osi.ig

Open Source Information Instagram so recently ig started sending html response insted of json to "unknown" requests. i REALLY wanted this to work without login since i don't use ig anymore, tried few ways i knew to get it working without login but it didn't work :/ anyways since lot of people are...

androguard

Androguard Do you think your phone has been pwned ? please check IsMyPhonePwned New tool: Goauld Dynamic injection tool for Linux/Android See the new version of Androguard: https://github.com/androguard/androguard/tree/ng Installation Quick installation: root@kitploit: pip install androguard...

evilgrade

Faraday Security Research -- | ISR-evilgrade | www.faradaysec.com | -- .:: BRIEF OVERVIEW ::. Evilgrade is a modular framework that allows the user to take advantage of poor upgrade implementations by injecting fake updates. It comes with pre-made binaries agents, a working default configuration...

sandfly-entropyscan

What is sandfly-entropyscan? sandfly-entropyscan is a utility to quickly scan files or running processes and report on their entropy measure of randomness and if they are a Linux/Unix ELF type executable. Some malware for Linux is packed or encrypted and shows very high entropy. This tool can...

armory

root@kitploit: dM. ,MMb d'YM. ,P Mb MM 6MM MM 6MMb 6MMb 6MMMMMb MM 6MM MM M' d' YM. MM69 " MM69 MM69 Mb 6M' Mb MM69 " Mb d' ,PMbMMMMMMMMMMMMMMYM.,P d' YM. MM MM MM MM MM MM MM MM M \ ,MMMMMMMMbMMMMMMMMMMMMMMMbd'\ d' YM. MM MM MM MM YM. ,M9 MM YMP dM dMMMM MM MM MM YMMMMM9 MM M d' 8,P YMM...

domain_analyzer

Domain Analyzer v0.8.3 What Domain analyzer is a security analysis tool that automatically discovers and reports information about a given domain. Its main purpose is to analyze domains in an unattended way. It has many crazy features, such as getting more domains from DNS zones, automatic nmap,...

plecost

Plecost Professional WordPress Security Scanner Async-first, library-friendly, no external API required. Table of Contents What is Plecost? Plecost vs WPScan Quick Start Installation CVE Database CVE Detection Engine Scanning Detection Modules WooCommerce Security WP eCommerce Security...

CVE-2026-51564

CVE-2026-51564 Aviso de seguridad para CVE-2026-51564 Descripción Un problema en el parámetro redirect en Milk admin =0.9.8 permite a atacantes remotos redirigir a los usuarios a URLs externas arbitrarias mediante una solicitud manipulada. Componentes afectados: App/Route.php, publichtml/index.ph...

drltrace

Drltrace Windows test build Linux test build Drltrace is a dynamic API calls tracer for Windows and Linux applications. Drltrace is built on top of DynamoRIO dynamic binary instrumentation framework. Drltrace was initialy implemented by Derek Bruening and distributed with DynamoRIO and DrMemory...

CVE-2019-2888

CVE-2019-2888 Vulnerabilidad XXE en WebLogic EJBTaglibDescriptor https://www.oracle.com/security-alerts/cpuoct2019.html fernflower.jar weblogic.jar/weblogic/servlet/ejb2jsp/dd/EJBTaglibDescriptor.class root@kitploit: ╭─root@jas502n /var ╰─ find ./ |grep EJBTaglibDescriptor  ✔  8388  18:32:43...

CVE-2017-9096-iText-XXE

CVE-2017-9096 1. Creación del PDF malicioso que contiene XXE Obtén un PDF que contenga un formulario: root@kitploit: wget https://www.pdfscripting.com/public/FreeStuff/PDFSamples/ModifySubmitExample.pdf -O input.pdf Descomprimir el PDF Para ello, debes descomprimir el PDF con qpdf --qdf...

external_expat-2.1.0_CVE-2022-25313

This repository does not have a README...

EasyEASM

EasyEASM Zero-dollar attack surface management tool featured at Black Hat Arsenal 2023 and Recon Village @ DEF CON 2023. Description Easy EASM is just that... the easiest to set-up tool to give your organization visibility into its external facing assets. The industry is dominated by $30k vendors...

Carnivore

Released as open source by NCC Group Plc - https://www.nccgroup.com/ Developed by Chris Nevin, [email protected] https://www.github.com/nccgroup/carnivore Released under the AGPL license https://www.github.com/nccgroup/carnivore/license Carnivore - V.1.0.4 Microsoft External Assessment Tool...

CVE-2021-29447

WordPress 5.6-5.7 - XXE autenticado Autor+ CVE-2021-29447 Uso Paso 1. Ejecutar WordPress root@kitploit: $ make up-wp Paso 2. Ejecutar el servidor web del atacante root@kitploit: $ make up-mal Paso 3. Generar un archivo WAV malicioso Sin wavefile npm Recomendado root@kitploit: $ echo -en...

CVE-2021-29447

Orden de instalación y ejecución 0. Ejecutar docker root@kitploit: $docker-compose up 1. Ejecutar wordpress.sh Antes de instalar WordPress, configure el archivo wp-config.php. root@kitploit: $docker exec -it -u root wordpress /bin/bash -c "/usr/local/bin/wordpress.sh" 2. Instalar WordPress...

external_aac_android-4.2.2_r1_CVE-2023-21282

Este repositorio no tiene un README...

CVE-2023-2255

CVE-2023-2255 CVE-2023-2255 RCE y carga de recursos externos encontrado por @Icare1337 https://nvd.nist.gov/vuln/detail/CVE-2023-2255 Exploit Solo un ejemplo para colocar una webshell en el directorio actual. root@kitploit: python3 CVE-2023-2255.py --cmd 'wget...

amass

Proyecto OWASP Amass El Proyecto OWASP Amass realiza mapeo de redes de superficies de ataque y descubrimiento de activos externos utilizando técnicas de recopilación de información de fuentes abiertas y reconocimiento activo. Instalación Puedes encontrar instrucciones adicionales de instalación y...

sonar.js

sonar.js A framework for identifying and launching exploits against internal network hosts. Works via WebRTC IP enumeration, WebSocket host scanning, and external resource fingerprinting. How does it work? Upon loading the sonar.js payload in a modern web browser the following will happen: sonar....