53820 matches found
Gitmails
Development - IMPORTANT This Gitmails version is no longer maintained. Check out the Gitmails Shell port if you want to use a version that is maintained and, hopefully, developed. If you do not want to use the shell port and prefer the Python version, feel free to fork Gitmails and direct it to...
InfoLeak-Scanner
InfoLeak-Scanner Docker First run docker run --rm -p 8000:80 siwecos/infoleak-scanner. Open your browser and use the scanner: http://localhost/?url= Install Get php5, curl and a webserver: root@kitploit: sudo apt-get install apache2 php5 php5-curl Copy application into webserver: root@kitploit: c...
CVE-2026-97735
ITFlow before 26.08 allows SVG attachments in the ticket email parser cron/ticketemailparser.php for email messages that may arrive over SMTP from arbitrary senders...
CVE-2026-97735
Versions of ITFlow before 26.08 are vulnerable to a flaw in the ticket email parser (cron/ticket_email_parser.php). The software allows SVG attachments in email messages arriving over SMTP from arbitrary senders. This vulnerability could allow an attacker to process malicious SVG files, potential...
fake-mailer
가짜 메일러 + 면책 조항 : Fake Mailer는 다른 이메일에서 익명으로 메일을 보내는 도구입니다. 이 과정은 최대 5분이 소요될 수 있습니다. 이 도구는 교육 목적으로만 제작되었습니다!! 저는 이 도구의 오용에 대해 책임을 지지 않습니다!! 설치 : apt update apt install git python2 -y git clone https://github.com/htr-tech/fake-mailer cd fake-mailer 실행 : python2 mailer.py 또는 ; 단일 명령어 사용 root@kitploi...
CVE-2021-33766-ProxyToken
CVE-2021-33766 ProxyToken 単一ターゲットの検出とバッチ検出をサポート、メール転送ルールの変更をサポート 使い方 脆弱性の検出とメール転送ルールの変更 メール転送ルールの変更結果 メール送信テスト 参考 https://www.zerodayinitiative.com/blog/2021/8/30/proxytoken-an-authentication-bypass-in-microsoft-exchange-server...
CVE-2024-21378
🇮🇱 BringThemHome NeverAgainIsNow 🇮🇱 私たちは、テロ組織ハマスによって人質にされたすべての市民の安全な帰還を要求します。すべての人質が解放され、無事に帰宅するまで、私たちは休むことはありません。あなたも彼らを家に連れ戻すために協力できます。https://stories.bringthemhomenow.net/ 🛡️ CVE-2024-21378 このリポジトリには、Exchange Online を介して Microsoft Outlook を標的とするエクスプロイトの例が含まれており、COM DLL...
EmailFinder
EmailFinder EmailFinder is designed to find company emails that are filtered by search engines. This is done by searching for @company.com. The goal has to be to have the minimum amount of emails in the search engines. Installation: root@kitploit: pip3 install emailfinder Upgrades are also...
CVE-2024-37383_PoC
CVE-2024-37383 脆弱性を実際に試すためのリポジトリです。 分析レポート: blog / pdf CVE-2024-37383 Detail Name : Roundcube Webmail SVG Parsing XSS Target : Roundcube Webmail v1.5.7 or v1.6.x タグを含む HTML ペイロードをメールに挿入すると、ブラウザで任意のスクリプトが実行されます。 Exploit root@kitploit: git clone https://github.com/hyungin0505/CVE-2024-37383PoC.git ...
LinkedInt
오픈 소스 도구 후원 도구 유지 관리를 위해 후원해 주세요: https://github.com/sponsors/vysecurity 면책 조항 이 프로젝트는 교육 및 테스트 목적으로만 사용되어야 합니다. 저자 LinkedInt - Vincent Yiu @vysecurity 작성: https://www.vincentyiu.com | https://vysecurity.rocks 원본 스크래퍼 - Danny Chrastil @DisK0nn3cT 작성: https://github.com/DisK0nn3cT/linkedin-gathere...
