5MMISSI-CVE-2017-1000499

5MMISSI-CVE-2017-1000499 PoC de CVE-2017-1000499 Las versiones 4.7.x de phpMyAdmin anteriores a 4.7.6.1/4.7.7 son vulnerables a una debilidad CSRF. Engañando a un usuario para que haga clic en una URL manipulada, es posible realizar operaciones dañinas en la base de datos, como eliminar registros...

malicious_extension_sentry

Malicious Chrome/Edge Extensions Database An automatically updated database of Chrome extensions removed from the Chrome Web Store for containing malware, policy violation, or bundling unwanted software 🌐 Live Dashboard Real-time search, filtering by threat category, and source reports, built on...

netstat2neo4j

Netstat Visualization with Neo4j Description Graphs help to spot anomalies and patterns in large datasets. This script takes netstat information from multiple hosts and formats them in a way to make them importable into Neo4j. Neo4j can be queried for find connections to certain hosts, from certa...

opensquat

openSquat Core 📑 Table of Contents What is openSquat? Featured In Open-Core Model Key Features Quick Start Requirements Usage Premium and API Modes Configuration Automation CLI Reference Contributing Author License 🎯 What is openSquat? openSquat is an Open Source Intelligence OSINT security tool...

the-bastion

🔒 The Bastion Overview Bastions are a cluster of machines used as the unique entry point by operational teams such as sysadmins, developers, database admins, ... to securely connect to devices servers, virtual machines, cloud instances, network equipment, ..., usually using ssh. The Bastion...

emploleaks

EmploLeaks EmploLeaks is an OSINT Open Source Intelligence tool with a CLI interface, designed to discover and correlate information about employees of a target company. It allows collecting LinkedIn profiles, generating potential corporate emails, searching for leaked credentials in leak databas...

burp-vulners-scanner

burp-vulners-scanner Description Burp Suite scanner plugin based on Vulners.com vulnerability database API Search fingerprints in http response inspired by plugin "Software Version Reporter" and check found version in vulners.com vulnerability database Experemental Check unique URLs in vulners.co...

CVE-2023-23752-Docker

CVE-2023-23752 Vulnerabilidad de acceso no autorizado de Joomla CVE-2023-23752 Dockerizada Instalación Recomendado automático 1. Clona este repositorio git clone https://github.com/karthikuj/CVE-2023-23752-Docker.git 2. Cambia de directorio cd CVE-2023-23752-Docker 3. Ejecuta ./setup.sh 4. Abre t...

cwe-tool

cwe-tool A command line CWE discovery tool based on OWASP / CAPSEC database of Common Weakness Enumeration. Official OWASP CWE Toolkit Page Install...

CVE-2023-31717

CVE-2023-31717 Es posible realizar una inyección SQL en el parámetro id de HTTP POST pasado en el cuerpo como json, pudiendo extraer información confidencial de la base de datos SQLite. Payload - "id":"n7c734712-aabf4eb3' AND 2630=LIKECHAR65,66,67,68,69,70,71,UPPERHEXRANDOMBLOB500000000/2 AND...

CVE-2024-33901-ProofOfConcept

CVE-2024-33901-ProofOfConcept Programa corto que demuestra la vulnerabilidad CVE-2024-33901 en KeePassXC versión 2.7.7 El informe para la clase podría necesitar el código fuente enlazado, por eso creé el repositorio para esto. Cómo replicar la vulnerabilidad 1. Abre KeePassXC y autentica la base ...

teams_dump

PoC para volcar y descifrar cookies en la última versión de Microsoft Teams extract.py solo vuelca sin argumentos extract.exe es solo extract.py empaquetado en un exe teamsdump.py List valores en la base de datos root@kitploit: python.exe .\teamsdump.py teams --list Table: meta Columns in meta:...

teams_dump

PoC for dumping and decrypting cookies in the latest version of Microsoft Teams extract.py just dumps without arguments extract.exe is just extract.py packed into an exe teamsdump.py List values in the database root@kitploit: python.exe .\teamsdump.py teams --list Table: meta Columns in meta: key...

Remote-Access-Trojan-Database

Remote-Access-Trojan-Database All samples in this database can only used for research purpose. the status of all RAT families including programming language used to write RAT stubs, the debut year of RAT families and source to determine the debut year. The forth column represents the source based...

Binary Exploits

Exploit Database's Binary Exploits Binary exploits are located in the /bin-sploits/ directory. This is an official repository of The Exploit Database, a project sponsored by Offensive Security. Our repositories are: Exploits & Shellcodes: https://gitlab.com/exploit-database/exploitdb Binary...

CVE-2023-23752

CVE-2023-23752 — Joomla! ⚠️ Disclaimer: This tool is intended for educational purposes and authorized penetration testing only. Use it only against systems you own or have explicit written permission to test. Unauthorized use is illegal. Table of Contents Overview Vulnerability Details How It Work...

shaha

shaha Hash database builder and reverse lookup tool. SHA + aha! Build precomputed hash databases from wordlists, then query them to find preimages. Installation root@kitploit: cargo install shaha Or build from source: root@kitploit: git clone https://github.com/oritwoen/shaha cd shaha cargo build...

scoringengine

Scoring Engine Scoring Engine is an open-source platform for running Red/White/Blue team cybersecurity competitions. It automates service checks each round and provides a web-based scoreboard and configuration interface. Features Automated scheduling and execution of service checks Distributed...

jok3r

.. raw:: html Jok3r v3 beta...

pip-audit

pip-audit pip-audit es una herramienta para escanear entornos Python en busca de paquetes con vulnerabilidades conocidas. Utiliza la Base de Datos de Asesoramiento de Empaquetado de Python https://github.com/pypa/advisory-database a través de la API JSON de PyPI como fuente de informes de...