3981 matches found
dynmx
dynmx Prototype dynmx spoken dynamics is a signature-based detection approach for behavioural malware features based on Windows API call sequences. In a simplified way, you can think of dynmx as a sort of YARA for API call traces so called function logs originating from malware sandboxes. Hence,...
sniffles
Sniffles--Packet Capture Generator for IDS and Regular Expression Evaluation Sniffles is a tool for creating packet captures that will test IDS that use fixed patterns or regular expressions for detecting suspicious behavior. Sniffles works very simply. It takes a set of regular expressions or...
xray
Welcome to xray 👋 A Powerful Security Assessment Tool 🏠 Documentation • ⬇️ Download xray • ⬇️ Download xpoc • ⬇️ Download xapp • 📖 Plugin Repository 中文版 Note: xray is not open source, just download the built binary files directly. The repository mainly contains community-contributed POCs. Each xray...
BokuLoader
BokuLoader : Cobalt Strike 반사 로더 Cobalt Strike의 회피 기능을 재현, 통합 및 향상시키는 것을 목표로 하는 개념 증명 사용자 정의 반사 로더 UDRL입니다! 기여자:...
dockerized-android
Dockerized Android Dockerized Android is a container-based framework that allows to execute and Android Emulator inside Docker and control it through a browser. This project has been developed in order to provide a starting point for integrating mobile security components into Cyber Ranges but it...
snuffleupagus
Snuffleupagus Security module for php7 and php8 - Killing bugclasses and virtual-patching the rest! Key Features • Download • Examples • Documentation • License • Thanks Snuffleupagus is a PHP 7+ and 8+ module designed to drastically raise the cost of attacks against websites, by killing entire b...
pe-sieve
Intro PE-sieve is a tool that helps to detect malware running on the system, as well as to collect the potentially malicious material for further analysis. Recognizes and dumps variety of implants within the scanned process: replaced/injected PEs, shellcodes, hooks, and other in-memory patches...
liffy
Advanced LFI Exploitation Tool A powerful Python tool for Local File Inclusion LFI exploitation with advanced features including WAF bypass, encoding techniques, and comprehensive vulnerability detection. Liffy v2.0 is the significantly enhanced version of liffy which was originally created by...
airgeddon
airgeddon This is a multi-use bash script for Linux systems to audit wireless networks. All the needed info about how to "install | use | enjoy" airgeddon is present at GitHub's Wiki. I. Content & Features Home Features Screenshots Wallpapers II. Requirements Requirements Compatibility Cards and...
CVE-2018-11788
概要 Apache Karafは、現代的で多態性のあるアプリケーションコンテナです。OSGiを基盤とした軽量で強力なエンタープライズ対応のコンテナです。Apache Karafは「プロダクトプロジェクト」であり、完全でターンキーのランタイムを提供します。このランタイムは「多面的」であり、OSGiおよび非OSGiアプリケーション、Webアプリケーション、サービスベースのアプリケーションなど、さまざまな種類のアプリケーションをデプロイできます。 最近のApache Karafの調査において、そのXMLパーサーにXXE（XML External...
extrude
extrude 바이너리에서 누락된 보안 기능, 정보 노출 등을 분석합니다. 🚧 Extrude는 개발 초기 단계에 있으며, 현재 ELF 및 MachO 바이너리만 지원합니다. PE Windows 바이너리는 곧 지원될 예정입니다. 사용법 root@kitploit: Usage: extrude flags file Flags: -a, --all Show details of all tests, not just those which failed. -w, --fail-on-warning Exit with a non-zero status eve...
extrude
extrude Analyse binaries for missing security features, information disclosure and more. 🚧 Extrude is in the early stages of development, and currently only supports ELF and MachO binaries. PE Windows binaries will be supported soon. Usage root@kitploit: Usage: extrude flags file Flags: -a, --all...
cloud-sniper
Cloud Sniper : Detection-as-code platform Cloud Sniper is a comprehensive platform meticulously designed to streamline Cloud Security Operations. It swiftly responds to security incidents by analyzing and correlating cloud artifacts, ensuring a holistic view of the company's cloud security postur...
pacbot
Introduction Policy as Code Bot PacBot is a platform for continuous compliance monitoring, compliance reporting and security automation for the cloud. In PacBot, security and compliance policies are implemented as code. All resources discovered by PacBot are evaluated against these policies to...
malicious-pdf
Malicious PDF Generator ☠️ Generate 67 malicious PDF test files for testing phone-home callbacks, SSRF, XSS, XXE, NTLM credential theft, and data exfiltration in PDF viewers, converters, and web applications. Can be used with Burp Collaborator or Interact.sh Used for penetration testing, bug bount...
gmailc2
gmailc2 root@kitploit: A Fully Undetectable C2 Server That Communicates Via Google SMTP to evade Antivirus Protections and Network Traffic Restrictions Note: root@kitploit: This RAT communicates Via Gmail SMTP or u can use any other smtps as well but Gmail SMTP is valid because most of the...
xc
XC Netcat like reverse shell for Linux & Windows. Features Windows root@kitploit: Usage: └ Shared Commands: !exit !upload uploads a file to the target !download downloads a file from the target !lfwd local portforwarding like ssh -L !rfwd remote portforwarding like ssh -R !lsfwd lists active...
pysqli
PySQLi - Python SQL injection framework 1. Overview PySQLi is a python framework designed to exploit complex SQL injection vulnerabilities. It provides dedicated bricks that can be used to build advanced exploits or easily extended/improved to fit the case. 2. Why another SQLi framework ? Simple...
CVE-2026-97868
A security vulnerability has been detected in sheshbabu zen up to 1.5.0. Affected by this issue is the function dangerouslySetInnerHTML of the file features/notes/NotesEditor.jsx of the component Note Editor. The manipulation leads to cross site scripting. The attack may be initiated remotely. Th...