5550 matches found
r2frida
r2frida Radare2 and Frida better together Description Self-contained plugin for radare2 that ships frida and allows to instrument local or remote processes using r2 commands instead but not limited to Frida scripts. The radare project provides a complete toolchain for reverse engineering, it's...
flan
Flan Scan is a lightweight network vulnerability scanner. With Flan Scan you can easily find open ports on your network, identify services and their version, and get a list of relevant CVEs affecting your network. Flan Scan is a wrapper over Nmap and the vulners script which turns Nmap into a...
vercel-april2026-incident-response
GuΓa de Respuesta al Incidente de Vercel Abril 2026 Γltima actualizaciΓ³n: 20 de abril de 2026 a las 12:07 p. m. AEST/Brisbane - v2 β incorpora la actualizaciΓ³n del CEO de Vercel del 20 de abril IMPORTANTE: Esto no es asesoramiento legal ni oficial. Si crees que has sido comprometido, comunΓcate c...
dotenv-diff
dotenv-diff Escanea tu cΓ³digo para detectar cada referencia a variables de entorno. Te ayuda a detectar variables faltantes, sin usar, duplicadas o mal utilizadas antes de que causen errores en tiempo de ejecuciΓ³n. Soporte de primera clase para SvelteKit, Next.js y Nuxt. TambiΓ©n funciona bien en...
NodeGoat
NodeGoat Being lightweight, fast, and scalable, Node.js is becoming a widely adopted platform for developing web applications. This project provides an environment to learn how OWASP Top 10 security risks apply to web applications developed using Node.js and how to effectively address them. Getti...
pytm
pytm: A Pythonic framework for threat modeling Introduction Traditional threat modeling too often comes late to the party, or sometimes not at all. In addition, creating manual data flows and reports can be extremely time-consuming. The goal of pytm is to shift threat modeling to the left, making...
envy
Inicio rΓ‘pido β’ ConfiguraciΓ³n β’ Comandos β’ Atajos de teclado β’ FAQ β’ DocumentaciΓ³n Una bΓ³veda cifrada segura para gestionar claves API, secretos y variables de entorno. DiseΓ±ada para desarrolladores que viven en la terminal. ΒΏQuΓ© es Envy? ConstruΓ Envy porque estaba cansado de andar con archivos...
CVE-2023-36845
CVE-2023-36845 Una vulnerabilidad de modificaciΓ³n de variables externas de PHP en J-Web de Juniper Networks Junos OS en las series EX y SRX permite que un atacante no autenticado basado en red controle ciertas variables de entorno. Uso del Script root@kitploit: $ dos2unix CVE-2023-36845.sh $...
miteru
This repository does not have a README...
AWS-Loot
AWSLoot Busca secretos en un entorno AWS enumerando variables de entorno y cΓ³digo fuente. Esta herramienta permite una enumeraciΓ³n rΓ‘pida sobre grandes conjuntos de instancias y servicios de AWS. InstalaciΓ³n root@kitploit: pip install -r requirements.txt Se requiere un archivo de credenciales de...
httpstat
httpstat httpstat visualizes curl1 statistics in a way of beauty and clarity. It is a single fileπ Python script that has no dependencyπ and is compatible with Python 3π». Features Beautiful terminal output β timing breakdown of DNS, TCP, TLS, server processing, and content transfer Structured JSO...
lazyrecon
root@kitploit: | | | |/ | /| | | | / / |/ | \ | | | / / | | | | | | / | | | ||\ |/ \ || ||/|| |v2 |/ Lazyrecon v2 is a subdomain discovery tool that finds and resolves valid subdomains then performs SSRF/LFI/SQLi fuzzing, brute-force and port scanning. It has a simple modular architecture and...
ForgottenButNotGone
Forgotten but Not Gone This repository contains proof-of-concept scripts for the vulnerabilities presented at the talk "Forgotten but Not Gone: Unauthenticated RCEs and LPEs in Legacy Linux Services" from Black Hat USA 2026 and DEF CON 34. CVE-2026-28372 Local privilege escalation in TelnetD:...
shellshock-cve-lab
Shellshock CVE-2014-6271 lab This repository contains a small CGI lab for CVE-2014-6271. It compiles GNU bash 4.2, serves a CGI script through a Python RFC-3875-style server, and maps request headers into CGI environment variables. Sentinel reproduced this scenario on 2026-08-27 as a from-scratch...
unicorn
Unicorn Engine LOOKING FOR CONTRIBUTORS! See this. Unicorn is a lightweight, multi-platform, multi-architecture CPU emulator framework, based on QEMU. Unicorn offers some unparalleled features: Multi-architecture: ARM, ARM64 ARMv8, M68K, MIPS, PowerPC, RISCV, SPARC, S390X, TriCore and X86 16, 32,...
CVE-2014-6271
π¨ CVE-2014-6271 β βShellshockβ 25-Year Zero-Day Remote Code Execution in GNU Bash via Environment Variables π Overview CVE-2014-6271 , nicknamed Shellshock also known as Bashdoor, is a critical remote code execution RCE vulnerability in the GNU Bash shell. An attacker can send specially crafted...
CVE-2014-6271
Shellshock Exploitation CVE-2014-6271 Shellshock is effectively a Remote Command Execution vulnerability in BASH. This script exploits the vulnerability in the web environment on apache or similar with modcgi enabled. The vulnerability lies in the manipulation of environment variables, which are...
prowler
Prowler is the Open Cloud Security Platform trusted by thousands to automate security and compliance in any cloud environment. With thousands of ready-to-use checks and compliance frameworks, Prowler delivers real-time, customizable monitoring and seamless integrations, making cloud security...
CVE-2026-101043
A flaw was found in pnpm. This vulnerability can lead to information disclosure because proxy settings defined in workspace configuration files expand environment variable placeholders without proper restrictions. An attacker who convinces a user or automated system to run a command within a...
EUVD-2026-87974
pnpm versions 11.0.0 before 11.11.0 and 10.7.0 before 10.34.5 expand $VAR environment-variable placeholders in the httpProxy, httpsProxy, and noProxy settings read from a project's pnpm-workspace.yaml. Because the manifest is repository-controlled and the proxy keys were omitted from the...