simplewall

simplewall Definitely for advanced users. Description: Simple tool to configure Windows Filtering Platform WFP which can configure network activity on your computer. The lightweight application is less than a megabyte, and it is compatible with Windows 7 SP1 and higher operating systems. You can...

FormatFuzzer

FormatFuzzer FormatFuzzer is a framework for high-efficiency, high-quality generation and parsing of binary inputs. It takes a binary template that describes the format of a binary input and generates an executable that produces and parses the given binary format. From a binary template for GIF,...

Rabbit Hole

Overview Rabbit Hole provides a very limited subset of the functionality of Maltego, focused on creating visual representations of information for Penetration Testing. It provides creation of various types of nodes such as IP Addresses, Ports, Services, etc and links between them, with a much mor...

radare2

Radare2: Libre Reversing Framework for Unix Geeks Current git master branch is 6.2.2, next release will be 6.2.4. Description r2 is a complete rewrite of radare. It provides a set of libraries, tools and plugins to ease reverse engineering tasks. Distributed under LGPLv3, despite each plugin can...

ImHex

A Hex Editor for Reverse Engineers, Programmers and people who value their retinas when working at 3 AM. /ˈɪmhɛks/...

The vulnerability of the R7-Officer corporate server’s document editor, related to the failure to take measures to neutralize special elements, allows a perpetrator to execute arbitrary code.

The vulnerability of the R7-Officer corporate server’s document editor is related to the lack of measures taken to neutralize special elements. Exploiting this vulnerability can allow for the execution of arbitrary code...

generator-burp-extension

Burp Extension Generator Installation First, install Yeoman and generator-burp-extension using npm we assume you have pre-installed node.js. root@kitploit: npm install -g yo npm install -g generator-burp-extension Then generate your new project: root@kitploit: yo burp-extension Burp Extension...

heappy

🙂 Heappy: a happy heap editor Heappy is an editor based on gdb/gef that helps you to handle the heap during your exploitation development. The project should be considered a didactic tool useful to understand the evolution of the heap during the process life cycle. It has been created to simplify...

fhex

Fhex - A Full-Featured HexEditor This project is born with the aim to develop a lightweight, but useful tool. The reason is that the existing hex editors have some different limitations e.g. too many dependencies, missing hex coloring features, etc.. This project is based on qhexedit2 , capstone...

rehex

Reverse Engineers' Hex Editor A cross-platform Windows, Linux, macOS, BSD hex editor for reverse engineering, and everything else. An online copy of the manual can be accessed here: solemnwarning.net/rehex/manual/. Features Large 1TB+ file support Decoding of integer/floating point value types...

HexWalk

HexWalk - 16進エディタ/ビューア/アナライザ HexWalk は16進エディタ、ビューア、アナライザです。 qhexedit2、Capstone、Qt をベースに構築されており、内蔵の署名スキャナー HexDig を備えています。Binwalk に触発されました。 クロスプラットフォームで、多くの機能を備えています： 高度な検索（HEX、UTF8、UTF16、正規表現に基づいてバイナリファイル内のパターンを検索可能） バイナリ署名スキャナーと抽出器 — Options から HexDig（内蔵、設定不要）または Binwalk（外部）を選択 エントロピー分析 バイトマップ...

wxHexEditor

wxHexEditor wxHexEditor official GIT repo For info : http://www.wxhexeditor.org Compilation instructions Just launch make! Compilation dependencies on Linux wxgtk;...

CVE-2022-42097

Backdrop CMS 버전 1.23.0 취약점 설명: Backdrop CMS 버전 1.23.0에서 Comment를 통해 저장형 크로스 사이트 스크립팅XSS 취약점이 발견되었습니다. 공격 벡터: 공격자는 "댓글"에 무언가를 게시하고 "댓글" 입력란에 XSS 페이로드를 삽입한 후, 저장형 XSS를 악용하기 위해 Raw HTML 편집기를 선택해야 합니다. XSS 페이로드는 저장 직후 실행됩니다. 영향을 받는 대상: http://ipaddress/backdrop/comment/reply/idreply POST...

sops

SOPS: Операции с секретами SOPS — это редактор зашифрованных файлов, поддерживающий форматы YAML, JSON, ENV, INI и BINARY, и выполняющий шифрование с помощью AWS KMS, GCP KMS, Azure Key Vault, HuaweiCloud KMS, age и PGP. демо .. image:: https://i.imgur.com/X0TM5NI.gif .. image::...

