gitleaks

Gitleaks ┌─○───┐ │ │╲ │ │ │ ○ │ │ ○ ░ │ └─░───┘ root@kitploit: !चेतावनी Gitleaks पूर्ण सुविधाओं वाला है। मैं Gitleaks में नई सुविधाएँ नहीं जोड़ रहा हूँ। भविष्य के रिलीज़ केवल सुरक्षा पैच होंगे। मैं अपना ध्यान Betterleaks पर केंद्रित कर रहा हूँ। license:...

trommel

تروميل يقوم تروميل بفحص ملفات الأجهزة المضمنة لتحديد المؤشرات المحتملة للضعف. يحدد تروميل المؤشرات التالية المتعلقة بـ: ملفات مفاتيح Secure Shell SSH ملفات مفاتيح Secure Socket Layer SSL عناوين Internet Protocol IP Uniform Resource Locator URL عناوين البريد الإلكتروني نصوص shell برمجيات خادم الوي...

should-i-trust

should-i-trust Summary should-i-trust is a tool to evaluate OSINT signals for a domain. Requirements should-i-trust requires API keys from the following sources: Censys.io - Free for for first 250/quries/month VirusTotal - Free GrayHatWarFare - Free with limited results Use Case You're part of a...

socialhunter

socialhunter !IMPORTANT This tool is no longer working, and we won't be able to fix it as it has become difficult to bypass social media protections. Crawls the given URL and finds broken social media links that can be hijacked. Broken social links may allow an attacker to conduct phishing attack...

interrogate

Interrogate Interrogate هي أداة إثبات مفهوم لتحديد المفاتيح التشفيرية في المواد الثنائية بصرف النظر عن نظام التشغيل الهدف، وفي المقام الأول لتحليل تفريغ الذاكرة والاستخدامات الجنائية. قادرة على تحديد مفاتيح AES وSerpent وTwofish وRSA المشفّرة بصيغة DER اعتبارًا من الإصدار 0.0.4. أُعدّت الأداة كجز...

hashcat

hashcat hashcat is the world's fastest and most advanced password recovery utility, supporting five unique modes of attack for over 300 highly-optimized hashing algorithms. hashcat currently supports CPUs, GPUs, and other hardware accelerators on Linux, Windows, and macOS, and has facilities to...

AspDotNetWrapper-Edited-

AspDotNetWrapper لاختبار مفاتيح الجهاز viewstate في ASP.NET التحميل استنسخ الملف وفك ضغطه في ويندوز الاستخدام root@kitploit: AspDotNetWrapper.exe --keypath MachineKeys.txt --encrypteddata --decrypt --purpose=viewstate --modifier= --macdecode استبدل بمعامل viewstate= value in the source استبدل...

CVE-2020-0688

CVE-2020-0688 CVE-2020-0688: تنفيذ الأوامر عن بُعد على خادم Microsoft Exchange عبر مفاتيح تشفير ثابتة كيفية التشغيل ysonet.exe: تحميل من هنا تشغيل خادم HTTP: root@kitploit: python3 -m http.server 8000 غيّر targeturl وعنوان IP الخاص بك في أمر pwsh. ثبّت جميع تبعيات Python. نفّذ python3 exploit.py...

mellon

OSDP कमजोरियाँ जिनका यह शोषण करता है OSDP आक्रमण उपकरण और मित्र के लिए एल्विश शब्द हमला 1: एन्क्रिप्शन वैकल्पिक है OSDP एन्क्रिप्शन का समर्थन करता है, लेकिन सख्ती से आवश्यक नहीं है। इसलिए आपका कनेक्शन शायद बिल्कुल भी एन्क्रिप्टेड न हो। हमला 1 केवल निष्क्रिय रूप से सुनना है और देखना है कि क्या आप...

jwt_tool

The JSON Web Token Toolkit v2 jwttool.py is a toolkit for validating, forging, scanning and tampering JWTs JSON Web Tokens. Its functionality includes: Checking the validity of a token Testing for known exploits: CVE-2015-2951 The alg=none signature-bypass vulnerability CVE-2016-10555 The RS/HS25...

CVE-2018-20555

CVE-2018-20555 Il plugin WordPress chiamato Social Network Tabs, creato dall'azienda Design Chemical, rilascia due volte l'accesstoken, l'accesstokensecret, la consumerkey e la consumersecret di Twitter dei propri utenti, portando alla compromissione del loro account Twitter. Ciò è causato dalle...

rollback_car_attack_proverif

Verifica formale dell'attacco Rollback Prova di concetto in ProVerif dell'attacco Rollback sul keyfob dell'auto CVE-2022-37418, CVE-2022-36945 e CVE-2022-37305, presentata in1 Dichiarazione di non responsabilità Non ho alcun legame con gli autori di 1. Sono loro grato per aver reso il loro artico...

psc

PortShellCrypter -- PSC This project - as well as its sister project crash - belongs to my anti-censorship tool-set that allows to setup fully working encrypted shells and TCP/UDP forwarding in hostile censoring environments. It is also useful for forensics to dump data from devices via UART or...

CVE-2023-34039

CVE-2023-34039 POC para CVE-2023-34039 VMWare Aria Operations for Networks vRealize Network Insight RCE por chave SSH estática Análise Técnica Uma análise de causa raiz da vulnerabilidade pode ser encontrada no meu blog:...

DumpTheGit

DumpTheGit DumpTheGit durchsucht öffentliche Repositorys nach sensiblen Informationen, die in die GitHub-Repositorys hochgeladen wurden. Das Tool markiert Übereinstimmungen mit potenziell sensiblen Dateien wie Anmeldeinformationen, geheimen Schlüsseln, Token usw., die versehentlich von den...

CVE-2026-38822

In openNDS before 11.0.0 , the client_params.sh script—invoked by the openNDS daemon to serve the authenticated client status page—is vulnerable to OS command injection through crafted HTTP GET query parameter keys. An authenticated captive portal user can inject arbitrary shell commands by embed...

sticky_keys_hunter

Sticky Keys Hunter Dieses POC-Bash-Skript testet auf Sticky-Keys- und Utilman-Hintertüren. Das Skript stellt eine Verbindung zu einem RDP-Server her, sendet sowohl die Sticky-Keys- als auch die Utilman-Trigger und macht einen Screenshot des Ergebnisses. Dieses Skript wurde geschrieben, um eine...

sticky_keys_hunter

Sticky Keys Hunter This POC bash script tests for sticky keys and utilman backdoors. The script will connect to an RDP server, send both the sticky keys and utilman triggers and screenshot the result. This script was written to prove a theory I had about detecting these backdoors in a blackbox...

aws-key-disabler

AWS Lambda - IAM Access-Key-Deaktivierer Der AWS-Key-Deaktivierer ist eine Lambda-Funktion, die AWS-IAM-Benutzerzugriffsschlüssel nach einer festgelegten Zeit deaktiviert, um das Risiko alter Zugriffsschlüssel zu verringern. AWS-Lambda-Architektur SysOps-Ausgabe für Endbenutzer Entwickler-Toolcha...

CryKeX

Proprietà: Multipiattaforma Minimalismo Semplicità Interattività Compatibilità/Portabilità Indipendente dall'applicazione Wrapping dei processi Iniezione nei processi Dipendenze: Unix - dovrebbe funzionare su qualsiasi sistema basato su Unix BASH - l'intero script privilegi di root opzionale...