OESA-2026-3547 python-sqlparse security update

A non-validating SQL parser. Security Fixes: Summary sqlparse contains a Regular Expression Denial of Service ReDoS vulnerability in its dollar-quoted SQL literal lexer. The regex pattern at sqlparse/keywords.py:33 uses a backreference \1 to match closing dollar-quote delimiters, causing On² CPU...

OESA-2026-3540 cpio security update

GNU cpio copies files into or out of a cpio or tar archive. The archive can be another file on the disk, a magnetic tape, or a pipe. Security Fixes: GNU cpio is vulnerable to improper encoding or escaping of output in its archive member listing functionality. When listing archive members via cpio...

OESA-2026-3532 kernel security update

The Linux Kernel, the operating system core itself. Security Fixes: In the Linux kernel, the following vulnerability has been resolved: uaccess: fix integer overflow on accessok Three architectures check the end of a user access against the address limit without taking a possible overflow into...

flowinspect

flowinspect A network traffic inspection tool Description: It uses libnids via its python bindings from Jon Oberheide: pynids to defragment IP and reassemble TCP packets UDP is inspected on a per-packet basis to generate network flows. These flows are then inspected using the one of the four...

PAPIMonitor

PAPIMonitor P ython API Monitor for Android apps is a python tool based on Frida for monitoring user-select APIs during the app execution. The app should be installed within an emulator already connected through ADB to the pc host. The user can choose to monitor a predefined list of APIs divided...

marfil

Marfil Marfil является расширением набора Aircrack-ng, используемым для оценки безопасности сетей WiFi. Он позволяет распределить работу по выполнению длительных атак по словарю между несколькими компьютерами. Мотивация Набор Aircrack-ng предоставляет инструмент aircrack-ng, который является...

marfil

Marfil Marfil is an extension of the Aircrack-ng suite, used to assess WiFi network security. It allows to split the work of performing long running dictionary attacks among many computers. Motivation The Aircrack-ng suite provides the aircrack-ng tool, which is a 802.11 WEP and WPA/WPA2-PSK key...

napper-for-tpm

root@kitploit: ,----------------, ,---------, ,-----------------------, ," ,"| ," Napper v1.3 for TPM ," | ," ," | +-----------------------+ | ," ," | | .-----------------Z | | +---------+ | | | Z | | | | -==----'| | | | ︶ ︶ z | | | | | | | | - | | |/----| ==== oo | | | | | | | ,/| | ," |...

AndroidKernelVulnerability

Android Kernel Vulnerability Обзор В ноябре 2017 года системой syzkaller была обнаружена use-after-free ошибка в ядре linux. В феврале 2018 года она была исправлена в некоторых ядрах linux и версиях Android. Это исправление никогда не включалось в ежемесячные бюллетени безопасности Android, поэто...

CVE-2022-0847

CVE-2022-0847 Уязвимость Dirty Pipe Только в образовательных целях root@kitploit: ┌──vagrant㉿kali- └─$ ls -al /etc/passwd -rw-r--r-- 1 root root 3124 Mar 8 08:47 /etc/passwd ┌──vagrant㉿kali- └─$ head -n 1 /etc/passwd root:x:0:0:root:/root:/usr/bin/zsh ┌──vagrant㉿kali- └─$ echo foo /etc/passwd zsh...

crackerjack

!CAUTION This repo is unmaintained, visit https://github.com/sadreck/crackerjack for the latest version. CrackerJack Web Interface for Hashcat by Context Information Security Contents Introduction Architecture Features Limitations Installation Troubleshooting Screenshots License Introduction...

crackerjack

!CAUTION Questo repository non è più mantenuto, visita https://github.com/sadreck/crackerjack per la versione più recente. CrackerJack Interfaccia Web per Hashcat di Context Information Security Contenuti Introduzione Architettura Funzionalità Limitazioni Installazione Risoluzione dei problemi...

vuln-list-backup

vuln-list Sammelt Schwachstelleninformationen und speichert sie automatisch in einem parsbaren Format. Quelle Verzeichnis| Betriebssystem| Quelle| URL ---|---|---|--- alma/| AlmaLinux| AlmaLinux Errata| https://errata.almalinux.org/8/errata.json alpine/| Alpine Linux| Alpine secdb|...

padding-oracle-attacker

padding-oracle-attacker CLI-Tool und Bibliothek zur einfachen Durchführung von Padding-Oracle-Angriffen, mit Unterstützung für gleichzeitige Netzwerkanfragen und einer eleganten Benutzeroberfläche. Installation Stelle sicher, dass Node.js installiert ist, und führe dann Folgendes aus root@kitploi...

prefetch-hash-cracker

Prefetch Hash Cracker Motivation Während der forensischen Analyse eines Windows-Rechners kann es vorkommen, dass Sie den Namen einer gelöschten Prefetch-Datei finden. Auch wenn der Inhalt möglicherweise nicht wiederherstellbar ist, reicht der Dateiname selbst oft aus, um den vollständigen Pfad de...

cve-2022-42889-text4shell-docker

Installare maven - maven-linux 1. Installazione di Maven per creare il fat jar root@kitploit: mvn clean install 2. Costruzione Docker root@kitploit: docker build --tag=text4shell . 3. Esecuzione Docker root@kitploit: docker run -p 80:8080 text4shell 4. Test dell'app root@kitploit:...

CVE-2021-40346

CVE-2021-40346 CVE-2021-40346 PoC HAProxy HTTP Smuggling Solo a scopo educativo Configurazione root@kitploit: $ docker build -t cve-2021-40346 . $ docker run --name poc -p 8000:80 -d --rm -it cve-2021-40346 4941e9f23508b497e4cbe334a75e7cdb84c83478522ed85f48db3477f97a6fb4 Test Conferma che /admin ...

poc-CVE-2026-64638-

XSS2Shell — CVE-2026-64638 PoC Cadeia de exploração WordPress Pre-Auth XSS → RCE, baseada em pesquisa de pwn.ai publicada em ionsec.io. ⚠️ AVISO LEGAL : Apenas para FINS EDUCACIONAIS e TESTES AUTORIZADOS. Use somente contra sistemas que você possui ou para os quais tenha permissão explícita por...

drltrace

Drltrace Build di test per Windows Build di test per Linux Drltrace è un tracciatore dinamico di chiamate API per applicazioni Windows e Linux. Drltrace è costruito sopra il framework di instrumentazione binaria dinamica DynamoRIO. Drltrace è stato inizialmente implementato da Derek Bruening e...

dirty_sock

dirtysock: Privilege Escalation su Linux tramite snapd A gennaio 2019, è stato scoperto che le versioni correnti di Ubuntu Linux erano vulnerabili a un'escalation locale dei privilegi a causa di un bug nell'API di snapd. Questo repository contiene il POC originale dell'exploit, reso disponibile p...