webhandler

WebHandler Un manejador para las funciones de sistema de PHP y también una alternativa al manejador 'netcat' Información WebHandler intenta simular un 'prompt bash de Linux' para manejar y procesar: root@kitploit: - Funciones de ejecución de programas PHP p. ej., system, passthru, exec, etc. -...

patch-checker

PatchChecker これは https://patchchecker.com で動作しているサービスのコードベースです。 要するに、PatchCheckerはFlask上で動作するWebアプリケーションであり、Watsonと同様の出力を提供します。ただし、PatchCheckerを使用すると、ターゲットマシン上でバイナリを実行する必要がありません。...

powerview.py

Installation | Basic Usage | Obfuscation | Modules | Logging | User Defined Rules | MCP | Plugins | Acknowledgements Overview PowerView.py is an alternative for the awesome original PowerView.ps1 script. Most of the modules used in PowerView are available here some of the flags are changed . Main...

HTMLawed

HTMLawed 是…… ……一个单文件、45 kb 的 PHP 脚本，从网页管理员的视角来看，它使输入文本更安全、符合 HTML 标准，并且总体上适合用作 HTML、XHTML 或 XML 文档的正文。作为 HTMLTidy 的简单替代品，htmLawed 过滤器、处理器、净化器、消毒器、美化器等具有高度可定制性。 它确保 HTML 标签平衡且正确嵌套，中和可能被用于跨站脚本（XSS）攻击的代码，限制允许的 HTML 元素、属性或 URL 协议，整理代码等。 因此，在净化场景中，它可以用作 HTMLtidy 的替代方案。 该仓库是…… ……一个衍生版本，紧密跟踪原始项目 链接...

serval

A Netcat style backdoor for pentesting and pentest challenges Serval is a lightweight, easy-to-use, binary for spawning reverse and bind shells for pentests or pentesting exercises. Serval is cross platform and can be compiled for both Windows 32 & 64-bit and Linux 32 and 64-bit. Note: Due to the...

fernflower

fernflower 快速在终端反编译class文件 usage: root@kitploit: Usage: java -jar fernflower.jar -= + Example: java -jar fernflower.jar -dgs=true c:\my\source\ c:\my.jar d:\decompiled\ Ps: 再也不需要jd-gui了，比jd-gui强大...

malice

malice La misión de Malice es ser una versión gratuita de código abierto de VirusTotal que cualquiera pueda usar a cualquier escala, desde un investigador independiente hasta una empresa Fortune 500. Pruébalo DEMOSTRACIÓN: demo.malice.io nombre de usuario : malice contraseña : ecilam Requisitos...

BlackThrone

BlackThrone PHP BlackThrone Script An open source Alternative to burp collaborator BlackThrone created To detect websockets and HTTP traffic in the main website with provide some server header and client info. BlackThrone is web based tool to run on webservers with PHP . It will detect the visito...

smbexec

root@kitploit: smbexec A rapid psexec style attack with samba tools Original Concept and Script by Brav0Hax & PureHate Ported to ruby and modified by Smilingraccoon and Zeknox Codename - Machiavellian Written because we got sick of Metasploit PSExec getting popped Special thanks to Carnal0wnage...

dcshadow

!WARNING 请勿在生产环境运行。本工具仅用于实验室测试，供蓝队识别 IoC、事件类型和行为。 此外，本工具按原样提供。除您可能创建的拉取请求的标准审查外，暂无支持计划。 不要在 Windows 主机上运行。请在 Linux 或虚拟机中运行（以避免 RPC 服务冲突）。 理论 本项目旨在成为 Mimikatz dcshadow 技术的纯 Python 替代方案。其中包含一个自定义 Impacket，且对 crypto、gssapi 和 drsuapi 等进行了修改。 DCShadow 是一种强大的持久化技术，可视为其他技术（如 SID 历史、KRBTGT RBCD、ACE 滥用...

CVE-2026-53571

CVE-2026-53571 CVE-2026-53571 server.fs.deny bypass on Windows alternate paths PoC. The contents of files that are specified by server.fs.deny can be returned to the browser on Windows. root@kitploit: mkdir CVE-2026-53571 cd CVE-2026-53571 npm init -y npm install [email protected]...

Node.js st module Directory Traversal

A directory traversal vulnerability in the st module before 0.2.5 for Node.js allows remote attackers to read arbitrary files via a %2e%2e encoded dot dot in an unspecified path. id: CVE-2014-3744 info: name: Node.js st module Directory Traversal author: geeknik severity: high description: A...

CVE-2024-55591

CVE-2024-55591 PoC This repository contains an PoC Proof of Concept for CVE-2024-55591 , a critical authentication bypass vulnerability discovered in Fortinet's FortiOS and FortiProxy products. Vulnerability Overview CVE-2024-55591 is an authentication bypass vulnerability caused by an alternativ...

The vulnerability of the compatibility package for Microsoft Azure Entra ID allows a perpetrator to circumvent the authentication process by using an alternative path or channel, thereby allowing them to increase their privileges.

The vulnerability of the compatibility package for Microsoft Azure Entra ID involves bypassing the authentication process by using an alternative path or channel. Exploiting this vulnerability can allow a malicious actor to gain increased privileges...

thm_steelmountain_CVE-2014-6287

thmsteelmountainCVE-2014-6287 一个为CVE-2014-6287编写的利用程序的Python3版本。用于在不使用metasploit的情况下完成TryHackMe.com上的"Steel Mountain"房间。...

USN-8736-1: Perl vulnerabilities

It was discovered that Perl incorrectly handled certain large inputs during regular expression matching. An attacker could possibly use this issue to trigger out-of-bounds heap reads or writes, resulting in a denial of service or arbitrary code execution. CVE-2026-15534 It was discovered that Per...

python-paddingoracle

python-paddingoracle：一个可移植的填充预言机（Padding Oracle）利用 API 已针对 PYTHON 3 更新 python-paddingoracle 是一个 API，为渗透测试人员提供了 PadBuster 及其他填充预言机（padding oracle）利用工具的可定制替代方案。这些工具很难（不经大量重写）应用于独特的、因应用而异的场景，例如非 HTTP 应用、原始套接字、客户端应用、特殊编码等。 用法： 要使用 paddingoracle API，只需实现 PaddingOracle API 中的 oracle...

codecrypt

Codecrypt 后量子密码学工具。 Codecrypt 目前不再维护，不过我至今仍在使用它。如果你有兴趣开发/维护它，请联系我。 关于 这是一个类似 GnuPG 的 Unix 程序，用于加密和签名，仅使用抗量子计算机的算法： McEliece 密码系统（紧凑型 QC-MDPC 变体）用于加密 基于哈希的 Merkle 树算法（FMTSeq 变体）用于数字签名 Codecrypt 是自由软件。代码以 LGPL3 条款授权，希望这能使其更容易与其他工具组合使用。 为什么选择这个？ 去读读 http://pqcrypto.org/ 链接...

The vulnerability of the OpenSSH cryptographic protection mechanism, which stems from the use of an unprotected alternative channel, allows attackers to compromise data integrity.

The vulnerability of the OpenSSH cryptographic protection lies in the use of an unprotected alternative channel. Exploiting this vulnerability could allow a attacker to compromise the integrity of data...

Astra Linux – Vulnerability in curl

There is an authentication bypass vulnerability in libcurl version 8.0.0, particularly in the FTP connection reuse feature. This vulnerability can cause incorrect credentials to be used during subsequent transfers. Previously created connections are retained in a connection pool for reuse if they...