cdb

Pown CDB Pown CDB is a Chrome Debug Protocol utility. The main goal of the tool is to automate common tasks to help debug web applications from the command-line and actively monitor and intercept HTTP requests and responses. This is particularly useful during penetration tests and other types of...

Re2Pcap

Re2Pcap: 生のHTTPリクエストまたはレスポンスから数秒でPCAPファイルを作成 Re2Pcap は Request2Pcap と Response2Pcap の略称です。コミュニティユーザーは Re2Pcap を使用して迅速に PCAP ファイルを作成し、Snort ルールに対してテストすることができます。 Re2Pcap を使用すると、以下のような生の HTTP リクエストの PCAP ファイルを素早く作成できます。 root@kitploit: POST /admin/tools/iplogging.cgi HTTP/1.1 Host: 192.168.13.31:80...

phpstress

phpstress Night Lion Security による、Apache および NGINX システム（PHP-FPM および PHP-CGI）で動作する PHP ウェブサイト向けの、概念実証（proof of concept）のサービス妨害 / ストレステスターです。 標準的なケーブル/DSL 接続を使用して、この攻撃は標準的な HTTP リクエストを用いて Linux Web サーバーの CPU と RAM を圧迫（フラッディング）させることができます。この攻撃は、PHP-CGI または PHP-FPM（WordPress サイトを含む）を使用して動的 PHP...

ReverseHttp

ReverseHttp 使用 HTTP POST/GET 请求进行通信的 Python 后门 要求 Python 2.7 Cherrypy pip install cherrypy Requests pip install requests 用法： 启动监听脚本，然后启动控制器，接着发送后门文件，等待连接 截图...

hfinger

Hfinger - マルウェアHTTPリクエストのフィンガープリンティング マルウェアのHTTPリクエストをフィンガープリントするためのツール。TsharkベースでPython3で記述されています。動作するプロトタイプ段階 :-...

jsfinder

Features | Installation | Usage | Demo | TODOs| Contact jsFinder is a command-line tool written in Go that scans web pages to find JavaScript files linked in the HTML source code. It searches for any attribute that can contain a JavaScript file e.g., src, href, data-main, etc. and extracts the UR...

wotop

Web-On-Top-Of-Protocol WOTOP root@kitploit: ██╗ ██╗ ██████╗ ████████╗ ██████╗ ██████╗ ██║ ██║██╔═══██╗╚══██╔══╝██╔═══██╗██╔══██╗ ██║ █╗ ██║██║ ██║ ██║ ██║ ██║██████╔╝ ██║███╗██║██║ ██║ ██║ ██║ ██║██╔═══╝ ╚███╔███╔╝╚██████╔╝ ██║ ╚██████╔╝██║ ╚══╝╚══╝ ╚═════╝ ╚═╝ ╚═════╝ ╚═╝ Introduction WOTOP is a...

CVE-2025-0108

CVE-2025-0108 - Script PoC PAN-OS /!\ Disclaimer: Questo script è fornito "così com'è" ed esclusivamente a scopo educativo. Gli utenti sono vivamente invitati a prestare attenzione e a utilizzarlo nel rispetto dei limiti legali ed etici. Descrizione Scanner di vulnerabilità in Python progettato p...

requests-racer

Requests-Racer Requests-Racer è una piccola libreria Python che ti consente di utilizzare la libreria Requests per inviare più richieste che verranno elaborate dai rispettivi server di destinazione approssimativamente nello stesso momento, anche se le richieste hanno destinazioni diverse o payloa...

http-pulse_ssl_vpn.nse

ZUSAMMENFASSUNG Einfaches NSE-Skript zur Erkennung der Offenlegung von Dateien in Pulse Secure SSL VPN mittels speziell gestalteter HTTP-Ressourcenanfragen. Dieser Exploit liest /etc/passwd als Proof of Concept. Diese Sicherheitslücke betrifft 8.1R15.1, 8.2 vor 8.2R12.1, 8.3 vor 8.3R7.1 und 9.0 v...

dnstwist

See what sort of trouble users can get in trying to type your domain name. Find lookalike domains that adversaries can use to attack you. Can detect typosquatters, phishing attacks, fraud, and brand impersonation. Useful as an additional source of targeted threat intelligence. DNS fuzzing is an...

ASUS-AiCloud-RCE

Origasus origasus.go ile derlenen, ASUS AiCloud / AsusWRT ile ilişkilendirilebilecek uçların yetkili güvenlik testi veya savunma analizi ör. kendi cihazınız, yazılı penetest laboratuvarı kapsamında incelenmesi için yazılmış bir Go programıdır. Önemli: Bu tür yazılımların yetkisiz sistemlere karşı...

Project-CVE-2015-1635

CVE-2015-1635 CVE-2015-1635,MS15-034 Rilevamento della vulnerabilità root@kitploit: USAGE python MS15-034.py www.xxx.com:80 Programma di test Vulnerabilità di esecuzione codice remota in HTTP.sys CVE-2015-1635, MS15-034 La vulnerabilità di esecuzione codice remota esiste nello stack del protocoll...

CVE-2018-6389

doser.py Strumento DoS per richieste HTTP ispirato a hulk ma con più funzionalità scritto in Python: Esempi 999 thread invia richieste GET: root@kitploit: python doser.py -t 999 -g 'https://targeted.site.com' 999 thread invia richieste POST con dati json: root@kitploit: python doser.py -t 999 -p...

CVE-2020-3452

CVE-2020-3452 Piccolo, stupido validatore Python? per CVE-2020-3452 su dispositivi CISCO. Principiante con Python, per favore non uccidetemi. ;- UTILIZZO root@kitploit: python CVE-2020-3452.py /path/to/input/file.txt /path/to/output/file.txt DICHIARAZIONE DI NON RESPONSABILITÀ: Si prega di...

w3af

w3af - Web Application Attack and Audit Framework w3af is an open source web application security scanner which helps developers and penetration testers identify and exploit vulnerabilities in their web applications. The scanner is able to identify 200+ vulnerabilities, including Cross-Site...

CVE-2022-2414-Proof-Of-Concept

CVE-2022-2414-Proof-Of-Concept Im pki-core wurde ein Fehler gefunden. Der Zugriff auf externe Entitäten beim Parsen von XML-Dokumenten kann zu XML-External-Entity-Angriffen XXE führen. Dieser Fehler ermöglicht es einem entfernten Angreifer, möglicherweise den Inhalt beliebiger Dateien abzurufen,...

http_bridge

Ponte HTTP Motivação Escrevi este programa como uma prova de conceito para testar a ideia de ser capaz de enviar pacotes de fluxo TCP sobre requisições HTTP simples como PUT, PATCH, POST, GET, sem usar uma forma de proxy como o método CONNECT. Também como um exercício prático para treinar minha...

LoLLMS WebUI - Subfolder Prediction via Path Traversal

A Path Traversal vulnerability exists in the parisneo/lollms-webui, specifically within the 'addreferencetolocalmode' function due to the lack of input sanitization. This vulnerability affects versions v9.6 to the latest. id: CVE-2024-4841 info: name: LoLLMS WebUI - Subfolder Prediction via Path...

sricam-gsoap2.8-dos-exploit

sricam-gsoap2.8-dos-exploit Sricam-gSOAP2.8-DoS-Exploit Proof of Concept Proof-of-Concept-Code: SricamgSOAPPoCexploit.sh CVE-2019-6973 https://vulners.com/cve/CVE-2019-6973 Thanks to the CVE Assignment Team for their help structuring the following: Beschreibung Sricam-IP-Überwachungskameras sind...