magescan

Mage 扫描 这个工具的目的是评估你无法直接访问的 Magento 网站的质量和安全性。 适用于你在面试潜在开发者或评估新客户时，想提前了解你将面临什么情况。 安装 .phar 从发布页面下载 magescan.phar 文件 使用 php 命令在命令行中运行 root@kitploit: php magescan.phar scan:all www.example.com 源码 克隆此仓库 使用 composer 安装 root@kitploit: git clone https://github.com/steverobbins/magescan magescan cd...

ramnit_traffic_parser

ramnittrafficparser Si tienes datos de tráfico entre Ramnit y el C2, puedes volcar las configuraciones y los módulos Requisitos PHP 7 tshark Uso root@kitploit: $ php main.php pcap/URL Ejemplo root@kitploit: $ php main.php...

Door404

Door404 Door404 es un proyecto de código abierto desarrollado porM4DM0E & Rizer Este proyecto se desarrolló por 2 razones Primera " Ayudar a los principiantes a aprender programación. " Segunda " Ayudar a los administradores de servidores novatos a aprender nuevos trucos de protección " Requisito...

SCANNER-INURLBR

描述 在搜索引擎中进行高级搜索，支持分析提供的 GET / POST 以捕获电子邮件和 URL，并为每个找到的目标/URL 内置自定义验证逻辑。 一款可在不同 Linux 发行版上运行的 PHP 工具，帮助黑客和安全专业人员执行特定搜索引擎的任务。 内置多种自动化探索方法，包括扫描器。 INURLBR（代号：Facada）工具旨在帮助黑客社区识别 Web 中的潜在漏洞，通过使用 Google Hacking（Dorking）技术执行高级搜索以在互联网上寻找目标。 该工具拥有搜索引擎的强大能力。 免责声明 This or previous program is for Educationa...

hostscan

hostscan 0.2 Hostscan es una herramienta PHP que te permite escanear un rango específico de hosts, principalmente para recopilación de información y pruebas de contraseñas débiles. Supongo que es una herramienta de pentest; la creé para automatizar algunas pruebas que hago a menudo. Como es PHP,...

Log4j-RCE

Log4j-RCE Log4j RCE - CVE-2021-44228 ¿Cómo ejecutarlo? root@kitploit: php log4j.php https://1337.com Requisitos PHP CURL PAYLOAD DNS LOG Collaborator de Burpsuite o usa dnslog.cn Lista de Payloads root@kitploit: $ctx:loginId $map:type $filename $date:MM-dd-yyyy $docker:containerId...

shellstack

ShellStack 版本 1.0 ShellStack 是一个基于 PHP 的后门管理工具。对于希望追踪自己入侵的每个网站的“黑客”来说，这款工具非常实用。该工具会生成一个后门文件，你只需将其上传到目标网站，然后将后门 URL 放入工具目录下的 shells.txt 文件中即可。 使用 ShellStack 你可以 导入 PHP Shell 获取服务器详细信息 通过终端从你的系统上传文件 最重要的是，你能高效管理你的后门 使用方法 1. git clone https://github.com/Tuhinshubhra/shellstack 2. cd shellstack 3. ph...

php-mt_rand

Este repositorio no tiene un README...

📄 React 19.2.0 PHP Scanner / Remote Code Execution

This project delivers a PHP-based vulnerability scanner and remote code execution exploit for CVE‑2025‑55182 affecting React Server Components. It leverages RSC serialization weaknesses to execute arbitrary commands and validate successful exploitation...

EUVD-2006-7116

Malware in sbrugna...

EUVD-2022-6249

Malicious code in bioql PyPI...

ExploitOnCLI

This is an offensive tool for searching exploits in multiple databases. The tool, named ExploitOnCLI or EOC, is written in PHP for Linux and allows users to search for exploits in various databases, including Exploit-DB, PacketStormSecurity, IEDB, Siph0n, CXSecurity, and Exploit4Arab. The tool ca...

SCANNER-INURLBR

It is an offensive tool for web application vulnerability scanning and exploitation. The primary CVE ID present in the provided context is not explicitly stated, but the tool is designed for Google Hacking and advanced searches to find potential vulnerabilities in web applications. The target...

ReconCat - Tool To Fetch Archive Url Snapshots From Archive.org

A small Php application to fetch archive url snapshots from archive.org. using it you can fetch complete list of snapshot urls of any year or complete list of all years possible. Made Specially for penetration testing purpose. This application is powered byWMB-Scrapper Installation Clone this...

[SECURITY] Fedora 19 Update: phpMyAdmin-4.2.6-1.fc19

phpMyAdmin is a tool written in PHP intended to handle the administration of MySQL over the World Wide Web. Most frequently used operations are supported by the user interface managing databases, tables, fields, relations, index es, users, permissions, while you still have the ability to directly...

[SECURITY] Fedora 10 Update: phpMyAdmin-3.1.3.1-1.fc10

phpMyAdmin is a tool written in PHP intended to handle the administration of MySQL over the Web. Currently it can create and drop databases, create/drop/alter tables, delete/edit/add fields, execute any SQL statement, manage keys on fields, manage privileges,export data into various formats a nd ...

LookStrike Lan Manager 0.9 Remote / Local File Inclusion Vulnerabilities

No description provided by source. --==+================================================================================+==-- --==+ LookStrike Lan Manager v0.9 RemoteLocal File Inclusion +==-- --==+================================================================================+==-- Author: MhZ91...

[SECURITYREASON.COM] phpMyAdmin 2.6.1 Remote file inclusion and XSS cXIb8O3.4

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 phpMyAdmin 2.6.1 Remote file inclusion and XSS cXIb8O3.4 Author: Maksymilian Arciemowicz cXIb8O3 Date: 24.2.2005 - --- 0.Description --- phpMyAdmin 2.6.1 is a tool written in PHP intended to handle the administration of MySQL over the Web. Currently i...