pdf.js-CVE-2024-4367

🚨 CVE-2024-4367 - यूनिवर्सल PDF.js भेद्यता स्कैनर ⚠️ महत्वपूर्ण सुरक्षा उपकरण | CVE-2024-4367 CVSS 9.8 का पता लगाता है - PDF.js रिमोट कोड निष्पादन भेद्यता किसी भी वेबसाइट पर कार्य करता है - शून्य कॉन्फ़िगरेशन आवश्यक 📋 विषय-सूची 📖 अवलोकन ⚡ त्वरित आरंभ 🔍 यह क्या पता लगाता है 🛠️ यह कैसे काम करता है 📊...

DevAudit

Note : DevAudit uses the OSS Index database, which has some rate limiting. If you notice you are hitting the limit please raise an issue. Authenticated users get a higher limit, and we am implementing authentication into DevAudit soon. Most non-authenticated users probably won't notice the limit...

thc-tips-tricks-hacks-cheat-sheet

THC's favourite Tips, Tricks & Hacks Cheat Sheet https://thc.org/tips A collection of our favourite tricks. Many of those tricks are not from us. We merely collect them. We show the tricks 'as is' without any explanation why they work. You need to know Linux to understand how and why they work. G...

thc-tips-tricks-hacks-cheat-sheet

Les trucs, astuces et hacks préférés de THC Aide-mémoire https://thc.org/tips Une collection de nos astuces préférées. Beaucoup de ces astuces ne viennent pas de nous. Nous nous contentons de les collecter. Nous montrons les astuces telles quelles, sans expliquer pourquoi elles fonctionnent. Vous...

am335xbootrom

Reverse Engineering the AM335x Boot ROM It's probably been eighteen months since I first got my hands a few Beaglebone Black boards, saved from the dumpster. Unfortunately, the boards didn't work right away. Now, this was my first time working with one of these boards, or any single board compute...

REST-Attacker

REST-Attacker REST-Attacker é uma estrutura automatizada de testes de penetração para APIs que seguem o estilo arquitetural REST. O foco da ferramenta é simplificar a análise de implementações genéricas de APIs REST automatizando completamente o processo de teste - incluindo geração de testes,...

GyoiThon

GyoiThon : Next generation penetration test tool Japanese page is here. Presentation January 25th,2018:JANOG41 March 23th,2018:Black Hat ASIA 2018 Arsenal August 12th,2018:DEFCON26 DemoLabs October 24th,2018:OWS in CSS2018 November 3rd,2018:AV TOKYO 2018 HIVE December 22-23th,2018:SECCON YOROZU...

arya

Arya - El YARA Inverso Arya es una herramienta única que produce archivos pseudo-maliciosos diseñados para activar reglas YARA. Puedes pensar en ella como un YARA inverso porque hace exactamente lo opuesto: crea archivos que coinciden con tus reglas. Puedes leer más sobre Arya y cómo funciona en...

arya

Arya - The Reverse YARA Arya is a unique tool that produces pseudo-malicious files meant to trigger YARA rules. You can think of it like a reverse YARA because it does exactly the opposite - it creates files that matches your rules. You can read more about Arya and how it works in our blog. Intro...

dnsdmpstr

dnsdmpstr Inoffizielle API & Client für DNS Dumpster und HackerTarget.com IP-Tools. https://dnsdumpster.com/ https://hackertarget.com/ip-tools/ Installation root@kitploit: git clone https://github.com/zeropwn/dnsdmpstr cd dnsdmpstr pip3 install -r requirements.txt chmod +x ddump.py Verwendung Als...

port-scan-automation

LazyMap - Auto NMAP Scanning Script Automate NMAP scans and custom Nessus polices. Released as open source by NCC Group Plc - http://www.nccgroup.com/ Developed by Daniel Compton, daniel dot compton at nccgroup dot com https://github.com/nccgroup/port-scan-automation Released under AGPL see LICEN...

Teldat-Router-CVE-2022-POC

Roteador Teldat CVE-2022-39996 & CVE-2022-39997 POC Prova de conceito para duas vulnerabilidades descobertas em roteadores Teldat RS123 / RS123w. Visão Geral CVE ID| Tipo| CWE| CVSS| Severidade ---|---|---|---|--- CVE-2022-39996| XSS Refletido| CWE-79| 6.1| Médio CVE-2022-39997| Senha Fraca|...

badsuccessor

BadSuccessor.py Uma ferramenta de teste de penetração que explora a vulnerabilidade de escalonamento de privilégios dMSA delegated Managed Service Account em ambientes Active Directory do Windows Server 2025. ⚠️ Aviso Legal Esta ferramenta destina-se exclusivamente a testes de penetração...

reverie

reverie Automated Pentest Tools Designed For Parrot Linux this tool will make your basic pentesting task like Information Gathering, Security Auditing, And Reporting so this tool will do every task fully automatic. Usage Guide Download / Clone git clone https://github.com/baguswiratmaadi/reverie ...

Pishi

Pishi Pishi é uma ferramenta de reescrita binária estática projetada para instrumentar basic blocks no kernel XNU e em extensões de kernel macOS arbitrárias kexts. Para o kernel XNU, o Pishi permite instrumentar no nível de função, arquivo ou pasta. Por exemplo, você pode instrumentar tudo no...

CVE-2021-21401_nanopb-c_AOSP10_R33

Nanopb - Protocol Buffers for Embedded Systems Nanopb is a small code-size Protocol Buffers implementation in ansi C. It is especially suitable for use in microcontrollers, but fits any memory restricted system. Homepage: https://jpa.kapsi.fi/nanopb/ Documentation: https://jpa.kapsi.fi/nanopb/doc...

pentest-a2p2v-core

README Automated Attack Path Planning and Validation A2P2V is a planning and cyber-attack tool that provides the capability for users to determine a set of ranked attack sequences given a specific attacker goal. The aim of the tool is to simplify process so that non-security experts can generate...

CVE-2018-7747

CVE-2018-7747 CalderaForms 1.5.9.1 XSS WordPress plugin - tutorial CalderaForm is a WordPress plugin that makes it easy to create forms via drag and drop. During a recent engagement I happened to test some portals, one of which hosted a contact form created with this plugin. The custom...

pwnbin

PwnBin What is PwnBin PwnBin is a webcrawler which searches public pastebins for specified keywords. All pastes are then returned after sending completion signal ctrl+c. How to use PwnBin Basic command: root@kitploit: python3 pwnbin.py -k ,"example substring",..... -o Both the keyword and...

CVE-2023-41892_poc

CVE-2023-41892poc Customized this for my own use pocnoauth.py Basic PHP one-liner webshell OS command execution via ?cmd= pocauth.py Simple key-based authentication added webshell SHA-256 hash comparison method Commands can only be executed if the correct key is provided Code modification require...