MOSAIC

MOSAIC What is the purpose of this initiative? MOSAIC provides a coordination structure for organziations creating AI security standards and guidelines, reducing inconsistencies, duplicate work, misalignment, and gaps. The end goal is to let the standards and guideline landscape provide clear...

ossem-power-up

OSSEM A tool to assess data quality, built on top of the awesome OSSEM project. Mission Answer the question: I want to start hunting ATT&CK techniques, what log sources and events are more suitable? Create transparency on the strengths and weaknesses of your log sources Provide an easy way to...

BadBlood

BadBlood BadBlood by Secframe fills a Microsoft Active Directory Domain with a structure and thousands of objects. The output of the tool is a domain similar to a domain in the real world. After BadBlood is ran on a domain, security analysts and engineers can practice using tools to gain an...

pagesource

pagesource A Python CLI tool that captures all resources loaded by a webpage like browser DevTools Sources tab and saves them with the original directory structure. Installation root@kitploit: pip install pagesource IMPORTANT: Install Playwright browser after package installation playwright insta...

PortexAnalyzerGUI

PortexAnalyzerGUI Interfaz gráfica para PortEx, una biblioteca de análisis de ejecutables portátiles y malware Descarga Página de versiones Características Información de cabecera de: Cabecera MSDOS, Cabecera Rich, Cabecera de Archivo COFF, Cabecera Opcional, Tabla de Secciones, Metadatos .NET...

The vulnerability of the platform for creating individual web applications in CRM involves a lack of measures to protect the SQL query structure, allowing attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the platform for creating individual web applications in CRM involves the failure to take measures to protect the SQL query structure. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected...

The vulnerability of the Webasyst content management system and the Shop-Script CMS system lies in the lack of measures to protect the SQL query structure, allowing attackers to execute arbitrary SQL code.

The vulnerability of the Webasyst framework for designing content management systems and the Shop-Script CMS system lies in the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary SQL code...

The vulnerability of the Webasyst content management system and the Shop-Script CMS system lies in the lack of measures to protect the SQL query structure, allowing attackers to execute arbitrary SQL code.

The vulnerability of the Webasyst framework for designing content management systems and the Shop-Script CMS system lies in the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary SQL code...

The vulnerability of the FOQUZ platform, related to the lack of measures taken to protect the website structure, allows attackers to perform cross-site scripting attacks (XSS).

The vulnerability of the FOQUZ platform is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks XSS remotely...

The vulnerability of the FOQUZ platform, related to the lack of measures taken to protect the website structure, allows attackers to perform cross-site scripting attacks (XSS).

The vulnerability of the FOQUZ platform is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks XSS remotely...

sast-rules

Reglas de Semgrep Este es el repositorio central de reglas de Semgrep que alberga las reglas de Semgrep para el analizador Semgrep de GitLab. El repositorio está estructurado de la siguiente manera: root@kitploit: . ├── mappings │ ├── findsecbugs.yml │ ├── eslint.yml │ └── ... ├── rules │ ├──...

rop-tool

rop-tool v2.4.2 Una herramienta para ayudarte a escribir exploits binarios OPCIONES root@kitploit: rop-tool v2.4.2 Help you make binary exploits. Usage: rop-tool OPTIONS Commands : gadget Search gadgets patch Patch the binary info Print info about binary heap Display heap structure disassemble...

custom-bytecode-analyzer

custom-bytecode-analyzer Java bytecode analyzer customizable via JSON rules. It is a command-line tool that receives a path containing one or more Jar or War files, analyzes them using the provided rules and generates HTML reports with the results. Usage root@kitploit: usage: java -jar cba-cli.ja...

templates

Report Templates Directory Structure notes: Script generate-directories.py grabs the current latest version of the VRT structure from GitHub and creates any missing directories. Does not remove or rename directories based on items removed from VRT. Script follows standard entry names and keeps...

python-haystack

python-haystack memoria forense |travis| |coverage| |landscape| |pypi| |docs| Inicio rápido: Guía de uso rápido en la carpeta docs/. CLI de Haystack-reverse en la carpeta docs/. Más documentación Introducción: python-haystack es un framework de análisis de heap, enfocado en la búsqueda e ingenier...

ldsview

ldsview Offline search tool for LDAP directory dumps in LDIF format. Features Fast and memory efficient parsing of LDIF files Build ldapsearch commands to extract an LDIF from a directory Show directory structure UAC and directory time format translation Config Config options can be passed as CLI...

CAPE-parsers

CAPE-parsers CAPE core and community parsers Configs structure root@kitploit: CNCs: campaign: str botnet: str dgaseed: hex str version: str mutex: str useragent: str build: str cryptokey: str cryptokeytype: str algorithm. Ex: RC4, RSA public key. salsa20, xchacha20 raw: any other data goes here A...

Winrar-Exploit-CVE-2023-38831

WinRAR Exploit Builder WinForms / .NET Framework WinRAR Version Below 6.23 Overview This repository contains a small Windows desktop/console utility written in C .NET Framework 4.8 that demonstrates an archive-structure technique commonly discussed in security research contexts. About...

jdam

jdam - Fuzzing JSON consciente de la estructura jdam es una herramienta inspirada en Radamsa para fuzzear objetos JSON arbitrarios de manera consciente de la estructura, lo que garantiza que los resultados del fuzzing siempre sean JSON válido. Muchas herramientas de fuzzing existentes alteran...

web_exploit_detector

Web Exploit Detector Introduction The Web Exploit Detector is a Node.js application and NPM module used to detect possible infections, malicious code and suspicious files in web hosting environments. This application is intended to be run on web servers hosting one or more websites. Running the...