debian-ssh

Debian OpenSSL Predictable PRNG Links Original URL: http://metasploit.com/users/hdm/tools/debian-openssl/ Mirror Exploit: https://www.exploit-db.com/exploits/5622/ Perl https://www.exploit-db.com/exploits/5720/ Python https://www.exploit-db.com/exploits/5632/ Ruby Recommend Tool: Crowbar able to...

CVE-2017-7921-EXP

Exploit CVE-2017-7921 Se descubrió un problema de autenticación inadecuada en dispositivos Hikvision. ​ La vulnerabilidad de autenticación inadecuada ocurre cuando una aplicación no autentica a los usuarios de manera adecuada o correcta. ​ Esto puede permitir que un usuario malintencionado escale...

burp-exporter

Exporter Extension for Burp Suite Community and Pro Follow us to know more about tips and others extensions Description Exporter is a Burp Suite extension to copy a request to a file or the clipboard as multiple programming languages functions. It also adds a tab called Exporter where you can...

peirates

Peirates What is Peirates? Peirates, a Kubernetes penetration tool, enables an attacker to escalate privilege and pivot through a Kubernetes cluster. It automates known techniques to steal and collect service account tokens, secrets, obtain further code execution, and gain control of the cluster...

CVE-2023-33477

CVE-2023-33477 El modulador Harmonic NSG 9000-6G presenta una vulnerabilidad de descarga no autorizada en el archivo de configuración config.exp Debido a la falta de verificación de permisos de acceso para el archivo "cgi.bin/config.exp" en el modulador de este modelo, cualquier usuario puede...

Snap-Scraper

Snap Scraper 描述 Snap Scraper 是一款开源情报工具，能根据一组经纬度坐标下载上传至 Snapchat Snap Map 的媒体内容。本项目绝不与 Snap 公司或任何其附属机构、子公司有关联、授权、维护、赞助或认可。本程序仅用于教育、取证及错误报告目的，且不提供任何担保。 使用本工具时请引用以下出版物： 1. Richard Matthews, Kieren Lovell, Matthew Sorell, Ghost protocol – Snapchat as a method of surveillance, Forensic Science...

CVE-2024-9935

CVE-2024-9935 Elementor Page Builder 的 PDF 生成器插件 = 1.7.5 - 未经认证的任意文件下载 描述 WordPress 的 Elementor Page Builder 插件的 PDF 生成器附加组件在所有版本（包括 1.7.5）中，通过 rtwpgaepbdwnldpdf 函数存在路径遍历漏洞。这使得未经认证的攻击者能够读取服务器上任意文件的内容，其中可能包含敏感信息。 POC root@kitploit: GET...

sqlmap

sqlmap sqlmap is an open source penetration testing tool that automates the process of detecting and exploiting SQL injection flaws and taking over of database servers. It comes with a powerful detection engine, many niche features for the ultimate penetration tester, and a broad range of switche...

CVE-2017-5638_struts

Amplié el script de Scott Campbell aún más, lo hice más complicado : Mientras que "HTTPStrutsAttack" detendrá el 100% del reconocimiento, todavía existía una probabilidad minúscula de que si un escáner alcanza un sistema vulnerable, aunque bloqueemos al escáner, el sistema vulnerable podría aún a...

metta

Metta Metta is an information security preparedness tool. This project uses Redis/Celery, python, and vagrant with virtualbox to do adversarial simulation. This allows you to test mostly your host based instrumentation but may also allow you to test any network based detection and controls...

cloudquery

CloudOps, without the chaos CloudQuery is a cloud asset inventory built for platform teams. Sync your cloud infrastructure metadata into your data warehouse, powering insights and automation. Unify data and provide context across AWS, Azure, GCP, and 70+ cloud and SaaS sources such as Wiz, Finout...

CVE-2026-27944

CVE-2026-27944 - Descarga y Descifrado de Copia de Seguridad No Autenticado en Nginx UI https://img.shields.io/badge/python-3.6+-blue.svg https://img.shields.io/badge/license-MIT-green https://img.shields.io/badge/PoC-Exploit-red Un exploit de prueba de concepto PoC para CVE‑2026‑27944, una...

CVE-2026-91771

A flaw was found in Weights & Biases wandb. This vulnerability allows attackers controlling the backend to supply file names with directory traversal sequences during file download operations. This can lead to writing files outside the intended download directory, potentially enabling arbitrary...

gitbleed_tools

GitBleed Tools - for extracting data from mirrorred git repositories About This repo contains shell scripts that can be used to download and analyze differences between cloned and mirror Git repositories. For more information about the underlying quirk in Git behavior, please visit read our blog...

CVE-mitre

CVE-Mitre Exposición Común de Vulnerabilidades Descargar un solo CVE La variable es solo un ejemplo ; puedes crear tu propio script SVN para descargar una sola carpeta = CVE = Saludos @nu11secur1ty $CVE = CVE-2020-13935 root@kitploit: svn checkout...

liffy

Advanced LFI Exploitation Tool A powerful Python tool for Local File Inclusion LFI exploitation with advanced features including WAF bypass, encoding techniques, and comprehensive vulnerability detection. Liffy v2.0 is the significantly enhanced version of liffy which was originally created by...

lmg

Linux Memory Grabber A script for dumping Linux memory and creating VolatilityTM profiles. Hal Pomeranz [email protected], 2020-02-01 THANKS! "If I have seen further it is by standing on the shoulders of giants." Issac Newton There are a lot of people who deserve thanks for making this simpl...

kernelpop

kernelpop kernelpop is a framework for performing automated kernel vulnerability enumeration and exploitation on the following operating systems: Linux Mac It is designed to be python version-agnostic, meaning that it should work with both python2 and python3 please let me know if you find that i...

fbchecker

ABANDONED Facebook block multiple access with their API FACEBOOK MASS ACCOUNT CHECKER Facebook Mass Account Checker Without Locked Account Simple Installation : root@kitploit: apt install git php -y git clone https://github.com/fdciabdul/fbchecker cd fbchecker php fbcheck.php Usage root@kitploit:...

ScreenshotBOF

ScreenshotBOF 一种替代的Cobalt Strike截图功能，使用WinAPI且不执行fork & run。截图在内存中下载。 特性 JPEG压缩 内存下载，支持作为截图或作为文件 支持捕获最小化的窗口 灰度、JPEG质量和缩小尺寸以减少文件大小 自行编译 1. git clone 仓库 2. 运行 make 保存方式: 0. 将文件写入磁盘 1. 通过beacon下载文件（仅限Cobalt Strike） 2. 通过beacon作为截图下载文件（仅限Cobalt Strike） PID 0: 捕获全屏（PID = 0） 特定PID: 捕获特定PID（即使在最小化时也能工作！...