msdat

Quentin HARDY --- [email protected] [email protected] MSDAT MSDAT M icros oft SQL D atabase A ttacking T ool is an open source penetration testing tool that tests the security of Microsoft SQL Databases remotely. Usage examples of MSDAT: You have a Microsoft database listening remotely...

openmagic

openmagic openmagic kann Ihnen bei der Automatisierung des Testens und Ausnutzens von Systemen helfen, die anfällig für den OpenSSL TLS Heartbeat Read Overrun CVE-2014-0160 sind. Das Basismodul kapselt eine modifizierte Version des Programms "ssltest.py" von Jared Stafford und bietet die folgende...

Log4j-JNDIServer

Log4j-JNDIServer Questo progetto aiuta a testare le vulnerabilità Log4j CVE-2021-44228/CVE-2021-45046. Installazione e compilazione Caricare il progetto su Intellij Idea Selezionare JDK in "Project Settings" CTRL + ALT + SHIFT + S In "Project Settings", creare l'Artifact - "Artifacts" - "Create J...

Juiceshopgl

Juice Shop Logo OWASP Juice Shop Test Coverage Maintainability...

badsuccessor

BadSuccessor.py Uno strumento di penetration testing che sfrutta la vulnerabilità di escalation dei privilegi dMSA delegated Managed Service Account negli ambienti Active Directory di Windows Server 2025. ⚠️ Disclaimer Legale Questo strumento è destinato esclusivamente a test di penetrazione...

COFFLoader

COFF Loader Dies ist ein schneller und einfacher COFF-Loader auch bekannt als Beacon Object Files. Er kann derzeit unmodifizierte BOFs ausführen, sodass er ohne einen laufenden CS-Agenten zum Testen verwendet werden kann. Die einzige Ausnahme ist, dass die injektionsbezogenen...

CVE-2023-41064

Sicherheitslücke-LibWebP-CVE-2023-41064 Codelängen zum Auslösen dieser Sicherheitslücke CVE-2023-41064 Dies ist ein Python-Skript, das eine leere WebP-Datei ein Bildformat mit einer bestimmten Header-Struktur erstellt. Der Zweck dieses Skripts ist es, eine WebP-Datei zu generieren, die zu Test-...

CVE-2021-41773.git1

CVE-2021-41773 Strumento Python veloce per testare il path traversal di Apache CVE-2021-41773 in un elenco di URL Utilizzo :- crea un file di URL attivi e usa il flag "-l" python3 apachepathtraversal.py -l urls-list.txt...

aura-inspector

aura-inspector Questo non è un prodotto ufficialmente supportato da Google. Questo progetto non è idoneo per il Programma di ricompense per vulnerabilità del software open source di Google. Introduzione aura-inspector è un coltellino svizzero per il testing di Salesforce Experience Cloud. Facilit...

cdf

CDF – crypto differential fuzzing CDF is a tool to automatically test the correctness and security of cryptographic software. CDF can detect implementation errors, compliance failures, side-channel leaks, and so on. CDF implements a combination of unit tests with "differential fuzzing", an approa...

PRET

PRET - Toolkit di sfruttamento delle stampanti La tua stampante è sicura? Controlla prima che lo faccia qualcun altro... PRET è un nuovo strumento per il test di sicurezza delle stampanti sviluppato nell'ambito di una tesi magistrale presso la Ruhr University Bochum. Si connette a un dispositivo...

CVE-2021-43798-Grafana-path-traversal-tester

Tester di Path Traversal per Grafana Questo script automatizza il testing degli endpoint dei plugin di Grafana noti per potenziali vulnerabilità di path traversal utilizzando curl. 🛠 Caratteristiche Legge i percorsi target da un file es. paths.txt Invia richieste HTTP utilizzando --path-as-is per...

crucible

root@kitploit: ██████╗██████╗ ██╗ ██╗ ██████╗██╗██████╗ ██╗ ███████╗ ██╔════╝██╔══██╗██║ ██║██╔════╝██║██╔══██╗██║ ██╔════╝ ██║ ██████╔╝██║ ██║██║ ██║██████╔╝██║ █████╗ ██║ ██╔══██╗██║ ██║██║ ██║██╔══██╗██║ ██╔══╝ ╚██████╗██║ ██║╚██████╔╝╚██████╗██║██████╔╝███████╗███████╗ ╚═════╝╚═╝ ╚═╝ ╚═════╝...

PhantomCrawler

.png PhantomCrawler هي أداة اختبار أمان وبحث تحاكي التفاعلات مع المواقع من عناوين IP وكيل مختلفة لتحليل سلوك المواقع تحت ظروف شبكة وجغرافية متنوعة. الميزات: تستخدم قائمة بعناوين IP الوكيل من ملف محدد. تدعم الوكلاء HTTP و HTTPS. تسمح للمستخدم بإدخال عنوان URL المستهدف ومسار ملف الوكيل ومنفذ ثابت...

CVE-2025-61882-POC

Strumento di Test di Sicurezza CVE-2025-61882 🚨 AVVISO LEGALE CRITICO Consulta il nostro post sul blog per i dettagli tecnici QUESTO STRUMENTO È SOLO PER TEST DI SICUREZZA AUTORIZZATI root@kitploit: ╔══════════════════════════════════════════════════════════════╗ ║ ║ ║ 🚨 UNAUTHORIZED ACCESS TO...

macnoise

MacNoise O MacNoise gera telemetria real do macOS: conexões de rede, gravações de arquivos, spawn de processos, mutações de plist, sondas TCC e muito mais. Aponte-o para uma máquina que execute seu EDR, SIEM ou firewall e veja o que realmente dispara — não o que a ficha técnica do fornecedor afir...

sslscan

sslscan2 sslscan version 2 has now been released. This includes a major rewrite of the backend scanning code, which means that it is no longer reliant on the version of OpenSSL for many checks. This means that it is possible to support legacy protocols SSLv2 and SSLv3, as well as supporting TLSv1...

Exploit for CVE-2026-63030

WP2Shell Detector and Validation PoC !License: MIThttps:/...

CVE-2026-55187

Mailpit is an email testing tool and API for developers. Prior to 1.30.2, the remediation shipped for CVE-2026-27808 is incomplete because the tools.IsInternalIP deny-list in internal/tools/net.go relies on Go's standard library classification helpers and does not block IPv6 transition mechanisms...

CVE-2026-55187

Mailpit is an email testing tool and API for developers. Prior to 1.30.2, the remediation shipped for CVE-2026-27808 is incomplete because the tools.IsInternalIP deny-list in internal/tools/net.go relies on Go's standard library classification helpers and does not block IPv6 transition mechanisms...