bpflock

bpflock - Linux 머신 잠금 bpflock - Linux 머신을 잠그고 감사하기 위한 eBPF 기반 보안. 참고: bpflock은 현재 실험 단계 에 있으며, 동작이 중단되거나 옵션과 보안 의미가 변경될 수 있으며, 일부 BPF 프로그램은 Cilium ebpf 라이브러리를 사용하도록 업데이트될 예정입니다. 섹션 1. 소개 2. 기능 개요 2.1 보안 기능 2.2 의미론 3. 배포 4. 문서 5. 빌드 1. 소개 bpflock은 eBPF를 사용하여 Linux 보안을 강화합니다. 다양한 Linux 기능에 대한...

bpflock

bpflock - Lock Linux machines bpflock - eBPF driven security for locking and auditing Linux machines. Note: bpflock is currently in experimental stage , it may break, options and security semantics may change, some BPF programs will be updated to use Cilium ebpf library. Sections 1. Introduction...

BITB

BITB 브라우저 인 더 브라우저BITB 공격을 위한 브라우저 템플릿입니다. More information: https://mrd0x.com/browser-in-the-browser-phishing-attack/ 사용법 각 폴더에는 수정해야 할 4개의 변수가 있는 index.html 파일이 있습니다: XX-TITLE-XX - 페이지에 표시되는 제목 예: 지금 계정에 로그인하세요 XX-DOMAIN-NAME-XX - 사칭하는 도메인 이름 예: gmail.com XX-DOMAIN-PATH-XX - 도메인 경로 예:...

cloud-middleware-dataset

クラウドミドルウェアデータセット このプロジェクトには、主要なクラウドサービスプロバイダー（Azure、AWS、GCP）で使用されるクラウドミドルウェア（すなわち、クラウドセキュリティプロバイダーによってインストールされるエージェント）が含まれています。...

automatic-api-attack-tool

Automatic API Attack Tool Imperva's customizable API attack tool takes an API specification as an input, and generates and runs attacks that are based on it as an output. The tool is able to parse an API specification and create fuzzing attack scenarios based on what is defined in the API...

bkcrack

bkcrack Crack legacy zip encryption with Biham and Kocher's known plaintext attack. Overview A ZIP archive may contain many entries whose content can be compressed and/or encrypted. In particular, entries can be encrypted with a password-based symmetric encryption algorithm referred to as...

bkcrack

bkcrack Biham과 Kocher의 알려진 평문 공격known plaintext attack을 사용하여 레거시 zip 암호화를 해독합니다. 개요 ZIP 아카이브는 내용이 압축 및/또는 암호화될 수 있는 많은 항목을 포함할 수 있습니다. 특히, 항목은 전통적인 PKWARE 암호화, 레거시 암호화 또는 ZipCrypto라고 불리는 비밀번호 기반 대칭 암호화 알고리즘으로 암호화될 수 있습니다. 이 알고리즘은 의사 난수 바이트 스트림키스트림을 생성하고, 이를 항목의 내용평문에 XOR하여 암호화된 데이터암호문를 만듭니다. 3개의...

dockerscan

DockerScan v2.0 The Most Comprehensive Docker Security Scanner | |...

DEFCON-CICD-pipelines-workshop

CI/CD : 新たなエルドラド？ 概要 CI/CDパイプラインは、Infrastructure as Code などの新しいアプローチの台頭に伴い、開発チーム内の標準的なインフラストラクチャの一部としてますます一般的になってきており、そのようなパイプラインの重要度は急速に高まっています。万一侵害された場合、リスクにさらされるのはアプリケーションだけではなく、基盤となるシステム自体、そしてしばしば情報システム全体にも及びます。...

rapidscan

🟥 RapidScan v1.2 - The Multi-Tool Web Vulnerability Scanner RapidScan has been ported to Python3 i.e. v1.2. The Python2.7 codebase is available on v1.1 releases section. Download and use it if you still haven't upgraded to Python 3. Kindly note that the v1.1 Python2.7 will not be enhanced further...

mousejack_transmit

This is code extending the mousejack tools https://github.com/RFStorm/mousejack. Replay/transmit tools have been added to the original tools. POC packets based on a Logitech Wireless Combo MK220 which consists of a K220 wireless keyboard and an M150 wireless mouse are included in the logs folder...

EUVD-2026-87534

The File Manager WordPress plugin before 8.0.5, FileOrganizer WordPress plugin before 1.2.1, File Manager Pro WordPress plugin before 2.1.3 do not correctly validate the origin of window messages received by the file browser they load on their admin screens, accepting any origin that is a leading...

EUVD-2026-87536

The MCP Server for WordPress WordPress plugin before 1.8.2 does not correctly verify the WordPress REST API nonce for cookie-authenticated requests when a condition an attacker can influence is present, allowing unauthenticated attackers to perform administrator-only actions, including creating a...

CVE-2026-89237

The Bluff Post WordPress plugin through 1.1.1 does not sanitise and escape parameters before using them as identifiers in a SQL query, allowing unauthenticated attackers to append additional SQL and extract sensitive information from the database...

EUVD-2026-87527

The Bluff Post WordPress plugin through 1.1.1 does not sanitise and escape parameters before using them as identifiers in a SQL query, allowing unauthenticated attackers to append additional SQL and extract sensitive information from the database...

uncaptcha

uncaptcha Defeating Google's audio reCaptcha system with 85% accuracy. Disclaimer unCaptcha is intended to be a proof of concept. As of the time of our paper, we found it to successfully solve reCaptcha's audio challenges with 85% success. Since that time, reCaptcha appears to include some...

macphish

macphish Office for Mac Macro Payload Generator Attack vectors There are 4 attack vectors available: beacon creds meterpreter meterpreter-grant For the 'creds' method, macphish can generate the Applescript script directly, in case you need to run it from a shell. beacon On execution, this payload...

Brute_Force

BruteForce 설치 : root@kitploit: sudo apt install python3 python3-pip pip3 install proxylist pip3 install mechanize 사용법: Gmail 무차별 대입 공격 root@kitploit: python3 BruteForce.py -g [email protected] -l Filelist python3 BruteForce.py -g [email protected] -p PasswordSingle Hotmail 무차별 대입 공격...

Beleth

Beleth 사전 기반 SSH 크래커 root@kitploit: Usage: ./beleth OPTIONS -c payload Execute payload on remote server once logged in -h Display this help -l threads Limit threads to given number. Default: 4 -p port Specify remote port -P password Use single password attempt -t target Attempt connections to thi...

haptyc

Haptyc Test Generation Framework What's Haptyc? Haptyc is a python library which was built to add payload position support and Sniper/Clusterbomb/Batteringram/Pitchfork attack types into Turbo Intruder. While Haptyc accomplishes these goals fairly well it also introduces a simpler way to express...