netscout

NetScout NetScout è uno strumento OSINT che trova domini, sottodomini, directory, endpoint e file per un dato URL seed. È composto dai seguenti componenti: Client BinaryEdge: ottiene i sottodomini DNS: tenta di eseguire un trasferimento di zona DNS per estrarre i sottodomini Crawler: ottiene URL ...

EvilReflex

Cos'è questo? Questo è un semplice test per la vulnerabilità evilReflex negli smart contract. Come testare? Passo 1: compila evilReflex.sol Passo 2: distribuisci HACKME es.: root@kitploit: Account Address： 0x62ba0a06ffc1d0a706172e1ed755b9b91f53a617 balance: 10090000000000000000000000 Contract...

tsh-sctp

Tiny SHell - Una backdoor UNIX open-source root@kitploit: Prima di compilare Tiny SHell 1. Prima di tutto, imposta la tua chiave segreta, che si trova in tsh.h; la chiave può avere qualsiasi lunghezza usa almeno 12 caratteri per una maggiore sicurezza. 2. Si consiglia di cambiare SERVERPORT, la...

hostresolver

HostResolver Versione corrente: 1.0.0 Invia commenti e segnalazioni di bug a: [email protected] ==================================================================================== Contenuti: 1. Panoramica 2. Utilizzo di HostResolver File di input Opzioni e impostazioni Scansione Output...

loki

loki Lançado como código aberto pela NCC Group Plc - http://www.nccgroup.com/ Desenvolvido por Dave Spencer, david ponto spencer arroba nccgroup ponto com http://www.github.com/nccgroup/Loki Lançado sob AGPL, consulte LICENSE para mais informações Descrição O Loki Impersonador de Teclado Obstruti...

Sleipnir

Sleipnir Rilasciato come open source da NCC Group Plc - http://www.nccgroup.com/ Sviluppato da Dave Spencer, david dot spencer at nccgroup dot com http://www.github.com/nccgroup/Sleipnir Rilasciato sotto AGPL, vedi LICENSE per maggiori informazioni Descrizione Sleipnir è un piccolo eseguibile...

BrokenHill

Broken Hill documentation Table of contents 1. Prerequisites 2. Setup 3. Use 4. Options you will probably want to use frequently 5. Examples 6. Observations and recommendations 7. Extracting result information 8. Notes on specific models Broken Hill has been tested against 9. Troubleshooting 10...

nodejs-http-transfer-encoding-smuggling-poc

nodejs-http-transfer-encoding-smuggling-poc PoC von HTTP Request Smuggling in Node.js CVE-2020-8287 src/index.js root@kitploit: header: 'Host', '127.0.0.1', 'Transfer-Encoding', 'chunked', 'Transfer-Encoding', 'eee' , body: 'A' header: 'Host', '127.0.0.1' , body: '' data: 'HTTP/1.1 200 OK\r\n' +...

CVE-2026-73051

A flaw was found in actix-http. This vulnerability allows unauthenticated remote attackers to perform HTTP request smuggling. By sending specially crafted HTTP/1.1 requests that include both Content-Length and Transfer-Encoding: chunked headers, an attacker can desynchronize backend requests...

CVE-2025-55315-detection-playground

Aqui estão alguns testes que podem ser realizados contra esses serviços para observar comportamentos diferentes nas rotas GET/POST entre as versões corrigida e não corrigida do Kestrel. GET contra a versão não corrigida envia 200 e o socket permanece aberto root@kitploit: printf 'GET /...

EUVD-2026-66469

In the Linux kernel, the following vulnerability has been resolved: s390/vfioccw: Limit the number of channel program segments The processing of channel programs, and the CCWs within them, is done recursively. As such, there is an arbitrary but not architectural limit to the number of CCWs that c...

server

Ulterius: Einfache Fernverwaltung Interesse an einer Unterlizenzierung? Möchten Sie unseren Code in Ihrem Stack verwenden oder ihn für den internen Gebrauch umbenennen? Kontaktieren Sie uns unter [email protected] Ulterius ist ein Tool, das uneingeschränkten Zugriff auf ein Windows-System üb...

dnschan

dnschan Questo è un trojan che funziona su DNS. Puoi: gestire più agenti molto lentamente caricare file recuperare file dal web eseguire processi...

CVE-2026-12717

An Improper Input Validation vulnerability in CData JDBC driver integration in Google Cloud BigQuery Data Transfer Service versions prior to 2026-05-01 on Google Cloud Platform allows an authenticated attacker to achieve remote code execution in the connector container and escalate privileges in...

CVE-2026-12717 Remote Code Execution in BigQuery Data Transfer Service via JDBC Connection String Injection

An Improper Input Validation vulnerability in CData JDBC driver integration in Google Cloud BigQuery Data Transfer Service versions prior to 2026-05-01 on Google Cloud Platform allows an authenticated attacker to achieve remote code execution in the connector container and escalate privileges in...

CVE-2026-12717

CVE-2026-12717 is an Improper Input Validation vulnerability in the CData JDBC driver integration within Google Cloud BigQuery Data Transfer Service (versions prior to 2026-05-01). An authenticated attacker can achieve remote code execution in the connector container and escalate privileges in th...

EUVD-2026-66420

An Improper Input Validation vulnerability in CData JDBC driver integration in Google Cloud BigQuery Data Transfer Service versions prior to 2026-05-01 on Google Cloud Platform allows an authenticated attacker to achieve remote code execution in the connector container and escalate privileges in...

CVE-2026-16444

Improper neutralization of path traversal sequences in TeamViewer Desktop Clients prior Version 15.81.5 allows an authenticated remote session participant to write files to unintended locations on the local file system via file transfer or virtual file clipboard mechanisms. An attacker can levera...

CVE-2026-16444

TeamViewer Desktop Clients prior to version 15.81.5 are affected by improper neutralization of path traversal sequences, allowing an authenticated remote session participant to write files to unintended locations on the local file system via file transfer or virtual file clipboard mechanisms. An ...

CVE-2026-16444 Improper Validation of File Paths in TeamViewer Desktop Clients

Improper neutralization of path traversal sequences in TeamViewer Desktop Clients prior Version 15.81.5 allows an authenticated remote session participant to write files to unintended locations on the local file system via file transfer or virtual file clipboard mechanisms. An attacker can levera...