LeitWacht

GitLab Runner Leitwacht Control de salida de red para contenedores CI/CD de GitLab Runner. Leitwacht previene ataques a la cadena de suministro que exfiltran secretos, controlando lo que cada contenedor de trabajo puede acceder en la red. Cómo Funciona Leitwacht es un agente independiente que se...

LeitWacht

GitLab Runner Leitwacht Network egress enforcement for GitLab Runner CI/CD containers. Leitwacht prevents supply chain attacks from exfiltrating secrets by controlling what each job container can access on the network. How It Works Leitwacht is a standalone agent that runs alongside GitLab Runner...

metasploit-bailiwicked_domain-fix

🚀 metasploit-bailiwickeddomain-fix Fix forundefined method each in Metasploit’s bailiwickeddomain.rb CVE-2008-1447 DNS cache poisoning module 🔎 Problem While testing CVE-2008-1447 using Metasploit, the original module crashed with: root@kitploit: undefined method each for an instance of IPAddr...

penta

penta PENTest + semi-Automation tool Penta is is Pentest semi-automation tool using Python3. It provides advanced features to extract vuln info found on specific servers. I'm now developing a scanning system using vuln-db. Installation Install requirements...

s3enum

s3enum s3enum es una herramienta rápida y sigilosa para la enumeración de buckets de Amazon S3. Utiliza DNS en lugar de HTTP, lo que significa que las solicitudes no quedan registradas en los registros de acceso del servidor S3. Originalmente fue creada en 2016 para apuntar a GitHub. Instalación...

4nonimizer

If you like the 4nonimizer, please help us with whatever you want! What is 4nonimizer? It is a bash script for anonymizing the public IP used to browsing Internet, managing the connection to TOR network and to different VPNs providers OpenVPN, whether free or paid. By default, it includes several...

FakeDns

FakeDns Update 4/14/2020 - Python 2 support removed and code swapped to Python3 Now with round-robin & improved options! Bugs: @crypt0s - Twitter [email protected] - Email A python regular-expression based DNS server! root@kitploit: USAGE: ./fakedns.py -h -c Config path -i interface IP...

pcapan

pcapan A pcap capture analysis helper Usage: root@kitploit: $ git clone https://github.com/synacktiv/pcapan $ cd pcapan $ cargo run -- --pcap /tmp/capture.pcap --google -w whitelist.yaml Finished dev unoptimized + debuginfo targets in 0.04s Running target/debug/pcapan --pcap /tmp/log.tcpdump...

dref

DNS Rebinding Exploitation Framework This project is no longer maintained. dref does the heavy-lifting for DNS rebinding. The following snippet from one of its built-in payloads shows the framework being used to scan a local subnet from a hooked browser; after identifying live web services it...

CVE-2024-10914

CVE-2024-10914 - D-Link Remote Code Execution RCE Exploit This script is a proof-of-concept PoC exploit for CVE-2024-10914, a remote code execution vulnerability in certain D-Link devices. The script identifies and exploits vulnerable devices to execute arbitrary commands. Note: This script shoul...

Pulsar

Pulsar Pulsar is a tool for data exfiltration and covert communication that enable you to create a secure data transfer, a bizarre chat or a network tunnel through different protocols, for example you can receive data from tcp connection and resend it to real destination through DNS packets 🎉...

Collabfiltrator

Collabfiltrator Exfiltrate Blind Remote Code Execution and SQL injection output over DNS via Burp Collaborator. Version: 4.0.1 Authors: Adam Logue Jared McLaren Frank Scarpella Ryan Griffin AI Authors: Claude 3.5 Sonnet ChatGPT 4o Requirements: Burp Suite Professional 2024.12.1 or Later Support:...

CVE-2019-6467

CVE-2019-6467 BIND nxdomain-redirect For educational purposes only Run root@kitploit: $ docker run --rm --name cve-2019-6467 -it -p 53:53/udp knqyf263/cve-2019-6467 Exploit Normal query root@kitploit: $ dig @127.0.0.1 nxdomain.example.com nxdomain can be replaced by anything that means non-existe...

CVE-2023-29929

CVE-2023-29929: Remote "Instakill" DoS in Kemp LoadMaster via DNS Packet Kemp LoadMaster devices firmware 7.2.60 suffer from a critical buffer overflow vulnerability in the isreverse and locatefqdn methods of the libkemplink.so library. The vulnerability stems from an undersized 256-byte buffer...

anonym8

root@kitploit: EN @HiroshimanRise anonym8 Privacy Friend Transparent Proxy through TOR, I2P, Privoxy, Polipo and modify DNS, for a simple and better privacy and security; Include Anonymizing Relay Monitor arm, macchanger, hostname and wipe Cleans ram/cache & swap-space features. Tested on Debian...

DNS_Tunneling

Intro Inspired by recent work I did involving Cobalt Strike DNS beacons, in conjunction with a mission statement to try and evade Microsoft Defender for Endpoint, I spent some time looking into how DNS might be used to transfer a payload to a target machine. I further wanted to challenge myself b...

sublert

root@kitploit: / / / / / / / / \ / / / / / / / / / / / // / // / / / / / / //,/.//// / Autor: Yassine Aboukir Versión: 1.4.7 ¿De qué se trata? Sublert es una herramienta de seguridad y reconocimiento escrita en Python que aprovecha la transparencia de certificados con el único propósito de...

python3.14-cryptography security update

An update is available for python3.14-cryptography. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Python is an interpreted, interactive, object-oriented...

ct-exposer

Discover sub-domains by searching through Certificate Transparency logs What is CT? Certificate Transparency CT is an experimental IETF standard. The goal of it was to allow the public to audit which certificates were created by Certificate Authorities CA. TLS has a weakness that comes from the...

ct-exposer

Descubra subdominios buscando en los registros de Transparencia de Certificados ¿Qué es CT? La Transparencia de Certificados Certificate Transparency, CT es un estándar experimental de la IETF. Su objetivo era permitir que el público audite qué certificados fueron creados por las Autoridades de...