ssb

SSB S ecure S hell B ruteforcer — A faster & simpler way to bruteforce SSH server. Installation from Binary Download a pre-built binary from releases page, unpack and run! Or: ▶ sudo curl -sSfL 'https://git.io/kitabisa-ssb' | sh -s -- -b /usr/local/bin from Source Need go1.14+ compiler installed...

GPT Academic v1.3.9 - Open Redirect

An open redirect vulnerability exists in GPT Academic v1.3.9, where the file parameter in the /file= endpoint can be manipulated to redirect users to malicious websites. This could facilitate phishing attacks by tricking users into visiting attacker-controlled URLs. id: CVE-2024-10812 info: name:...

Microsoft SharePoint Server - WS-Federation BinaryFormatter Deserialization RCE

Microsoft SharePoint Server 2016, 2019, Subscription Edition = 2026.3.1 contains a remote code execution vulnerability in the WS-Federation passive sign-in endpoint /trust/default.aspx. The SharePoint authentication module SPFederationAuthenticationModuleV2 uses a deflate-only...

OmniRoute < 3.8.49 - Unauthenticated RCE

OmniRoute = 3.8.49 contains a remote code execution caused by insufficient validation of interpreter arguments in the POST /api/acp/agents endpoint, letting remote attackers execute arbitrary code, exploit requires anonymous access when requireLogin is false or management session/API key when tru...

MobSF - Path Traversal

MobSF is vulnerable to an issue with apktool CVE-2024-21633 that allows for RCE or arbitrary file writing. It does this through a path traversal vulnerability. This template tests for it by writing to a local file and reading that file. RCE can be achieved by overwriting jadx, as shown in the two...

WordPress Varnish/Nginx Proxy Caching <= 1.8.3 - Information Exposure

Razvan Stanga Varnish/Nginx Proxy Caching = 1.8.3 contains an insertion of sensitive information into sent data vulnerability caused by improper handling of embedded sensitive data, letting attackers retrieve sensitive information, exploit requires crafted requests. id: CVE-2025-62126 info: name:...

Repetier Server - Directory Traversal

Repetier Server through 1.4.10 allows ..%5c directory traversal for reading files that contain credentials, as demonstrated by connectionLost.php. id: CVE-2023-31059 info: name: Repetier Server - Directory Traversal author: parthmalhotra,pdresearch severity: high description: | Repetier Server...

recomposer

Recomposer.py Ever have that not so safe feeling uploading your malware binaries to VirusTotal or other AV sites because you can look up binaries by hashes? Example: https://github.com/mubix/vt-notify Feel somewhat safer with Recomposer! Recomposer will take your binary and randomly do the...

recomposer

Recomposer.py هل سبق لك أن شعرت بعدم الأمان عند رفع ملفات البرامج الضارة الخاصة بك إلى VirusTotal أو مواقع مكافحة الفيروسات الأخرى لأنه يمكن البحث عن الملفات الثنائية بواسطة التجزئات هاشات؟ مثال: https://github.com/mubix/vt-notify اشعر بأمان أكبر قليلاً مع Recomposer! سيأخذ Recomposer ملفك الثنائ...

NimSyscallPacker

NimSyscallPacker / Loader This tool was made public after a talk at x33fcon. It was my private main coding project from 2021 - 2024 and is now considered deprecated and is not maintained anymore. Dont expect bug fixes or feature updates here from my side. Instead, RustPack is maintained now as a...

LolDriverScan

LolDriverScan LolDriverScan is a golang tool that allows users to discover vulnerable drivers on their system. This tool fetches the loldrivers.io list from their APIs and scans the system for any vulnerable drivers This project is implemented in Go and does not require elevated privileges to run...

kube-beacon

Kube-Beacon Project Scan your kubernetes runtime !! Kube-Beacon is an open source audit scanner who perform audit check on a deployed kubernetes cluster and output a security report. The audit tests are the full implementation of CIS Kubernetes Benchmark specification NEW !! audit result now can ...

PESTO

PESTO: PE files Statistical Tool Description PESTO is a Python script that extracts and saves in a database some PE file security characteristics or flags searching for every PE binary in a whole directory, and saving results in a database. It checks for architecture flag in the header, and for t...

ARTist

ARTist - The Android Runtime instrumentation and security toolkit ARTist is a flexible open source instrumentation framework for Android's apps and Java middleware. It is based on the Android Runtime’s ART compiler and modifies code during on-device compilation. In contrast to existing...

flare-floss

نصوص FLOSS يدعم FLOSS تحويل مخرجاته إلى نصوص لأدوات مختلفة. يُرجى الاطلاع على نصوص العرض في هذا الدليل. بالإضافة إلى ذلك، يوجد إضافة أخرى لـ IDA تسمح لـ FLOSS باستخراج السلاسل المُبهمة تلقائيًا وتطبيقها على الوحدة المحملة حاليًا في IDA. idaplugin.py هو نص IDAPython يمكنك تشغيله مباشرة داخل IDA Pr...

nmapAutomator

nmapAutomator A script you can run in the background! Summary The main goal for this script is to automate the process of enumeration & recon that is run every time, and instead focus our attention on real pentesting. This will ensure two things: 1. Automate nmap scans. 2. Always have some recon...

shuffledns

غلاف massDNS لعنونة القوة وتحديد النطاقات الفرعية مع دعم معالجة أحرف البدل الميزات • التثبيت • التشغيل • أحرف البدل • الترخيص • ديسكورد shuffleDNS هو غلاف حول massdns، مكتوب بلغة Go، يتيح لك تعداد النطاقات الفرعية الصالحة باستخدام القوة العنيفة النشطة، بالإضافة إلى حل النطاقات الفرعية مع معالجة...

PKCS11SSHAgent

SRO PKCS11 – SSH Agent CNG Sovereign unification PKCS11 + SSH-agent + Pageant + CNG/Smartcard A single Windows executable that unifies four traditionally separate functions: Full PKCS11 module Firefox, OpenSC, ssh -I SSH agent compatible with OpenSSH/Git/VS/WSL Pageant server compatible with...

pgpdump

pgpdump : un visualiseur de paquets PGP Kazu Yamamoto [email protected] 16 août 2010 Vue d'ensemble pgpdump est un visualiseur de paquets PGP qui affiche le format des paquets OpenPGP RFC 4880 et PGP version 2 RFC 1991. Voici un exemple : % pgpdump test/sig1 Old: Marker Packettag 103 bytes...

enumy

Enumy Enumy is an ultra fast portable executable that you drop on target Linux machine during a pentest or CTF in the post exploitation phase. Running enumy will enumerate the box for common security vulnerabilities. Installation You can download the final binary from the release x86 or x64 tab...