reverseip_py

reverseippy 用于IPAddress.com反向IP查询的域名解析器。使用Python 3编写。 什么是反向IP？ 反向IP是指查找特定IP地址上托管的所有域名的过程。这对于多种场景很有用，例如识别共享托管服务器上托管的所有网站，或找出与某个特定网站共享同一IP地址的网站。 依赖项 beautifulsoup4 requests urllib3 已在 Debian 系统上使用 Python 3.10.8 测试通过。 安装依赖项 root@kitploit: pip3 install -r requirements.txt 使用方法 帮助菜单 root@kitploit:...

PT-2026-90269

In the Linux kernel, the following vulnerability has been resolved: nouveau/gem: reserve the bo in the info ioctl around the vma lookup In the non-uvmm path, there could be a race between the info lookup finding the vma, and the gem close path closing the vma leading to a use-after-free. Spotted...

PT-2026-90399

In the Linux kernel, the following vulnerability has been resolved: nfsd: fix dentry ref leak on V4ROOT export filehandle lookup nfsd set fh dentry leaks the dentry reference from exportfs decode fh raw when the NFS3 FHSIZE or NFS FHSIZE switch cases detect NFSEXP V4ROOT and goto out. The out:...

PT-2026-89861

Hugo is a static site generator. In versions after v0.123.0 and before v0.165.0, symlinks in parent directories were not dropped during direct resource lookups, allowing path confinement to be bypassed. An attacker who can place — or who convinces a site author to place — a symlink inside a mount...

PT-2026-90228

In the Linux kernel, the following vulnerability has been resolved: remoteproc: scp: Fix device reference leak on failed lookup Make sure to drop the reference taken to the SCP device when attempting to look up its driver data before the driver has been bound. Note that holding a reference to a...

PT-2026-90125

In the Linux kernel, the following vulnerability has been resolved: net: mctp: hold a reference to the route device in mctp route lookup mctp route lookup uses rt-dev without holding a reference on it. mctp route lookup single returns the route under RCU only, so the route's device can be torn do...

Fix-Log4j-PowershellScript

Fix-Log4j-PowershellScript CVE-2021-44228 搜索并从系统中的 log4j.jar 文件中移除 JNDI 查找类（Windows 下使用 PowerShell） 请确保使用最新的脚本版本！ 版本 1.6.2 及以上 已实现对 Java 进程的杀模式。（$killMode） 默认为 $false ，除非手动更改！使用此功能时请小心！ 该脚本可手动部署，也可通过 GPO 或 SCCM 等部署工具部署。 功能与信息： 默认情况下，脚本在 C:\ 上搜索 （除非更改） -可通过将脚本中的 $searchAllDrives 设置为...

l4j-info

l4j-info Compiling valuable links as I find them documenting CVE-2021-44228 or Log4J Critical First Party advisories: Existing Log4J 1.2 vulnerability CVE-2019-17571 is also potentially present Apache Log4J Version 2.x Security Information VMWare critical vulnerability advisory Cisco product...

ModSec-log4j2

Testing the ModSec rule Prerequisites Have docker installed Have Java installed on your machine Running the test Perform a git clone of the repository Execute the command below to start the WAF ModSec and the vulnerable application root@kitploit: docker stack deploy -c docker-compose.yml WAF...

log4j2-CVE-2021-45105

Sample Log4j2 vulnerable application CVE-2021-45105 Versions Affected: all versions from 2.0-beta9 to 2.16.0 This application is based on Spring Boot web application vulnerable to CVE-2021-45105 It uses Log4j 2.16.0 Running the application Run it: root@kitploit: Import the project in Java IDE as ...

DEBIAN-CVE-2026-45762

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to versions 7.0.16 and 8.0.5, Suricata's IP defragmentation tracker lookup did not verify that an existing tracker used the same IP address family as the packet being...

log4j2-test

Log4j2 2.14.1 LDAP Remote Code Execution Vulnerability CVE-2021-44228 Verification 🎈 Tested on Spring Boot 2.x environment Vulnerability advisory https://nvd.nist.gov/vuln/detail/CVE-2021-44228 target-server pom.xml : Downgraded Log4j2 version to a vulnerable version root@kitploit: 17 2.14.1...

CVE-2021-45046

tejas-nagchandi/CVE-2021-45046 攻击 描述 经发现，Apache Log4j 2.15.0 中针对 CVE-2021-44228 的修复在某些非默认配置下并不完整。当日志配置使用非默认的模式布局（Pattern Layout），且包含上下文查找（例如 $$ctx:loginId）或线程上下文映射模式（%X、%mdc 或 %MDC）时，攻击者可以通过控制线程上下文映射（MDC）输入数据，利用 JNDI 查找模式构造恶意输入数据，从而导致拒绝服务（DOS）攻击。Log4j 2.15.0 默认尽力将 JNDI LDAP 查找限制为本地主机。Log4j 2.16.0...

cloud_ip_ranges

Rangos de IP de la nube Descripción La mayoría de los proveedores de nube publican listas actualizadas de sus rangos de direcciones IP. Esta herramienta identifica si una IP pertenece a los rangos de un proveedor mediante la obtención y el análisis de las listas más recientes. Soporta: AWS fuente...

CVE-2026-45762

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to versions 7.0.16 and 8.0.5, Suricata's IP defragmentation tracker lookup did not verify that an existing tracker used the same IP address family as the packet being...

GTFOBLookup

GTFOBLookup 面向 GTFOBins、LOLBAS、WADComs 和 HijackLibs 的离线命令行查询工具。 文件 .gitignore : Gitignore 文件 gtfoblookup.1 : GTFOBLookup 的 Linux 手册页 gtfoblookup.py : GTFOBLookup 工具 LICENSE.md : 许可证文件 README.md : 本文件 requirements.txt : 所需 Python 包列表 依赖 虽然 GTFOBLookup 可以在 Python2.7 中运行，但某些功能需要 Python3。 GTFOBLookup...

hostresolver

HostResolver Versión actual: 1.0.0 Envíe comentarios e informes de errores a: [email protected] ==================================================================================== Contenido: 1. Resumen 2. Uso de HostResolver Archivos de entrada Opciones y configuración Escaneo Salida...

log4j-CVE-2021-44228-workaround

log4j-CVE-2021-44228-workaround A. Solution Description This project provides a general purpose workaround for the log4j CVE-2021-44228 vulnerability, which can be used in case you do not have the alternative in short term to re-build your respective project or to patch the log4j-core jars. The...

Log4J_Exploitation-Vulnerabiliy__CVE-2021-44228

Log4J利用-漏洞CVE-2021-44228. 简介 Java日志库Log4j中发现了一个远程代码执行漏洞。 CVE-2021-44228 该漏洞在全球网络安全社区引发了轩然大波，自Wannacry以来，我们还未见过如此巨大的影响。 原因： 大多数用Java编写的应用程序被认为受到影响并存在漏洞，尤其是Apache框架，包括Apache Struts2、Apache Solr、Apache Druid和Apache...

EUVD-2026-75632

passport-saml-encrypted through 0.1.13 contains an XML signature wrapping vulnerability where signature verification and assertion extraction use independent XPath lookups with no cross-validation. Attackers holding any validly signed SAML message can prepend a forged unsigned assertion that gets...