DblTekGoIPPwn

DblTekGoIPPwn Tool per sfruttare il sistema di risposta alle challenge nei dispositivi DblTek GoIP vulnerabili. Può generare risposte a challenge specifiche, testare gli host per la vulnerabilità, eseguire comandi su host vulnerabili, inviare messaggi SMS da un host e accedere a una shell root su...

rip_raw

Rip Raw Rip Raw is a small tool to analyse the memory of compromised Linux systems. It is similar in purpose to Bulk Extractor, but particularly focused on extracting system Logs from memory dumps from Linux systems. This enables you to analyse systems without needing to generate a profile. This ...

varc

varc Sammler flüchtiger Artefakte varc sammelt eine Momentaufnahme flüchtiger Daten eines Systems. Es zeigt, was auf einem System passiert, und ist besonders nützlich bei der Untersuchung eines Sicherheitsvorfalls. Es erstellt eine ZIP-Datei, die mehrere verschiedene Datenstücke enthält, um zu...

LinkedIntel

LinkedIntel root@kitploit: ╔══════════════════════════════════════════════════════════════════════════════════════╗ ║ ║ ║ ██▓ ██▓ ███▄ █ ██ ▄█▀▓█████ ▓█████▄ ██▓ ███▄ █ ▄▄▄█████▓▓█████ ██▓ ║ ║ ▓██▒ ▓██▒ ██ ▀█ █ ██▄█▒ ▓█ ▀ ▒██▀ ██▌▓██▒ ██ ▀█ █ ▓ ██▒ ▓▒▓█ ▀ ▓██▒ ║ ║ ▒██▒ ▒██▒▓██ ▀█ ██▒▓███▄░ ▒███ ░...

commvault-cve2025-34028-check

infra-monitor infra-monitor é um script Nmap NSE leve para testar silenciosamente a consistência de respostas em rotas de infraestrutura web. Ajuda a detectar anomalias em controle de acesso, discrepâncias de configuração ou possíveis inconsistências na forma como diferentes endpoints respondem...

revsuit

RevSuit - Una piattaforma di connessione inversa flessibile e potente Inglese ｜简体中文 Panoramica RevSuit è una piattaforma di connessione inversa flessibile e potente progettata per ricevere connessioni dal sistema target durante un penetration test. Attualmente supporta i protocolli HTTP, DNS, RMI...

CVE-2025-67070-Intelbras-CFTV-MFA-Bypass

Intelbras NVD 9032 R Ftd – Vulnerabilità critica di reset della password Scoperta da: Theo Cia CVE: CVE-2025-67070 Stato: Segnalato al fornitore Data della scoperta: Novembre 2025 Impatto: Accesso amministrativo completo tramite bypass MFA Firmware: V2.800.00IB00C.0.T Data di build: 2022-08-17...

Zero-Click-RCE-Incident-Response-CVE-2025-21298

Incident Response: RCE Zero-Click OLE di Windows CVE-2025-21298 Panoramica del Progetto Questo progetto documenta l'indagine e il contenimento end-to-end di un tentativo di Esecuzione Remota di Codice RCE Zero-Click di gravità critica. Utilizzando la telemetria EDR e la threat intelligence, ho...

Audix

root@kitploit: | / /| | / / / / / |// / // // // / / // |,/ ,/ // //|| ist ein PowerShell-Tool zur schnellen Konfiguration der Windows-Ereignisüberwachungsrichtlinien für Monitoring und Incident Response. Bitte beachten: Dieses Tool ändert nur die lokale Sicherheitsrichtlinie. Wenn es auf einem...

grapl

Grapl Grapl é uma plataforma SIEM baseada em grafos construída por e para engenheiros de resposta a incidentes. NOTICE A Grapl encerrou suas operações como empresa. Dessa forma, este código não está mais sendo ativamente desenvolvido, mas permanecerá disponível em um estado arquivado. Details Gra...

POC-2020-8559

POC-2020-8559 استغلال لـ CVE-2020-8559. نقوم بسرقة جميع الاتصالات إلى kubelet باستخدام iptables ثم نعيد كتابة ردود 101 أو 302 إلى 307. الـ 101 مخصصة للإصدارات الحديثة من Kubernetes، بينما الـ 302 للإصدارات الأقدم. ليست لدينا صلاحية الوصول إلى شهادة x509 الخاصة بـ kube-apiserver، لذا يمكن أن يشكل...

dfir-malware-investigation

Laboratorio di Indagine Malware DFIR – Spring4Shell CVE-2022-22965 Un progetto completo di Digital Forensics & Incident Response DFIR che simula, rileva e investiga la vulnerabilità critica Spring4Shell CVE-2022-22965. Questo progetto dimostra l'intero ciclo di vita della risposta agli incidenti,...

CVE-2026-77341

cpp-httplib is a C++ header-only HTTP/HTTPS library. In version 0.49.0, the chunked-response trailer output path writes trailer header names and values directly to the socket without validating them, allowing CRLF sequences in a trailer field to inject additional headers or split the HTTP respons...

CVE-2026-54083

Wazuh is an open-source security platform providing unified XDR and SIEM protection for endpoints and cloud workloads. The ip-customblock active response script contains a path traversal vulnerability that lets an attacker create or delete arbitrary files on the filesystem as root. The script...

CVE-2026-37237

vLLM (versions up to and including 0.17.0 ) is vulnerable to a Denial of Service via memory exhaustion . The AsyncMediaIO.fetch_audio and AsyncMediaIO.fetch_image functions in multimodal/inputs.py fetch user-supplied media URLs using aiohttp and call r.read() without enforcing a maximum response ...

CVE-2026-37237

vLLM up to and including 0.17.0 allows remote attackers to cause a Denial of Service via memory exhaustion. The AsyncMediaIO.fetchaudio and AsyncMediaIO.fetchimage functions in multimodal/inputs.py fetch user-supplied media URLs using aiohttp and call r.read without enforcing a maximum response...

EUVD-2026-67775

vLLM up to and including 0.17.0 allows remote attackers to cause a Denial of Service via memory exhaustion. The AsyncMediaIO.fetchaudio and AsyncMediaIO.fetchimage functions in multimodal/inputs.py fetch user-supplied media URLs using aiohttp and call r.read without enforcing a maximum response...

EUVD-2026-63376

aiosmtplib: STARTTLS response injection...

CVE-2026-54084

Wazuh versions 4.0.0 through 4.14.6 are susceptible to a NULL pointer dereference in the w_enrollment_process_agent_key() routine during agent enrollment. When a rogue or man-in-the-middle manager returns a malformed key with fewer than four space-separated fields, OS_StrBreak() leaves the missin...

CVE-2026-54084 Wazuh agent enrollment NULL pointer dereference via malformed manager response

Wazuh is an open-source security platform providing unified XDR and SIEM protection for endpoints and cloud workloads. In versions 4.0.0 through 4.14.6, a malicious or man-in-the-middle enrollment manager can crash a Wazuh agent during enrollment by returning a malformed key response with fewer...