adfsbrute

adfsbrute A script to test credentials against Active Directory Federation Services ADFS, calculating the ADFS url of an organization and allowing password spraying or bruteforce attacks. The main idea is carrying out password spraying attacks with a random and high delay between each test and...

CVE-2022-44877

CVE-2022-44877 Resumen Este script de bash se utiliza para probar la vulnerabilidad de los servidores web a CVE-2022-44877. El script realiza una petición curl a una URL objetivo con un payload codificado en base64. Si el objetivo es vulnerable a la vulnerabilidad CVE-2022-44877, el tiempo...

hyenae-ng

Hyenae NG Hyenae NG Next Generation is a re-write of the original Hyenae tool which was originally published back in the year 2010. Besides switching from C to C++, using modern design concepts, Hyenae NG was just like the original Hyenae written with maximum portability in mind. Since the origin...

email-header-analyzer

E-Mail Header Analyzer MHA What is E-Mail header analyzer MHA: E-Mail header analyzer is a tool written in flask for parsing email headers and converting them to a human readable format and it also can: Identify hop delays. Identify the source of the email. Identify hop country. MHA is an...

CVE-2023-0045

Evadiendo las mitigaciones de Spectre-BTI en el espacio de usuario de Linux Este es un documento de trabajo; por favor, envíenos sus comentarios si cree que nos equivocamos en algo o si omitimos alguna cita Versión 1.0 José Oliveira esoj Rodrigo Branco BSDaemon Introducción Al probar la tasa de...

toxy

toxy Not actively maintained, may not work with latest node.js runtimes. If you are interested in maintaining toxy, please open an issue...

CrawlBox

CrawlBox | Easy way to brute-force web directory. Operating Systems Tested MacOSX Kali Linux Ubuntu 16.04 Usage root@kitploit: python crawlbox.py -h -v -w WORDLIST url positional arguments: root@kitploit: url specific target url, like domain.com optional arguments: root@kitploit: -h, --help show...

frevvomapexec

frevvomapexec frevvomapexec es un script para verificar la existencia de una vulnerabilidad de inyección SQL ciega mediante la inyección de un retardo de tu elección en segundos en Square 9 GlobalForms 6.2. Para verificar que la vulnerabilidad es legítima, se le pedirá al usuario final que realic...

CVE-2018-15473

You will need Python 2.7 to use this exploit. install all the module given bellow in python 2.7 Like: python2 -m pip install numpy python2 -m pip install paramiko python2 -m pip install property To test single username use this command: python ./sshuserenumeration.py -u Like: python...

ivanti-automationmanager-exploit

PoC para CVE-2022-44569 para Ivanti Automation Manager, a Ivanti le tomó más de un año publicar un parche. Ivanti me dijo que está corregido en Ivanti Automation 2023.4... https://github.com/rweijnen/ivanti-automationmanager-exploit/assets/7575747/818f11e1-0e86-4d91-8ce1-8949e45cfd8c...

wargame-turkey_in_2

es-define-property Object.defineProperty, but not IE 8's broken one. Example root@kitploit: const assert = require'assert'; const $defineProperty = require'es-define-property'; if $defineProperty assert.equal$defineProperty, Object.defineProperty; else if Object.defineProperty...

CVE-2023-5561-POC-Updated

CVE-2023-5561-POC-Updated Este repositorio contiene una versión modificada del Prueba de Concepto PoC original para CVE-2023-5561. El PoC original, que se puede encontrar aquí, envía un alto volumen de solicitudes en paralelo, lo que puede activar los Firewalls de Aplicaciones Web WAF o provocar...

CVE-2023-0045

Evadiendo las mitigaciones de Spectre-BTI en el espacio de usuario en Linux Este es un documento de trabajo, envíenos comentarios si cree que nos equivocamos en algo o si omitimos una cita Versión 1.0 José Oliveira esoj Rodrigo Branco BSDaemon Introducción Al probar la tasa de éxito de los ataque...

Astra Linux – Vulnerability found in Linux 5.15, Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: powerpc/rtas: Avoid scheduling in rtasosterm. It is unsafe to use rtasbusydelay to handle a busy status from the IBM,os-term RTAS function in rtasosterm: Kernel Panic – Not Syncing: Attempted to kill init! Exitcode = 0x0000000b...

Astra Linux – Vulnerability in Firefox, Thunderbird

A bug in the calculation of popup notification delays could have allowed an attacker to trick a user into granting permissions. This vulnerability affects Firefox 122, Firefox ESR 115.7, and Thunderbird 115.7...

Astra Linux – Vulnerability in curl

An integer overflow vulnerability exists in the tooloperate.c file of curl 7.65.2, which can be exploited by using a large value as the retry delay. NOTE: Many reports indicate that this does not have a direct security impact on the curl user. However, it may in theory cause a denial of service t...

Astra Linux – Vulnerability in Firefox, Thunderbird

A missing delay in the timing of the pointer lock mechanism could have allowed a malicious page to trick users into granting permissions. This vulnerability affects Firefox 124, Firefox ESR 115.9, and Thunderbird 115.9...

Astra Linux – Vulnerability in Firefox, Thunderbird

It was possible for certain browser prompts and dialogs to be activated or dismissed unintentionally by the user due to an insufficient activation-delay. This vulnerability affects Firefox 119, Firefox ESR 115.4, and Thunderbird 115.4.1...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: RDMA/hfi1: Fixed potential integer multiplication overflow errors. When multiplying values of different types, an overflow can occur even when storing the result in a larger type. This happens because the conversion is perform...

Astra Linux – Vulnerability in Linux 6.1, Linux, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: can: hi311x: hi3110canist – fixed the potential use-after-free issue. The commit a22bd630cfff “can: hi311x: do not report txerr and rxerr during bus-off” removed the reporting of rxerr and txerr even in cases where the operation...