1444251 matches found
Creosote
Creosote Creosote is our solution to searching for the tarfile vulnerability described by CVE-2007-4559. The tool recursively traverses the given directory searching for python files. When the tool finds python files it scans them for the tarfile module and then parses the code into an AST to loo...
CVE-2023-0156
CVE ID : CVE-2023-0156 Vulnerability Type : Directory Traversal Description : The All-In-One Security AIOS plugin for WordPress is vulnerable to directory traversal in versions up to, and including, 5.1.4. This allows authenticated attackers with administrator-level permissions to read the conten...
ParamPamPam
ParamPamPam This tool for brute discover GET and POST parameters. Installation With Docker Install Docker root@kitploit: git clone https://github.com/Bo0oM/ParamPamPam.git cd ParamPamPam docker build -t parampp . echo -e '!'"/bin/bash\ndocker run -ti --rm parampp $@" /usr/local/bin/parampp paramp...
mimosa
Mimosa 描述 系统重启，数据库转储，以前称为 SecureCoding，现在交给初级人员，最后完全重写。 这是一个开源核心；它不包括管理控制。 特性 大量挑战 引用现代流行文化 开始使用 方法 1：Jar 版本 下载最新的 Mimosa 版本 这里。 将 mimosa 放在您喜欢的目录中，然后在终端中运行以下命令。 root@kitploit: user@mimosa:$ java -jar mimosa-core-.jar -g sql Packages created! user@mimosa:$ java -jar mimosa-core-.jar -g properties...
combobulator
Dependency Combobulator Dependency Combobulator 是一个开源、模块化、可扩展的框架，用于检测和防止依赖混淆泄露及潜在攻击。它提供了一种整体性的方法，确保安全的应用发布，并能针对不同来源（如 GitHub Packages、JFrog Artifactory）和多种包管理方案（如 npm、maven）进行评估。 目标受众 该框架可供安全审计人员、渗透测试人员使用，甚至可以自动化地嵌入企业应用安全程序及发布流程中。 主要特性 可插拔 - 可在 SDLC 的提交、构建、发布阶段介入。 可扩展 - 轻松添加您自己的包管理方案或代码来源。 通用启发式引...
chkdfront
Check Domain Fronting chkdfront chkdfront checks if your domain fronting is working by testing the targeted domain fronted domain against your domain front domain. root@kitploit: MMMMMMMMMMMMMWNK0kdolc;,' ;KMMMMMMMMMMMMMMMMMMMMMMMMMMM MMMMMMMMMN0xl;'. lNMMMMMMMMMMMMMMMMMMMMMMMMMM MMMMMWKxc'...
BadBlood
BadBlood BadBlood by Secframe fills a Microsoft Active Directory Domain with a structure and thousands of objects. The output of the tool is a domain similar to a domain in the real world. After BadBlood is ran on a domain, security analysts and engineers can practice using tools to gain an...
BadBlood
BadBlood BadBlood de Secframe llena un dominio de Microsoft Active Directory con una estructura y miles de objetos. La salida de la herramienta es un dominio similar a un dominio del mundo real. Después de ejecutar BadBlood en un dominio, los analistas e ingenieros de seguridad pueden practicar e...
pocs
pocs 我们将在此仓库中发布PoC 此仓库中的所有漏洞均已负责任地披露...
RCLocals
RCLocals Inspired by 'Autoruns' from Sysinternals, RCLocals analyzes all Linux startup possibilities to find backdoors, also performs process integrity verification, scan for DLL injected processes and much more Things covered: ·List GPG keys trusted by the system ·Installed Packages ·File...
apkleaks
APKLeaks Escaneando archivo APK en busca de URIs, endpoints y secretos. Instalación desde PyPi desde el código fuente desde Docker Uso Opciones Salida Patrón Argumentos para descompilador Licencia Agradecimientos Instalación Es bastante sencillo instalar APKLeaks : desde PyPi root@kitploit: $ pip...
powerob
Powerob An on-the-fly Powershell script obfuscator meant for red team engagements. Built out of necessity. This only obfuscates functions and removes found in PowerShell scripts. Roadmap includes bfuscating variables. Pull requests and collaborative welcomed. About This was built out of the need ...
owasp-istg
OWASP IoT Security Testing Guide The OWASP IoT Security Testing Guide provides a comprehensive methodology for penetration tests in the IoT field offering flexibility to adapt innovations and developments on the IoT market while still ensuring comparability of test results. The guide provides an...
KnockMail
KnockMail Copyright 2017 KnockMail Written by: Alisson Moretto - 4w4k3 Twitter: @4w4k3Official Cloning: root@kitploit: git clone https://github.com/4w4k3/KnockMail.git Running: root@kitploit: cd KnockMail root@kitploit: sudo su root@kitploit: pip install -r requeriments.txt root@kitploit: python...
clusterfuzz
ClusterFuzz ClusterFuzz 是一个可扩展的模糊测试基础设施，用于发现软件中的安全性和稳定性问题。 Google 使用 ClusterFuzz 对所有 Google 产品进行模糊测试，并作为 OSS-Fuzz 的模糊测试后端。 ClusterFuzz 提供了许多功能，帮助将模糊测试无缝集成到软件项目的开发过程中： 高度可扩展。可在任何规模的集群上运行（例如 OSS-Fuzz 实例在 100,000 台虚拟机上运行）。 精确的崩溃去重。 完全自动的漏洞提交、分类和关闭，支持多种问题追踪器（例如 Monorail、Jira）。...
ROOT-APP-NPM-CVE-2026-64645 CVE-2026-64645 in next - Patched by Root
Root has patched CVE-2026-64645 in the next package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-GHSA-Q4GF-8MX6-V5V3 GHSA-q4gf-8mx6-v5v3 in next - Patched by Root
Root has patched GHSA-q4gf-8mx6-v5v3 in the next package for Root:npm. Multiple fixed versions available...
linux-4.1.15_CVE-2022-42703
Linux kernel release 4.x http://kernel.org/ These are the release notes for Linux version 4. Read them carefully, as they tell you what this is all about, explain how to install the kernel, and what to do if something goes wrong. WHAT IS LINUX? Linux is a clone of the operating system Unix, writt...
st
ST Smart Things ST Smart Things Sentinel es una herramienta de seguridad avanzada diseñada específicamente para examinar y detectar amenazas dentro de los intrincados protocolos utilizados por los dispositivos IoT Internet de las cosas. En el panorama en constante expansión de los dispositivos...