some-tweak-to-hide-jwt-payload-values

some-tweak-to-hide-jwt-payload-values a handful of tweaks and ideas to safeguard the JWT payload, making it futile to attempt decoding by constantly altering its value, ensuring the decoded output remains unintelligible while imposing minimal performance overhead. What is a JWT Token? A JSON Web...

yeti

Yeti Platform Yeti aims to bridge the gap between CTI and DFIR practitioners by providing a Forensics Intelligence platform and pipeline for DFIR teams. It was born out of frustration of having to answer the question "where have I seen this artifact before?" or "how do I search for IOCs related t...

swap_digger

swapdigger swapdigger is a bash script used to automate Linux swap analysis for post-exploitation or forensics purpose. It automates swap extraction and searches for Linux user credentials, Web form credentials, Web form emails, HTTP basic authentication, WiFi SSID and keys, etc. Download and run...

petereport

PeTeReport PeTeReport Pe nTe st Report is an open-source application vulnerability reporting tool designed to assist pentesting/redteaming efforts, by simplifying the task of writting and generation of reports. Focused in product security, the tool help security researchers and pentesters to...

CVE-2024-35469

CVE-2024-35469 Submitter: Kha Do Human Resource Management System 1.0 Vulnerability SQL injection Description SQL injection vulnerability in /hrm/user/ in SourceCodester Human Resource Management System 1.0 allow attackers to execute arbitrary SQL commands via the password parameters. Affected...

win32k-callback-detouring

免责声明 本仓库严格仅供教育和防御性研究使用。 它以概念验证的形式演示 Windows 内部回调调度机制以及与 KernelCallbackTable 相关的控制流概念。 不用于未经授权的用途 不用于实际部署 不考虑隐蔽性/行动安全（OPSEC） 仅可在您拥有或获准测试的受控实验环境中使用 作者对误用不承担任何责任。 Win32k 回调篡改（Callback Detouring）：滥用合法的内核到用户回调调度实现代码执行 概述 该注入技术滥用了 Windows 图形子系统（win32k.sys ）所使用的内核到用户回调调度路径，以在远程进程内获得代码执行能力。通过定位...

WPCracker

WPCracker WordPress user enumeration and login Brute Force tool for Windows and Linux With the Brute Force tool, you can control how aggressive an attack you want to perform, and this affects the attack time required. The tool makes it possible to adjust the number of threads as well as how large...

CVE-2022-26138

CVE-2022-26138 POC Description root@kitploit: The Atlassian Questions For Confluence app for Confluence Server and Data Center creates a Confluence user account in the confluence-users group with the username disabledsystemuser and a hardcoded password. A remote, unauthenticated attacker with...

ntopng

ntopng Introduction ntopng® is a web-based network traffic monitoring application released under GPLv3. It is the new incarnation of the original ntop written in 1998, and now revamped in terms of performance, usability, and features. While you can read more about ntopng on the ntop web site...

fakelogonscreen

FakeLogonScreen FakeLogonScreen is a utility to fake the Windows logon screen in order to obtain the user's password. The password entered is validated against the Active Directory or local machine to make sure it is correct and is then displayed to the console or saved to disk. It can either be...

automato

automato.rb automato uses native LDAP libraries to automate the collection and enumeration of various directory objects. This is incredibly useful during an internal penetration test. automato can also conduct password spraying attacks, and identify if a user is a local administrator against any...

kratos

聊天 · 讨论 · 新闻邮件 · 文档 · 试用Ory Network · 工作机会 Ory Kratos 是一个面向云原生应用的 API 优先身份与用户管理系统。它将登录、注册、恢复、验证和配置文件管理流程集中起来，让你的服务可以直接使用它们，而无需重新实现。 目录 什么是 Ory Kratos？ 为什么选择 Ory Kratos 从 Auth0、Okta 及类似提供商迁移 部署选项 在 Ory Network 上使用 Ory Kratos 自托管 Ory Kratos 快速开始 谁在使用它？ 什么是 Ory Kratos？ Ory Kratos 是一个遵循 云架构最佳实践 的 API...

CVE-2023-20198

CVE-2023-20198 - PoC SCRIPT /!\ 免责声明： 此脚本按“原样”提供，仅用于教育目的。强烈建议用户谨慎使用，并在法律和道德允许的范围内使用。 描述 在目标 Web 服务器上执行各种操作，例如创建和/或删除本地用户帐户、重启 Web 服务器、安装并检查植入物是否存在，最后清理所创建的用户帐户。 要求 Python 3.x Requests 库（pip install requests） 用法 root@kitploit: python CVECISCO20198V2.py 关于...

CreateHiddenAccount

CreateHiddenAccount 创建隐藏账号 中文 | EN Tool Introduction There are two common ways to create a hidden account. One is to add the $ sign directly after the user name to create it, and the other is to use the registry to clone the user to create. . So I wondered if I could implement the process of...

copy-fail-CVE-2026-31431-detection-probe

Linux Kernel LPE Probe Suite — Copy Fail & Dirty Frag Safe detection tooling for two related Linux kernel local privilege escalation vulnerability families — Copy Fail CVE-2026-31431 and Dirty Frag CVE-2026-43284 / CVE-2026-43500 — both affecting all major distributions since 2017, both exploitab...

Scavenger

Scavenger - OSINT Bot - 重构版 机器人在行动 简介 这是我的 OSINT 机器人的代码，用于在粘贴站点上搜索敏感数据泄露。 搜索项： 凭证 私有 RSA 密钥 WordPress 配置文件 MySQL 连接字符串 洋葱链接 SQL 转储 API 密钥 完整邮箱地址 搜索项可以自定义。您可以在配置部分了解更多信息。 关于 Scavenger 的文章 https://jakecreps.com/2019/05/08/osint-collection-tools-for-pastebin/...

skyhook

Skyhook Skyhook is a REST-driven utility used to smuggle files into and out of networks defended by IDS implementations. It comes with a pre-packaged web client that uses a blend of React, vanilla JS, and web assembly to manage file transfers. Key Links Download here See the user documentation to...

CVE-2023-33817---SQL-Injection-found-in-HotelDruid-3.0.5

CVE-2023-33817 - SQL Injection found in HotelDruid V3.0.5 HotelDruid v3.0.5 are vulnerable to SQL injection. An attacker could issue arbitrary sql command to retrieve data in databases or even execute remote code execution on target database system This is my second repo. Don't beat me if i didn'...

CVE-2025-9816

CVE-2025-9816 Stored XSS On WP-Statistics Plugin Scanner Detection & PoC "The WP Statistics – The Most Popular Privacy-Friendly Analytics Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the User-Agent Header in all versions up to, and including, 14.5.4 due to...

CVE-2025-68613

CVE-2025-68613 — n8n Workflow Automation Expression Engine Isolation Failure The author assumes no liability for misuse or damage caused by this research Provided strictly for educational and defensive purposes Description This repository contains a laboratory-grade analysis and a safe...