longtongue

Generiere maßgeschneiderte Passwort-/Passphrase-Wortlisten basierend auf Zielinformationen Programmiert mit 💙 von edoardottt Auf Twitter teilen! Installation ⬇️ pipx root@kitploit: pipx install longtongue Quellcode root@kitploit: git clone https://github.com/edoardottt/longtongue.git cd longtongue...

CVE-2025-55182-Attack-Analysis

CVE-2025-55182 Analisi dell'Attacco: RCE nei React Server Components Analisi di un attacco reale su un'applicazione Next.js in produzione 📋 Indice Sommario Esecutivo Panoramica della Vulnerabilità Cronologia dell'Attacco Analisi Tecnica Analisi del Malware Indicatori di Compromissione IOC...

dexfinder

dexfinder Inglese | Cinese | Sito web Sito web : junelegency.github.io/dexfinder Strumento multipiattaforma per la ricerca di riferimenti a metodi e campi in APK/DEX con tracciamento della catena di chiamate, deoffuscamento ProGuard/R8 e rilevamento di API nascoste Android. Ispirato dallo strumen...

SkillsGuard

Supporta lo sviluppo Se SkillsGuard protegge la tua pipeline, considera di supportare la ricerca continua e nuove regole di rilevamento. Portafoglio donazioni ETH 0x11282eE5726B3370c8B480e321b3B2aA13686582 Scannerizza il codice QR o copia l'indirizzo del portafoglio sopra. Scanner di sicurezza...

autotimeliner

AutoTimeliner Automagically extract forensic timeline from volatile memory dumps. AutoTimeliner runs multiple Volatility3 plugins against Windows, Linux, and macOS memory images, then merges their output into a single, sorted CSV timeline: Generic Timeline Plugin Plugin| What it captures ---|---...

httpgrep

Beschreibung Ein schnelles, asynchrones Python-Tool, das HTTPS-Server scannt und in HTTP-Antworttexten und -Headern nach Strings oder Regex-Mustern sucht. Es akzeptiert einzelne Hosts, URLs, CIDR-Bereiche, IP-Bereiche oder Dateien; scannt mehrere Ports pro Ziel einzeln, Komma-Listen oder Bereiche...

httpgrep

Description A fast, asynchronous Python tool that scans HTTPS servers and greps for strings or regex patterns in HTTP response bodies and headers. It takes single hosts, URLs, CIDR ranges, IP ranges or files; scans multiple ports per target single, comma-lists or ranges, auto-detecting TLS vs pla...

xcrawl3r

xcrawl3r xcrawl3r is a command-line utility designed to recursively spider webpages for URLs. It works by actively traversing websites - following links embedded in webpages, and parsing files including sitemaps & robots.txt - to uncover every URL. Unlike xurlfind3r that doesn't interact directly...

adaudit

adaudit This PowerShell script is designed to conduct a comprehensive audit of Microsoft Active Directory, focusing on identifying common security vulnerabilities and weaknesses. Its execution facilitates the pinpointing of critical areas that require reinforcement, thereby fortifying your...

dirtyclone-exploit

Framework de Exploração DirtyClone CVE-2026-46331 — Escalação Local de Privilégios no Kernel Linux Corrupção de Cache de Página TC pedit + IPsec TEE · Kernels afetados: ≤ 6.12.9 root@kitploit: ╔═══════════════════════════════════════════════════════════════╗ ║ ║ ║ | \ | | / | | ║ ║ | | | | | '| |...

mapcidr

A utility program to perform multiple operations for a given subnet/CIDR range. Features • Install • Usage • Library • Join Discord mapCIDR is developed to ease load distribution for mass scanning operations; it can be used both as a library and as an independent CLI tool. Features CIDR expansion...

Criminal Deception in Silicon Valley

Interesting paper: Abstract: With entrepreneurial fraud cases on the rise, we investigate how entrepreneurs carry out criminal deception , employing deceptive means to defraud audiences. Analyzing court data from Silicon Valley ventures and their founders prosecuted for fraud between 2000 and 202...

MSFinger

MSFinger - Strumento di fingerprinting dei servizi di rete Microsoft Versione: 1.0 Autore: Laurent Gaffie Azienda: Secorizon Panoramica MSFinger è uno strumento di fingerprinting di rete ad alte prestazioni progettato per la ricognizione di reti interne. Identifica rapidamente i servizi Microsoft...

Exploit for Use After Free in Linux Linux_Kernel

GhostLock — OnePlus Locked Bootloader Jailbreak Kernel exploi...

snallygaster

snallygaster Finds file leaks and other security problems on HTTP servers. what? snallygaster is a tool that looks for files accessible on web servers that shouldn't be public and can pose a security risk. Typical examples include publicly accessible git repositories, backup files potentially...

CVE-2026-10582 Hugo 0.91.0 through 0.165.0 Server-Side Request Forgery via security.http.urls Lacking Destination Address Validation

Hugo's security.http.urls allowlist is the only control on outbound fetches made by resources.GetRemote, and it inspects the URL text alone. CheckAllowedHTTPURL in config/security/securityConfig.go applies the configured pattern list and then re-checks a canonicalised form of an integer, hex or...

CVE-2026-10582 Hugo 0.91.0 through 0.165.0 Server-Side Request Forgery via security.http.urls Lacking Destination Address Validation

Hugo's security.http.urls allowlist is the only control on outbound fetches made by resources.GetRemote, and it inspects the URL text alone. CheckAllowedHTTPURL in config/security/securityConfig.go applies the configured pattern list and then re-checks a canonicalised form of an integer, hex or...

CVE-2026-10582

Hugo versions 0.91.0 through 0.165.0 are affected by a Server-Side Request Forgery (SSRF) vulnerability in the security.http.urls allowlist. The allowlist validates only the URL text itself—checking configured patterns and canonicalised IPv4 forms—but never resolves the hostname nor inspects the ...

CVE-2026-10582 Hugo 0.91.0 through 0.165.0 Server-Side Request Forgery via security.http.urls Lacking Destination Address Validation

Hugo's security.http.urls allowlist is the only control on outbound fetches made by resources.GetRemote, and it inspects the URL text alone. CheckAllowedHTTPURL in config/security/securityConfig.go applies the configured pattern list and then re-checks a canonicalised form of an integer, hex or...

EUVD-2026-64775

Hugo's security.http.urls allowlist is the only control on outbound fetches made by resources.GetRemote, and it inspects the URL text alone. CheckAllowedHTTPURL in config/security/securityConfig.go applies the configured pattern list and then re-checks a canonicalised form of an integer, hex or...