527 matches found
PortWitness
PortWitness v1.1 مكتوب بلغة Python2 هذا الإصدار من PortWitness تم تطويره بلغة Python2، حيث تم استخدام وحدات مثل os و subprocess و sys وغيرها. الكود بأكمله مبني على مفهوم برمجة المقابس Socket Programming. باستخدام المقابس نقوم بإنشاء اتصال مع تطبيق ويب لمعرفة ما إذا كان نشطًا أم لا. هذا الإصدار...
CVE-2020-7246
ラボのセットアップ: a git clone https://github.com/pswalia2u/CVE-2020-7246.git b cd CVE-2020-7246 && docker build -t cve-assignment:ine . && docker run -it -p 80:80 cve-assignment:ine c Webサーバーは http://127.0.0.1/index.php でアクセス可能です。 d 事前設定済みアカウント: メール: [email protected] パスワード: developer1 エクスプロイト:...
seeker
Available in Concept behind Seeker is simple, just like we host phishing pages to get credentials why not host a fake page that requests your location like many popular location based websites. Read more on thewhiteh4t's Blog .Seeker Hosts a fake website which asks for Location Permission and if...
Firebase-Extractor
Firebase-Extractor //Mobile OSINT// هذه الأداة مكتوبة بلغة python2، والغرض منها تحليل جميع النتائج من بحث Bing. بشكل أساسي، عندما يتم العثور على رابط firebaseio لتطبيق، يمكن للمستخدم استخدام هذه الأداة بدلاً من البحث عن البيانات الحساسة يدويًا عبر نتائج البحث. تعمل هذه الأداة باستخدام رابط Fireba...
CVE-2019-7609
CVE-2019-7609 使用python2脚本正确利用CVE-2019-7609kibana RCE 截图 用法 root@kitploit: python2 CVE-2019-7609-kibana-rce.py -h usage: CVE-2019-7609-kibana-rce.py -h -u URL -host REMOTEHOST -port REMOTEPORT --shell optional arguments: -h, --help show this help message and exit -u URL such as:...
A2SV--SSL-VUL-Scan
A2SV--SSL-VUL-Scan A2SV = Auto Scanning to SSL Vulnerability HeartBleed, CCS Injection, SSLv3 POODLE, FREAK... etc. Vulnérabilités prises en charge : CVE-2007-1858 Anonymous Cipher CVE-2012-4929 CRIMESPDY CVE-2014-0160 CCS Injection CVE-2014-0224 HeartBleed CVE-2014-3566 SSLv3 POODLE CVE-2015-020...
gef
GEF pronounced ʤɛf - "Jeff" is a set of commands for x86/64, ARM, MIPS, PowerPC and SPARC to assist exploit developers and reverse-engineers when using old school GDB. It provides additional features to GDB using the Python API to assist during the process of dynamic analysis and exploit...
apkleaks
APKLeaks Scanning APK file for URIs, endpoints & secrets. Installation from Pypi from Source from Docker Usage Options Output Pattern Arguments for disassembler License Acknowledments Installation It's fairly simple to install APKLeaks : from PyPi root@kitploit: $ pip3 install apkleaks from Sourc...
vUSBf
vusbf-Framework root@kitploit: / / / / / / / / // | | / / / / / / / / / / / / / /\ / | | |/ / / / / // // / // / / / // // / // / |/ /,/,// //// / / / // / / / / / / / / / / // / / // // / / // ,/ ///// Un framework de fuzzing USB basé sur KVM/QEMU. Sergej Schumilo, OpenSource Security...
CMS_Detector
CMSDetector Python2 Don : BTC : 31mtLHqhaXXyCMnT2EU73U8fwYwigiEEU1 Perfect Money : U22270614...
CVE-2018-19246
CVE-2018-19246 개념 증명 사용법 root@kitploit: docker build -t lucas/cve-2018-19246:0.1.0 . docker run --rm -it -p 80:80 lucas/cve-2018-19246:0.1.0 python2 Pocsuite-2.0.8/pocsuite.py -u 172.17.0.1 -r PoC.py...
fake-mailer
Fake Mailer + إخلاء المسؤولية : Fake Mailer هي أداة لإرسال البريد الإلكتروني بشكل مجهول من بريد إلكتروني مختلف. يمكن أن تستغرق هذه العملية حتى 5 دقائق. تم إنشاء هذه الأداة للأغراض التعليمية فقط !! لست مسؤولاً عن أي إساءة استخدام لهذه الأداة !! التثبيت : apt update apt install git python2 -y git...
kwetza
Introduction By Chris Le Roy @brompwnie [email protected] Kwetza is a tool that allows you to infect an existing Android application with a Meterpreter payload. What does it do? Kwetza infects an existing Android application with either custom or default payload templates to avoid detection ...
uptux
uptux Specialized privilege escalation checks for Linux systems. Implemented so far: Writable systemd paths, services, timers, and socket units Disassembles systemd unit files looking for: References to executables that are writable References to broken symlinks pointing to writeable directories...
owtf
Offensive Web Testing Framework OWTF OWASP OWTF helps penetration testers stay efficient and aligned with security standards such as the OWASP Testing Guide v3 and v4, the OWASP Top 10, PTES, and NIST so that they have more time to: See the big picture and think outside the box. Efficiently find,...
linkedin2username
linkedin2username OSINT Tool: Generate username lists from companies on LinkedIn. This is a pure web-scraper, no API key required. You use your valid LinkedIn username and password to login, it will create several lists of possible username formats for all employees of a company you point it at...
SUSE-SU-2026:2967-1 Security update for libgnt, meson, pidgin
This update for libgnt, meson, pidgin fixes the following issues Security issue: - CVE-2019-25544: denial of service vulnerability that allows local attackers to crash the application by providing an excessively long username string during account creation bsc1260058. Non security issues: Changes...
Oracle Linux 7 : python-pyasn1 (ELSA-2026-4148)
The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-4148 advisory. 0.1.9-7.0.1 - Fixes CVE-2026-23490 fixes potential memory exhaustion Orabug: 39060516 Tenable has extracted the preceding description block directly from the...
gimp:2.8 security update
gimp 2:2.8.22-26.4 - fix CVE-2025-14422 2:2.8.22-26.3 - fix CVE-2025-10920 - fix CVE-2025-10921 - fix CVE-2025-10922 - fix CVE-2025-10923 - fix CVE-2025-10924 - fix CVE-2025-10925 - fix CVE-2025-10934 2:2.8.22-26.2 - fix CVE-2025-5473 RHEL-95696 2:2.8.22-26.1 - fix CVE-2025-48797 RHEL-93503 - fix...
