96 matches found
ridenum
RIDENUM - A simple open source method for performing null session brute forces Copyright 2018 TrustedSec Written by: David Kennedy ReL1K Twitter: @HackingDave and @TrustedSec Website: https://www.trustedsec.com root@kitploit: . . . . . | \ | | | \ | || \ | | | | | | | / | | | | | | | .--. | | | |...
XAttacker
XAttacker V2.5 Tool FREE XATTACKER A Massive Exploiting Tool capable of scanning and auto-exploiting vulnerabilities in web applications, By providing a target website to the tool, it auto detects its’ architecture if using a Content Management Service CMS and tries to find vulnerabilities based ...
vulmap
🌟 Vulmap - Web vulnerability scanning and verification tools Click here for the English Version Vulmap 是一款 web 漏洞扫描和验证工具, 可对 webapps 进行漏洞扫描, 并且具备漏洞利用功能, 目前支持的 webapps 包括 activemq, flink, shiro, solr, struts2, tomcat, unomi, drupal, elasticsearch, fastjson, jenkins, nexus, weblogic, jboss, spring,...
XXRF-Shots
What is SSRF vulnerability? Server Side Request Forgery SSRF is a type of vulnerability that enables attackers to send specially crafted requests through a vulnerable web application. With this technique, attackers can gain unauthorized access to internal resources behind a firewall, which would...
put2win
put2win Script to automate PUT HTTP method exploitation to get shell. Installation root@kitploit: git clone https://github.com/sysdevploit/put2win cd put2win chmod +x put2win.sh Usage root@kitploit: Script to automate PUT HTTP method exploitation to get shell. Options: -t TARGET Target URL/IP e.g...
joro
Joro 面向进攻性安全专业人员的 Web 漏洞利用框架。拦截代理、盲漏洞检测、Web Shell 生成、C2 集成以及协作工具，全部集成于单个二进制文件中，并附带嵌入式 Web UI。 警告：本工具仅用于经授权的渗透测试和安全研究。您只能对您拥有或已获得明确书面许可的系统使用 Joro。未经授权访问计算机系统属于违法行为。Bishop Fox 不承担任何责任，也不对因使用本工具造成的任何滥用或损害负责。请负责任地使用。 功能特性 Joro 覆盖 Web...
POC-CVE-2016-10033
POC-CVE-2016-10033 Prima di tutto, avviamo l'applicazione vulnerabile Passo 1: Esegui il seguente comando per recuperare l'immagine Docker vulnerabile dal repository Docker. Comando: docker pull vulnerables/cve-2016-10033 Passo 2: Esegui l'immagine Docker in Docker Desktop, esponendo la porta 808...
ctf-skills
ctf-skills Agent Skills per risolvere sfide CTF — exploit web, pwn binario, crittografia, reverse engineering, analisi forense, OSINT e altro ancora. Funziona con qualsiasi strumento che supporti la specifica Agent Skills, incluso Claude Code. Installazionebash npx skills add ljagiello/ctf-skills...
challenges
Hex Advent CTF BENVENUTO A HEX ADVENT 2025, è la stagione per scartare il tuo potenziale! 🎁 HEX ADVENT 2025 è un calendario dell'Avvento CTF a tema natalizio, progettato da donne per donne. 12 Giorni, 12 Sfide: Un programma strutturato per sviluppare competenze in diverse categorie CTF. Focus Are...
CTF_CVE_DSP_1
🚩 Vuln Gallery CTF Benvenuto a Vuln Gallery , una CTF Capture The Flag di livello intermedio basata su Linux. Questa sfida ti guiderà dall'exploit iniziale di un'applicazione web moderna fino alla privilege escalation su un sistema Linux mal configurato. La tua missione è sfruttare le...
PT-2026-63087
Name of the Vulnerable Software and Affected Versions Oracle PeopleSoft Enterprise SCM eProcurement version 9.2 Description An issue exists in the Manage Requisition Status component that allows an unauthenticated attacker with network access via HTTP to compromise the system. Successful...
PT-2026-63163
Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite Oracle Bills of Material versions 12.2.13 through 12.2.15 Description An issue exists in the Internal Operations component of the Oracle Bills of Material product. A low privileged attacker with network access via HTTP...
Cyber-Arena
CyberArena - Cybersecurity Challenge Platform CyberArena is a...
cyber-pentools
🔥 Cyber Pentools — All-in-One Penetration Testing Toolkit 2...
network-vulnerability-assessment-lab
Network Attack and Defence Technology Lab Project Overview...
Exploit for SQL Injection in Cmsmadesimple Cms_Made_Simple
Simple-CTF-Writeup Professional TryHackMe Simple CTF walkthrou...
LazyAdmin-Writeup
LazyAdmin-Writeup Beginner-friendly TryHackMe LazyAdmin writeu...
MonitorsFour-Write-UP
MonitorsFour-Write-UP Hack The Box MonitorsFour is an Easy-rat...