shodan

Shodan Dorks by twitter.com/lothos612 Feel free to make suggestions Shodan Dorks Basic Shodan Filters city: Find devices in a particular city. city:"Bangalore" country: Find devices in a particular country. country:"IN" geo: Find devices by giving geographical coordinates...

WhoDB < 0.45.0 - Path Traversal

WhoDB contains a path traversal caused by lack of validation when opening database files, letting unauthenticated attackers access arbitrary Sqlite3 databases on the host system, exploit requires attacker to manipulate database filename input. id: CVE-2025-24786 info: name: WhoDB 0.45.0 - Path...

audit_couchdb

Audit CouchDB: The simple, clear, CouchDB security assessment Audit CouchDB is a simple tool with a powerful message. Given an Apache CouchDB URL, it will tell you everything you ever wanted to know about its security. Objective Audit CouchDB will perform the following actions: 1. Learn every...

strafer

Strafer Elasticsearch infections are rising exponentially. The adversaries are exploiting open and exposed Elasticsearch interfaces to trigger infections in the cloud and non-cloud deployments. During this talk, we will release a tool named "STRAFER" to detect potential infections in the...

cybersecurity-interview-questions

Engineering Interview Questions Welcome to the The World of Enginering Interview Questions in Cybersecurity: A collection of awesome framework, libraries, learning tutorials, videos, webcasts, technical resources and cool stuff about Interview for Security & Computer Engineering. Thanks to all...

geowifi

📡💘🌎 | geowifi 通过 BSSID 和 SSID 在多个公共数据库中搜索 WiFi 地理位置数据。 💾 数据库 Wigle| Apple| Google| Milnikov ---|---|---|--- WifiDB| Combain| Freifunk Carte| ❌（已停用）OpenWifi ✔️前置条件 Python3。 为了在 Windows 上显示表情符号，建议安装新的 Windows 终端。 🔑 API 与配置文件 该工具在 gwutils 文件夹中包含一个名为 config.yaml 的配置文件。以下分别说明每个配置参数以及如何获取必要的信息： wigleaut...

masc

masc A malware web scanner developed during CyperCamp Hackathon 2017 About homepage PyPI Features At the moment, there are some features avaiable for any type of website custom or CMS and some of them only available for specific platforms: Scan any website for malware using OWASP WebMalwareScanne...

impacket

Impacket Copyright Fortra, LLC and its affiliated companies. All rights reserved. Impacket was originally created by SecureAuth, and now maintained by Fortra's Core Security. Impacket is a collection of Python classes for working with network protocols. Impacket is focused on providing low-level...

beagle

Beagle 1. About Beagle 2. Installation 1. Docker 2. Python Package 3. Configuration 3. Web Interface 1. Uploading Data 2. Browsing Existing Graphs 3. Graph Interface 1. Inspecting Nodes and Edges 2. Expanding Neighbours 3. Hiding Nodes 4. Running Mutators 5. Toggling Node and Edge Types 6...

Nosql-Exploitation-Framework

Nosql-Exploitation-Framework 用于NoSQL扫描与利用的框架 NoSQL利用框架 2.02b 已发布 作者 NoSQL利用框架由Francis Alexander编写 Wiki NoSQL利用框架的安装与使用Wiki - https://github.com/torque59/Nosql-Exploitation-Framework/wiki 特性: 首个同时支持Mongo、Couch、Redis、HBase、Cassandra的工具 支持NoSQL Web应用 新增JS注入与Web应用枚举的有效载荷列表 扫描支持Mongo、CouchDB和Redis...

melee

MELEE: A Tool to Detect Ransomware Infections in MySQL Instances Attackers are abusing MySQL instances for conducting nefarious operations on the Internet. The cybercriminals are targeting exposed MySQL instances and triggering infections at scale to exfiltrate data, destruct data, and extort mon...

melee

MELEE: Una herramienta para detectar infecciones de ransomware en instancias MySQL Los atacantes están abusando de las instancias MySQL para llevar a cabo operaciones nefastas en Internet. Los ciberdelincuentes están apuntando a instancias MySQL expuestas y desencadenando infecciones a gran escal...

ma2tl

ma2tl macapt 到时间线 这是一个DFIR工具，用于从macapt的分析结果数据库生成macOS法医时间线。 需求 Python 3.7.0 或更高版本 pytz tzlocal xlsxwriter 安装 root@kitploit: % git clone https://github.com/mnrkbys/ma2tl.git 用法 root@kitploit: % python ./ma2tl.py -h usage: ma2tl.py -h -i INPUT -o OUTPUT -ot OUTPUTTYPE -s START -e END -t TIMEZONE -l...

username-anarchy

Username Anarchy Version: 0.6 20 September 2024 Author: urbanadventurer Andrew Horton Homepage: https://www.morningstarsecurity.com/research/username-anarchy Source: https://github.com/urbanadventurer/username-anarchy/ License: MIT Description Tools for generating usernames when penetration...

dorkish

Dorkish During reconaissance phase or when doing OSINT , we often use google dorking and shodan and thus the idea of Dorkish. Dorkish is a Chrome extension tool that facilitates custom dork creation for Google and Shodan using the builder and it offers prebuilt dorks for efficient reconnaissance...

SQLiDetector

SQLiDetector Script simple en Python compatible con el perfil BurpBounty que te ayuda a detectar inyecciones SQL "basadas en errores" enviando múltiples solicitudes con 14 payloads y verificando 152 patrones regex para diferentes bases de datos. root@kitploit:...

MailAccess

root@kitploit: ███╗ ███╗ █████╗ ██╗██╗ █████╗ ██████╗ ██████╗███████╗███████╗███████╗ ████╗ ████║██╔══██╗██║██║ ██╔══██╗██╔════╝██╔════╝██╔════╝██╔════╝██╔════╝ ██╔████╔██║███████║██║██║ ███████║██║ ██║ █████╗ ███████╗███████╗ ██║╚██╔╝██║██╔══██║██║██║ ██╔══██║██║ ██║ ██╔══╝ ╚════██║╚════██║ ██║...

poro

poro Description Scan for publicly accessible assets on your AWS environment Services covered by this tool: AWS ELB API Gateway S3 Buckets RDS Databases EC2 instances Redshift Databases Poro also check if a tag you specify is applied to identified public resources using --tag-key and --tag-value...

detux

Detux: The Multiplatform Linux Sandbox Introduction: Detux is a sandbox developed to do traffic analysis of the Linux malwares and capture the IOCs by doing so. QEMU hypervisor is used to emulate Linux Debian for various CPU architectures. The following CPUs are currently supported: x86 x86-64 AR...

CVE-2023-24775-and-CVE-2023-24780

CVE-2023-24775 和 CVE-2023-24780 我的 Python POC 用于 2023-24780 和 CVE-2023-24775 这个 Funadmin 的 SQL 注入漏洞 这是一个包含 Python CVE SQL 注入 Funadmin 漏洞 POC 的仓库。 CVE-2023-24774 - https://nvd.nist.gov/vuln/detail/CVE-2023-24780 受影响版本：Funadmin v3.2.0 漏洞位于 /databases/table/columns 中的 id 参数。 以及 CVE-2023-24775 -...