headerpwn

headerpwn A fuzzer for analyzing how servers respond to different HTTP headers. 🏗️ Install ⛏️ Usage 📡 Proxying HTTP Requests Install To install headerpwn, run the following command: root@kitploit: go install github.com/devanshbatham/[email protected] Usage headerpwn allows you to test various...

CVE-2022-30333-PoC

CVE-2022-30333-POC CVE-2022-30333을 테스트하기 위한 샘플 파일 Sample.rar : Linux에서 테스트하려는 경우. 압축을 풀면 ../../tmp/traversed 에 trav 가 생성됩니다. Sample.rar을 추출하기 전에 ../../tmp/traversed 디렉토리가 존재하는지 확인하십시오. exp.rar : Zimbra 메일 서버에서 테스트하려는 경우. 압축을 풀면 /opt/zimbra/jettybase/webapps/zimbra/public/에 moo.txt 가 생성됩니다. 이 파일은...

ntfstool

ntfstool NTFSTool is a forensic tool focused on NTFS volumes. It supports reading partition info MBR, partition table, VBR but also information on Master File Table, Bitlocker encrypted volume, EFS encrypted files, USN journal and more. Download the latest binaries on AppVeyor or by checking the...

CVE-2026-53602

nebula-mesh is a self-hosted control plane for Slack Nebula mesh VPN. Prior to version 0.3.7, two related authorization gaps let a host that should no longer be trusted obtain a fresh, valid Nebula certificate, because nebula-mgmt does not re-evaluate revocation/authorization state at certificate...

Swego

سويكو سكين جيش سويسري لخادم الويب بلغة Golang. يبقى بسيطاً مثل Python SimpleHTTPServer لكن مع العديد من الميزات الاستخدام تشغيل الملف الثنائي إذا كنت لا ترغب في بنائه، تتوفر الملفات الثنائية على https://github.com/nodauf/Swego/releases خلاف ذلك، يجب تثبيت build-essential وتكوين GOPATH:...

pidrila

PIDRILA Current Release: v0.1.0 2020.11.08 Overview PIDRILA : P ython I nteractive D eepweb-oriented R apid I ntelligent L ink A nalyzer is really fast async web path scanner prototype developed by BrightSearch team for all ethical netstalkers. Installation & Usage root@kitploit: git clone...

powercat

powercat Netcat: 파워셸 버전. 파워셸 버전 2 이상 지원 설치 powercat은 파워셸 함수입니다. 먼저 함수를 로드한 후에 실행할 수 있습니다. 아래 명령어 중 하나를 파워셸 프로필에 추가하면 파워셸 시작 시 powercat이 자동으로 로드됩니다. root@kitploit: Load The Function From Downloaded .ps1 File: . .\powercat.ps1 Load The Function From URL: IEX New-Object...

jadx-ai-mcp

JADX-AI-MCP Part of Zin MCP Suite ⚡ Fully automated MCP server + JADX plugin built to communicate with LLM through MCP to analyze Android APKs using LLMs like Claude — uncover vulnerabilities, analyze APK, and reverse engineer effortlessly. ⭐ Contributors Thanks to these wonderful people for thei...

surf

Surf - Escalate your SSRF vulnerabilities on Modern Cloud Environments surf allows you to filter a list of hosts, returning a list of viable SSRF candidates. It does this by sending a HTTP request from your machine to each host, collecting all the hosts that did not respond, and then filtering th...

turbinia

Turbinia Summary Note: Turbinia will not develop new features anymore and is in maintenance mode. Users should have a look atOpenRelik. Turbinia is an open-source framework for deploying, managing, and running distributed forensic workloads. It is intended to automate running of common forensic...

analyzeMFT

AnalyzeMFT Statut : Tous les tests réussissent sur Python 3.8-3.12 sous Windows, macOS et Linux. Démarrage rapide root@kitploit: Install pip install analyzeMFT Basic usage python analyzeMFT.py -f MFTFILE -o output.csv --csv Generate test MFT for testing python -c "from src.analyzeMFT.testgenerato...

pypykatz

🚩 Sponsors If you like this project, consider purchasing licenses of OctoPwn, our full pentesting suite that runs in your browser! For notifications on new builds/releases and other info, hop on to our Discord pypykatz Mimikatz implementation in pure Python. At least a part of it : Runs on all OS...

python-haystack

python-haystack تحليل الذاكرة |travis| |coverage| |landscape| |pypi| |docs| بداية سريعة: دليل الاستخدام السريع في مجلد docs/. واجهة سطر الأوامر Haystack-reverse في مجلد docs/. المزيد من التوثيق مقدمة: python-haystack هو إطار عمل لتحليل الكومة heap، يركز على البحث والهندسة العكسية لبنى C في الذاكر...

malwoverview

Malwoverview !Alt...

katana

A next-generation crawling and spidering framework Features • Installation • Usage • Scope • Config • Filters • Join Discord Features Fast And fully configurable web crawling Standard and Headless mode JavaScript parsing / crawling Customizable automatic form filling Scope control - Preconfigured...

CVE-2023-44766_ConcreteCMS-Stored-XSS---SEO

XSS stocké dans ConcreteCMS v.9.2.1 Auteur : Sergio Description : La vulnérabilité de type Cross Site Scripting dans ConcreteCMS v.9.2.1 permet à un attaquant local d'exécuter du code arbitraire via un script spécialement conçu dans la section « SEO - Extra » des paramètres de page. Vecteurs...

digital-forensics-lab

Digital Forensics Lab & Shared Cyber Forensic Intelligence Repository Features of Repository Interactive Digital Forensics Labs: Tailored for students and faculty engagement Linux-Centric Lab Environment: Utilizes Kali Linux exclusively for all labs Visual Learning Support: Each lab includes...

CVE-2026-53769 Avo: Direct attachment upload endpoint lacks upload authorization and bypasses field-level upload policy

Avo is a framework to create admin panels for Ruby on Rails apps. From version 2.28.0 to before version 3.32.0, Avo's direct attachment upload endpoint lacks server-side upload authorization and bypasses the documented field-level upload policy methods such as uploadFIELDID?. An authenticated Avo...

CVE-2026-53769

Avo , a Ruby on Rails admin panel framework, contains a missing server-side authorization vulnerability in Avo::AttachmentsController#create (the direct attachment upload endpoint) affecting versions 2.28.0 through before 3.32.0 . The endpoint creates an ActiveStorage::Blob before validating the ...

EUVD-2026-71747

Avo is a framework to create admin panels for Ruby on Rails apps. From version 2.28.0 to before version 3.32.0, Avo's direct attachment upload endpoint lacks server-side upload authorization and bypasses the documented field-level upload policy methods such as uploadFIELDID?. An authenticated Avo...