MikrotikExploit

Mikrotik Exploit Scansiona ed esporta la password di RouterOS Ti permette di scansionare sottoreti IPv4 in loop su porte diverse. Installazione Installa python3 Ubuntu/Debian: root@kitploit: $ apt-get install python3 Installa python3-pip gestore pacchetti Python Ubuntu/Debian: root@kitploit: $...

CVE-2022-23046

CVE-2022-23046 PhpIPAM v1.4.4 erlaubt einem authentifizierten Admin-Benutzer, SQL-Anweisungen im Parameter "subnet" zu injizieren, während er ein Subnetz über app/admin/routing/edit-bgp-mapping-search.php sucht. Installation 1. Erstellen root@kitploit: git clone...

Hwacha

Hwacha https://www.n00py.io/2017/12/raining-shells-on-linux-environments-with-hwacha/ Hwacha è uno strumento per eseguire rapidamente payload su sistemi Nix. Raccogli facilmente artefatti o esegui shellcode su un'intera sottorete di sistemi per cui sono state ottenute credenziali. root@kitploit:...

ecs_checker

Strumento di rilevamento remoto EDNS Client Subnet ECS - CVE-2025-40766 Questo strumento verifica se un resolver DNS remoto supporta EDNS Client Subnet ECS — un'estensione DNS che potrebbe esporre i sistemi a vulnerabilità di avvelenamento della cache o di perdita di informazioni come...

webrtc-ips

STUN IP Address requests for WebRTC Demo: https://diafygi.github.io/webrtc-ips/ What this does Firefox and Chrome have implemented WebRTC that allow requests to STUN servers be made that will return the local and public IP addresses for the user. These request results are available to javascript,...

changeme

changeme A default credential scanner. About changeme picks up where commercial scanners leave off. It focuses on detecting default and backdoor credentials and not necessarily common credentials. It's default mode is to scan HTTP default credentials, but has support for other credentials. change...

metasploitable3

Metasploitable3 Metasploitable3 is a VM that is built from the ground up with a large amount of security vulnerabilities. It is intended to be used as a target for testing exploits with metasploit. Metasploitable3 is released under a BSD-style license. See COPYING for more details. Quick-start To...

CVE-2024-37032-scanner

Scanner CVE-2024-37032 Scannez un sous-réseau entier pour détecter les versions vulnérables d'Ollama. Si un seul hôte, utilisez X.X.X.X/32...

nibble

Nibble è uno strumento CLI per la scansione di rete locale che si concentra su velocità e facilità d'uso. Seleziona un'interfaccia di rete e scansiona la tua sottorete locale. Elenca gli host, il produttore hardware, le porte aperte e i relativi servizi. ⚡ Veloce come un fulmine, scansiona...

CVE-2022-23046

CVE-2022-23046 La scoperta originale e il PoC manuale provengono da Fluidattacks: PhpIPAM v1.4.4 consente a un utente amministratore autenticato di iniettare istruzioni SQL nel parametro "subnet" durante la ricerca di una subnet tramite app/admin/routing/edit-bgp-mapping-search.php. Questo PoC...

phpipam_1.4.4

CVE-2022-23046 phpIPAM 1.4.4 - SQL Injection phpIPAM v1.4.4 erlaubt es einem authentifizierten Admin-Benutzer, SQL-Befehle in den Subnet-Parameter einzuschleusen, während über app/admin/routing/edit-bgp-mapping-search.php nach einem Subnet gesucht wird. Dieses Projekt gibt derzeit...

dnsglobe

dnsglobe Ein globaler DNS-Propagationsprüfer für dein Terminal — eine Rust-TUI, die 34 öffentliche DNS-Resolver weltweit parallel abfragt, ihre Antworten vergleicht und die Propagation deines Records auf einer Weltkarte anzeigt. Denk an dnschecker.org / whatsmydns.net, aber in deinem Terminal, mi...

mapcidr

A utility program to perform multiple operations for a given subnet/CIDR range. Features • Install • Usage • Library • Join Discord mapCIDR is developed to ease load distribution for mass scanning operations; it can be used both as a library and as an independent CLI tool. Features CIDR expansion...

mapcidr

Un programma di utilità per eseguire multiple operazioni su una data sottorete/intervallo CIDR. Caratteristiche • Installazione • Utilizzo • Libreria • Unisciti a Discord mapCIDR è stato sviluppato per facilitare la distribuzione del carico nelle operazioni di scansione di massa; può essere...

fortios-ldap-mitm-poc-CVE-2019-5591

CVE-2019-5591 Questo Proof of Concept PoC dimostra un attacco MITM Man-In-The-Middle: impersonificazione di un server LDAP sulla sottorete locale di un dispositivo FortiGate che esegue una versione vulnerabile di FortiOS. Versioni interessate Queste versioni sono vulnerabili:...

Astra Linux – Vulnerability in cups

OpenPrinting CUPS is an open-source printing system for Linux and other Unix-like operating systems. In versions 2.4.12 and earlier, an unsafe deserialization attack and improper validation of printer attributes could lead to a null dereference in the libcups library. This is a remote DoS...

CVE-2026-66785

A flaw was found in Submariner. This vulnerability allows a malicious cluster spoke to redirect network traffic from other connected clusters peer clusters by publishing a specially crafted network endpoint. The system fails to properly validate the network subnets provided by the malicious...

EUVD-2026-63572

A flaw was found in Submariner. This vulnerability allows a malicious cluster spoke to redirect network traffic from other connected clusters peer clusters by publishing a specially crafted network endpoint. The system fails to properly validate the network subnets provided by the malicious...

CVE-2026-66785

Submariner is affected by a critical traffic-hijacking flaw (CVSS 9.9 ). A malicious connected cluster (spoke) can publish a specially crafted network endpoint whose unvalidated endpoint.spec.subnets are propagated into WireGuard allowedips or IPSec configurations on peer clusters. This allows th...

CVE-2026-66785 Submariner: submariner: unvalidated endpoint.spec.subnets propagated into wireguard allowedips / ipsec enables traffic hijack

A flaw was found in Submariner. This vulnerability allows a malicious cluster spoke to redirect network traffic from other connected clusters peer clusters by publishing a specially crafted network endpoint. The system fails to properly validate the network subnets provided by the malicious...