CVE-2024-43044-POC

Использование Скачайте jar-пакет по адресу http://ip:port/jnlpJars/agent.jar Измените соответствующий код в \hudson\remoting\RemoteClassLoader.class Перекомпилируйте и упакуйте заново Необходимо заранее узнать секрет и имя node root@kitploit: java -jar agent.jar -url http://ip:port/ -secret -name...

pe_to_shellcode

petoshellcode Converts PE so that it can be then injected just like a normal shellcode. At the same time, the output file remains to be a valid PE. Supports both 32 and 64 bit PEs Authors:@hasherezade & @hh86 Objective The goal of this project is to provide a possibility to generate PE files that...

asnap

Asnap Description Asnap vise à faciliter la phase de reconnaissance en fournissant des données régulièrement mises à jour sur les adresses IPv4 ou IPv6 détenues par chaque entreprise et en permettant à l'utilisateur d'automatiser le scan initial des ports et des services. root@kitploit: █████╗...

detection-rules

Detection Rules Detection Rules is the home for rules used by Elastic Security. This repository is used for the development, maintenance, testing, validation, and release of rules for Elastic Security’s Detection Engine. This repository was first announced on Elastic's blog post, Elastic Security...

CVE-2026-82485 itsourcecode Sales and Inventory System pro_edit.php sql injection

A vulnerability has been found in itsourcecode Sales and Inventory System 1.0. Affected by this vulnerability is an unknown functionality of the file /pages/proedit.php. Such manipulation of the argument ID leads to sql injection. The attack may be launched remotely. The exploit has been disclose...

CVE-2026-82485

CVE-2026-82485 is a SQL injection in itsourcecode Sales and Inventory System 1.0 , located in the file /pages/pro_edit.php via manipulation of the ID argument. The vulnerability is remotely exploitable and requires low privileges (single authentication per CVSS v2), with no user interaction neede...

EUVD-2026-68172

A vulnerability has been found in itsourcecode Sales and Inventory System 1.0. Affected by this vulnerability is an unknown functionality of the file /pages/proedit.php. Such manipulation of the argument ID leads to sql injection. The attack may be launched remotely. The exploit has been disclose...

heartbleedscanner

Heartbleed Scanner Network Scanner for OpenSSL Memory Leak CVE-2014-0160 -t parameter to optimize the timeout in seconds. -f parameter to log the memleak of vulnerable systems. -n parameter to scan entire network. -i parameter to scan from a list file. Useful if you already have targets. -r...

gau

getallurls gau getallurls gau fetches known URLs from AlienVault's Open Threat Exchange, the Wayback Machine, Common Crawl, and URLScan for any given domain. Inspired by Tomnomnom's waybackurls. Resources Usage Installation ohmyzsh note Usage: Examples: root@kitploit: $ printf example.com | gau $...

CVE-2017-4878-Samples

CVE-2017-4878 샘플 CVE-2017-4878 샘플 - http://blog.talosintelligence.com/2018/02/group-123-goes-wild.html Flash 익스플로잇 fec71b8479f3a416fa58580ae76a8c731c2294c24663c601a1267e0e5c2678a0 - https://www.virustotal.com/en/file/fec71b8479f3a416fa58580ae76a8c731c2294c24663c601a1267e0e5c2678a0/analysis/...

tinyfilemanager-wh1z-edition

Tiny File Manager WH1Z-Edition Présentation de Tiny File Manager WH1Z-Edition, la solution compacte et efficace pour gérer vos fichiers et dossiers avec des fonctionnalités améliorées de confidentialité et de sécurité. Fini le temps où vous deviez dépendre de ressources externes – j'ai réduit le...

http-protocol-exfil

http-protocol-exfil Use the HTTP protocol version to send a file bit by bit "HTTP/1.0" is a 0 and "HTTP/1.1" is a 1. It uses GET requests so the Blue Team would only see the requests to your IP address. However, it takes a long time to send bigger files, for example it needs 1 hour to send 200 KB...

webstor

WebStor Identification rapide des technologies web vulnérables dans votre organisation WebStor est un outil implémenté en Python sous licence MIT pour énumérer rapidement tous les sites web sur l'ensemble des réseaux de votre organisation, stocker leurs réponses et interroger les technologies et...

CVE-2020-16898--EXP-POC

CVE-2020-16898 CVE-2020-16898 Windows TCP/IP — уязвимость удалённого выполнения кода. EXP&POC Воспроизведение forforever: https://www.cnblogs.com/forforever/p/13846077.html poc CVE-2020-16898Checker-poc Команда: Запустите PowerShell/CMD от имени администратора root@kitploit: Powershell.exe...

feroxbuster

!WARNING Security Notice – Domain Impersonation The domain feroxbuster.com is NOT affiliated with this project, its maintainers, or any official feroxbuster releases. Official feroxbuster downloads are distributed ONLY through: https://github.com/epi052/feroxbuster open source...

pyod

.. image:: https://raw.githubusercontent.com/yzhao062/pyod/master/brand/pyod-icon.svg :target: https://pyod.dev :alt: PyOD Ecosystem :width: 84px Python 이상치 탐지 PyOD 3 PyOD 3: 대규모 에이전트 기반 이상 탐지 |badgewebsite| |badgepypi| |badgeanaconda| |badgedocs| |badgestars| |badgeforks| |badgedownloads|...

CVE-2025-30208

中文 | Английский Сканер уязвимостей Vite Dev Server Автоматический сканер для внутренних и внешних сетей Автоматизированный инструмент для сканирования уязвимостей сервера разработки Vite. Этот инструмент использует API FOFA для сбора потенциальных целей и автоматически обнаруживает определённые...

massdns

MassDNS A high-performance DNS stub resolver MassDNS is a simple high-performance DNS stub resolver targeting those who seek to resolve a massive amount of domain names in the order of millions or even billions. Without special configuration, MassDNS is capable of resolving over 350,000 names per...

massdns

MassDNS Un résolveur DNS à haute performance MassDNS est un résolveur DNS simple et haute performance conçu pour ceux qui cherchent à résoudre un nombre massif de noms de domaine, de l'ordre de millions voire de milliards. Sans configuration spéciale, MassDNS est capable de résoudre plus de 350 0...

outpost

Outpost Управление тестированием AWS и формирование отчётов Outpost — это простой инструмент для генерации файлов конфигурации AWS для AssumeRole, проверки работоспособности аккаунтов и формирования отчётов по результатам сканирования ScoutSuite. Запустить ScoutSuite Разобрать результаты...