test_struts2_vulnerability_CVE-2017-5638

testestruts2vulnerabilidadeCVE-2017-5638noMACOSX teste de vulnerabilidade struts2 CVE-2017-5638 no Mac OS X baixar aplicativo web de teste e executá-lo no tomcat root@kitploit: install tomcat brew install tomcat confirm where the tomcat installed ls -lF which catalina confirm tomcat home dir ls -...

perl-CVE-2013-1775

CVE-2013-1775 Apple Mac OSX 10.8.4 - Privilegieneskalation Perl-Version des CVE-2013-1775 Apple Mac OSX 10.8.4 - Privilegieneskalation-Exploits. Referenzen: https://www.exploit-db.com/exploits/27965/...

zizzania

zizzania zizzania sniffs wireless traffic listening for WPA handshakes and dumping only those frames suitable to be decrypted one beacon + EAPOL frames + data. In order to speed up the process, zizzania sends IEEE 802.11 DeAuth frames to the stations whose handshake is needed, properly handling...

macsurf

Il web moderno, su un Mac di 25 anni. MacSurf è un browser web per Classic Mac OS 9 PowerPC. CSS3, JavaScript ES5 e PNG con alpha — in esecuzione su un iMac G3. MacSurf è un progetto a tempo pieno. Se ha riportato il tuo vecchio Mac sul web, ogni dollaro aiuta a mantenere vivo lo sviluppo. Segui...

Disk-Arbitrator

Einführung Disk Arbitrator ist ein forensisches Werkzeug für Mac OS X, das dem Benutzer helfen soll, korrekte forensische Verfahren bei der Abbildung eines Datenträgers einzuhalten. Disk Arbitrator ist im Wesentlichen eine Benutzeroberfläche für das Disk Arbitration Framework, das es einem Progra...

RootPipeTester

Indice dei contenuti 1. Cos'è RootPipe Tester? 2. Perché dovrei usare RootPipe Tester? 3. Come uso RootPipe Tester? 4. PANICO!!! Il mio sistema è vulnerabile? Moriremo tutti? 1. OS X 10.10 Yosemite 2. OS X 10.9 Mavericks 3. OS X 10.8 Mountain Lion 4. OS X 10.7 Lion, Mac OS X 10.6 Snow Leopard, Ma...

hershell

Hershell NOTE: the project has been forked on this repo, check there for any other developments. Hershell is a simple TCP reverse shell written in Go. It uses TLS to secure the communications, and provide a certificate public key fingerprint pinning feature, preventing from traffic interception...

RootPipe-Demo

RootPipe-Demo Questa è un'applicazione Mac Proof-of-Concept che dimostra la vulnerabilità di escalation dei privilegi RootPipe CVE-2015-1130 identificata da Emil Kvarnhammar di TrueSec Questa demo è stata scritta in Objective-C, portata dal PoC Python qui: RootPipe Utilizzo Per usarlo, fornisci...

OSXAuditor

OS X Auditor OS X Auditor ist ein kostenloses Computer-Forensik-Tool für Mac OS X. OS X Auditor analysiert und hasht die folgenden Artefakte auf dem laufenden System oder einer Kopie eines Systems, das Sie analysieren möchten: die Kernel-Erweiterungen die System-Agents und -Daemons die Agents und...

wafpass

WAFPASS root@kitploit: ██╗ ██╗ █████╗ ███████╗██████╗ █████╗ ███████╗███████╗ ██║ ██║██╔══██╗██╔════╝██╔══██╗██╔══██╗██╔════╝██╔════╝ ██║ █╗ ██║███████║█████╗ ██████╔╝███████║███████╗███████╗ ██║███╗██║██╔══██║██╔══╝ ██╔═══╝ ██╔══██║╚════██║╚════██║ ╚███╔███╔╝██║ ██║██║ ██║ ██║ ██║███████║███████...

kurukshetra

Kurukshetra Kurukshetra is a web framework that’s developed with the aim of being the first open source framework which provides a solid foundation to host reasonably complex secure coding challenges while still providing the ability to efficiently and dynamically execute each challenge on the...

phpsploit

Full-featured C2 framework which silently persists on webserver via polymorphic PHP oneliner...

chipsec

CHIPSEC: Platform Security Assessment Framework CHIPSEC is a framework for analyzing the security of PC platforms including hardware, system firmware BIOS/UEFI, and platform components. It includes a security test suite, tools for accessing various low level interfaces, and forensic capabilities...

xmap

XMap: The Internet Scanner XMap is a fast network scanner designed for performing Internet-wide IPv6 & IPv4 network research scanning. XMap is reimplemented and improved thoroughly from ZMap and is fully compatible with ZMap, armed with the "5 minutes" probing speed and novel scanning techniques...

lunar

LUNAR Lockdown UNix Auditing and Reporting Version Current version 15.9.1 Refer to lunar.sh and changelog for more up to date version information License CC BY-SA: https://creativecommons.org/licenses/by-sa/4.0/ Fund me here: https://ko-fi.com/richardatlateralblast NOTICE Run this code in audit...

arpy

Arpy Arpy is an easy-to-use ARP spoofing MiTM tool for Mac. It provides 3 targeted functions: Packet Sniffing Visited Domains Visited Domains with Gource Each function will be explained below. Tested OS to date Darwin 14.3.0 Darwin Kernel Version 14.3.0 Mac OS X Requirements Python 2.7 Gource Sca...

KisMac2

SI PREGA DI NOTARE, QUESTO PROGETTO NON È PIÙ MANTENUTO KisMac2 KisMAC è uno strumento gratuito e open source per il wardriving e la sicurezza wireless per Mac OS X. Segnalazione problemi: D'ora in poi, utilizza il tracker qui su GitHub...

Linux Distros Unpatched Vulnerability : CVE-2026-76035

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Inappropriate implementation in Media in Google Chrome on on Mac prior to 151.0.7922.169 allowed a remote attacker to execute arbitrary code outside the sandbox...

Linux Distros Unpatched Vulnerability : CVE-2026-76040

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use after free in Browser in Google Chrome on on Mac prior to 151.0.7922.169 allowed a remote attacker leveraging social engineering to execute arbitrary code...

DEBIAN-CVE-2026-76035

Inappropriate implementation in Media in Google Chrome on on Mac prior to 151.0.7922.169 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...