Mohnad-AL-saif-CVE-2020-11107-XAMPP-Local-Privilege-Escalation

🧨 CVE-2020-11107 – XAMPP 로컬 권한 상승 Windows 📌 개요 CVE-2020-11107 은 Windows 에서 Apache Friends XAMPP 에 영향을 미치는 로컬 권한 상승LPE 취약점입니다. 권한이 없는 사용자가 XAMPP 제어판 구성 파일xampp-control.ini을 수정하고 기본 편집기 실행 파일notepad.exe을 악성 실행 파일로 교체할 수 있습니다. 다른 사용자예: 관리자가 제어판을 통해 로그를 열면 악성 바이너리가 희생자의 권한으로 실행되어 권한 상승 이 발생합니다. ❗ 이...

CVE-2018-17254

CVE-2018-17254 root@kitploit: Exploit Title: Joomla JCK Editor 6.4.4 - 'parent' SQL Injection Googke Dork: inurl:/plugins/editors/jckeditor/plugins/jtreelink/ Vendor Homepage: http://docs.arkextensions.com/downloads/jck-editor Version: 6.4.4 Tested on: Debian 10 Ubuntu Windows 11/10 CVE :...

masta-cve-2026-48907

Сканер MASTA CVE-2026-48907 Однофайловый автономный сканер для Joomla! JCE Editor Автор: Hussein Mohamed masta ghimau !CAUTION 🚨 ОТКАЗ ОТ ОТВЕТСТВЕННОСТИ — ПРОЧТИТЕ ПЕРЕД ИСПОЛЬЗОВАНИЕМ ЭТО ИНСТРУМЕНТ ДЛЯ ТЕСТИРОВАНИЯ БЕЗОПАСНОСТИ С ВТОРЖЕНИЕМ. root@kitploit: ЭТОТ ИНСТРУМЕНТ ПРЕДНАЗНАЧЕН ТОЛЬКО Д...

CVE-2022-42096

Backdrop CMS версия 1.23.0 Описание уязвимости: В Backdrop CMS версии 1.23.0 обнаружена хранимая межсайтовая скриптинговая XSS уязвимость через контент Post. Векторы атаки: Атакующему необходимо опубликовать что-либо в "Post content" и вставить XSS-пейлоад в поле "Body", а также выбрать редактор...

Joomla-JCK-Editor-6.4.4-SQL-Injection

Joomla-JCK-Editor-6.4.4-SQL-Injection Joomla!용 JCK Editor Jtreelink 플러그인이 사용자 입력을 올바르게 처리하지 못하여 SQL 인젝션이 가능합니다. 이 익스플로잇은 이 보안 취약점을 이용하여 관리자 자격 증명을 덤프하고 PHP RCE 셸을 업로드할 수 있습니다. 익스플로잇 제목: Joomla JCK Editor 6.4.4 SQL Injection Google Dork: inurl:/plugins/editors/jckeditor/plugins/jtreelink/ 날짜:...

dnSpy

dnSpyEx dnSpyExは、dnSpyプロジェクトの非公式な継続版です。dnSpyはデバッガーであり、.NETアセンブリエディターです。ソースコードがなくても、アセンブリの編集とデバッグを行うことができます。主な機能は次のとおりです。 .NETアセンブリとUnityアセンブリのデバッグ .NETアセンブリとUnityアセンブリの編集 ライトテーマとダークテーマ 詳細な機能は以下を参照してください バイナリ 最新の安定版リリース: https://github.com/dnSpyEx/dnSpy/releases 最先端を行きたい場合は、最新の「ベータ」ビルドを以下から入手できます:...