AnySniff

💀AnySniff AnySniff 是一款用于在 Windows 上监控类似 AnyDesk 等进程的 TCP 连接的工具。它利用 CVE-2024-52940 漏洞来跟踪开放连接并记录 IP、端口及其他相关详细信息。 ⚙功能 监控目标进程（例如 AnyDesk）的 TCP 连接。 将 IP 地址、端口和进程详细信息记录到日志文件中。 支持实时嗅探网络流量。 提供简单的菜单驱动界面。 💽系统要求 Python 3.x Windows 操作系统 pyfiglet 库（用于 ASCII 艺术字） colorama 库（用于颜色支持） 🛠️安装 1. 克隆此仓库： root@kitploit:...

peetch

peetch peetch is a collection of tools aimed at experimenting with different aspects of eBPF to bypass TLS protocol protections. Currently, peetch includes three subcommands. The first called dump aims to sniff network traffic by associating information about the source process with each packet...

ngrep

ngrep 1.49.0 2.7.2026 ngrep es como GNU grep aplicado a la capa de red. Es una herramienta basada en PCAP que permite especificar una expresión regular extendida o hexadecimal para comparar con las cargas útiles de datos de los paquetes. Comprende muchos tipos de protocolos, incluidos IPv4/6, TCP...

creds.py

Nueva versión con mucho más análisis: https://github.com/DanMcInerney/net-creds creds.py Captura credenciales FTP/POP/IMAP/HTTP/IRC junto con datos interesantes de cada uno de los protocolos. Si no se especifica una interfaz con la opción -i, el script usará la interfaz conectada a internet que...

cdpsnarf

CDPSnarf v0.1.6 Cisco Discovery Protocol 嗅探器 作者：Tasos "Zapotek" Laskos [email protected] [email protected] root@kitploit: 根据 GNU 通用公共许可证 v2 授权 General root@kitploit: CDPSnarf 是一款网络嗅探器，专门用于从 CDP 数据包中 提取信息。 它提供了一条 "show cdp neighbors detail" 命令在 Cisco 路由器上返回的所有信息，甚至更多。 Features 以下是功能列表： o...

JavaDeserialization

java反序列化漏洞检测 针对类似CVE-2017-10271漏洞的一个java反序列化漏洞扫描器，此项目中只有一个poc，其他暂时未做整理。 安装 1. 安装nmap ​ https://nmap.org/download.html 根据操作系统的不同，下载不同的版本安装。 2. 安装第三方包 pip install -r requirements.txt 3. 扫描 修改poc，将ping命令中的ip地址改为自己的ip地址 修改第25行sniff代码 root@kitploit: snifffilter='icmp and yourIP',prn=packetcallback...

bettercap

This repository is DEPRECATED, bettercap developementmoved here and every version 2.0.0 is considered LEGACY and NOT SUPPORTED...

DNSSpoof

DNSSpoof 一个用 Python3 编写的 DNS 欺骗工具。 如何使用？ root@kitploit: usage: dnsspoof.py -h -d DOMAIN -i INTERFACE -t TARGET -r IP optional arguments: -h, --help show this help message and exit -d DOMAIN Domain to spoof default: all -i INTERFACE Interface to listen on default: default -t TARGET Target's IP. If...

PT-2026-84504

Name of the Vulnerable Software and Affected Versions Scrapy versions prior to 2.17.0 Description The S3DownloadHandler in scrapy/core/downloader/handlers/s3.py converts S3-scheme bucket and key requests into plaintext HTTP requests unless the is secure variable in request.meta is explicitly...

EUVD-2026-63545

A vulnerability exists in the Dynamic DNS DDNS functionality of TP-Link Omada Gateways. During communication with a third-party DDNS service, authentication credentials are transmitted over an unencrypted channel. An attacker who can observe or manipulate traffic between an affected device and th...

EUVD-2026-63144

RDP protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service...

EUVD-2026-55995

The Windows installer deployed Npcap leaving its access restriction option at the insecure default value, so the driver was accessible to every local user of the host instead of being restricted to administrators only. A local user without administrative privileges could use the Npcap driver to...

CVE-2026-33921

CVE-2026-33921 maps to a Windows RPC Runtime (rpcrt4.dll) vulnerability where NdrComplexTypeBufferSize underflows, enabling a pre-auth heap-based overflow (Ghost-Call) via RPC/SMB without credentials. Impact: potential remote code execution with SYSTEM privileges on affected Windows hosts; exploi...

PYSEC-2026-732 Plone credentials stored in session cookie

Plone CMS 3.1.x uses invariant data a client username and a server secret when calculating an HMAC-SHA1 value for an authentication cookie, which makes it easier for remote attackers to gain permanent access to an account by sniffing the network...

PYSEC-2026-734 Plone CMS Improper Session Management

Plone CMS before 3 places a base64 encoded form of the username and password in the ac cookie for all user accounts, which makes it easier for remote attackers to obtain access by sniffing the network...

Sensitive Cookie Without "HttpOnly" Flag

Overview Affected versions of this package are vulnerable to Sensitive Cookie Without "HttpOnly" Flag via missing HttpOnly and Secure attributes on the pinpointJwt session cookie. An attacker can access session tokens by exploiting stored or reflected cross-site scripting to exfiltrate the cookie...

The Gentlemen are knocking: сustom backdoors and evolving tactics

Introduction This year saw the emergence of The Gentlemen, a prominent example of a group operating under the ransomware-as-a-service RaaS model. Although our initial assessment suggested the group first appeared in mid-2025, it actually started ramping up its activities at the beginning of 2026...

CVE-2025-13926

An attacker could use data obtained by sniffing the network traffic to forge packets in order to make arbitrary requests to Contemporary Controls BASC 20T...

CVE-2025-31981

HCL BigFix Service Management SM Discovery is vulnerable to unenforced encryption due to port 80 HTTP being open, allowing unencrypted access. An attacker with access to the network traffic can sniff packets from the connection and uncover the data...

CVE-2025-31981 HCL BigFix Service Management (SM) Discovery is vulnerable to unenforced encryption

HCL BigFix Service Management SM Discovery is vulnerable to unenforced encryption due to port 80 HTTP being open, allowing unencrypted access. An attacker with access to the network traffic can sniff packets from the connection and uncover the data...