53179 matches found
mongo-express Remote Code Execution
mongo-express before 0.54.0 is vulnerable to remote code execution via endpoints that uses the toBSON method and misuse the vm dependency to perform exec commands in a non-safe environment. id: CVE-2019-10758 info: name: mongo-express Remote Code Execution author: princechaddha severity: critical...
Moodle - Remote Code Execution
Attackers with the permission to create or modify questions in Moodle courses are able to craft malicious inputs for calculated questions, which can be abused to execute arbitrary commands on the underlying system. id: CVE-2024-43425 info: name: Moodle - Remote Code Execution author:...
Zabbix - SQL Injection
Zabbix before 2.2.14 and 3.0 before 3.0.4 allows remote attackers to execute arbitrary SQL commands via the toggleids array parameter in latest.php and perform SQL injection attacks. id: CVE-2016-10134 info: name: Zabbix - SQL Injection author: princechaddha severity: critical description: Zabbix...
TurboMeeting - Boolean-based SQL Injection
A Boolean-based SQL injection vulnerability in the "RHUB TurboMeeting" web application. This vulnerability could allow an attacker to execute arbitrary SQL commands on the database server, potentially allowing them to access sensitive data or compromise the server. id: CVE-2024-38289 info: name:...
Traccar - Unrestricted File Upload
Traccar is an open source GPS tracking system. Versions prior to 6.0 are vulnerable to path traversal and unrestricted upload of file with dangerous type. Since the system allows registration by default, attackers can acquire ordinary user permissions by registering an account and exploit this...
upx
ooooo ooo ooooooooo. ooooooo ooooo 888' 8' 888 Y88. 8888 d8' 888 8 888 .d88' Y888..8P 888 8 888ooo88P' 8888' 888 8 888 .8PY888. 88. .8' 888 d8' 888b YbodP' o888o o888o o88888o root@kitploit: The Ultimate Packer for eXecutables Copyright c 1996-2026 Markus Oberhumer, Laszlo Molnar & John Reiser...
hershell
Hershell NOTE: the project has been forked on this repo, check there for any other developments. Hershell is a simple TCP reverse shell written in Go. It uses TLS to secure the communications, and provide a certificate public key fingerprint pinning feature, preventing from traffic interception...
pentest-a2p2v-core
README Automated Attack Path Planning and Validation A2P2V is a planning and cyber-attack tool that provides the capability for users to determine a set of ranked attack sequences given a specific attacker goal. The aim of the tool is to simplify process so that non-security experts can generate...
pentest-a2p2v-core
README स्वचालित आक्रमण पथ योजना और सत्यापन A2P2V एक योजना और साइबर-आक्रमण उपकरण है जो उपयोगकर्ताओं को किसी विशिष्ट हमलावर लक्ष्य को देखते हुए रैंक किए गए आक्रमण अनुक्रमों का एक सेट निर्धारित करने की क्षमता प्रदान करता है। इस उपकरण का उद्देश्य प्रक्रिया को सरल बनाना है ताकि गैर-सुरक्षा विशेषज्ञ...
ida-pro-mcp
IDA Pro MCP Simple MCP Server to allow vibe reversing in IDA Pro. https://github.com/user-attachments/assets/6ebeaa92-a9db-43fa-b756-eececce2aca0 The binaries and prompt for the video are available in the mcp-reversing-dataset repository. Prerequisites Python 3.11 or higher Use idapyswitch to...
reconpal
ReconPal: इन्फोसेक के लिए एनएलपी का लाभ उठाना रीकॉन सबसे महत्वपूर्ण चरणों में से एक है जो आसान लगता है लेकिन इसे सही ढंग से करने में बहुत प्रयास और कौशल लगता है। किसी को सही उपकरणों, सही क्वेरी/सिंटैक्स, उन क्वेरी को चलाने, जानकारी को सहसंबंधित करने और आउटपुट को स्वच्छ करने के बारे में जानना होता...
qark
Quick Android Review Kit This tool is designed to look for several security related Android application vulnerabilities, either in source code or packaged APKs. The tool is also capable of creating "Proof-of-Concept" deployable APKs and/or ADB commands, capable of exploiting many of the...
mssqlproxy
mssqlproxy mssqlproxy is a toolkit aimed to perform lateral movement in restricted environments through a compromised Microsoft SQL Server via socket reuse. The client requires impacket and sysadmin privileges on the SQL server. Please read this article carefully before continuing. It consists of...
impacket
Impacket Copyright Fortra, LLC and its affiliated companies. All rights reserved. Impacket was originally created by SecureAuth, and now maintained by Fortra's Core Security. Impacket is a collection of Python classes for working with network protocols. Impacket is focused on providing low-level...
Priv2Admin
L'idée est de « traduire » les privilèges du système d'exploitation Windows en un chemin menant à : 1. administrateur, 2. menace pour l'intégrité et/ou la confidentialité, 3. menace pour la disponibilité, 4. juste un désordre. Les privilèges sont listés et expliqués sur :...
tor-rootkit
tor-rootkit A Python 3 standalone Windows 10 / Linux Rootkit. The networking communication get's established over the tor network. This rootkit is WIP. Disclaimer Use for educational purposes only. How to use 1. Clone the repo and change directory: root@kitploit: git clone...
terra
Terra : Terra needs an Active Maintainer I'm searching for an active maintainer for Terra. I have some exciting ideas for new features and other things possible with Terra / OSINT. Would love to hear from interested folks. Mail me at [email protected] Terra : Recon tool on Social Media...
red-kube
Red Team K8S Adversary Emulation Based on kubectl Red Kube is a collection of kubectl commands written to evaluate the security posture of Kubernetes clusters from the attacker's perspective. The commands are either passive for data collection and information disclosure or active for performing...
rakkess
rakkess Review Access - kubectl plugin to show an access matrix for server resources Intro Have you ever wondered what access rights you have on a provided kubernetes cluster? For single resources you can use kubectl auth can-i list deployments, but maybe you are looking for a complete overview?...