CVE-2025-4336

eMagicOne Store Manager for WooCommerce 1: lo: mtu 65536 qdisc noqueue state UNKNOWN group default qlen 1000 link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00 inet 127.0.0.1/8 scope ho...

EyeWitness

EyeWitness - Web Screenshot Tool EyeWitness is designed to take screenshots of websites, provide server header info, and identify default credentials if known. Now powered by Chromium browser for better reliability and easier installation. 🚀 Key Features Cross-platform support - Windows, Linux,...

CVE-2020-25749

CVE-2020-25749 Suggested description The Telnet service of Rubetek cameras RV-3406, RV-3409, and RV-3411 cameras firmware versions v342, v339 could allow an remote attacker to take full control of the device with a high-privileged account. The vulnerability exists because a system account has a...

Dejavu

DejaVU - Open Source Deception Platform DejaVu part of Camolabs.io is a deception platform which can be used to deploy decoys on both cloudfor now we support AWS and internal network. This is our presentation at Blackhat Europe where we show how we can leverage Deception to detect common adversar...

moukthar

Moukthar Remote adminitration tool for android Demo Features Permissions bypass android 12 below Keylogger Notifications listener SMS listener Phone call recording Image capturing and screenshots Video recording Persistence Read & write contacts List installed applications Download & upload files...

CVE-2026-20169

IoT-FND Overview Features Network Discovery The scanner checks a defined IP range and looks for devices exposing the expected management service. Example checks: IP range enumeration TCP port availability testing Service discovery Basic connection validation Windows Native Implementation Built...

CentralizedFirewall

Firewall Manager API Project Installation Follow these steps to set up and run the API project: 1. Clone the Repository root@kitploit: git clone https://github.com/adriyansyah-mf/CentralizedFirewall cd CentralizedFirewall 2. Edit the .env File Update the environment variables in .env according to...

CVE-2020-25078

CVE-2020-25078 Instructions instructions Place the attack URLs in the same directory as ip.txt The attack IP is placed in the same directory as ip.txt Terminal log root@localhost:/CVE-2020-25078ls CVE-2020-25078.py ip.txt root@localhost:/CVE-2020-25078cat ./ip.txt https://xxx.xxx.xxx.xxx:3128...

XploitSPY

A cloud based Android Monitoring Tool, powered by NodeJS Features GPS Logging Microphone Recording View Contacts SMS Logs Send SMS Call Logs View Installed Apps View Stub Permissions Live Clipboard Logging Live Notification Logging WhatsApp, Facebook, Instagram, Gmail and more .... View WiFi...

EyeWitness

EyeWitness EyeWitness is designed to take screenshots of websites provide some server header info, and identify default credentials if known. EyeWitness is designed to run on Kali Linux. It will auto detect the file you give it with the -f flag as either being a text file with URLs on each new...

open-sammy

SAMMY Open Source v2 This repository hosts the open source version of SAMMY - the OWASP SAMM tool. https://owasp.org/www-project-open-sammy/ License This project is licensed under the Creative Commons Attribution-ShareAlike 4.0 International License. See the LICENSE file for details. SAMMY v2 The...

credential-attacks-toolkit

CredAttack — Credential Attacks Toolkit ⚠️ LEGAL NOTICE — Authorised security testing ONLY. Using this tool against systems you do not own or have explicit written permission to test is illegal under the Computer Fraud and Abuse Act US, Computer Misuse Act UK, and equivalent laws worldwide. See...

RedHunt-OS

RedHunt Linux 发行版（虚拟机）v2 由 RedHunt Labs 提供的用于对手模拟与威胁狩猎的虚拟机 RedHunt OS 旨在通过集成攻击者的武器库和防御者的工具包，主动识别环境中的威胁，成为您所有威胁模拟和威胁狩猎需求的一站式解决方案。 了解更多关于我们的攻击面管理平台，请查看 NVADR。 基础系统： Lubuntu-18.04 x64 工具安装 攻击模拟： Caldera Atomic Red Team Nmap CrackMapExec Metasploit Responder Zap ADRecon 威胁狩猎： Kolide Fleet...

rpi-hunter

rpi-hunter Automate discovering and dropping payloads on LAN Raspberry Pi's via ssh Or, the honest title: Automating sshpass for command delivery. Rpi-hunter is useful when there are multiple Raspberry Pi's on your LAN with default or known credentials, in order to automate sending...

Tool_Exploit_Password_Camera_CVE-2018-9995

ToolExploitPasswordCameraCVE-2018-9995 CVE-2018-9995: https://vulners.com/cve/CVE-2018-9995 1. Buscar dispositivos vulnerables en Google con la palabra clave: intitle:"DVR login". 2. Intentar acceder a un dispositivo cualquiera: Vemos que el dispositivo solicita ingresar Username y Password para...

CVE-2023-37755---Hardcoded-Admin-Credential-in-i-doit-Pro-25-and-below

CVE-2023-37755 - Hardcoded Admin Credential in i-doit Pro 25 and below i-doit Pro 25 and below are vulnerable to Hardcoded admin credential vulnerability. These vulnerabilities could allows anyone to login as admin with just username “admin” and password “admin”. Description of product: i-doit is...

DefaultCreds-cheat-sheet

Default Credentials Cheat Sheet One place for all the default credentials to assist pentesters/blue Teamers during engagements, featuring default login/password details for various products sourced from multiple references. P.S : Most of the credentials were extracted from changeme,routersploit a...

brutespray

Brutespray 创建者：Shane Young/@x90sky && Jacob Robles/@shellfail 灵感来源：Leon Johnson/@sho-luv 描述 Brutespray 自动对发现的服务尝试默认凭据。它接收来自 Nmap（GNMAP/XML）、Nessus、Nexpose、JSON 和列表的扫描输出，然后并行对 40 多种协议进行凭据暴力破解。使用 Go 构建，具有交互式终端界面、内置字典和恢复功能。 快速安装 root@kitploit: go install github.com/x90skysn3k/brutespray/v2@latest...

CVE-2018-18852

CERIO router Authenticated RCE backdoor vendor creds CVE-2018-18852 Python PoC hook-s3c github.com/hook-s3c, @hooks3c on twitter Working Python PoC for CVE-2018-18852, originally appearing on; https://github.com/hook-s3c/CVE-2018-18852 What's up CERIO Router models and variants of, DT300N, DT100G...

CVE-2025-5058

eMagicOne Store Manager for WooCommerce = 1.2.5 - Subida Arbitraria de Archivos No Autenticado mediante la tarea setimage El plugin eMagicOne Store Manager for WooCommerce expone un endpoint de protocolo de gestión remota ?connector=bridge que permite subir archivos al servidor. El mecanismo de...