rdesktop

IMPORTANT: rdesktop is no longer maintained Please, beware that this project is no longer maintained and hadn't received a patch in many years. There are reported security vulnerabilities, yet those haven't been reviewed. Use with caution and use it at your own risk. rdesktop - A Remote Desktop...

cumulus

OWASP Cumulus - Threat modeling the clouds Cumulus is the easy way to bring security into cloud and devOps teams. As a variant of the card game Elevation of Privilege it follows the idea to threat model a system via gamification. This lightweight and low-barrier approach helps you find threats to...

doppelganger_assistant

Doppelgänger Assistant A professional GUI application for calculating card data and automating Proxmark3 operations for every card type that Doppelgänger Core and Stealth support. This tool streamlines the card-writing process for physical penetration testing by providing an intuitive interface...

ChameleonUltra

ChameleonUltra Authorized Distributors Lyon, France: Lab401 Santa Ana, United States: Hackerwarehouse Hastings, UK: KSEC Montreal, Canada: TechSecurityTools Shenzhen, China: Sneaktechnology Guangdong, China: MTools Tec Lazada One, Singapore: Aliexpress by RRG What is it and how to use ? Read the...

CVE-2024-8425

Wordpress WooCommerce Ultimate Gift Card = 2.6.0 - Unauthenticated Arbitrary File Upload CVE-2024-8425 The WooCommerce Ultimate Gift Card plugin for WordPress is vulnerable to arbitrary file uploads due to insufficient file type validation in the 'mwbwgmpreviewmail' and...

ChameleonMini

Chameleon-Mini This is the official repository of ChameleonMini, a freely programmable, portable tool for NFC security analysis that can emulate and clone contactless cards, read RFID tags and sniff/log RF data. Thanks to over 1700 backers from our Kickstarter project, the current Revision G has...

Specter-FlipperZero

Specter 👻 Sweep for the readers you can't see. -26E8CA?style=for-the-badge&labelColor=0a0f16 Specter turns your Flipper Zero into a pocket counter-surveillance...

infernal-twin

Infernal-Wireless v3 Release 3 Improved and Compatibility on Kali Linux 2018 Added Visual Representation of Wireless Scan Added Visual Representation of Probe Requests and Map per SSID requested by Devices Updated MAC address mapping Added MAC address mappting on probe request devices Evil Twin...

secretive

Secretive Secretive is an app for protecting and managing SSH keys with the Secure Enclave. Why? Safer Storage The most common setup for SSH keys is just keeping them on disk, guarded by proper permissions. This is fine in most cases, but it's not super hard for malicious users or malware to copy...

r00kie-kr00kie

r00kie-kr00kie Disclaimer This is a PoC exploit for the CVE-2019-15126 kr00k vulnerability. This project is intended for educational purposes only and cannot be used for law violation or personal gain. The author of this project is not responsible for any possible harm caused by the materials...

Adamantium-Thief

🔓 Adamantium-Thief Get chromium based browsers: passwords, credit cards, history, cookies, bookmarks, autofill. Chrome 80 is supported! Need firefox passwords decryptor? 🌿 Examples: 🔑 Get passwords from browsers: root@kitploit: Stealer.exe PASSWORDS 💳 Get credit cards from browsers: root@kitploit...

CVE-2025-65817

CVE-2025-65817 Fields| Value ---|--- Titre| Vulnerability Report: LSC Smart Connect Camera Date| 2024-02-15 Description| Abusing the SD-card update hook to spawn remote shells on LSC Smart Connect cameras. Tags| iot, vulnerability, cve Firmware| 1.14.13 Vulnerability Report on LSC Smart Connect...

CVE-2023-43317

CVE-2023-43317 A normal user can elevate their privileges via the userPermissionsLIst parameter in Session Storage component. to gain unauthorized access to administrative-level resources and features. This could lead to unauthorized data access, data modification, and other actions that are...

cornucopia

OWASP Cornucopia project OWASP Cornucopia is a mechanism in the form of a card game to assist software development teams Identify security requirements in Agile, conventional, and formal development processes. It is language, platform, and technology agnostic. Visit: https://cornucopia.owasp.org/...

nfc-ic-keys-dict

nfc-ic-keys-dict 2021-05-31 nfcPro.exe early version download http://www.nsccn.com/web/soft/win/20210531/nfcPro.exe keys for ic: 1D14130D1A0B/000000000000 How to detect the type of an iC card: Google Play Store = MIFARE Classic Tool = Tools = Show Tag Info root@kitploit: UID: xxxxx 4 byte RF...

virtualbox_e1000_0day

Why I like VirtualBox and it has nothing to do with why I publish a 0day vulnerability. The reason is my disagreement with contemporary state of infosec, especially of security research and bug bounty: 1. Wait half a year until a vulnerability is patched is considered fine. 2. In the bug bounty...

dameflare

DameFlare SolarWinds Dameware MRCにおけるスマートカード認証バイパスによる認証不要のRCE CVE-2019-3980 | CVSS 9.8 Critical | TCP/6129 オリジナル研究およびPOC: Tenable, Inc. TRA-2019-43 Python 3ツール: David Boyd @Fir3d0g 仕組み Dameware...

CVE-2022-42094

Backdrop CMS version 1.23.0 Vulnerability Explanation: Backdrop CMS version 1.23.0 was discovered to contain a stored cross-site scripting XSS vulnerability via the Card content. Attack Vectors: The attacker must post something on the "Card content" and insert the XSS payload at the "Body" input,...

DarkTortilla-RAT-Telegram-Exfiltration-Payload-Extraction-Analysis

1. Credit Card Theft – Card Data Extraction Process Hacker memory analysis reveals that DarkTortilla RAT targets credit card information, including card numbers, expiration dates, and card types. Key Strings Observed: cardnumberencrypted – Encrypted card numbers. expirationmonth – Expiration...

Astra Linux – Vulnerability in opensc

OpenSC before version 0.20.0 has a double-free issue in coolkeyfreeprivatedata, because the coolkeyaddobject function in libopensc/card-coolkey.c lacks a uniqueness check...