WeBaCoo

| | | | | \ / \ | | | | | | / / | / / | |/| |/ \ / | | / \ / \ \ /\ / / | / / | | /\ | | / / / ,| // / root@kitploit: Web Backdoor Cookie Script-Kit @@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@ Scritto da: Anestis Bechtsoudis @ bechtsoudis.com Copyright C 2011-2012 Anestis Bechtsoudis Disclaimer L...

pymultitor

PyMultiTor Proxy Tor Multi-Thread Python, Hai mai desiderato essere in due posti diversi contemporaneamente? Quando mi sono posto questa domanda, ho iniziato a sviluppare questa soluzione nella mia mente. Durante i test di penetrazione, ci sono spesso problemi causati da dispositivi di sicurezza...

pwndb

pwndb.py pwndb.py è uno strumento da riga di comando in Python per cercare credenziali trapelate utilizzando il servizio Onion con lo stesso nome. Utilizzo root@kitploit: usage: pwndb.py -h --target TARGET --list LIST --output OUTPUT --proxy PROXY optional arguments: -h, --help show this help...

Tallow

Tallow - Tor Transparente para Windows Tallow é um pequeno programa que redireciona todo o tráfego de saída de uma máquina Windows através da rede de anonimato Tor. Qualquer tráfego que não possa ser tratado pelo Tor, por exemplo UDP, é bloqueado. Tallow também intercepta e lida com pedidos DNS,...

CVE-2019-19781

CVE-2019-19781 Einfacher POC, um zu testen, ob Ihr Citrix ADC Netscaler anfällig für CVE-2019-19781 ist Verwendung : python Dies wird standardmäßig über den Tor-Standardport -- 127.0.0.1:9050 proxifiziert Sie benötigen PySocks, requests und urllib3 Sicherheitshinweis...

OnionHop

OnionHop V3 OnionHop V3 ist eine moderne, plattformübergreifende Desktop-App Windows, macOS und Linux, die Ihren Datenverkehr über Tor leitet. Sie kann Tor als lokalen SOCKS-Proxy oder als systemweiten Tunnel ausführen, mit Smart Connect automatisch eine funktionierende Verbindungsstrategie für I...

JQShell

JQShell Una versione armata di CVE-2018-9206. Dichiarazione di non responsabilità Usare questo tool contro server che non controlli è illegale nella maggior parte dei paesi. L'autore declina ogni responsabilità per le azioni di chi utilizza questo software per scopi illegali. Questo software è...

quasibot

quasiBot quasiBot 0.3 - Leggimi 07.08.14 Sommario QuasiBot è un complesso gestore di webshell scritto in PHP, che opera su backdoor web implementate dall'utente stesso. Utilizzando backdoor PHP predisposte, quasiBot funziona come C&C cercando di comunicare con ogni backdoor. Lo strumento va oltre...

pwndb

pwndb Ricerca di email trapelate. Powered by: pwndb2am4tzkvold.onion Installazione Prerequisiti root@kitploit: sudo apt install tor Installa root@kitploit: git clone https://github.com/jxlil/pwndb.git; cd pwndb virtualenv venv source venv/bin/activate pip3 install -r requirements.txt Utilizzo...

pymultitor

PyMultiTor Python Multi Threaded Tor Proxy, Did you ever want to be at two different places at the same time? When I asked myself this question, I actually started developing this solution in my mind. While performing penetration tests there are often problems caused by security devices that bloc...

CVE-2026-12186

A weakness has been identified in GL.iNet GL-MT3000 up to 4.4.5. Affected is the function replacecountry in the library /usr/lib/oui-httpd/rpc/tor of the component Tor Proxy Service Configuration Handler. This manipulation causes command injection. The attack can be initiated remotely. The exploi...

EUVD-2026-36665

A weakness has been identified in GL.iNet GL-MT3000 up to 4.4.5. Affected is the function replacecountry in the library /usr/lib/oui-httpd/rpc/tor of the component Tor Proxy Service Configuration Handler. This manipulation causes command injection. The attack can be initiated remotely. The exploi...

CVE-2026-12186 GL.iNet GL-MT3000 Tor Proxy Service Configuration tor replace_country command injection

A weakness has been identified in GL.iNet GL-MT3000 up to 4.4.5. Affected is the function replacecountry in the library /usr/lib/oui-httpd/rpc/tor of the component Tor Proxy Service Configuration Handler. This manipulation causes command injection. The attack can be initiated remotely. The exploi...

CVE-2026-12186 GL.iNet GL-MT3000 Tor Proxy Service Configuration tor replace_country command injection

A weakness has been identified in GL.iNet GL-MT3000 up to 4.4.5. Affected is the function replacecountry in the library /usr/lib/oui-httpd/rpc/tor of the component Tor Proxy Service Configuration Handler. This manipulation causes command injection. The attack can be initiated remotely. The exploi...

PT-2026-49144

Name of the Vulnerable Software and Affected Versions GL.iNet GL-MT3000 versions prior to 4.7 Description A command injection flaw exists in the Tor Proxy Service Configuration Handler. The issue is located within the replace country function in the /usr/lib/oui-httpd/rpc/tor library, allowing a...

EUVD-2021-8669

Malicious code in bioql PyPI...

CVE-2021-21323

Brave is an open source web browser with a focus on privacy and security. In Brave versions 1.17.73-1.20.103, the CNAME adblocking feature added in Brave 1.17.73 accidentally initiated DNS requests that bypassed the Brave Tor proxy. Users with adblocking enabled would leak DNS requests from Tor...

Iran-linked DEV-0343 targeting defense, GIS, and maritime sectors

DEV-0343 is a new activity cluster that the Microsoft Threat Intelligence Center MSTIC first observed and began tracking in late July 2021. MSTIC has observed DEV-0343 conducting extensive password spraying against more than 250 Office 365 tenants, with a focus on US and Israeli defense technolog...

Iran-linked DEV-0343 targeting defense, GIS, and maritime sectors

DEV-0343 is a new activity cluster that the Microsoft Threat Intelligence Center MSTIC first observed and began tracking in late July 2021. MSTIC has observed DEV-0343 conducting extensive password spraying against more than 250 Office 365 tenants, with a focus on US and Israeli defense technolog...

New Mirai-Inspired Botnet Could Be Using Your KGUARD DVRs in Cyber Attacks

Cybersecurity researchers on Thursday revealed details about a new Mirai-inspired botnet called "miraiptea" that leverages an undisclosed vulnerability in digital video recorders DVR provided by KGUARD to propagate and carry out distributed denial-of-service DDoS attacks. Chinese security firm...