shhgit

🚨 shhgit ya no se mantiene. Si necesitas soporte o consultoría para tus esfuerzos de escaneo de secretos, envíame un correo electrónico a [email protected] 🚨 shhgit ayuda a proteger a los equipos de desarrollo, operaciones y seguridad con visión de futuro al encontrar secretos en su código...

CVE-2020-11651

CVE-2020-11651 PoC para CVE-2020-11651 Requiere Python3 probado en 3.8 python3.8 -m pip install pyzmq msgpack root@kitploit: ⇒ python3.8 poc.py -h usage: poc.py -h -p PORT -c CMD -k -m -r READ -w WRITE -f FILE server server ... Exploit CVE-2020-11651 positional arguments: server Target Server IP ...

exploit-CVE-2016-7434

Exploit DoS de ntpd CVE-2016-7434 Ntpd sufre una desreferencia de puntero nulo que es posible provocar para hacer fallar la aplicación. Según NTP.org, «Si ntpd está configurado para permitir solicitudes de consulta mrulist desde un servidor que envía un paquete malicioso manipulado, ntpd fallará ...

goscan

GoScan is an interactive network scanner client, featuring auto-completion, which provides abstraction and automation over nmap. Although it started as a small side-project I developed in order to learn @golang, GoScan can now be used to perform host discovery, port scanning, and service...

WooRefer

WooRefer | CVE-2022-4047 - Return Refund and Exchange For WooCommerce Herramienta masiva automática para comprobar y explotar la vulnerabilidad en CVE-2022-4047 - Return Refund and Exchange For WooCommerce install.sh sha1sum install.sh | grep 12345678 md5sum install.sh...

twitter-intelligence

Twitter Intelligence A project written in Python for twitter tracking and analysis without using Twitter API. Prerequisites This project is a Python 3.x application. The package dependencies are in the file requirements.txt. Run that command to install the dependencies. root@kitploit: pip3 instal...

HackTools

Welcome to HackTools ! Introduction — Preview — Install — Build — Support !NOTE Psst... Loved HackTools? 👀 Check out Penflow - our new security testing companion! Try it at map.penflow.sh 🚀 !NOTE Dear Users, We're excited to announce a major revamp of our app! Due to recent changes and multiple...

CVE-2020-0022

CVE-2020-0022 Seems like Android 9-6 have similar Bluetooth subsystem, Android 5 and 4 are different. Android 9.0 BlueFrag experiments Patch: https://android.googlesource.com/platform/system/bt/+/3cb7149d8fed2d7d77ceaa95bf845224c4db3baf Below I hit the patched condition. OK I think I got it, but...

Critical Docker Sandboxes Flaw Lets Malicious Guest Code Read and Modify macOS Host Files

Malicious code running inside a Docker Sandboxes virtual machine on macOS could escape the project directory shared into it and read or change files anywhere else on the host, Docker warns in a security announcement on September 15. The escape runs with the rights of the host account that runs th...

faraday-cli

Faraday on the terminal Use faraday directly from your favorite terminal faraday-cli is the official client that make automating your security workflows, easier. Before installing, we recommend creating and activating a Python virtual environment to avoid affecting your system Python packages. Fo...

CVE-2022-26134

Ejecución remota de código sin autenticación previa en Confluence mediante inyección OGNL CVE-2022-26134 Ejecución remota de código sin autenticación previa en Confluence mediante inyección OGNL CVE-2022-26134 El 2 de junio de 2022, Atlassian publicó un aviso de seguridad para sus aplicaciones...

CVE-2019-18634

CVE-2019-18634 CVE-2019-18634 es una vulnerabilidad que afecta a Sudo en versiones 1.8.25 cuando pwfeedback está habilitado en el archivo sudoers. Permite a un atacante escalar privilegios a root explotando un desbordamiento de búfer basado en BSS, donde se alteran las estructuras de datos y el...

forti-research

Fortinet fortimon374.sys - PPL Bypass via Unauthenticated Kill Command Overview A vulnerability in Fortinet's fortimon374.sys kernel driver FortiClient's "anti-exploit" minifilter allows any local administrator to terminate any process - including PPL Protected Process Light protected processes...

MIPS-CVE-2014-9222

Disclaimer Tutorials are for informational and educational purposes only. I believe that ethical hacking, information security and cyber security should be familiar subjects to anyone using digital information and computers. I believe that it is impossible to defend yourself from hackers without...

Philips-PM-5139-5138A-5136-Firmware-Project

Philips PM5139 — Firmware Reverse Engineering A 20 MHz function generator from about 1994, taken apart in software: two EPROM dumps, an 8051 emulator used as a measuring instrument, and 35 sections of documentation where every single claim is backed by a listing address, an emulator measurement, ...

FDD-book

Spanish Edition esES This directory contains the Spanish translation of the book FreeBSD Device Drivers: From First Steps to Kernel Mastery. The disclaimer below is provided first in English and then in Spanish so that readers coming from either language can evaluate the status of this translatio...

revshellgen

🚀 RevShellGen Reverse Shell Generator Automate reverse shell generation with style Generate, encode, and catch reverse shells without the hassle Features • Installation • Usage • Shell Types • Contributing 📖 About RevShellGen is a powerful command-line tool that simplifies the process of generati...

hershell

Hershell Simple TCP reverse shell written in Go. It uses TLS to secure the communications, and provide a certificate public key fingerprint pinning feature, preventing from traffic interception. Supported OS are: Windows Linux Mac OS FreeBSD and derivatives Why ? Although meterpreter payloads are...

rdpscan

rdpscan for CVE-2019-0708 bluekeep vuln This is a quick-and-dirty scanner for the CVE-2019-0708 vulnerability in Microsoft Remote Desktop. Right now, there are about 900,000 machines on the public Internet vulnerable to this vulnerability, so many are to expect a worm soon like WannaCry and...

CVE-2022-1388

CVE-2022-1388 BIG IP REST RCE En las versiones de F5 BIG-IP 16.1.x anteriores a 16.1.2.2, las versiones 15.1.x anteriores a 15.1.5.1, las versiones 14.1.x anteriores a 14.1.4.6, las versiones 13.1.x anteriores a 13.1.5, y todas las versiones 12.1.x y 11.6.x, las solicitudes no divulgadas pueden...