Analysis-of-TomcatKiller---CVE-2025-31650-Exploit-Tool

Escáner de Vulnerabilidades de Tomcat Una herramienta para detectar CVE-2025-31650 en servidores Apache Tomcat utilizando integración con Shodan. Características Detección de vulnerabilidad de prioridad HTTP/2 Descubrimiento de objetivos Shodan Informes en CSV/JSON Instalación root@kitploit: pyth...

CVE-2018-15365

Reflected XSS en Deep Discovery Inspector 3.8 He encontrado una vulnerabilidad XSS reflejada en la interfaz web de administración de Deep Discovery Inspector 3.8 Service Pack 5 Build: 3.85.1165. La ruta del script vulnerable es /php/detectiondetailfilter.php. Este script solo es accesible por un...

Teamsniper

Teamsniper Teamsniper is a tool for fetching keywords in a Microsoft Teams such as passwords, emails, database, etc.. Usage Help Options root@kitploit: usage: Teamsniper.py -h -d DATABASE -a AUTHTOKEN -s SEARCH Teamsniper is a tool for fetching the given keywords in Microsoft Teams. options: -h,...

chameleon

Chameleon Chameleon provides better content discovery by using wappalyzer's set of technology fingerprints alongside custom wordlists tailored to each detected technologies. The tool is highly customizable and allows users to add in their own custom wordlists, extensions or fingerprints. The full...

SockFuzzer

SockFuzzer: XNU Kernel Fuzzing Framework Project Status SockFuzzer, originally designed as a networking-focused fuzzer for the XNU kernel used in macOS and iOS, has evolved into a comprehensive kernel fuzzing framework. While retaining its original name as a nod to its roots, SockFuzzer now cover...

pocs_slides

Sharing my advisory, poc, slides and scripts to IoT / protocol security. You can find me at: Medium: https://medium.com/@cq674350529 Blog: https://cq674350529.github.io/ Mail: [email protected] Twitter: @cq674350529 Slides OffByOne2025: Patch Diffing, You Are My Sword! A Deep Dive into Two...

fuzzing-templates

Plantillas de Fuzzing Lista curada por la comunidad de plantillas de fuzzing para el motor nuclei para encontrar vulnerabilidades de seguridad desconocidas. Documentación • Contribuciones • Discusión • Comunidad !Caution Este repositorio está archivado y fusionado en el proyecto nuclei-templates...

myNetwork

myNetwork Cross-platform LAN & port scanner with a Windows XP–style desktop GUI. Discovers hosts on your segment, resolves names, MAC and vendor, and reports open TCP + UDP ports — with live monitoring and export. Screenshot shows synthetic demo data. Download Direct download of the latest releas...

SUSE CVE-2026-80801

In the Linux kernel, the following vulnerability has been resolved: nfc: microread: validate target discovery payload lengths microreadtargetdiscovered parses target discovery payloads from skb-data according to the HCI gate. The fixed field offsets and UID copies were checked only against the...

Combined-Wordlists

Combined-Wordlists A combined wordlists for files and directory discovery current count TBE: 4,510,964 This a combined wordlist of: nullenc0de Jason Haddix Seclists Web Content web-fuzz-wordlist Predrag Cujanović Nahamsec dirb wordlist dirbuster wordlist Download Here Sorted and compile into one...

check_mdi

checkmdi Python script to enumerate valid Microsoft 365 domains, retrieve tenant name, and check for a Microsoft Defender for Identity MDI instance. Based on: https://github.com/thalpius/Microsoft-Defender-for-Identity-Check-Instance. Usage ./checkmdi.py -d...

ethibench

From Controlled to the Wild: Evaluation of Pentesting Agents in the Real-World AI pentesting agents are increasingly credible as offensive security systems, but current benchmarks still provide limited guidance on which systems will perform best on real-world targets. Most existing evaluations...

aggressor_snippets

aggressorsnippets A collection of random small Aggressor snippets that don't warrant their own repo locate This Aggressor alias will call the underlying Linux OS command 'locate'. The envisioned use for this is when a custom defined alias is being used in CobaltStrike which requires the full path...

patch-diffing-in-the-dark

Patch Diffing In The Dark A series of blog posts leveraging CVE analysis and patch diffing to discover new vulnerabilities. As revealed in the blog posts, 4 CVEs came from the in-depth study of CVE-2021-1657. TOC Results from CVE-2021-1657: Part 1 - Patch Diffing In The Dark Part 2 - Down the...

dpapi-ng

dpaping - Python DPAPI-NG De-/Encryption Library Library for DPAPI NG, also known as CNG DPAPI, de- and encryption in Python. It is designed to replicate the behaviour of NCryptUnprotectSecret and NCryptProtectSecret. This can be used on non-Windows hosts to de-/encrypt DPAPI NG protected secrets...

EUVD-2026-71236

In the Linux kernel, the following vulnerability has been resolved: nfc: microread: validate target discovery payload lengths microreadtargetdiscovered parses target discovery payloads from skb-data according to the HCI gate. The fixed field offsets and UID copies were checked only against the...

CVE-2026-80801

CVE-2026-80801 affects the Linux kernel's NFC microread driver. The function microread_target_discovered() parses target discovery payloads from skb->data according to the HCI gate, but fixed field offsets and UID copies were validated only against the destination nfc_target buffers rather tha...

CVE-2026-80801

In the Linux kernel, the following vulnerability has been resolved: nfc: microread: validate target discovery payload lengths microreadtargetdiscovered parses target discovery payloads from skb-data according to the HCI gate. The fixed field offsets and UID copies were checked only against the...

EUVD-2026-71438

In the Linux kernel, the following vulnerability has been resolved: nfc: nci: fix out-of-bounds write in ncitargetautoactivated ncitargetautoactivated appends a target to the fixed-size array ndev-targetsNCIMAXDISCOVEREDTARGETS and increments ndev-ntargets without first checking the array is full...

silifuzz

SiliFuzz - Fuzzing CPUs by proxy What is SiliFuzz SiliFuzz is a system that finds CPU defects by fuzzing software proxies, like CPU simulators or disassemblers, and then executing the accumulated test inputs known as the corpus on actual CPUs on a large scale. SiliFuzz is a work in progress, plea...