checker-CVE-2020-5902

Checker CVE-2020-5902 Checker CVE-2020-5902: BIG-IP versions 15.0.0 through 15.1.0.3, 14.1.0 through 14.1.2.5, 13.1.0 through 13.1.3.3, 12.1.0 through 12.1.5.1, and 11.6.1 through 11.6.5.1 suffer from Traffic Management User Interface TMUI arbitrary file read and command execution vulnerabilities...

botb

Break out the Box BOtB BOtB is a container analysis and exploitation tool designed to be used by pentesters and engineers while also being CI/CD friendly with common CI/CD technologies. What does it do? BOtB is a CLI tool which allows you to: Exploit common container vulnerabilities Perform commo...

GRAT2

GRAT2 C2 root@kitploit: c.-.c c.-.c c.-.c c.-.c c.-.c / .. \ / .. \ / .. \ / .. \ / .. \ \ Y / \ Y / \ Y / \ Y / \ Y / .-/'-'-..-/'-'-..-/'-'-..-/'-'-..-/'-'-. || G || || R || || A || || T || || 2 || .' -' '. .' -' '. .' -' '. .' -' '. .' -' '. .-./-'.-..-./-.-..-./-'.-..-./-'.-..-./-'.-...

ranger

ranger A tool to support security professionals access and interact with remote Microsoft Windows based systems. This project was conceptualized with the thought process, we did not invent the bow or the arrow, just a more efficient way of using it. Ranger is a command-line driven attack and...

cli

HTTPie CLI: human-friendly HTTP client for the API era...

ip-finder-cli

IPFinder CLI Command Line Interface https://ipfinder.io/ Supports Single IP Address, asn, ranges, firewall as Input Supports Bulk Exports Results to Screen or to An Output File Supports IPv4 and IPv6 Supports ASN number , RANGES , Firewall Getting Started sign up for a free account at...

PoisonApple

PoisonApple This is a command-line tool to perform various persistence mechanism techniques on macOS. This tool was designed to be used by threat hunters for cyber threat emulation purposes. Install Do it up: root@kitploit: $ pip3 install poisonapple --user Note: PoisonApple was written & tested...

rustcat

rustcat - The modern port listener and reverse shell What is Rustcat Rustcat is an easy to use port listener and reverse shell for Linux, MacOS, and Windows aimed to be easy to use and accessible. Modes Listen mode listen; Reverse shell mode connect; Features Command history & Tab completion...

Interlace

Interlace Easily turn single threaded command line applications into a fast, multi-threaded application with CIDR and glob support. Reviews / Howto Guides Interlace: A Tool to Easily Automate and Multithread Your Pentesting & Bug Bounty Workflow Without Any Coding Table of Contents Setup Usage -...

evillimiter-windows

Evil Limiter for Windows A tool to limit the bandwidth upload/download of devices connected to your network without physical or administrative access. evillimiter employs ARP spoofing and traffic shaping to throttle the bandwidth of hosts on the network. This is explained in detail below. This to...

zuthaka

A collaborative free open-source Command & Control integration framework that allows developers to concentrate on the core function and goal of their C2. Explore the docs » · Report Bug · Request Feature · Table of Contents 1. About The Project Problem statement Solution Built With 2. Already...

vulmap

🌟 Vulmap - Web vulnerability scanning and verification tools Click here for the English Version Vulmap is a web vulnerability scanning and verification tool. It can scan and exploit vulnerabilities in webapps. Currently supported webapps include activemq, flink, shiro, solr, struts2, tomcat, unom...

msmailprobe

msmailprobe Office 365 and Exchange Enumeration It is widely known that OWA Outlook Webapp is vulnerable to time-based user enumeration attacks. This tool leverages all known, and even some lesser-known services exposed by default Exchange installations to enumerate users. It also targets Office...

hubble

Welcome to HubbleStack!! You can file an issue here Follow us on Twitter! Development Below are sample instructions to setup a dev environment: 1. virtualenv myvirtualenv 2. source myvirtualenv/bin/activate 3. pip install -r requirements.txt 4. sudo python setup.py develop 5. sudo hubble...

NetworkAlarm

NetworkAlarm A command-line tool to monitor local network traffic for possible security vulnerabilities. Warns user against possible nmap scans, Nikto scans, credentials sent in-the-clear, credit card numbers sent in-the-clear, and shellshock attacks. Currently supports live monitoring and networ...

mininode

Mininode Mininode is a CLI tool to reduce the attack surface of the Node.js applications by using static analysis of source code. It supports two modes of reduction 1 coarse, 2 fine. Mininode constructs the dependency graph modules and functions used of the application starting from main file, i....

IOCScraper

IOC Scraper IOC Scraper utilises IOCPARSER service to fetch IOCs from different vendor Blogs, PDFs, and CSV files. Parsing IOCs is time-consuming process, using current script one can automatically extract and aggregate IOCs easily. Features Defanged IOCs : Supports extracting and defanging IOCs...

ble_norton_core

Norton Core Secure WiFi Router の BLE サービスにおけるコマンドインジェクション PoC CVE-2018-5234 詳細については 論文 をお読みください。 このエクスプロイトのデモには、以下を使用します: OS GNU/Linux; Bluetooth ドングルアダプター; BlueZ ユーティリティ Bluetooth 接続のテスト用。 スクリプトを使用するには、事前にすべての依存関係をセットアップする必要があります。 root@kitploit: $ pip install -r ./requirements.txt BlueZ...

CVE-2024-24576-PoC

CVE-2024-24576 PoC Command::arg 和 Command::args API 在文档中声明，参数将原封不动地传递给派生进程，无论参数内容如何，并且不会被 shell 求值。这意味着将不受信任的输入作为参数传递应该是安全的。 在 Windows 上，此实现的复杂度高于其他平台，因为 Windows API 仅提供一个包含所有参数的单一字符串给派生进程，由派生进程自行拆分。大多数程序使用标准 C 运行时 argv，实际上会导致参数拆分方式基本一致。 但有一个例外是...

Xenotix-xBOT

Xenotix-xBOT Xenotix xBOT は、ボットネット用の Command & Control Center を実装するために特定の Google サービスを悪用する、Python で書かれた proof of concept のクロスプラットフォーム（Linux、Windows、Mac）ボットです。Google Apps Data API、Google Forms、Google Spreadsheet は、ボットネットワークの C2 を実装するために悪用されます。Google Forms はボットネットワークの C2 として機能します。Google Form...