ransomwhere

Ransomwhere A Proof of Concept ransomware sample that encrypts your files to test out your ransomware detection & prevention strategies. If no arguments are provided, ransomwherewill automatically execute the encrypt mode without deleting the original files. I am not responsible for any damage...

kernagent

root@kitploit: | | | | | |/ / \ '| ' \ / |/ |/ \ ' | | | / | | | | | | | | | / | | | | ||\|| || ||,|, ||| ||| |/ 🔍 kernagent Turn binaries into conversations — deterministic, auditable, offline-capable. kernagent converts a binary into a portable static snapshot and lets an LLM or your...

VMkatz

VMkatz Demasiado grande para robar Llevas tres semanas en un compromiso de equipo rojo. Tu tráfico se arrastra a través de una VPN, luego salta a través de cuatro proxies SOCKS encadenados a través de cajas de salto comprometidas antes de tocar la red objetivo. Cada paquete toma la ruta escénica...

ADExplorerSnapshot

ADExplorerSnapshot.py ADExplorerSnapshot.py es un analizador de instantáneas de AD Explorer. Está diseñado como un ingestor para BloodHound a través de BOFHound, y también admite el volcado completo de objetos a NDJSON. AD Explorer te permite conectarte a un DC y explorar datos LDAP. También pued...

HikVision-CVE-2017-7921

HikVision-CVE-2017-7921 Identify potential vulnerabilities with CVE-2017-7921 exploit checks or by testing the /onvif-http/snapshot?auth=YWRtaW46MTEK URI on target IP addresses using a multi-threaded approach for faster results. Requirements root@kitploit: python3 Python Pacakges = requests,...

Doldrums

Agitarse: moverse en movimientos rápidos e irregulares, latir rápidamente, estar agitado. Doldrums: un período de estancamiento. Doldrums es una herramienta de ingeniería inversa para aplicaciones Flutter orientadas a Android. Concretamente, es un analizador y extractor de información para el...

adexplorersnapshot-rs

ADExplorerSnapshot-rs Rewrite of ADExplorerSnapshot.py. Outputs a .tar.gz of BloodHound CE JSON files for ingestion. Please see the issues with this project before using it. It's not a drop in replacement yet. Installation Pre-built binaries for Linux and Windows are published in releases Usage...

Collect-MemoryDump

Collect-MemoryDump Collect-MemoryDump - Creación automatizada de instantáneas de memoria de Windows para DFIR Collect-MemoryDump.ps1 es un script de PowerShell utilizado para recopilar una instantánea de memoria de un sistema Windows en vivo incluyendo la recopilación del archivo de paginación de...

wtf

what the fuzz Un fuzzer distribuido, guiado por cobertura de código, basado en instantáneas y multiplataforma, diseñado para atacar objetivos en modo usuario y/o núcleo que se ejecuten en Microsoft Windows y modo usuario de Linux ¡experimental!. Descripción general what the fuzz o wtf es un fuzze...

sogen

Sogen runs Windows and Linux programs without a real operating system, and lets you see and control everything they do. Instead of reimplementing thousands of OS APIs, Sogen emulates binaries at CPU and syscall level and runs the real system DLLs , so behavior closely matches the real OS. Every...

applepie

applepie, a hypervisor implementation for Bochs Hello! Welcome to applepie! This is a tool designed for fuzzing, introspection, and finding bugs! This is a hypervisor using the Windows Hypervisor Platform API present in recent versions of Windows specifically this was developed and tested on...

libvshadow

libvshadow — это библиотека для доступа к формату Volume Shadow Snapshot VSS. Формат VSS используется Windows, начиная с Vista, для поддержания копий данных на томе запоминающего носителя. Информация о проекте: Статус: alpha Лицензия: LGPL-3.0-or-later См. также: OSDFC 2012: Статья - Windowless...

CVE-2023-26035

CVE-2023-26035 Unauthenticated RCE in ZoneMinder Snapshots - PoC Exploit alt img Description ZoneMinder versions prior to 1.36.33 and 1.37.33 are vulnerable to Unauthenticated Remote Code Execution due to missing authorization checks in the snapshot action. Usage root@kitploit: git clone...

red-detector

Red-Detector Description Scan your EC2 instance to find its vulnerabilities using Vuls https://vuls.io/en/. Audit your EC2 instance to find security misconfigurations using Lynis https://cisofy.com/solutions/lynis. Scan your EC2 instance for signs of a rootkit using Chkrootkit...

web_exploit_detector

Web Exploit Detector Introduction The Web Exploit Detector is a Node.js application and NPM module used to detect possible infections, malicious code and suspicious files in web hosting environments. This application is intended to be run on web servers hosting one or more websites. Running the...

web_exploit_detector

Web Exploit Detector Introducción Web Exploit Detector es una aplicación Node.js y un módulo NPM utilizada para detectar posibles infecciones, código malicioso y archivos sospechosos en entornos de alojamiento web. Esta aplicación está pensada para ejecutarse en servidores web que alojen uno o má...

CVE-2023-31595

CVE-2023-31595 IC Realtime ICIP-P2012T is vulnerable to Incorrect Access Control via an open port IC Realtime IP PTZ Dome Camera ICIP-P2012 software version: 2.420 An exposed port 9989 responds with a live snapshot at the time of request, by using a script, it could be leveraged to have a live fe...

ElasticSearch <1.6.1 - Local File Inclusion

ElasticSearch before 1.6.1 allows remote attackers to read arbitrary files via unspecified vectors related to snapshot API calls. id: CVE-2015-5531 info: name: ElasticSearch 1.6.1 - Local File Inclusion author: princechaddha severity: medium description: ElasticSearch before 1.6.1 allows remote...

Grafana Unauthenticated Snapshot Creation

Grafana 6.7.3 through 7.4.1 snapshot functionality can allow an unauthenticated remote attacker to trigger a Denial of Service via a remote API call if a commonly used configuration is set. id: CVE-2021-27358 info: name: Grafana Unauthenticated Snapshot Creation author: pdteam,bing0o severity: hi...

gha-lab-232af4821f

Automated research artifact — not the upstream project. This repository is a disposable lab built by an automated harness for a master's thesis at Université Laval on reproducing published GitHub Actions workflow vulnerabilities. It is a verbatim snapshot of BraveUX/for-the-badge at commit...