CVE-2024-11318

CVE-2024-11318 IDOR - Hijacking dell'Utente in AbsysNet 2.3.1 DICHIARAZIONE DI NON RESPONSABILITÀ Questo strumento è progettato per aiutare a identificare e verificare se un'applicazione è vulnerabile a questa specifica CVE-2024-11318. È destinato all'uso da parte di professionisti della...

telegram_bbbot

telegrambbbot Telegram Bug Bounty Bot https://telegram.me/bugbountychannel History This bot adopted special for deploying to Heroku General purposes of this got - "Be helpful for infosec community!" Bot use https://github.com/maddevsio/bbcrawler for fetching information Used heroku...

gladius

Gladius Easy mode from Responder to Credentials Author: Cory Duplantis @ctfhacker / blog Blog post on Gladius asciicast Gladius provides an automated method for cracking credentials from various sources during an engagement. We currently crack hashes from Responder, secretsdump.py, and...

rekall

Rekall discontinuation This project is no longer maintained. In December 2011, a new branch within the Volatility project was created to explore how to make the code base more modular, improve performance, and increase usability. This branch was later forked to become Rekall. The modularity allow...

WiFi-Pumpkin-deprecated

Questo repository è ⛔️ DEPRECATO, wifipumpkin3 è stato rilasciato, dacci un'occhiata! WiFi-Pumpkin - Framework per attacchi Rogue Wi-Fi Access Point Descrizione WiFi-Pumpkin è un framework per creare facilmente falsi AP Rogue che inoltrano il traffico legittimo verso e dalla vittima ignara. È ricc...

kamerka

NOT SUPPORTED OR DEVELOPED ANYMORE PLEASE USE GUI VERSION https://github.com/woj-ciech/Kamerka-GUI ꓘamerka 2.0 aka FIST Flickr, Instagram, Shodan, Twitter Build interactive map of cameras, printers, tweets and photos. The script creates a map of cameras, printers, tweets and photos based on your...

upx v5.2.1

ooooo ooo ooooooooo. ooooooo ooooo 888' 8' 888 Y88. 8888 d8' 888 8 888 .d88' Y888..8P 888 8 888ooo88P' 8888' 888 8 888 .8PY888. 88. .8' 888 d8' 888b YbodP' o888o o888o o88888o root@kitploit: The Ultimate Packer for eXecutables Copyright c 1996-2026 Markus Oberhumer, Laszlo Molnar & John Reiser...

CVE-2026-43284

🚨 CVE-2026-43284 — Dirty Frag 🚨 Universelle lokale Privilegieneskalation im Linux-Kernel Überblick Feld| Detail ---|--- CVE| CVE-2026-43284 xfrm/ESP + CVE-2026-43500 RxRPC Nickname| Dirty Frag CVSS| 7.8 HIGH Typ| Lokale Privilegieneskalation LPE Eingeführt| Linux-Kernel 4.10 2017, Commit...

bst

Binary String Toolkit Summary The Binary String Toolkit or BST for short is a rather simple utility to convert binary strings to various formats suitable for inclusions in source codes, such as those used to develop exploits and Proof of Concepts in the security field. Features Convert and dump...

CVE-2026-4883

CVE-2026-4883: Piotnet Forms Pro = 2.1.40 - Nicht authentifizierter beliebiger Datei-Upload → RCE Die Schwachstelle resultiert aus unzureichender Dateityp-Validierung in der Funktion piotnetformsajaxformbuilder. Das Plugin verwendet eine unvollständige Erweiterungs-Blacklist, die nur php, phpt,...

volatility

This project is archived. See Volatility 3 for modern investigations: https://github.com/volatilityfoundation/volatility3 ============================================================================ Volatility Framework - Volatile memory extraction utility framework The Volatility Framework is a...

parameth

parameth This tool can be used to brute discover GET and POST parameters Often when you are busting a directory for common files, you can identify scripts for example test.php that look like they need to be passed an unknown parameter. This hopefully can help find them. example scan The -off flag...

parameth

parameth Questo strumento può essere utilizzato per scoprire tramite brute force i parametri GET e POST Spesso, quando stai esplorando una directory alla ricerca di file comuni, puoi identificare script ad esempio test.php che sembrano aver bisogno di un parametro sconosciuto. Questo strumento pu...

flowsint

Flowsint Flowsint è uno strumento open-source di esplorazione grafica OSINT progettato per indagini etiche, trasparenza e verifica. Etica: Si prega di leggere ETHICS.md per le linee guida sull'uso responsabile. https://github.com/user-attachments/assets/eaabfa81-d7b3-414d-8cf7-f69b4e37bab6...

udp2raw

Udp2raw-tunnel Um túnel que transforma tráfego UDP em tráfego FakeTCP/UDP/ICMP criptografado usando Raw Socket, ajudando você a contornar firewalls UDP ou ambientes UDP instáveis. Quando usado sozinho, o udp2raw tunela apenas tráfego UDP. No entanto, se você usar udp2raw em conjunto com qualquer...

osint-brazuca

OSINT Intelligence a fonti aperte Navigazione : 🏠 README Principale | 📖 Esempi Pratici | 🔀 Diagrammi di Flusso | 📊 Guida Rapida | 🤝 Contribuire Introduzione Il Progetto OSINT Brazuca è un repository creato con lo scopo di raccogliere informazioni, fonti siti web/portali e trucchi di OSINT nel...

blind-sql-bitshifting

Blind SQL Injection via Bitshifting This is a module that performs blind SQL injection by using the bitshifting method to calculate characters instead of guessing them. It requires 7/8 requests per character, depending on the configuration. Usage root@kitploit: import blind-sql-bitshifting as x...

copy-fail-CVE-2026-31431

Copy Fail - CVE-2026-31431 Technischer Bericht Getestete Distribution / Version Distribution| Version ---|--- Ubuntu 24.04 LTS| 6.17.0-1007-aws Amazon Linux 2023| 6.18.8-9.213.amzn2023 RHEL 10.1| 6.12.0-124.45.1.el101 SUSE 16| 6.12.0-160000.9-default...

Gitmails

Development - IMPORTANT This Gitmails version is no longer maintained. Check out the Gitmails Shell port if you want to use a version that is maintained and, hopefully, developed. If you do not want to use the shell port and prefer the Python version, feel free to fork Gitmails and direct it to...

ecapture

汉字 | Englisch eCapture旁观者: SSL/TLS-Textinhalte ohne CA-Zertifikat mit eBPF erfassen. !IMPORTANT Unterstützt Linux/Android auf x8664 Kernel 4.18+ und aarch64 Kernel 5.5+. Die Kernel-Versionsanforderungen gelten pro CPU-Architektur für sowohl Linux als auch Android. Benötigt ROOT-Berechtigung oder...