GyoiThon

GyoiThon : أداة اختبار الاختراق من الجيل التالي الصفحة اليابانية هنا. العروض التقديمية 25 يناير 2018:JANOG41 23 مارس 2018:Black Hat ASIA 2018 Arsenal 12 أغسطس 2018:DEFCON26 DemoLabs 24 أكتوبر 2018:OWS in CSS2018 3 نوفمبر 2018:AV TOKYO 2018 HIVE 22-23 ديسمبر 2018:SECCON YOROZU 2018 28 مارس...

gftrace

gftrace A command line Windows API tracing tool for Golang binaries. Note: This tool is a PoC and a work-in-progress prototype so please treat it as such. Feedbacks are always welcome! How it works? Although Golang programs contains a lot of nuances regarding the way they are built and their...

SharpSploitConsole

SharpSploitConsole تطبيق وحدة تحكم مصمم للتفاعل مع SharpSploti الذي أطلقه @cobbrio https://github.com/cobbr/SharpSploit SharpSploit هي أداة كتبها @cobbrio تجمع العديد من التقنيات/كود C من مجتمع أمن المعلومات وتجمعها في DLL واحد رائع. إنها رائعة لذا تحقق منها! الوصف SharpSploit Console هو مجرد ثنا...

PowerShell-Red-Team

PowerShell-Red-Team-Enum مجموعة من دوال PowerShell يمكن لعضو الفريق الأحمر استخدامها لجمع البيانات من جهاز أو الحصول على وصول إلى هدف. أضفت ملفات ps1 للأوامر المضمنة في وحدة RedTeamEnum. سيتيح لك ذلك العثور بسهولة على أمر واحد فقط واستخدامه إذا كان هذا هو كل ما تريده. إذا كنت تريد الوحدة بأكملها،...

CVE-2024-54761

BigAnt Office Messenger 5.6.06 RCE par injection SQL La vulnérabilité d'injection SQL dans BigAnt Messenger entraîne une vulnérabilité RCE. Suivez les étapes pour l'exploiter. Utilisation : root@kitploit: CVE-2024-54761.py -h -r RHOST -p RPORT -u USERNAME -P PASSWORD options: -h, --help show this...

OpenEMR-RCE

Exploit RCE OpenEMR / PoC OpenEMR --shell --user --password --debug exploit.rb semi-auto --root-url --user --password --payload --lhost --lport --debug exploit.rb auto --root-url --user --password --lhost --lport --debug exploit.rb -H | --help Options: -r , --root-url Root URL base path including...

cybersecurity-struts2

Vulnérabilité Apache Struts2 | CVE-2017-5638 | Version 2.5 Avertissement Ceci est destiné uniquement à des fins éducatives et de recherche. Je n'autorise ni n'approuve aucune utilisation illégale ou contraire à l'éthique du contenu ou des informations de ce projet. Instructions Pour exécuter...

RedbloodC2

الإصدار العام من Redblood C2 root@kitploit: This is a simple command and control server to handle sessions and your victims التثبيت root@kitploit: $ git clone https://github.com/kira2040k/RedbloodC2.git $ cd RedbloodC2 $ npm install $ node server.js الاستخدام root@kitploit: After install node.js...

spacesiren

SpaceSiren SpaceSiren is a honey token manager and alert system for AWS. With this fully serverless application, you can create and manage honey tokens at scale -- up to 10,000 per SpaceSiren instance -- at close to no cost.1 How It Works SpaceSiren provides an API to create no-permission AWS IAM...

Security Bulletin: IBM Operational Decision Manager for Aug 2026 - Multiple CVEs addressed

Summary In addition to many updates of operating system level packages, the following security vulnerabilities are addressed with IBM Operational Decision Manager Vulnerability Details CVEID:CVE-2026-49844 DESCRIPTION: Improper encoding of non-finite floating-point values during MapMessage JSON...

CVE-2021-43616

Репозиторий, демонстрирующий CVE-2021-43616 / https://github.com/npm/cli/issues/2701 Удалите папку nodemodules и выполните npx npm@8 ci, вы увидите, как npm установит версию 2.2.x на момент этого коммита — 2.2.16, несмотря на то, что package-lock.json требует версию 2.0.0 root@kitploit: cat...

pbtk

pbtk - Reverse engineering Protobuf apps Protobuf is a serialization format developed by Google and used in an increasing number of Android, web, desktop and more applications. It consists of a language for declaring data structures , which is then compiled to code or another kind of structure...

kodex

Kodex Community Edition - CE is an open-source toolkit for privacy and security engineering. It helps you to automate data security and data protection measures in your data engineering workflows. It offers the following functionality: Read data items from a variety of sources such as files,...

PAVELOW

صندوق أدوات استغلال PAVELOW. برمجة بواسطة Xecurity. اللغة: BASH الوصف: يساعدك PAVELOW في مغامرات الاستغلال والبحث عن الثغرات على KALI Linux باستخدام مجموعة من الأدوات المثبتة مسبقًا بالإضافة إلى أدوات أخرى سيقوم PAVELOW بتثبيتها وإعدادها لك يمكنك العثور عليها جميعًا هنا على Github أيضًا. الميزات ...

Malicious code in google-cloud-internal-core-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 655e243795a73e8b8b7f7b1c9b4f5769d1d13deba1dc53679fe6153b8405a531 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in google-internal-cloud-audit-security-check (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 62a38a595d0fcf5e869dc2cdd939d476de1fbd24253eb6afd383c08c959dfc34 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-15842 Malicious code in google-internal-cloud-audit-security-check (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 62a38a595d0fcf5e869dc2cdd939d476de1fbd24253eb6afd383c08c959dfc34 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-15841 Malicious code in google-cloud-mono-repo-helper (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a6a8a52a13a2bca203b074422db3b908a9b961e1b849a86734a6a2a38f9504a4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-15834 Malicious code in apple-internal-test-utility (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3f166ea5f034867eae7d9bdc6f82b50c40a22b5237c6e591953d73947dd43244 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-15837 Malicious code in frank-apple-sync-service (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware eab07d55673f91c87c6cc53068aff313287a16eede0d4c388b71f2c71dd27e20 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...