flask-session-cookie-manager

Flask Session Cookie Decoder/Encoder Original author : Wilson Sumanang Fixes and improvements author : Alexandre ZANNI Imported from saruberoz.github.io Depencencies Python 2 or Python 3 itsdangerous Flask Installation Package BlackArch Linux root@kitploit: pacman -S flask-session-cookie-manager3...

decoder-plus-plus

Decoder++ Decoder++ is an extensible application designed for penetration testers, software developers, and anyone in between looking to effortlessly decode and encode data across various formats. It includes a wide range of preinstalled scripts and codecs, smart decoding and format identificatio...

pythem

pythem - Penetration Testing Framework pythem is a multi-purpose pentest framework written in Python. It has been developed to be used by security researchers and security professionals. The tool intended to be used only for acts within the law. I am not liable for any undue and unlawful act...

jwt-hack

JSON Web Token Hack Toolkit A high-performance toolkit for testing, analyzing and attacking JSON Web Tokens. Installation Cargo root@kitploit: cargo install jwt-hack Homebrew root@kitploit: brew install jwt-hack Snapcraft Ubuntu root@kitploit: sudo snap install jwt-hack From source root@kitploit:...

the-book-of-secret-knowledge

"Knowledge is powerful, be careful how you use it! " A collection of inspiring lists, manuals, cheatsheets, blogs, hacks, one-liners, cli/web tools, and more. 📔 What is it? This repository is a collection of various materials and tools that I use every day in my work. It contains a lot of useful...

Burp-Encode-IP

소개 이 확장 프로그램은 IP 주소를 잘 알려지지 않은 여러 인코딩 기술로 변환합니다. 이 기술은 SSRF Server-Side Request Forgery, Open Redirect 또는 RFI Remote File Inclusion와 같은 취약점을 테스트하는 데 중점을 둡니다. 요약 간편 설치 Burp Pro가 있다면 BApp에서 직접 설치할 수 있습니다: 확장 프로그램에 ⭐⭐⭐⭐⭐ 별점을 남기는 것을 잊지 마세요 ; 설치 Extensions - Installed - Add - burp-encode-ip.py로 이동합니다...

PyIris

프로젝트는 현재 버전 3을 위한 주요 재작성 중이며, 현재 버전인 버전 2는 더 이상 사용되지 않게 됩니다. 자세한 내용은 를 참조하십시오. PyIris 프로젝트 업데이트는 곧 제공될 예정이며, ROADMAP.md를 참조하십시오 PyIris 프로젝트는 전적으로 파이썬으로 작성된 모듈식 원격 접근 트로이 목마 툴킷입니다. 사용자가 동적으로 원격 접근 트로이 목마 페이로드를 빌드, 생성 및 인코딩/암호화하여 손상된 다른 호스트를 원격 제어할 수 있게 해줍니다. 여러 운영 체제Windows 및 Linux에서 동작하는 PyIris 데...

xssor2

XSS'OR XSS'OR - JavaScriptでハック。 オンライン 試してみてください： https://xssor.io および http://xssor.io/ 主要なモジュールは3つあります：Encode/Decode、Codz、Probe。 インストール Python 3（Django 3.0.）またはPython 2（Django 1.11. ） git clone https://github.com/evilcos/xssor2 または直接ダウンロード cd xssor2 xssor/payload/probe.js を編集 root@kitploit:...

CVE-2021-3129

CVE-2021-3129 root@kitploit: 사용자 지정 명령의 phar 패키지 생성: php -d'phar.readonly=0' ./phpggc monolog/rce1 system "cat /etc/passwd" --phar phar -o php://output | base64 -w0 php -a PHP 명령줄 환경에 진입 $fp = fopen'php://output', 'w'; streamfilterappend$fp, 'convert.quoted-printable-encode'; $size = ""; fwrite$f...

CVE-2026-92842

The convert.base64-encode, convert.quoted-printable-encode and convert.quoted-printable-decode stream filters accept a line-break-chars option whose length is tracked separately from the string itself. The filter constructors duplicate the value with pestrdup, which stops at the first NUL byte,...

CVE-2026-92842

The convert.base64-encode, convert.quoted-printable-encode and convert.quoted-printable-decode stream filters accept a line-break-chars option whose length is tracked separately from the string itself. The filter constructors duplicate the value with pestrdup, which stops at the first NUL byte,...

CVE-2026-92842

The convert.base64-encode, convert.quoted-printable-encode and convert.quoted-printable-decode stream filters accept a line-break-chars option whose length is tracked separately from the string itself. The filter constructors duplicate the value with pestrdup, which stops at the first NUL byte,...

EUVD-2026-87351

The convert.base64-encode, convert.quoted-printable-encode and convert.quoted-printable-decode stream filters accept a line-break-chars option whose length is tracked separately from the string itself. The filter constructors duplicate the value with pestrdup, which stops at the first NUL byte,...

CVE-2026-21015-PHP-Filter-Chain-Arbitrary-File-Read

CVE-2026-21015 – PHPフィルタチェーンによる任意ファイル読み取り プログラムコード PHP root@kitploit: // vulnerable.php - Includes file based on user input via filter ?php $file = $GET'page'; // Attempt to sanitize by allowing only .php files, but vulnerable to filter wrapper include"php://filter/convert.base64-encode/resource=...

CVE-2025-57926

Sink: WordPress Coreの仕組みによると、投稿コンテンツではXSSが防止されていますが、このプラグインではコンテンツがエンコードされ、レンダリング時にデコードされるため、意図せずXSSの脆弱性が生じます。 PoC: base64でエンコードされたペイロード は PHNjcmlwdD5hbGVydCgxKTwvc2NyaXB0Pg== です。...

Astra Linux – Vulnerability in krb5

The vulnerability of the decodekrb5flags function in the asn1kencode.c component of the Kerberos authentication protocol is related to integer overflow. Exploiting this vulnerability allows a malicious actor to cause a service denial...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: btrfs: A potential out-of-bounds write has been avoided in the btrfsencodefh function. The btrfsencodefh function does not properly handle the three possible cases it processes. Before writing to the file handle fh, the function...

Astra Linux – Vulnerability in hdf5

A buffer overflow in H5Olayoutencode in H5Olayout.c in the HDF HDF5 through 1.10.4 library allows attackers to cause a denial of service through a crafted HDF5 file. This issue was triggered during the repacking of an HDF5 file, also known as “Invalid write of size 2.”...

Astra Linux – Vulnerability found in Linux 5.15, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: KEYS: Trusted – Do not use WARN when encode fails When asn1encodesequence fails, using WARN is not the correct solution. 1. asn1encodesequence is not an internal function located in lib/asn1encode.c. 2. Its location is known,...

Astra Linux – Vulnerability in hdf5

The HDF5 library from version 1.14.3 has a heap-based buffer overflow issue in the H5Olayoutencode function within H5Olayout.c, which leads to the corruption of the instruction pointer...