packetsifterTool

PacketSifter ¿Qué es PacketSifter? PacketSifter es una herramienta para realizar procesamiento por lotes de datos PCAP y descubrir posibles IOCs. Simplemente inicializa PacketSifter con tus integraciones deseadas VirusTotal, AbuseIPDB y pásale un pcap junto con los interruptores deseados, y...

turbinia

Turbinia 摘要 注意：Turbinia 将不再开发新功能，并已进入维护模式。用户应关注OpenRelik。 Turbinia 是一个开源框架，用于部署、管理和运行分布式取证工作负载。其目标是自动运行常见的取证处理工具（如 Plaso、TSK、strings 等），以帮助在云端处理证据、扩展大量证据的处理能力，并通过尽可能并行处理来缩短响应时间。 工作原理 Turbinia 由客户端、服务器和工作者等不同组件构成。这些组件可以在云端、本地机器上运行，或采用混合方式。Turbinia 客户端向 Turbinia 服务器提交证据处理请求。Turbinia...

laurel

Linux Audit – Registro utilizable, robusto y fácil LAUREL es un complemento de postprocesamiento de eventos para auditd8 que genera registros de auditoría JSON enriquecidos y útiles, adecuados para configuraciones modernas de monitoreo de seguridad. La documentación correspondiente a la última...

memoro

Memoro Memoro is a highly detailed heap profiler. Memoro not only shows you where and when your program makes heap allocations, but will show you how your program actually used that memory. Memoro collects detailed information on accesses to the heap, including reads and writes to memory and when...

citrix_cve-2023-4966

citrixcve-2023-4966 Citrix CVE-2023-4966 from assetnote modified for parallel and file handling...

CVE-2022-40684

CVE-2022-40684 Individual or batch exploit for CVE-2022-40684 How to use Generate public key python3 exp.py -u ip:port -k idrsa2048.pub -l hosts.txt for batch processing with a file FOFA title="FortiGate"...

saas_enum

SaaS Enum SaaS Enum is a command line tool for discovering the SaaS platforms a company may be using. The tool looks for DNS entries that match known provider patterns and optionally performs lightweight web checks for confirmation. Installation root@kitploit: pip install -r requirements.txt Usag...

CVE-2025-32206

CVE-2025-32206 - WordPress Processing Projects "Unrestricted Upload of File with Dangerous Type vulnerability in LABCAT Processing Projects allows attackers to upload a web shell to a web server. This can lead to full compromise." 🧑‍💻 Exploit Description This Python exploit script targets WordPress...

scscanner_sh

scscanner - Escáner Masivo de Códigos de Estado scscanner es una herramienta para leer el código de estado de respuesta HTTP de sitios web a partir de listas. Esta herramienta tiene la capacidad de filtrar solo códigos de estado específicos y guardar el resultado en un archivo. Características...

CVE-2024-23897

CVE-2024-23897 This repository presents a proof-of-concept of CVE-2024-23897 Discovered by sonarsource CVE-2024-23897 | File read in jenkins Disclamer This code is a proof of concept of the vulnerability, I'm not pushing anyone to use it on confluence instances they don't own. This tool has been...

CVE-2019-19634

CVE-2019-19634 - class.upload.php = 2.0.4 Arbitrary file upload Author - Jinny Ramsmark Affected vendor - Verot.net Affected product - class.upload.php = 2.0.4 Tested on newly installed Ubuntu 14.04 with PHP5 and Apache Specifically Debian/Ubuntu has been found to be vulnerable since they add the...

sleuthkit

The Sleuth Kit INTRODUCTION The Sleuth Kit is an open source forensic toolkit for analyzing Microsoft and UNIX file systems and disks. The Sleuth Kit enables investigators to identify and recover evidence from images acquired during incident response or from live systems. The Sleuth Kit is open...

CVE-2026-72903

A flaw was found in Tabby, a terminal emulator. A remote attacker, operating a malicious SFTP server, could exploit a path traversal vulnerability. This occurs when the server returns a specially crafted filename containing backslashes, which are then misinterpreted by Tabby's Windows-native path...

MalPipe

MalPipe root@kitploit: //\ | | / / \ / | |/ // | ' \ / \ / //\ \ | | / /| | | | / / /,|/ || ./ | || MalPipe is a modular malware and indicator collection and processing framework. It is designed to pull malware, domains, URLs and IP addresses from multiple feeds, enrich the collected data...

CVE-2025-43300

CVE-2025-43300: iOS/macOS DNG Image Processing Memory Corruption Overview CVE-2025-43300 is a critical memory corruption vulnerability in Apple's image processing framework that affects iOS 18.6.1 and macOS systems. The vulnerability exists in the JPEG Lossless decompression code within...

Stego-Lab

Stego-Lab Steganography. EXIF. Watermarks. Decode. Batch. Professional image privacy workflows for iPhone, iPad, and macOS. Website · GitLab · Project Page · Privacy Policy · Press Kit · Support · License Why Stego-Lab Stego-Lab brings together workflows that are usually scattered across multiple...

CVE-2021-22204

Vulnerable Version 7.44 12.23 Reproduce root@kitploit: $ bash craftadjvuexploit.sh 'cal' $ ./exiftool delicate.jpg Screenshot Reference NVD-CVE-2021-22204...

subcrawl

SubCrawl SubCrawl is a framework developed by Patrick Schläpfer, Josh Stroschein and Alex Holland of HP Inc’s Threat Research team. SubCrawl is designed to find, scan and analyze open directories. The framework is modular, consisting of four components: input modules, processing modules, output...

fi6s

fi6s：快速 IPv6 扫描器 fi6s 是一款旨在快速运行的 IPv6 端口扫描器，面向互联网扫描与发现。它通过异步发送和处理原始数据包来实现这一目标。 其设计与目标与 Masscan 非常相似，但功能不如其全面。 请注意 许可证。 最后：这是一款安全研究工具，您（用户）有全部责任在使用时遵守当地法规并在必要时获得许可。 编译 在任何较新的 Linux 系统上构建 fi6s 都非常简单，例如在 Ubuntu 上： root@kitploit: apt install gcc make git libpcap-dev $ git clone...

RedDrop

RedDrop Exfil Server ¡Mira el artículo del blog de MaverisLabs que lo acompaña aquí! RedDrop Exfil Server es un servidor web Python Flask para probadores de penetración, equipos rojos y profesionales de seguridad que incluye: Carga de archivos Procesamiento automático de payloads Extracción...