abdal-anydesk-remote-ip-detector

Уязвимость утечки IP AnyDesk CVE-2024-52940 🎤 Перевод README Английский Немецкий فارسی 📸 Скриншот 🎥 Видео Proof of Concept Чтобы увидеть уязвимость утечки IP AnyDesk в действии, вы можете скачать демонстрационные видео PoC ниже: 📥 Скачать Доказательство 01 📥 Скачать Доказательство 02 Рекомендуетс...

nim-shell

Nim-Shell Reverse shell that can bypass EDR and windows defender detection Please do not upload to VirusTotal 𝗜𝗡𝗦𝗧𝗔𝗟𝗟𝗔𝗧𝗜𝗢𝗡 𝗜𝗡𝗦𝗧𝗥𝗨𝗖𝗧𝗜𝗢𝗡𝗦 root@kitploit: $ apt install nim Compilation nim c -d:mingw --app:gui nimshell.nim Change the IP address and port number you want to listen to in the nimshell.ni...

reconspider

Most Advanced Open Source Intelligence OSINT Framework ReconSpider ReconSpider is most Advanced Open Source Intelligence OSINT Framework for scanning IP Address, Emails, Websites, Organizations and find out information from different sources. ReconSpider can be used by Infosec Researchers,...

pymultitor

PyMultiTor Python Multi Threaded Tor Proxy, Did you ever want to be at two different places at the same time? When I asked myself this question, I actually started developing this solution in my mind. While performing penetration tests there are often problems caused by security devices that bloc...

BitLeak

BitLeak BitLeak — это инструмент на Python, который проверяет и отображает загрузки торрентов, связанные с указанным IP-адресом. root@kitploit: git clone https://github.com/AnkhCorp/BitLeak.git root@kitploit: pip3 install -r requirements.txt root@kitploit: python bitleak.py...

r4ven

If you find this GitHub repo useful, please consider giving it a star! ⭐️ ▶️ Watch Video - How To Use! This project is a security research and awareness tool designed to demonstrate how modern web browsers may expose location data, camera access, IP address, and device information when users...

massdns

MassDNS A high-performance DNS stub resolver MassDNS is a simple high-performance DNS stub resolver targeting those who seek to resolve a massive amount of domain names in the order of millions or even billions. Without special configuration, MassDNS is capable of resolving over 350,000 names per...

payday

Payday Payload generator that uses Metasploit and Veil. Takes IP address input and then builds payloads automatically. Calls Veil framework with supplied IP address and creates binaries and handlers. Uses msfvenom to create payloads and writes resource handler files in the same way that Veil does...

bing-ip2hosts

Bing-ip2hosts Bing-ip2hosts is a Bing.com web scraper to discover hostnames by IP address. Description Bing-ip2hosts is a Bing.com web scraper that discovers hostnames by IP address. Bing is the flagship Microsoft search engine formerly known as MSN Search and Live Search. It provides a feature...

Western Digital MyCloud NAS - Authentication Bypass

It was discovered that the Western Digital My Cloud device before 2.30.196 is affected by an authentication bypass vulnerability. An unauthenticated attacker can exploit this vulnerability to authenticate as an admin user without needing to provide a password, thereby gaining full control of the...

CVE-2023-4281

CVE ID: CVE-2023-4281 취약점 유형: IP 주소 스푸핑 설명: Activity Log 플러그인은 잠재적으로 신뢰할 수 없는 헤더에서 클라이언트 IP 주소를 가져오므로, 공격자가 해당 값을 조작할 수 있습니다. 이는 악성 트래픽의 출처를 숨기는 데 사용될 수 있습니다. 재현 단계: root@kitploit: Run the following code in the web browser and note on the backend that the IP address has been faked. await...

pysho

pysho Python 기반의 Shodan API를 통해 Shodan 쿼리를 수행하는 도구 도구 다운로드: root@kitploit: git clone https://github.com/Kr0ff/pysho python -m pip install -r requirements.txt chmod +x pysho.py ./pysho 사용 예시: root@kitploit: Perform a check on your Shodan API key python pysho.py --info root@kitploit: Perform search...

shocker

Shocker A tool to find and exploit servers vulnerable to Shellshock Ref: https://en.wikipedia.org/wiki/Shellshocksoftwarebug Released as open source by NCC Group Plc - https://www.nccgroup.trust/ Developed By: Tom Watson, tom dot watson at nccgroup dot trust https://github.com/nccgroup/shocker...

misp-extractor

MISP Экстрактор Этот код подключается к указанному серверу MISP Malware Information Sharing Platform и анализирует заданное количество событий, записывая найденные в событиях IP-адреса, URL-адреса и MD5-хеши в три отдельных файла. Использование Чтобы использовать этот скрипт, вам нужно указать UR...

CVE-2023-34051

CVE-2023-34051 CVE-2023-34051 — это обход аутентификации, который обходит патч для VMSA-2023-0001. VMSA-2023-0001 для vRealize Log Insight включает следующие CVE: Уязвимость обхода каталогов VMware vRealize Log Insight CVE-2022-31706 Уязвимость нарушенного контроля доступа VMware vRealize Log...

hostintel

hostintel This tool is used to collect various intelligence sources for hosts. Hostintel is written in a modular fashion so new intelligence sources can be easily added. Hosts are identified by FQDN host name, Domain, or IP address. This tool only supports IPv4 at the moment. The output is in CSV...

ip-finder-cli

IPFinder CLI Command Line Interface https://ipfinder.io/ Supports Single IP Address, asn, ranges, firewall as Input Supports Bulk Exports Results to Screen or to An Output File Supports IPv4 and IPv6 Supports ASN number , RANGES , Firewall Getting Started sign up for a free account at...

recox

Recox v2.0 RecoX is an incredibly versatile and powerful tool that is specifically designed to aid in the identification and classification of vulnerabilities within web applications. The script is able to detect vulnerabilities that are not typically included in the OWASP top ten vulnerabilities...

CVE-2023-4279

Идентификатор CVE : CVE-2023-4279 Тип уязвимости : Спуфинг IP-адреса Описание : Этот плагин извлекает IP-адреса клиентов из потенциально ненадёжных заголовков, что позволяет злоумышленнику манипулировать их значением. Это может быть использовано для скрытия источника вредоносного трафика. Шаги дл...

PoC-CVE-2000-0649

PoC-CVE-2000-0649 Небольшой инструмент для создания PoC для CVE-2000-0649. Использование Этот скрипт проверяет, уязвим ли сервер для CVE-2000-0649. Имейте в виду, что нужно экспериментировать с HTTP, HTTPS и различными путями. По моему опыту, раскрытие данных чаще всего происходит при подключении...