routersploit

RouterSploit - Exploitation Framework for Embedded Devices Community Join community on Embedded Exploitation Discord. Description The RouterSploit Framework is an open-source exploitation framework dedicated to embedded devices. It consists of various modules that aid penetration testing...

css-the-bomb-inside-your-inbox

CSS: 당신의 받은 편지함 속 폭탄 리포지토리에 오신 것을 환영합니다. 이 리포지토리는 제 발표 "CSS: 당신의 받은 편지함 속 폭탄"의 모든 자료를 포함하고 있습니다. 이 리포지토리는 합법적인 보안 연구, 분석 및 방어적 테스트 목적으로만 식별, 개발 또는 수집된 개념 증명PoC 코드, 테스트 케이스 및 보조 자료를 포함합니다. 이 연구에 대한 자세한 내용은 다음 링크에서 확인할 수 있습니다: 연구 논문 목차 PoC CSS 핫와이어링 붙여넣기를 통한 토큰 유출 CSP가 외부 리소스를 차단하는 경우 텍스트 노드 유출 HTM...

NetCrackPi

NetCrackPi Этот репозиторий представляет собой коллективный набор для загрузки, чтобы превратить ваш Raspberry Pi в утилиту для сетевой эксплуатации разумеется, в образовательных целях. Возможности NetCrackPi включают вардрайвинг, взлом WEP, WPA, WPA2, сниффинг пакетов, ARP-спуфинг, атаки MiTM,...

bettercap

Join the project community on our server!...

AzureAD-Attack-Defense

Microsoft Entra ID - плейбук по атакам и защите Эта публикация представляет собой сборник различных распространённых сценариев атак на Microsoft Entra, а также способов их смягчения или обнаружения. Все включённые сценарии, выводы и комментарии основаны на опыте участников, полученном во время...

bitlocker-attacks

Attaques contre BitLocker Une liste d'attaques publiques contre BitLocker. Toute attaque publique ayant le potentiel d'attaquer BitLocker mais dont la méthode exacte n'est pas encore publique comme baton drop est hors du périmètre. La plupart des attaques concernent les cas où le VMK est scellé p...

NoFrak

NoFrak NoFrak — это реализация Proof of Concept для Android, предназначенная для предотвращения фрекинг-атак, описанных в статье «Breaking and Fixing Origin-Based Access Control in Hybrid Web/Mobile Application Frameworks» Мартина Георгиева, Сумана Яна и Виталия Шматикова. NDSS 2014. Cordova...

beef

Copyright c 2006-2026 Wade Alcorn - [email protected] Browser Exploitation Framework BeEF - https://beefproject.com See the file 'doc/COPYING' for copying permission =============================================================================== Что такое BeEF? BeEF расшифровывается как The...

meshdeck

meshdeck MeshDeck 在 Arch Linux ARM Wilson 上的移植版本 此项目最初移植到了 Arch Linux ARM 的 Wilson 仓库。由于存在重叠且目标相似，Wilson 仓库正在与 ArchAssault 项目 http://www.archassault.org 合并。 所有原始/上游工作由 Dr. Philip Polstra 完成。 摘自其 Sourceforge 页面：http://sourceforge.net/projects/thedeck/ 一个附加模块，允许通过 802.15.4...

GPT Academic v1.3.9 - Open Redirect

An open redirect vulnerability exists in GPT Academic v1.3.9, where the file parameter in the /file= endpoint can be manipulated to redirect users to malicious websites. This could facilitate phishing attacks by tricking users into visiting attacker-controlled URLs. id: CVE-2024-10812 info: name:...

Keycloak - SAML Core Package Signature Validation Flaw

A flaw exists in the SAML signature validation method within the Keycloak XMLSignatureUtil class. The method incorrectly determines whether a SAML signature is for the full document or only for specific assertions based on the position of the signature in the XML document, rather than the Referen...

Adobe Experience Manager - XML External Entity Injection

Adobe Experience Manager 6.5, 6.4, 6.3 and 6.2 are susceptible to XML external entity injection. An attacker can possibly obtain sensitive information, modify data, and/or execute unauthorized administrative operations in the context of the affected site. id: CVE-2019-8086 info: name: Adobe...

Gradio - Open Redirect

An open redirect vulnerability exists in the gradio-app/gradio, affecting the latest version. The vulnerability allows an attacker to redirect users to arbitrary websites, which can be exploited for phishing attacks, Cross-site Scripting XSS, Server-Side Request Forgery SSRF, amongst others. This...

WordPress CAS Theme <= 1.0.0 - Server-Side Request Forgery

The CAS WordPress theme through version 1.0.0 is vulnerable to Server-Side Request Forgery SSRF via the 'url' parameter in the getremotedata.php script. This vulnerability allows unauthenticated attackers to make the server perform requests to arbitrary URLs. id: CVE-2024-4399 info: name: WordPre...

WordPress Stop User Enumeration <=1.3.7 - Cross-Site Scripting

WordPress Stop User Enumeration 1.3.7 and earlier are vulnerable to unauthenticated reflected cross-site scripting. id: CVE-2017-18536 info: name: WordPress Stop User Enumeration =1.3.7 - Cross-Site Scripting author: daffainfo severity: medium description: WordPress Stop User Enumeration 1.3.7 an...

WordPress PhastPress <1.111 - Open Redirect

WordPress PhastPress plugin before 1.111 contains an open redirect vulnerability. An attacker can redirect a user to a malicious site and possibly obtain sensitive information, modify data, and/or execute unauthorized operations. id: CVE-2021-24210 info: name: WordPress PhastPress 1.111 - Open...

rtl8812au

RTL8812AU/21AU and RTL8814AU Wireless drivers Only for use with Linux & Android THESE DRIVERS IS DEPRECATED. Use the mac80211 drivers over at https://github.com/lwfinger/rtw88 Important! root@kitploit: Use "ip" and "iw" instead of "ifconfig" and "iwconfig" It's described further down, READ THE...

SAMLRaider

SAML Raider - Extension Burp pour SAML2 Description SAML Raider est une extension Burp Suite pour tester les infrastructures SAML. Elle contient deux fonctionnalités principales : la manipulation des messages SAML et la gestion des certificats X.509. Ce logiciel a été créé par Roland Bischofberge...

project_mantis

Project Mantis: Взлом против AI-хакера Инъекция промптов как защита от кибератак на основе LLM Установка Mantis root@kitploit: pip install -r requirements.txt Запуск Mantis с готовыми конфигурациями В каталоге ./confs доступны различные готовые конфигурации. Hack-back контратака Пример файла...

hcxdumptool

hcxdumptool Инструмент для захвата пакетов от WLAN-устройств и обнаружения потенциальных слабых мест в собственных WiFi-сетях путем проведения атак уровня 2 на протокол WPA. Предназначен для работы преимущественно без головы на малых системах, таких как Raspberry Pi Zero. hcxnmealog Инструмент дл...