Strapi Versions <=4.5.5 - SSTI to Remote Code Execution
Strapi through 4.5.5 allows authenticated Server-Side Template Injection SSTI that can be exploited to execute arbitrary code on the server. A remote attacker with access to the Strapi admin panel can inject a crafted payload that executes code on the server into an email template that bypasses t...
SonicWall Email Security <= 10.0.9.x - Unauthenticated Admin Account Creation
SonicWall Email Security version 10.0.9.x allows an attacker to create an administrative account by sending a crafted HTTP request to the remote host. id: CVE-2021-20021 info: name: SonicWall Email Security = 10.0.9.x - Unauthenticated Admin Account Creation author: pussycat0x severity: critical...
XWiki < 4.10.15 - Email Disclosure
The Solr-based search in XWiki discloses the email addresses of users even when obfuscation of email addresses is enabled. To demonstrate the vulnerability, search for objcontent:email using XWiki's regular search interface. id: CVE-2023-50720 info: name: XWiki 4.10.15 - Email Disclosure author:...
evil-winrar
eval-winrar evil-winrar、cve-2023-38831脆弱性悪用およびソーシャルエンジニアリング攻撃フレームワーク evil-winrar, csv-2023-38831 Vulnerability Exploitation and Social Engineering Attack Framework 紹介 evil-winrarは、winrar csv-2023-38831脆弱性悪用およびソーシャルエンジニアリング攻撃フレームワークで、exp生成、メール送信、ダウンロードリンク生成をサポートします。 ダウンロード root@kitploit: git clone...
CVE-2023-23397-PoC
CVE-2023-23397-PoC C送信専用バージョンの CVE-2023-23397-POC-Powershell by Oddvar Moe @oddvarmoe 作 Outlookアカウントに関連付けられたアドレスからメールを送信します。 root@kitploit: .\CVE202323397.exe --help CVE202323397 1.0.0.0 Copyright c 2023 -t, --to Required. Recipient email address -p, --path Required. UNC Path -s, --subject Messag...
ARP-Spoof-Detector
root@kitploit: /\ | | \ / | / | | \ | | | | / \ | | | | | | | | | | | | | | | | / /\ \ | /| / \ | ' \ / \ / | | | | | |/ \ / / | / | '| / | | \ | | | | | | | | | || | / || / | || | | // \| \| |/| ./ / /|| |/ |\||\/|| | | || 설명 컴퓨터에 대한 ARP 스푸핑 공격을 탐지하는 ARP Spoof Detector 스크립트입니다. ➡️...
cve_manager
프로젝트 설명 매일 일정에 따라 NIST CVE 데이터베이스의 새로운 취약점과 관련 제품의 xlsx 스프레드시트를 이메일로 보내기 위한 Python 앱 및 셸 스크립트 모음입니다. 그런 다음 스프레드시트를 수동으로 해석하여 특정 조직에 대한 위험을 평가할 수 있습니다. 원래 Antonios Atlasis가 작성한 GitHub의 오픈소스 제품 기반 로컬에서 CVE 및 CPE에 대한 NIST 데이터베이스를 동기화하고 기본 쿼리 기능 제공 데이터에서 xlsx 보고서를 생성하고 해당 보고서를 이메일로 전송 파일: cvemanager....
Email_Extract_Gmass.co_Validator
EmailExtractGmass.coValidator Python 2.7 このツールはウェブサイトが遅すぎるため時間がかかります。気長にお待ちください。 寄付： BTC : 31mtLHqhaXXyCMnT2EU73U8fwYwigiEEU1 Perfect Money : U22270614...
CVE-2025-24000-exploit
CVE-2025-24000 — Post SMTP 権限昇格エクスプロイト 概要 このスクリプトは CVE-2025-24000 を悪用します。これは Post SMTP WordPress プラグイン （バージョン ≤ 3.2.0）における重大なアクセス制御の脆弱性です。低権限アカウント（例: 購読者）を持つ任意の認証ユーザーが、プラグインの REST API メールログにアクセスし、管理者パスワードリセットリンクを盗み取り、管理者アカウントを乗っ取ることができます。 CVE: CVE-2025-24000 プラグイン: Post SMTP WPExperts 影響を受けるバージョン...