kubolt

Wat? Kubolt is simple utility for scanning public unauthinticated kubernetes clusters and run commands inside containers Why? Sometimes, the kubelet port 10250 is open to unauthorized access and makes it possible to run commands inside the containers using getrun function from kubelet:...

kubolt

Quoi ? Kubolt est un utilitaire simple pour scanner les clusters Kubernetes publics non authentifiés et exécuter des commandes dans les conteneurs Pourquoi ? Parfois, le port kubelet 10250 est ouvert à un accès non autorisé et permet d'exécuter des commandes dans les conteneurs en utilisant la...

inspector

MCP Inspector A developer tool for inspecting Model Context Protocol MCP servers. It ships as a single package, @modelcontextprotocol/inspector, that provides three ways to inspect a server: Web — a Vite + React + Mantine single-page app with a Node backend. CLI — a scriptable command-line client...

stegcloak

StegCloak The Cloak of Invisibility for your texts StegCloak is a pure JavaScript steganography module designed in functional programming style, to hide secrets inside text by compressing and encrypting the secret before cloaking it with special unicode invisible characters. It can be used to...

SHGenOb

SHGenOB: Генератор шеллкода из C-кода PIC Введение SHGenOB — это инструмент на Python, предназначенный для генерации шеллкода из позиционно-независимого кода PIC, написанного на C. Он автоматизирует процесс компиляции C-кода, извлечения секции .text и, при необходимости, шифрования полученного...

cygor

Cygor Общий обзор Cygor — это модульный фреймворк для обнаружения активов, объединяющий сканирование, парсинг и перечисление служб в единый рабочий процесс. Он заменяет разрозненный набор отдельных инструментов автоматизированным процессом, который занимается обнаружением, обогащением и целевым...

CVE-2026-10853

IBM MQ is affected by a heap buffer overflow in the queue manager's cluster repository manager , caused by improper validation of cluster command message lengths. An authenticated attacker with cluster access can trigger a denial of service or potentially achieve arbitrary code execution (CVSS 7....

EUVD-2026-83032

IBM MQ could allow an authenticated attacker with cluster access to cause a denial of service or potentially execute arbitrary code due to improper validation of cluster command message lengths...

CVE-2026-10853 IBM MQ queue manager is vulnerable to remote code execution

IBM MQ could allow an authenticated attacker with cluster access to cause a denial of service or potentially execute arbitrary code due to improper validation of cluster command message lengths...

go-http-proxy-to-socks v1.15.6

GoHPTS - HTTPS and TCP/UDP transparent proxy to SOCKS4/SOCKS5 proxy chain written in Go Table of contents Introduction Features Installation Usage Configuration via CLI flags Configuration via YAML file Transparent proxy redirect via NAT and SOORIGINALDST Auto configuration for redirect mode tpro...

cred_scanner

credscanner A simple command line tool for finding AWS credentials in files. Optimized for use with Jenkins and other CI systems. I suspect there are other, better tools out there such as git-secrets, but I couldn't find anything to run a quick and dirty scan that also integrates well with Jenkin...

Complete-google-dorks

Complete-google-sql-dorks news/news.php?id= -site:php.net -"The PHP Group" inurl:source inurl:url ext:pHp !Host=. intext:encUserPassword= ext:pcf ?action= ?cat= ?id= ?intitle:index.of? mp3 artist-name-here ?intitle:index.of? mp3 name ?page= ?pagerequested= ?pid= " -FrontPage-" ext:pwd inurl:servi...

apk-info

apk-info Un analyseur apk complet. Fonctionnalités Un extracteur zip compatible avec les malwares. Excellent article sur la technique BadPack ; Un extracteur axml et arsc compatible avec les malwares ; Une implémentation complète d'AXML Android Binary XML ; Une implémentation complète d'ARSC...

h2t

h2t - HTTP Hardening Tool Description h2t is a simple tool to help sysadmins to hardening their websites. Until now h2t checks the website headers and recommends how to make it better. Dependences Python 3 colorama requests Install root@kitploit: $ git clone https://github.com/gildasio/h2t $ cd h...

CVE-2022-22954-PoC

CVE-2022-22954 PoC RCE в VMware Workspace ONE Access и Identity Manager через SSTI. CVE-2022-22954 - PoC SSTI Использование: root@kitploit: CVE-2022-22954.py -h -m SETMODE -i IP -c CMD optional arguments: -h, --help show this help message and exit -m SETMODE, --mode SETMODE Available modes: shoda...

ip-finder-cli

IPFinder CLI Command Line Interface https://ipfinder.io/ Поддерживает одиночные IP-адреса, ASN, диапазоны, межсетевые экраны как входные данные Поддерживает пакетную обработку Экспортирует результаты на экран или в выходной файл Поддерживает IPv4 и IPv6 Поддерживает номера ASN, диапазоны,...

ip-finder-cli

IPFinder CLI Command Line Interface https://ipfinder.io/ Supports Single IP Address, asn, ranges, firewall as Input Supports Bulk Exports Results to Screen or to An Output File Supports IPv4 and IPv6 Supports ASN number , RANGES , Firewall Getting Started sign up for a free account at...

jdam

jdam - Fuzzing JSON conscient de la structure jdam est un outil inspiré de Radamsa pour le fuzzing d'objets JSON arbitraires de manière consciente de la structure, ce qui garantit que les résultats du fuzzing seront toujours du JSON valide. De nombreux outils de fuzzing existants modifient...

SharpSploit

SharpSploit SharpSploit est une bibliothèque .NET de post-exploitation écrite en C qui vise à mettre en évidence la surface d'attaque de .NET et à faciliter l'utilisation de .NET offensif pour les red teamers. SharpSploit est nommé, en partie, en hommage au projet PowerSploit, un favori personnel...

CVE-2022-22954

CVE-2022-22954 PoC VMware Workspace ONE Access и Identity Manager RCE через SSTI. CVE-2022-22954 - PoC SSTI Использование: root@kitploit: CVE-2022-22954.py -h -m SETMODE -i IP -c CMD optional arguments: -h, --help show this help message and exit -m SETMODE, --mode SETMODE Available modes: shodan ...