wreckuests

What is this? Wreckuests is a script, which allows you to run DDoS attacks with HTTP-floodGET/POST. It's written in pure Python and uses proxy-servers as "bots". OF COURSE, this script is not universal and you can't just drop Pentagon/NSA/whatever website with just a single mouse click. Each atta...

ssh-auditor

SSH Auditor Features ssh-auditor will automatically: Re-check all known hosts as new credentials are added. It will only check the new credentials. Queue a full credential scan on any new host discovered. Queue a full credential scan on any known host whose ssh version or key fingerprint changes...

malcom

Malcom - Malware Communication Analyzer Malcom is a tool designed to analyze a system's network communication using graphical representations of network traffic, and cross-reference them with known malware sources. This comes handy when analyzing how certain malware species try to communicate wit...

Proof-of-Concept-POC---CVE-2026-49975-HTTP-2-Bomb-

CVE-2026-49975 - HTTP/2 Bomb 概念验证 描述 CVE-2026-49975，也称为 HTTP/2 Bomb ，是一种远程拒绝服务（DoS）漏洞，影响大多数主流 Web 服务器在其默认 HTTP/2 配置下的运行。 该漏洞由 OpenAI Codex 在结合两种已存在近十年的技术时发现： HPACK Bomb ：网络中的一个字节在服务器端会转化为完整的标头分配 Slowloris-style hold ：零字节流量控制窗口阻止内存释放 受影响的服务端 服务端| 受影响版本| 状态 ---|---|--- nginx| 1.29.8| ✅ 已修复 Apache...

pivotnacci

pivotnacci Pivot into the internal network by deploying HTTP agents. Pivotnacci allows you to create a socks server which communicates with HTTP agents. The architecture looks like the following: This tool was inspired by the great reGeorg. However, it includes some improvements: Support for...

slowloris

slowloris.py - Simple slowloris in Python What is Slowloris? Slowloris is basically an HTTP Denial of Service attack that affects threaded servers. It works like this: 1. We start making lots of HTTP requests. 2. We send headers periodically every 15 seconds to keep the connections open. 3. We...

domain_analyzer

Domain Analyzer v0.8.3 What Domain analyzer is a security analysis tool that automatically discovers and reports information about a given domain. Its main purpose is to analyze domains in an unattended way. It has many crazy features, such as getting more domains from DNS zones, automatic nmap,...

http-garden

The HTTP Garden The HTTP Garden es una colección de servidores y proxies HTTP configurados para ser componibles, junto con scripts para interactuar con ellos de una manera que facilita mucho la búsqueda de vulnerabilidades. Para ver algunas demostraciones interesantes de las vulnerabilidades que...

Get-log4j-Windows.ps1

Get-log4j-Windows.ps1 Identifica todos los componentes log4j en todos los servidores Windows, en todo el dominio; puede ser multidominio. CVE-2021-44228 Se escala a más de 1,000 servidores Windows, 250+ servidores a la vez. 1k servidores tardaron aproximadamente 1 hora y media. Apache log4j...

sqlwinds

SQLWinds Kit de Evaluación de Seguridad y Post-Explotación para SQL SQLWinds es una herramienta de línea de comandos para pruebas de seguridad y explotación de Microsoft SQL Server. Proporciona un entorno interactivo para analizar servidores en profundidad, escalar privilegios, ejecutar ataques y...

CVE-2023-44487-HTTP-2-Rapid-Reset-Attack

PoC - CVE-2023-44487: HTTP/2 快速重置攻击 该仓库包含一个概念验证（PoC）代码，用于演示利用漏洞 CVE-2023-44487 （也称为 HTTP/2 Rapid Reset Attack ）。该漏洞影响 HTTP/2 协议，攻击者可通过快速关闭 RSTSTREAM 的流（streams）来使 web 服务器过载。 📌 描述 CVE-2023-44487 是 HTTP/2 协议中的一个漏洞，允许攻击者发动大规模分布式拒绝服务（DDoS）攻击。该攻击通过在单个 HTTP/2 连接内打开多个流，然后使用 RSTSTREAM...

ike-scan

ike-scan Discover and fingerprint IKE hosts IPsec VPN Servers Table of Contents Building and Installing Overview Usage Implementation Details Host Input and Memory Requirements Rate Limiting Cookie Generation and Remote Host Identification IKE Packet Details Backoff Fingerprinting Program Output...

tcpcopy

TCPCopy - TCP 流回放工具 TCPCopy 是一个 TCP 流回放工具，用于对互联网服务器应用进行逼真的测试。 了解 TCPCopy TCPCopy 初学者概览 TCPCopy 架构总体概述 TCPCopy 测试用例 TCPCopy 预预热示例 描述 尽管真实的在线流量对于测试互联网服务器应用至关重要，但由于在线环境的复杂性，精确模拟它是一项挑战。为了实现更逼真的测试，TCPCopy 被开发为一种实时流量再现工具，能够生成与生产工作负载高度相似的测试工作负载。TCPCopy 在中国公司中被广泛使用。 TCPCopy 对生产系统的影响极小，仅消耗额外的...

HTTP-Basma

Adaptive Fingerprinting: HTTP-Basma's Multi-Stage Probing for Granular Server Differentiation HTTP-Basma is live at https://httpbasma.netomize.ca/ Introduction In the realm of cybersecurity, accurately identifying and characterizing web servers is crucial for threat detection, vulnerability...

domi-owned

Domi-Owned Summary Domi-Owned is a tool used for compromising IBM/Lotus Domino servers. Tested on IBM/Lotus Domino 8.5.2, 8.5.3, 9.0.0, and 9.0.1 running on Windows and Linux. Requirements Domi-Owned uses Python 3, which can be install through your distribution's package manager apt, yum, etc...

mallory

mallory HTTP/HTTPS proxy over SSH. Installation Local machine: go install github.com/justmao945/mallory/cmd/mallory@latest Remote server: need our old friend sshd Configuration Config file Default path is $HOME/.config/mallory.json, can be set when start program root@kitploit: mallory -config...

CVE-2022-44877

CVE-2022-44877 Overview This bash script is used to test the vulnerability of web servers to CVE-2022-44877. The script performs a curl request to a target URL with a payload encoded in base64. If the target is vulnerable to the CVE-2022-44877 vulnerability, the elapsed time of the curl request...

Emby Server - Authentication Bypass

Emby Server is a user-installable home media server which stores and organizes a user's media files of virtually any format and makes them available for viewing at home and abroad on a broad range of client devices. This vulnerability may allow administrative access to an Emby Server system,...

LocalAI - Partial Local File Read

A vulnerability in the /models/apply endpoint of mudler/localai versions 2.15.0 allows for Server-Side Request Forgery SSRF and partial Local File Inclusion LFI. The endpoint supports both https-// and file-// schemes, where the latter can lead to LFI. However, the output is limited due to the...

Gogs <= 0.13.3 - Remote Code Execution

Gogs self-hosted Git service versions 0.13.3 and earlier contain a critical symlink bypass vulnerability that circumvents the fix for CVE-2024-55947. Authenticated users can exploit improper symbolic link handling in the PutContents API to overwrite files outside the repository by committing a...