CVE-2021-27905

CVE-2021-27905 Falsificación de solicitudes del lado del servidor SSRF en ReplicationHandler de Apache Solr Hit Counter Apache Solr cuyas siglas provienen de Searching On Lucene with Replication es un motor de búsqueda gratuito y de código abierto basado en la biblioteca Apache Lucene. Está escri...

scanner-cli

弃用通知：Hawkeye 已到达生命周期终点。 目前已有更多现代化方案可供您和您的项目使用。如果您希望接手该项目的维护工作，请随时与我联系。您可以在我的个人主页上找到我的联系方式。 . . . . . . Hawkeye scanner-cli 是一个项目安全、漏洞及通用风险突出工具。它旨在集成到您的预提交钩子和流水线中。 运行和配置扫描器 Hawkeye scanner-cli 假定您的目录结构将工具链的文件放在顶层。大致而言，它遵循以下原则： Node.js 项目在顶层有 package.json Ruby 项目在顶层有 Gemfile Python 项目在顶层有...

malice

malice Malice's mission is to be a free open source version of VirusTotal that anyone can use at any scale from an independent researcher to a fortune 500 company. Try It Out DEMO: demo.malice.io username : malice password : ecilam Requirements Hardware 16GB disk space 4GB RAM Software Docker...

malice

malice Malice 的使命是成为 VirusTotal 的免费开源版本，任何人均可任意规模使用，无论是独立研究人员还是财富500强企业。 试试看 演示： demo.malice.io 用户名 ：malice 密码 ：ecilam 系统要求 硬件 约 16GB 磁盘空间 约 4GB 内存 软件 Docker 快速开始（OSX） 安装 root@kitploit: $ brew install maliceio/tap/malice root@kitploit: 用法: malice OPTIONS COMMAND arg... 开源恶意软件分析框架 版本: 0.3.11 作者:...

ESFileExplorerOpenPortVuln

Vulnerabilidad de puerto abierto en ES File Explorer - CVE-2019-6447 Según su descripción en Google Play: ES File Explorer File Manager es un administrador de archivos imágenes, música, películas, documentos, aplicaciones con todas las funciones, tanto para uso local como en red! Con más de 500...

isip

isip Interactive sip toolkit for packet manipulations, sniffing, man in the middle attacks, fuzzing, simulating of dos attacks. Video https://asciinema.org/a/11128 Setup root@kitploit: git clone https://github.com/halitalptekin/isip.git cd isip pip install -r requirements.txt Usage Packet...

CrowdFMS

Copyright C 2013 CrowdStrike, Inc. This file is subject to the terms and conditions of the BSD License. See the file LICENSE in the main directory for details CrowdFMS is a framework for automating collection and processing of samples from VirusTotal, by leveraging the Private API system. This...

CVE-2024-23108

CVE-2024-23108 POC Exploit de prueba de concepto para ejecutar comandos a ciegas como root en dispositivos FortiSIEM vulnerables. Solo agregué rápidamente la opción de proporcionar una lista y añadí algo de color. El original y todo el crédito pertenece a horizon3 consulta la publicación del blog...

defense-matrix

Defense Matrix Archived Project This project was an attempt to automate various aspects of Linux security auditing and hardening. As time passed, I K4YT3X found many of the methodologies used in this project to be unideal and obsolete. Therefore, I recommend not continuing using this project but...

SharpFtpC2

SharpFtpC2 PoC SharpFtpC2 is a small, experimental project aimed at exploring the possibility of using FTPS for relaying commands and responses between two remote computers. It employs the FTP protocol as a makeshift tunnel through which the computers, both acting as clients connected to an FTP...

msi-central_privesc

CVE-2022-38532 Local privilege escalation in MSI Center desktop application. The vulnerability exist in "CFeatures" of MSI.CentralServer.exe. MSI.CentralServer.exe is an application that gathers information about your system, it collaborates with MSI.TerminalServer.exe. The ExecuteTask function...

Perfusion

Perfusion On Windows 7 , Windows Server 2008R2 , Windows 8 , and Windows Server 2012 , the registry key of the RpcEptMapper and DnsCache 7/2008R2 only services is configured with weak permissions. Any local user can create a Performance subkey and then leverage the Windows Performance Counters to...

ICMPWatch

ICMPWatch: ICMP Packet Sniffer ICMP Packet Sniffer is a Python program that allows you to capture and analyze ICMP Internet Control Message Protocol packets on a network interface. It provides detailed information about the captured packets, including source and destination IP addresses, MAC...

cloud-buster

Cloudflare Resolver A comprehensive pentest tool that checks Cloudflare enabled sites for origin IP leaks. It's filled with awesome features! scan a wide array of miss-configuration and vulnerabilities search other IP resolution service databases detail origin and related services IPs smart engin...

Industrial Security Auditing Framework

Industrial Security Auditing Framework root@kitploit: ▄█ ▄████████ ▄████████ ▄████████ ███ ███ ███ ███ ███ ███ ███ ███▌ ███ █▀ ███ ███ ███ █▀ ███▌ ███ ███ ███ ▄███▄▄▄ ███▌ ▀███████████ ▀███████████ ▀▀███▀▀▀ ███ ███ ███ ███ ███ ███ ▄█ ███ ███ ███ ███ █▀ ▄████████▀ ███ █▀ ███ ISAF aims to be a...

TChopper

TChopper New technique I have discovered recently and give it a nickname Chop chop to perform lateral movement using windows services display name and WMI by smuggling the malicious binary as base64 chunks and automate the process using the TChopper tool. image How it works the tool will get the...

sharingan

Sharingan Sharingan 是一款用于进攻性安全/漏洞赏金的侦察多功能工具。 开发中，我能否完成？谁知道呢。 克隆以进行开发 在您的 gopath 之外 git clone https://github.com/leobeosab/sharingan 安装 go get github.com/leobeosab/sharingan/cmd/sharingancli 依赖 NMap Go 使用方法 注意 标志的顺序很重要，它必须是 sharingancli globalflags command commandflags。如果这不是您想要的功能，我可以更改它，但我喜欢它的简洁性...

RedbloodC2

Public version of Redblood C2 root@kitploit: This is a simple command and control server to handle sessions and your victims installation root@kitploit: $ git clone https://github.com/kira2040k/RedbloodC2.git $ cd RedbloodC2 $ npm install $ node server.js Usage root@kitploit: After install node.j...

zenfone9-root

zenfone9-root — root temporal en un ASUS Zenfone 9 con bootloader bloqueado Código de investigación y notas para obtener root temporal uid 0 en un ASUS Zenfone 9 AI2202 cuyo bootloader no puede desbloquearse — porque ASUS descontinuó su herramienta de desbloqueo, eliminó el conmutador de desbloqu...

OWASP-Open-Source-Intelligence-Standard

Open-source intelligence now informs decisions that affect liberty, safety, and national security. OOVS is an open standard that makes those decisions defensible. Every judgment traceable to its origin · every requirement testable against published criteria · AI output never mistaken for evidence...