CVE-2024-32004

Create tmp repo, set uploadpack.allowfilter to true git init tmp git -C tmp config uploadpack.allowfilter 1 Clone evil from tmp repo git clone --filter=blob:none --no-local --no-checkout tmp evil rm -rf tmp Configure remote filter script git -C evil config remote.origin.uploadpack...

libtalloc

libtalloc libtalloc is a python script for use with GDB that can be used to analyse the "trivial allocator" talloc. An introduction is about talloc can be found here: https://talloc.samba.org/talloc/doc/html/index.html libtalloc was inspired by other gdb python scripts for analyzing heaps like...

pwndrop

pwndrop is a self-deployable file hosting service for sending out red teaming payloads or securely sharing your private files over HTTP and WebDAV. If you've ever needed to quickly set up an nginx/apache web server to host your files and you were never happy with the limitations of python -m...

nsdp-discover

nsdp-discover 一个用于在 UDP 端口 63322 和 63324 上识别 Netgear 交换机发现协议（NSDP）的 Nmap 脚本。 该脚本尝试发送发现请求，并创建一个 UDP 服务器来监听响应。 从该脚本获取的信息包括：设备类型、名称、MAC、位置、IP、子网掩码、网关、固件版本和当前固件。 用法 nmap -sU -p 63322,63324 --script=nsdp-discover root@kitploit: PORT STATE SERVICE 63322/udp open nsdp | nsdp-discover: | Model: JGS516PE ...

Mortimer

Mortimer Una colección de scripts para procesar datos y threat intelligence de tipo forensia de red, principalmente en una base de datos postgres. Publicado como código abierto por NCC Group Plc - http://www.nccgroup.com/ Desarrollado para John Green, cirt at nccgroup dot com...

CVE-2024-47176

PoC: cups-browsed 上的未认证远程代码执行 📜 漏洞信息 发布日期 : 2024-09-26 基础评分 : 5.3 中等 EPSS评分 : 0.06% 利用概率 向量 : CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N 描述 : CUPS 是一个基于标准、开源的打印系统，而 cups-browsed 包含网络打印功能，包括但不限于自动发现打印服务和共享打印机。cups-browsed 绑定到 INADDRANY:631，使其信任来自任何来源的任何数据包，并可能导致 Get-Printer-Attributes IPP...

Stalker

What's Stalker Very simple and probably badly written OSINT tool that will allow you to quickly search through several websites for a single username. It's aimed to save time and I wanted to keep it simple, so everything's in one single, messy .py file. I'll soon work on that to clean all of this...

sdnpwn

What is sdnpwn? sdnpwn is a toolkit and framework for testing the security of Software-Defined Networks SDNs. For more information check out this article: https://sdnpwn.net/2017/08/22/what-is-sdnpwn/ Installation First download sdnpwn using git root@kitploit: git clone...

Nosql-MongoDB-injection-username-password-enumeration

Nosql injection username and password enumeration script このスクリプトを使用すると、Nosqlmongodbインジェクションの脆弱性があるWebアプリケーションのユーザー名とパスワードを列挙できます。 Exploit Title: Nosql injection username/password enumeration. 著者: Kalana Sankalpa Anon LK. ウェブサイト:...

jsmon

JSMon JSMon - JavaScript Change Monitor for BugBounty Using this script, you can configure a number of JavaScript files on websites that you want to monitor. Everytime you run this script, these files will be fetched and compared to the previously fetched version. If they have changed, you will b...

waybackurls

waybackurls Accept line-delimited domains on stdin, fetch known URLs from the Wayback Machine for .domain and output them on stdout. Usage example: root@kitploit: ▶ cat domains.txt | waybackurls urls Install: root@kitploit: ▶ go install github.com/tomnomnom/waybackurls@latest Credit This tool was...

ssh_user_enum

sshenumv0.3.py Usage: sshenumv0.3.py options Options: root@kitploit: -h, --help Show this help message and exit -u --userlist Specify a new line delimited username file -i --ip Specify the target -m --multiplier Specify the multiplier for the password used to cause the delay -t --threshold Adjust...

test_avb_key

论 几乎 签名 Android 构建 引言 NCC Group 的顾问偶尔会遇到这样的问题：Android 构建使用了已知的私钥进行签名。这使设备制造商（以及他们的用户）暴露在风险之中，即使在启用了安全启动（secure boot）的设备上也是如此。这篇博文有两个目标： 提高对这一问题的认识 介绍一个脚本，用作快速检查，以验证 Android 构建是否（错误地）使用了已知私钥签名。 当基于 Android 的设备启动时，首先会验证引导加载程序（bootloader）运行的是已签名的代码，随后引导加载程序验证高级操作系统（HLOS）。这篇博文仅涉及后者。 保护引导加载程序 – 简要概述...

CVE-2023-45542

CVE-2023-45542 Existe una vulnerabilidad de cross-site scripting XSS reflejado en el parámetro q de la función de búsqueda de mooSocial v3.1.8 que permite a los atacantes robar las cookies de sesión de los usuarios y suplantar su cuenta mediante una URL manipulada. Parámetro vulnerable: q Exploit...

TriforceLinuxSyscallFuzzer

TriforceLinuxSyscallFuzzer 20160613 https://github.com/nccgroup/TriforceLinuxSyscallFuzzer Jesse Hertz [email protected] Tim Newsham [email protected] New: For those looking to play with TriforceAFL and TLSF, Richard Johnson created a Dockerfile which installs both and even builds a Lin...

Wubes

Wubes 架构 前提条件 用法 技巧 Firefox 沙盒 参考 Wubes Wubes 类似于 Qubes，但面向 Windows。其理念是利用 Windows 沙盒 技术在隔离环境中启动应用程序。 目前我们支持为以下应用程序启动 Windows 沙盒： Firefox 其他应用程序可以很容易地添加。 架构 该仓库包含以下文件和文件夹层级结构： root@kitploit: . ├── sandboxes // Contains folders shared between the sandboxes and the host │ ├── Firefox // Folder...

CVE-2023-37596

CVE-2023-37596 —— issabel-pbx 4.0.0-6：跨站请求伪造（CSRF）—— 删除任意用户 严重性： 高危 | CVSS v3.1： 8.1 AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H | CWE： CWE-352 目录 概述 漏洞详情 影响 受影响版本 攻击场景 概念验证（复现步骤） 缓解 / 修复措施 参考资料 披露时间线 作者 概述 在 Issabel PBX 4.0.0-6 版本 中发现了一个跨站请求伪造（CSRF）漏洞。其用户管理端点未实现任何 CSRF 防护，这使得未认证的远程攻击者能够构造一个恶意网页——当已认证的...

globalping-probe v0.52.0

Globalping Probe The Globalping platform relies on a globally distributed network of community-hosted probes, allowing anyone to run network testing commands like ping or traceroute from any location. Join the Globalping probe community Globalping thrives on the contribution of its community – wi...

metasploitable3

Metasploitable3 Metasploitable3 is a VM that is built from the ground up with a large amount of security vulnerabilities. It is intended to be used as a target for testing exploits with metasploit. Metasploitable3 is released under a BSD-style license. See COPYING for more details. Quick-start To...

diario-commandline-tools

diario-commandline-client ¿Qué es esto? Supuestos Instalación Configuración del proyecto Uso ¿Qué es esto? Un repositorio de utilidades creado para facilitar el consumo masivo de la API de diario. Actualmente estas funciones están totalmente implementadas: Subir un archivo documento PDF o Microso...