to make writing mods for 5th/6th generation console games in C/C++ easier. It handles all the tedious setup, letting you focus on actually writing code. No manual cross-compiler setup. No manual ISO rebuilding. No complicated testing workflows. Feature...

cve-2023-42820

cve-2023-42820 JumpServer Affected Versions v2.24 - v3.6.4 Impact With knowledge of the email associated with the JumpServer admin user account default: admin/[email protected], it is possible to reset the admin password through this vulnerability, and by combining it with JumpServer's...

forbidden

Forbidden Bypass 4xx HTTP response status codes and more. The tool is based on Python Requests, PycURL, and HTTP Client. Tested on Kali Linux v2024.2 64-bit. Made for educational purposes. I hope it will help! Future plans: Add the silent option to suppress console output. Add the no color option...

morpheus

Morpheus - automated ettercap TCP/IP Hijacking tool root@kitploit: Version release: v2.2 - STABLE Author: pedro ubuntu r00t-3xp10it Codename: oneiroi phobetor The mithologic dream greek god Distros Supported: Linux Ubuntu, Kali, Debian, BackBox, Parrot OS Suspicious-Shell-Activity© SSA RedTeam...

CIRTKit

One DFIR console to rule them all. Built on top of theViper Framework Documentation Please see the wiki for more information about CIRTKit and documentation Roadmap Future integrations Bit9 Palo Alto Networks EnCase/FTK Future modules Packet Analysis possibly Dshell Javascript...

CVE-2023-32315

CVE-2023-32315 Tool for CVE-2023-32315 exploitation. Features: Scans single or bulk targets from txt files Utilizes multiprocessing for faster scanning Automatic login capability Installation: Make sure you're in this repo's directory and have python3 installed Install required packages using:...

weevely3

Weevely - Weaponized web shell Description Weevely is a web shell designed for post-exploitation purposes that can be extended over the network at runtime. Upload weevely PHP agent to a target web server to get remote shell access to it. It has more than 30 modules to assist administrative tasks,...

CVE-2020-1947

CVE-2020-1947 ApacheShardingShpereUIYAML análisis y reproducción de vulnerabilidad de ejecución remota de código Resumen shardingsphere es un ecosistema de código abierto de Apache, un conjunto de soluciones middleware para bases de datos distribuidas, compuesto por tres frameworks independientes...

cloudsploit

CloudSploit by Aqua - Cloud Security Scans Quick Start Generic root@kitploit: $ git clone https://github.com/aquasecurity/cloudsploit.git $ cd cloudsploit $ npm install $ ./index.js -h Docker root@kitploit: $ git clone https://github.com/aquasecurity/cloudsploit.git $ cd cloudsploit $ docker buil...

The vulnerability of the control console of the MaxPatrol EDR detection and response system allows a perpetrator to trigger a service failure.

The vulnerability of the control console of the MaxPatrol EDR detection and response system is related to access control errors. Exploiting this vulnerability could allow a malicious actor to cause service failures...

CVE-2023-34838

CVE-2023-34838 — XSS Almacenada en eScan Management Console Resumen Microworld Technologies eScan Management Console versión 14.0.1400.2281 es vulnerable a un ataque de Cross-Site Scripting XSS Almacenado. Un atacante autenticado con acceso a la función de gestión de roles puede inyectar un scrip...

pwnlift

pwnlift Named in homage to pwndrop, pwnlift is a simple dotnet server application for uploading files from a desktop without the use of a C2. Useful if you have a console access to a machine and need to take files offline for analysis such as Code Integrity Policy files. Building Build the projec...

mec

mec MassExploitConsole Intended for mass exploiting Follow thewiki to get started Features Easy-to-use CLI UI Execute adpated exploits with process-level concurrency Built-in exploits automated Hide your IP using proxychains4 and proxypool ZoomEye host scan 10 threads Simple Baidu crawler...

MSC-EvilTwin-Local-Privilege-Escalation

CVE-2025-26633 - Microsoft Management Console .msc EvilTwin Local Privilege Escalation PoC Zero-day at time of disclosure March 2025 – Actively exploited in the wild by Water Gamayun APT ONLY FOR AUTHORIZED SECURITY TESTING AND RESEARCH Vulnerability Details Exploit Title : Microsoft Management...

CVE-2023-32315

CVE-2023-32315 - Ignite Realtime Openfire Path Traversal Vulnerability ⚠️ For educational and authorized security research purposes only Original Exploit Authors Very grateful to the original PoC author phith0n and K3ysTr0K3R Description Openfire is an XMPP server licensed under the Open Source...

sliver-gui

Sliver GUI A desktop operator console for the Sliver C2 framework in the spirit of Cobalt Strike and Havoc. Designed and Developed by Raj Kumar Mullapudi Sliver GUI is a thin Wails v2 Go + plain HTML/CSS/JS frontend over Sliver's existing rpcpb.SliverRPC gRPC service. It reimplements no C2 logic...