Swego

Swego Couteau suisse de serveur web en Golang. Restez simple comme le SimpleHTTPServer de Python mais avec de nombreuses fonctionnalités. Utilisation Exécuter le binaire Si vous ne voulez pas le compiler, des binaires sont disponibles sur https://github.com/nodauf/Swego/releases Sinon,...

powercat

powercat Netcat: The powershell version. Powershell Version 2 and Later Supported Installation powercat is a powershell function. First you need to load the function before you can execute it. You can put one of the below commands into your powershell profile so powercat is automatically loaded...

powercat

powercat Netcat: 파워셸 버전. 파워셸 버전 2 이상 지원 설치 powercat은 파워셸 함수입니다. 먼저 함수를 로드한 후에 실행할 수 있습니다. 아래 명령어 중 하나를 파워셸 프로필에 추가하면 파워셸 시작 시 powercat이 자동으로 로드됩니다. root@kitploit: Load The Function From Downloaded .ps1 File: . .\powercat.ps1 Load The Function From URL: IEX New-Object...

ShadowClone

ShadowClone ShadowClone vous permet de distribuer dynamiquement vos tâches de longue durée sur des milliers de fonctions serverless et vous donne les résultats en quelques secondes là où cela aurait pris des heures. Vous pouvez profiter pleinement des niveaux gratuits fournis par les fournisseurs...

SniffAir

SniffAir SniffAir est un framework open-source de sécurité sans fil qui offre la possibilité d'analyser facilement les données sans fil collectées passivement ainsi que de lancer des attaques sans fil sophistiquées. SniffAir gère la complexité liée à la gestion de fichiers pcap volumineux ou...

Inspeckage

Inspeckage - Инспектор Android-пакетов Inspeckage — это инструмент, разработанный для динамического анализа Android-приложений. Применяя хуки к функциям Android API, Inspeckage поможет вам понять, что Android-приложение делает во время выполнения. http://ac-pm.github.io/Inspeckage...

jadx-ai-mcp

JADX-AI-MCP Part of Zin MCP Suite ⚡ Fully automated MCP server + JADX plugin built to communicate with LLM through MCP to analyze Android APKs using LLMs like Claude — uncover vulnerabilities, analyze APK, and reverse engineer effortlessly. ⭐ Contributors Thanks to these wonderful people for thei...

CVE-2026-85701

ramon-victor freegpt-webui (up to commit 098db3dfeb41555c2ca9269df0f13e10ec1c35dc ) is affected by a missing authentication flaw in the ChatCompletion.create function within g4f/init .py (component: Authentication Check). A remote attacker can manipulate this function without valid credentials, r...

EUVD-2026-71749

A vulnerability has been found in ramon-victor freegpt-webui up to 098db3dfeb41555c2ca9269df0f13e10ec1c35dc. This issue affects the function ChatCompletion.create of the file g4f/init.py of the component Authentication Check. Such manipulation leads to missing authentication. The attack may be...

CVE-2026-85701 ramon-victor freegpt-webui Authentication Check __init__.py ChatCompletion.create missing authentication

A vulnerability has been found in ramon-victor freegpt-webui up to 098db3dfeb41555c2ca9269df0f13e10ec1c35dc. This issue affects the function ChatCompletion.create of the file g4f/init.py of the component Authentication Check. Such manipulation leads to missing authentication. The attack may be...

peach

Peach Fuzz - Framework de scan de vulnérabilités Cet outil vise à parcourir les fichiers d'un répertoire donné pour détecter tout appel de fonction dangereux, vulnérable ou non sécurisé. Il est conçu pour être extensible et facile à comprendre ; vous pouvez utiliser des modules « plug-and-play »...

surf

Surf - Escalate your SSRF vulnerabilities on Modern Cloud Environments surf allows you to filter a list of hosts, returning a list of viable SSRF candidates. It does this by sending a HTTP request from your machine to each host, collecting all the hosts that did not respond, and then filtering th...

surf

Surf - Escaladez vos vulnérabilités SSRF dans les environnements cloud modernes surf vous permet de filtrer une liste d'hôtes, renvoyant une liste de candidats SSRF viables. Il le fait en envoyant une requête HTTP depuis votre machine à chaque hôte, en collectant tous les hôtes qui n'ont pas...

CVE-2023-36164

CVE-2023-36164 Проблема в MiniTool Partition Wizard ShadowMaker v.12.7 позволяет злоумышленнику выполнить произвольный код через компонент MTAgentService Название эксплойта: MiniTool Partition Wizard ShadowMaker v.12.7 - Неоцитированный путь службы Дата: 05/08/2023 Автор эксплойта: Idan Malihi...

skyhook

Skyhook Skyhook is a REST-driven utility used to smuggle files into and out of networks defended by IDS implementations. It comes with a pre-packaged web client that uses a blend of React, vanilla JS, and web assembly to manage file transfers. Key Links Download here See the user documentation to...

turbinia

Turbinia Summary Note: Turbinia will not develop new features anymore and is in maintenance mode. Users should have a look atOpenRelik. Turbinia is an open-source framework for deploying, managing, and running distributed forensic workloads. It is intended to automate running of common forensic...

keyhacks

KeyHacks shows methods to validate different API keys found on a Bug Bounty Program or a pentest. @Gwen001 has scripted the entire process available here and it can be found here Table of Contents ABTasty API Key Algolia API key Amplitude API Keys Asana Access token AWS Access Key ID and Secret...

analyzeMFT

AnalyzeMFT Статус : Все тесты проходят на Python 3.8-3.12 в Windows, macOS и Linux. Быстрый старт root@kitploit: Install pip install analyzeMFT Basic usage python analyzeMFT.py -f MFTFILE -o output.csv --csv Generate test MFT for testing python -c "from src.analyzeMFT.testgenerator import...

pypykatz

🚩 Sponsors If you like this project, consider purchasing licenses of OctoPwn, our full pentesting suite that runs in your browser! For notifications on new builds/releases and other info, hop on to our Discord pypykatz Mimikatz implementation in pure Python. At least a part of it : Runs on all OS...

SharpSpray

SharpSpray SharpSpray est un outil de pulvérisation de mots de passe de domaine Windows écrit en .NET C. Introduction SharpSpray est un portage en C de DomainPasswordSpray avec des capacités améliorées et supplémentaires. Cet outil utilise le protocole LDAP pour communiquer avec les services...