CVE-2020-11881

CVE-2020-11881 MikroTik SMB Negação de Serviço Remota DoS Este relatório descreve o CVE-2020-11881, uma negação de serviço remota não autenticada para o serviço SMB do MikroTik executado no RouterOs. A vulnerabilidade permite que um atacante derrube o serviço SMB em execução e foi divulgada de...

CVE-2023-38646-PoC

CVE-2023-38646 - Metabase प्री-ऑथ RCE Metabase ओपन सोर्स 0.46.6.1 से पहले और Metabase एंटरप्राइज़ 1.46.6.1 से पहले हमलावरों को सर्वर पर, सर्वर के विशेषाधिकार स्तर पर, मनमाने कमांड निष्पादित करने की अनुमति देते हैं। शोषण के लिए प्रमाणीकरण आवश्यक नहीं है। अन्य पैच किए गए संस्करण 0.45.4.1, 1.45.4.1,...

gophish

Fork do Gophish ======= Este é um fork do Gophish: Kit de Phishing de Código Aberto Gophish Novas funcionalidades Este fork foca na execução de campanhas de phishing reais para um único cliente. As seguintes funcionalidades foram adicionadas: Script para configurar automaticamente uma instância...

rainmap-lite

rainmap-lite Rainmap Lite - Responsive web application that allows users to launch Nmap scans from their mobiles/tablets/web browsers! Unlike it's predecessor 1, Rainmap-lite does not require special services RabbitMQ, PostgreSQL, Celery, supervisor, etc to make it easy to install on any server...

xc

XC Netcat like reverse shell for Linux & Windows. Features Windows root@kitploit: Usage: └ Shared Commands: !exit !upload uploads a file to the target !download downloads a file from the target !lfwd local portforwarding like ssh -L !rfwd remote portforwarding like ssh -R !lsfwd lists active...

Metabase-Pre-Auth-RCE-POC

CVE-2023-38646 — Metabase Execução Remota de Código RCE Prova de Conceito Visão Geral Este repositório documenta um projeto de pesquisa de segurança Prova de Conceito PoC analisando CVE-2023-38646 , uma vulnerabilidade crítica de Execução Remota de Código RCE sem autenticação que afeta versões...

algo

Algo VPN Algo VPN, Ansible स्क्रिप्ट का एक सेट है जो व्यक्तिगत WireGuard और IPsec VPN की स्थापना को सरल बनाता है। यह उपलब्ध सबसे सुरक्षित डिफ़ॉल्ट सेटिंग्स का उपयोग करता है और सामान्य क्लाउड प्रदाताओं के साथ काम करता है। अधिक जानकारी के लिए हमारी रिलीज़ घोषणा देखें। विशेषताएँ केवल iOS, macOS और...

prithvi

Prithvi A Report Generation Tool for Security Assessment Usage This project of ours could be used for report generation and its very easy to use. It includes following features 1. We can add Owasp Types and recommendation with details. 2. We can add Multiple Projects and work on it separately. 3...

WebPort-v1.19.1-Reflected-XSS

WebPort-v1.19.1-Reflected-XSS XSS refletido no WebPort-v1.19.1 afeta usuários que abrem um link criado com intenção maliciosa ou uma página web de terceiros. CVE-2019-12460 https://vulners.com/cve/CVE-2019-12460 PoC-1 Para explorar a vulnerabilidade, alguém poderia usar a requisição...

flan

Flan Scan is a lightweight network vulnerability scanner. With Flan Scan you can easily find open ports on your network, identify services and their version, and get a list of relevant CVEs affecting your network. Flan Scan is a wrapper over Nmap and the vulners script which turns Nmap into a...

WebGoat.NET

A partir do prompt, use cd para entrar no diretório DB do WebGoat.NET root@kitploit: % cd /WebGoat.NET/DB Inicie o utilitário mysql, informando o nome e a senha, se necessário de um usuário com permissão para criar bancos de dados. Por exemplo, para usar o usuário root padrão: % mysql --user=root...

revshellgen

🚀 RevShellGen Reverse Shell Generator Automate reverse shell generation with style Generate, encode, and catch reverse shells without the hassle Features • Installation • Usage • Shell Types • Contributing 📖 About RevShellGen is a powerful command-line tool that simplifies the process of generati...

dockernymous

DESÇA PARA OS REQUISITOS E INSTRUÇÕES NÃO FUNCIONARÁ SE VOCÊ NÃO SEGUI-LOS Aviso: Dockernymous está num estado muito inicial de desenvolvimento. Use-o apenas para fins educacionais. NÃO o use se depender de anonimato forte! Novidades 13.10.2018 Mudei completamente a lógica geral de funcionamento ...

CVE-2023-38646

Metabase प्री-ऑथेंटिकेशन RCE CVE-2023-38646 हमने दो फ़ाइलें प्रदान की हैं:- CVE-2023-38646-POC.py किसी भी Metabase इंस्टेंस द्वारा setup-token लीक होने की जाँच के लिए। CVE-2023-38646-Reverse-Shell.py हमलावर-नियंत्रित मशीन पर रिवर्स शेल प्राप्त करने के लिए। CVE-2023-38646-POC.py...

permission-manager

Permission manager Welcome to the Permission Manager! 🎉 🎉 Permission Manager is an application developed by SIGHUP that enables a super-easy and user-friendly RBAC management for Kubernetes. If you are looking for a simple and intuitive way of managing your users within a Kubernetes cluster, this...

kubernetes-goat

Kubernetes Goat ✨ The Kubernetes Goat is designed to be an intentionally vulnerable cluster environment to learn and practice Kubernetes security 🚀 🙌 Refer to https://madhuakula.com/kubernetes-goat for the guide 📖 🧰 Setting up Kubernetes Goat Ensure you have admin access to the Kubernetes cluster...

hackerEnv

Entre em contato comigo: hackerEnv...

msfconsole-termux

msfconsole-termux Como Instalar o Metasploit-Table no Termux Android root@kitploit: pkg update apt-get install curl wget -y wget https://raw.githubusercontent.com/jas502n/msfconsole-termux/master/metasploit.sh |chmod 777 metasploit.sh && ./metasploit.sh EXEMPLOS root@kitploit: msfconsole -q -x "u...

crackerjack

!CAUTION This repo is unmaintained, visit https://github.com/sadreck/crackerjack for the latest version. CrackerJack Web Interface for Hashcat by Context Information Security Contents Introduction Architecture Features Limitations Installation Troubleshooting Screenshots License Introduction...

filtron

Filtron Reverse HTTP proxy to filter requests by different rules. Can be used between production webserver and the application server to prevent abuse of the application backend. The original purpose of this program was to defend searx, but it can be used to guard any web application. Installatio...