tplmap

Tplmap This project is no longer maintained. I'm happy to merge new PRs as long they don't break the test suite. Tplmap assists the exploitation of Code Injection and Server-Side Template Injection vulnerabilities with a number of sandbox escape techniques to get access to the underlying operatin...

Papers

Questa repository è destinata a ospitare i miei articoli di ricerca. Mettila in watch se vuoi leggere altro da me. Aggirare i meccanismi di rilevamento XSS Scarica PDF Un approccio fonetico per calcolare l'informazione linguistica nel testo Scarica PDF...

web-hacking-playground

Web Hacking Playground Beschreibung Web Hacking Playground ist eine kontrollierte Web-Hacking-Umgebung. Sie besteht aus Schwachstellen, die in realen Fällen gefunden wurden, sowohl bei Pentests als auch bei Bug-Bounty-Programmen. Ziel ist es, dass Benutzer damit üben und lernen, sie zu erkennen u...

shennina

Shennina Automating Host Exploitation with AI Abstract Shennina is an automated host exploitation framework. The mission of the project is to fully automate the scanning, vulnerability scanning/analysis, and exploitation using Artificial Intelligence. Shennina is integrated with Metasploit and Nm...

AWSGoat

AWSGoat : Un'infrastruttura AWS dannatamente vulnerabile Compromettere l'infrastruttura cloud di un'organizzazione è come sedersi su una miniera d'oro per gli aggressori. E a volte, una semplice configurazione errata o una vulnerabilità nelle applicazioni web è tutto ciò di cui un attaccante ha...

tactical-exploitation

tactical-exploitation "L'altro modo di fare penetration test" -- HD Moore & Valsmith Sono sempre stato un grande sostenitore di un approccio tattico al penetration testing che non si concentra sullo sfruttamento di vulnerabilità software note, ma si affida a tecniche della vecchia scuola come la...

fuzzilli

Fuzzilli A coverage-guided fuzzer for dynamic language interpreters based on a custom intermediate language "FuzzIL" which can be mutated and translated to JavaScript. Usage The basic steps to use this fuzzer are: 1. Download the source code for one of the supported JavaScript engines. See the...

cpu_rec_rs

cpurecrs Bestimmt, welche CPU-Architektur in einer Binärdatei verwendet wird. Beispiel: root@kitploit: $ cpurecrs /bin/bash /usr/lib/firmware/rtlwifi/rtl8821aefw Loading corpus from cpureccorpus/.corpus ---------------------------------------------------------------------------------------- File ...

AMSI-patches-learned-till-now

AMSI-patches-learned-till-now Eu documentei todos os patches de AMSI que aprendi até agora ❗ Meu aprendizado de patch de AMSI até agora. Não pertence aos ativos da minha empresa! AVISO LEGAL: Este código não tem a intenção de ser evasivo até agora! Apenas uma abordagem conceitual. Links: 1...

truehunter

Truehunter The goal of Truehunter is to detect encrypted containers using a fast and memory efficient approach without any external dependencies for ease of portability. It was designed to detect Truecrypt and Veracrypt containers, however it may detect any encrypted file with a 'header' not...

flare-qdb

FireEye Labs Query-Oriented Debugger flare-qdb is a command-line and scriptable Python-based tool for evaluating and manipulating native program state. It uses Vivisect to set a breakpoint on each queried instruction and executes Python code when hit. flare-qdb frees the analyst to take a nonline...

SiMBA

SiMBA SiMBA è uno strumento per la semplificazione di espressioni lineari miste booleano-aritmetiche MBA. Come MBA-Blast e MBA-Solver, utilizza un approccio completamente algebrico basato sull'idea che una MBA lineare è completamente determinata dai suoi valori sull'insieme di zeri e uni, ma...

CVE-2025-5548

भेद्यता विश्लेषण और शोषण की पद्धति लेखक: अनास रामी मॉड्यूल: 6. भेद्यताएँ - साइबर सुरक्षा में मास्टर उद्देश्य: भेद्यता विश्लेषण, एक्सप्लॉइट विकास और 0-दिनों तक पहुँच पर तकनीकी प्रस्ताव, प्रयोगशाला वातावरण और व्यावहारिक मामलों का दस्तावेज़ीकरण। 1. पद्धतिगत दृष्टिकोण और मानसिकता भेद्यता विश्लेषण का...

web-hacking-playground

Web Hacking Playground Description Web Hacking Playground is a controlled web hacking environment. It consists of vulnerabilities found in real cases, both in pentests and in Bug Bounty programs. The objective is that users can practice with them, and learn to detect and exploit them. Other topic...

dissect

dissect Dissect is a digital forensics & incident response framework and toolset that allows you to quickly access and analyse forensic artefacts from various disk and file formats, developed by Fox-IT part of NCC Group. This project is a meta package, it will install all other Dissect modules wi...

msnm-sensor

Description MSNM-S Multivariate Statistical Network Monitoring-Sensor shows the practical suitability of the approaches found in PCA-MSNM and in Hierarchical PCA-MSNM works. The first one present the MSNM approach and new multivariate statistical methodology for network anomaly detection while th...

CVE-2026-53145 drm/gem: Try to fix change_handle ioctl, attempt 4

In the Linux kernel, the following vulnerability has been resolved: drm/gem: Try to fix changehandle ioctl, attempt 4 airlied: just added some comments on how to reenable On-list because the cat is out of the bag and we're clearly not good enough to figure this out in private. The story thus far:...

CVE-2026-53145

Summary of CVE-2026-53145 (Linux kernel drm/gem change_handle race) : A race between gem_close and gem_change_handle ioctls in the DRM GEM subsystem was addressed but not cleanly fixed initially. The root cause involved confusion around the local handle variable (which is the new handle) and seve...

GHSA-6V5V-WF23-FMFQ markdown-it: Quadratic complexity DoS in smartquotes rule via replaceAt string operations

Summary A quadratic time complexity vulnerability exists in markdown-it's smartquotes rule enabled via the typographer: true option. An attacker can craft a markdown input consisting of consecutive quotation marks that causes the parser to consume excessive CPU time, leading to denial of service...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerabilities have been resolved: Team: Replace the team lock with rtnl lock. Syszbot reports various ordering issues related to lower instance locks and team locks. It is recommended to use rtnl locks for protecting team devices, similar to bonding. This chan...