1443796 matches found
umap
umap - la herramienta de evaluación de seguridad del host USB Basado en Facedancer por Travis Goodspeed: http://goodfet.sourceforge.net/hardware/facedancer21/ Publicado como código abierto por NCC Group Plc - http://www.nccgroup.com/ Desarrollado por Andy Davis, andy dot davis at nccgroup dot com...
yersinia
Spanning Tree 1: DOS attack sending conf BPDUs root@kitploit: Let's send some conf BPDUs claiming be root!!! By sending continously conf BPDU with root pathcost 0, randomly generated bridge id and therefore the same root id, and some default values for other fields, we try to annoy the switches...
pygoat
PyGoat intentionally vuln web Application Security in django. our roadmap build intentionally vuln web Application in django. The Vulnerability can based on OWASP top ten Table of Contents pygoat Installation From Sources Docker Container Installation Video Uninstallation Solutions For Developers...
urlbrute
URLBrute Tool for brute-force directories/DNS on websites Avaliable Modes Directory/File brute-force DNS brute-force Installation Building from Source Install dependencies root@kitploit: go get Build executable root@kitploit: go build If you want to install in the $GOPATH/bin folder root@kitploit...
Scythe
Scythe scythe: account enumerator root@kitploit: Account Enumerator is designed to make it simple to perform account enumeration as part of security testing. The framework offers the ability to easily create new modules XML files and speed up the process of testing. This tool was created with 2...
kubesec
Kubesec 🚨 v1 API is deprecated, please read the release notes 🚨 Security risk analysis for Kubernetes resources...
CVE-2026-85623
A flaw was found in goose. This vulnerability allows attackers to execute arbitrary commands by distributing malicious recipes that leverage insecure recipe standard input/output stdio extensions and retry checks. This bypasses the existing security scan, enabling the execution of shell commands...
b4tm4n
B4TM4N PHP WEBSHELL Login Account Default root@kitploit: Username : k4mpr3t Password : k4mpr3t Features root@kitploit: 0 File Manager 1 Sec. Info 2 Simply Database 3 Interactive terminal 4 PHP Reverse Back Connect 5 Run PHP Code 6 Custom Toolz 7 Self Script Encryptor ! 8 Error Handler 9 Themes Se...
b4tm4n
B4TM4N PHP WEBSHELL Cuenta de inicio de sesión por defecto root@kitploit: Usuario : k4mpr3t Contraseña : k4mpr3t Características root@kitploit: 0 Administrador de archivos 1 Info de seguridad 2 Base de datos simple 3 Terminal interactiva 4 Conexión inversa PHP Reverse Back Connect 5 Ejecutar códi...
RpcInvestigator
RPC Investigator Please read our blog post announcement. RPC Investigator RPCI is a .NET/C Windows Forms UI application that provides an advanced discovery and analysis interface to Windows RPC endpoints. The tool provides a visual interface around the existing core RPC capabilities of the...
kippo
NOTE: For more recent development, check out Michel Oosterhof's fork Kippo Kippo is a medium interaction SSH honeypot designed to log brute force attacks and, most importantly, the entire shell interaction performed by the attacker. Kippo is inspired, but not based on Kojoney. Demo Some interesti...
CECster
CECSTeR CECSTeR is the Consumer Electronics Control Security Testing Resource - a GUI-based tool to perform security testing against the HDMI CEC Consumer Electronics Control and HEC HDMI Ethernet Channel protocols Released as open source by NCC Group Plc - http://www.nccgroup.com/ Developed by...
DNS-resolve-checker
DNS-resolver Usage root@kitploit: bash pdnscheck.sh follow the steps...
CVE-2022-40146_Exploit_Jar
Apache Batik SSRF to RCE Jar Exploit Component link https://github.com/apache/xmlgraphics-batik Blog https://www.zerodayinitiative.com/blog/2022/10/28/vulnerabilities-in-apache-batik-default-security-controls-ssrf-and-rce-through-remote-class-loading Usage Modify the line 11 in...
0l4bs
0l4bs Laboratorios de Cross-site scripting para entusiastas de la seguridad de aplicaciones web Lista de Desafíos : root@kitploit: Desafío 1 | URL Desafío 2 | Form Desafío 3 | User-Agent Desafío 4 | Referrer Desafío 5 | Cookie Desafío 6 | LocalStorage Desafío 7 | Login Page Desafío 8 | File Uploa...
0l4bs
0l4bs Cross-site scripting labs for web application security enthusiasts List of Chall : root@kitploit: Chall 1 | URL Chall 2 | Form Chall 3 | User-Agent Chall 4 | Referrer Chall 5 | Cookie Chall 6 | LocalStorage Chall 7 | Login Page Chall 8 | File Upload Chall 9 | Base64 Encoding Chall 10 |...
CVE-2025-55182
Next.js CVE-2025-55182 – Automated Scanner Python This repository contains a fully automated Python PoC scanner for CVE-2025-55182 , a security vulnerability affecting Next.js 16.0.6. The tool allows security researchers and bug bounty hunters to test multiple targets at scale by simply providing...
vuln-list-aqua
vuln-list-aqua Security advisories from Aqua Security...
exrex
EXREX Irregular methods for regular expressions. Exrex is a command line tool and python module that generates all - or random - matching strings to a given regular expression and more. It's pure python, without external dependencies. There are regular expressions with infinite matching strings...