bomber

bomber is an application that scans SBOMs for security vulnerabilities. Overview So you've asked a vendor for an Software Bill of Materials SBOM for one of their closed source products, and they provided one to you in a JSON file... now what? The first thing you're going to want to do is see if a...

vuls

Vuls: VULnerability Scanner Vulnerability scanner for Linux/FreeBSD, agent-less, written in Go. Twitter: @vulsen...

CVE-2021-4154

CVE-2021-4154 此漏洞已在 https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=3b0462726e7ef281c35a7a4ae33e93ee2bc9975b 中修复 此漏洞利用程序适用于大多数未打补丁的内核： CentOS 8 内核版本高于 linux-4.18.0-305.el8 Debian 11 内核版本高于 5.10.0-8 Fedora 31/32/33 内核版本高于 5.3.7-301.fc31 Ubuntu 18/20 内核版本高于 5.4.0-84 和...

CVE-2022-27666

CVE-2022-27666 这是针对 CVE-2022-27666 的漏洞利用程序，该漏洞可在最新的 Ubuntu Desktop 21.10 上实现本地权限提升。 我们的初步实验表明，该漏洞影响最新的 Ubuntu、Fedora 和 Debian。我们的漏洞利用程序是针对 Ubuntu Desktop 21.10 构建的。 阅读完整的漏洞披露此处 root@kitploit: ./compile.sh ./run.sh...

rehex

Reverse Engineers' Hex Editor A cross-platform Windows, Linux, macOS, BSD hex editor for reverse engineering, and everything else. An online copy of the manual can be accessed here: solemnwarning.net/rehex/manual/. Features Large 1TB+ file support Decoding of integer/floating point value types...

linux_screenshot_xwindows

Intro The goal of this volatility plugin is to extract a screenshot of all open X windows from a memory dump. Previous work The volatility plugin linuxxwindows realised by Adam Bridge https://github.com/bridgeythegeek/linuxxwindows extracts various metadata from the window objects registered to X...

ncrack

ncrack Ncrack is a high-speed network authentication cracking tool. It was built to help companies secure their networks by proactively testing all their hosts and networking devices for poor passwords. Security professionals also rely on Ncrack when auditing their clients. Ncrack was designed...

CVE-2024-5124

被害者サーバーのデプロイ: Docker のインストール root@kitploit: Install packages required for the installation sudo apt-get update sudo apt install --yes ca-certificates curl sudo install -m 0755 -d /etc/apt/keyrings sudo curl -fsSL https://download.docker.com/linux/debian/gpg -o /etc/apt/keyrings/docker.asc sudo...

nishang

Nishang Nishang is a framework and collection of scripts and payloads which enables usage of PowerShell for offensive security, penetration testing and red teaming. Nishang is useful during all phases of penetration testing. By Nikhil Mittal Founder of Altered Security - Hands-on red team and...

pentmenu

pentmenu 中文说明 ネットワーク偵察とDoS攻撃を迅速かつ簡単に行うためのbashセレクトメニュー 必要に応じてsudoが実装されています。 DebianとArchでテスト済み。 貢献やプルリクエストは大歓迎です！ 必要条件: bash sudo curl netcat（'-k'オプションに対応していること。openbsd派生を推奨） hping3（またはフラッド攻撃の代わりにnpingを使用可能） openssl stunnel nmap whois（必須ではないが推奨） nslookup（または'host'） ike-scan...

zizzania

zizzania zizzania sniffs wireless traffic listening for WPA handshakes and dumping only those frames suitable to be decrypted one beacon + EAPOL frames + data. In order to speed up the process, zizzania sends IEEE 802.11 DeAuth frames to the stations whose handshake is needed, properly handling...

scannerl

Scannerl Scannerl is a modular distributed fingerprinting engine implemented by Kudelski Security. Scannerl can fingerprint thousands of targets on a single host, but can just as easily be distributed across multiple hosts. Scannerl is to fingerprinting what zmap is to port scanning. Scannerl wor...

debianopenssl

debianopenssl Claves privadas vulnerables al fallo de OpenSSL en Debian CVE-2008-0166 En 2008, un fallo en el paquete OpenSSL de Debian y Ubuntu provocó la generación de claves privadas predecibles. Aunque el número de claves es limitado, se necesitan algunas consideraciones para crear una lista...

CVE-2026-64564

Debian 13 6.12.95 SCTP ASCONF DEL-IP UAF 概念验证。 root@kitploit: gcc -O2 -static -o lpe lpedebian.6.12.95.c ./lpe...

autotimeliner

AutoTimeliner Automagically extract forensic timeline from volatile memory dumps. AutoTimeliner runs multiple Volatility3 plugins against Windows, Linux, and macOS memory images, then merges their output into a single, sorted CSV timeline: Generic Timeline Plugin Plugin| What it captures ---|---...

Sublist3r

About Sublist3r Sublist3r is a python tool designed to enumerate subdomains of websites using OSINT. It helps penetration testers and bug hunters collect and gather subdomains for the domain they are targeting. Sublist3r enumerates subdomains using many search engines such as Google, Yahoo, Bing,...

kali-cloud

FAI 云镜像构建器 此仓库旨在为所有云提供商构建 Kali 镜像 这是从 https://salsa.debian.org/cloud-team/debian-cloud-images/ 的分支 快速开始 你需要在磁盘上检出此仓库，并安装较新的 fai-server 软件包（至少 5.7 版）。安装必要的 fai 软件包时不要安装推荐包（这样可以避免把你的主机变成 DHCP 服务器！）。 root@kitploit: git clone https://salsa.debian.org/cloud-team/debian-cloud-images.git sudo apt instal...

DEBIAN-CVE-2026-85013

Bulletin has no description...

tsharkVM

💡 更新: tshark-opensearch より新しいアプリケーション tshark-opensearch が利用可能になりました。 これは https://github.com/h21-lab/apps-collection-info リポジトリにあります。 👉 アクセスを取得 tshark ELK VM アプライアンス このプロジェクトは、tshark -T ek ndjson 出力の分析に使用できる仮想マシンを構築します。 仮想アプライアンスは vagrant を使用して構築され、事前インストールおよび事前設定された ELK スタックを備えた Debian を構築します。 VM...

harbian-audit

harbian-audit Hardening Introduction Hardened Debian GNU/Linux and CentOS 8 distro auditing. The main test environment is in debian GNU/Linux 9/10/11/12/13 and CentOS 8 and ubuntu 22, and other versions are not fully tested. There are no implementations of desktop related items in this release. T...