evilgrade

Faraday Security Research -- | ISR-evilgrade | www.faradaysec.com | -- .:: BRIEF OVERVIEW ::. Evilgrade is a modular framework that allows the user to take advantage of poor upgrade implementations by injecting fake updates. It comes with pre-made binaries agents, a working default configuration...

CVE-2022-33980-Apache-Commons-Configuration-RCE

CVE-2022-33980-Apache-Commons-Configuration-RCE...

snort3

Snort++ Snort 3 ist die nächste Generation des Snort-IPS Intrusion Prevention System. Diese Datei zeigt Ihnen, was Snort++ zu bieten hat, und führt Sie durch die Schritte vom Download bis zur Demo. Wenn Sie mit Snort nicht vertraut sind, sollten Sie sich zunächst die Snort-Dokumentation ansehen...

hontel

HonTel HonTel is a Honeypot for Telnet service. Basically, it is a Python v2.x application emulating the service inside the chroot environment. Originally it has been designed to be run inside the Ubuntu/Debian environment, though it could be easily adapted to run inside any Linux environment...

gixy

GIXY अवलोकन Gixy एक उपकरण है जो Nginx कॉन्फ़िगरेशन का विश्लेषण करता है। Gixy का मुख्य उद्देश्य सुरक्षा गलत कॉन्फ़िगरेशन को रोकना और दोष का पता लगाने को स्वचालित करना है। वर्तमान में समर्थित Python संस्करण 2.7, 3.5, 3.6 और 3.7 हैं। अस्वीकरण: Gixy का केवल GNU/Linux पर अच्छी तरह से परीक्षण किया गया...

gixy

GIXY Overview Gixy is a tool to analyze Nginx configuration. The main goal of Gixy is to prevent security misconfiguration and automate flaw detection. Currently supported Python versions are 2.7, 3.5, 3.6 and 3.7. Disclaimer: Gixy is well tested only on GNU/Linux, other OSs may have some issues...

krf

KRF KRF is a K ernelspace R andomized F aulter. It currently supports the Linux and FreeBSD kernels. What? Fault injection is a software testing technique that involves inducing failures "faults" in the functions called by a program. If the callee has failed to perform proper error checking and...

dockerized-android

Dockerized Android Dockerized Android is a container-based framework that allows to execute and Android Emulator inside Docker and control it through a browser. This project has been developed in order to provide a starting point for integrating mobile security components into Cyber Ranges but it...

vesta

Un toolkit per l'analisi statica delle vulnerabilità e il rilevamento della configurazione di cluster Docker e Kubernetes, basato su test di penetrazione reali nel cloud computing. English · 简体中文 Panoramica Vesta è un toolkit di analisi statica delle vulnerabilità e rilevamento della configurazio...

toothpicker

ToothPicker ToothPicker is an in-process, coverage-guided fuzzer for iOS. It was developed to specifically targets iOS's Bluetooth daemon bluetoothd and to analyze various Bluetooth protocols on iOS. As it is built using FRIDA, it can be adapted to target any platform that runs FRIDA. This...

sandmap

sandmap Description • How To Use • Command Line • Configuration • Requirements • Other • Contributing • License • Wiki Description sandmap is a tool supporting network and system reconnaissance using the massive Nmap engine. It provides a user-friendly interface, automates and speeds up scanning...

CVE-2017-7921-EXP

CVE-2017-7921 Exploit È stato scoperto un problema di autenticazione impropria nei dispositivi Hikvision. root@kitploit: La vulnerabilità di autenticazione impropria si verifica quando un'applicazione non autentica gli utenti in modo adeguato o corretto. Ciò può consentire a un utente...

SXDork

SXDork v1.0 SXDork é uma ferramenta poderosa que utiliza a técnica de google dorking para buscar informações específicas na internet. Google dorking é um método que usa operadores de busca avançados e palavras-chave para descobrir informações sensíveis que estão disponíveis publicamente na...

CVE-2024-4577

Orange Tsi 🍊 Questa vulnerabilità è stata trovata da Orange Tsai @orange8361 di DEVCORE @d3vc0r3. Assicurati di seguire la sua eccezionale ricerca; il nostro ruolo è stato solo quello di ricreare e sviluppare l'exploit per questo problema. Avviso di sicurezza: CVE-2024-4577 Vulnerabilità di...

CVE-2020-2551

CVE-2020-2551 Weblogic RCE con IIOP 0x01 IIOP abilitato di default 0x02 Demo del PoC...

openwisp-controller

openwisp-controller .. image:: https://github.com/openwisp/openwisp-controller/actions/workflows/ci.yml/badge.svg :target: https://github.com/openwisp/openwisp-controller/actions/workflows/ci.yml :alt: Stato build CI .. image:: https://coveralls.io/repos/openwisp/openwisp-controller/badge.svg...

sjet

sJET di siberas siberas JMX Exploitation Toolkit sJET consente un facile sfruttamento di servizi JMX configurati in modo insicuro. Ulteriori informazioni di base sono disponibili qui e qui. Prerequisiti Jython 2.7 Utilizzo SJET implementa un'interfaccia CLI usando argparse: root@kitploit: jython...

baserunner

Baserunner A tool for exploring and exploiting Firebase datastores. See this post on our blog for an overview of how Firebase works and why we developed this tool. Set up 1. git clone https://github.com/iosiro/baserunner.git 2. cd baserunner 3. npm install 4. npm run build 5. npm start 6. Go to...

htrace.sh

Description htrace.sh is a shell script for http/https troubleshooting and profiling. It's also a simple wrapper around several open source security tools. For a more detailed understanding of htrace.sh, its parameters, functions and how it all works, run htrace.sh --examples or see the Wiki...

vapi

vAPI...