flawfinder

About This is "flawfinder" by David A. Wheeler. Flawfinder is a simple program that scans C/C++ source code and reports potential security flaws. It can be a useful tool for examining software for vulnerabilities, and it can also serve as a simple introduction to static source code analysis tools...

openssl

Welcome to the OpenSSL Project OpenSSL is a robust, commercial-grade, full-featured Open Source Toolkit for the Transport Layer Security TLS, formerly SSL, Datagram TLS DTLS, and QUIC protocols. The protocol implementations are based on a full-strength general purpose cryptographic library, which...

follina_cve_2022-30190

follinacve2022-30190 CVE-2022-30190follina에 대한 개념 증명PoC입니다. root@kitploit: usage: exploit.py -h -u HOSTIP -p PORT -o OFILE -m server, create -s script | scriptfile.ps1 -r HOSTIP:PORT Follina Exploitation Toolkit options: -h, --help show this help message and exit -u HOSTIP, --host HOSTIP host ip...

caracal

Caracal Caracal is a static analyzer tool over the SIERRA representation for Starknet smart contracts. Features Detectors to detect vulnerable Cairo code Printers to report information Taint analysis Data flow analysis framework Easy to run in Scarb projects Installation Precompiled binaries...

wavecrack

Wavecrack Description A user-friendly Web interface to share an hashcat cracking box among multiple users with some pre-defined options. Screenshots The homepage Adding an hash to crack Seeing the results and some stats Outline This Web application can be used to launch asynchronous password crac...

ioctlance

IOCTLance Description Presented at CODE BLUE 2023, this project titled Enhanced Vulnerability Hunting in WDM Drivers with Symbolic Execution and Taint Analysis introduces IOCTLance, a tool that enhances its capacity to detect various vulnerability types in Windows Driver Model WDM drivers. In a...

rainbowcrackalack

Rainbow Crackalack Author: Joe Testa @therealjoetesta About This project produces open-source code to generate rainbow tables as well as use them to look up password hashes. While the current release only supports NTLM, future releases may support MD5, SHA-1, SHA-256, and possibly more. Both Linu...

http-request-smuggling

HTTP Request Smuggling Detection Tool HTTP request smuggling is a high severity vulnerability which is a technique where an attacker smuggles an ambiguous HTTP request to bypass security controls and gain unauthorized access to performs malicious activities, the vulnerability was discovered back ...

fileless-xec

➲ fileless-xec 🦜 👋 Certainly useful , mainly for fun, rougly inspired by 0x00 article Pentest use: fileless-xec is used on target machine to stealthy execute a binary file located on attacker machine ➲ Short story fileless-xec enable us to execute a remote binary on a local machine directly from...

CVE-2025-22785

CVE-2025-22785 Course Booking System = 6.0.5 - 認証なしSQLインジェクション 説明 WordPress用プラグインCourse Booking Systemは、バージョン6.0.5以前において、ユーザーが指定するパラメータに対するエスケープ処理が不十分であり、既存のSQLクエリの準備が十分に行われていないため、SQLインジェクションの脆弱性があります。これにより、認証されていない攻撃者は、既存のクエリに追加のSQLクエリを追加し、データベースから機密情報を抽出するために使用できます。 詳細 タイプ : プラグイン スラッグ :...

subdomains.sh

subdomains.sh Обёртка вокруг инструментов для перебора поддоменов, автоматизирующая рабочий процесс для заданного домена, написанная на bash. Ресурсы Рабочий процесс Установка Использование Авторы Вклад Рабочий процесс Установка Запустите скрипт установки: root@kitploit: curl -s...

CVE-2023-20052

CVE-2023-20052 CVE-2023-20052, уязвимость утечки информации в парсере DMG-файлов ClamAV Использование Для создания вредоносного DMG-файла root@kitploit: git clone https://github.com/nokn0wthing/CVE-2023-20052.git cd CVE-2023-20052 sudo docker build -t cve-2023-20052 . sudo docker run -v...

Invoke-HiveNightmare

Invoke-HiveNightmare PoC на основе PowerShell для CVE-2021-36934, который позволяет обычному пользователю извлекать кусты реестра SAM, Security и Software в Windows 10 версии 1809 или новее. Ситуация В отдельных версиях Windows 10 обычные пользователи имеют права на чтение/исполнение для файлов в...

CVE-2024-32113

CVE-2024-32113 Пакетное сканирование Apache OFBIZ Внимание: Этот инструмент не предназначен для поддержки незаконных атак. Он предназначен только для технического обмена. Примечание: Этот инструмент не поддерживает незаконные атаки. Предназначен исключительно для технического обмена...

usbsas

usbsas is a free and open source GPLv3 tool and framework for securely reading untrusted USB mass storage devices. Overview Following the concept of defense in depth and the principle of least privilege, usbsas's goal is to reduce the attack surface of the USB stack. To achieve this, most of the...

xiaomi15-dada-cve-2026-64560

Xiaomi 15 dada CVE-2026-64560 NebuSec CVE-2026-64560 Android 개념 증명을 특정 Xiaomi 15 빌드 하나에 맞게 조정한 디바이스별 버전입니다. ADB 셸 전용 헬퍼를 통해 현재 부팅에 대한 임시 루트 액세스를 제공합니다. !WARNING 이는 실험적인 커널 익스플로잇 코드입니다. 디바이스를 재부팅하거나 커널 상태를 손상시키거나 데이터 손실을 초래할 수 있습니다. 소유한 디바이스 또는 명시적으로 테스트 권한을 부여받은 디바이스에서만 사용하십시오. 먼저 중요한 데이터를 백업하십시오...

CVE-2024-45519-Zimbra-Real-Fix

CVE-2024-45519-Zimbra-Real-Fix Zimbra CVE-2024-45519 실제 수정 - 공식 패치는 불완전합니다 CVE-2024-45519 - Zimbra 실제 수정 ⚠️ 경고 CVE-2024-45519는 Zimbra Collaboration Suite의 치명적인 RCE 취약점CVSS 9.8입니다. 많은 관리자가 공식 패치를 적용한 후에도 보호되지 않는다고 생각합니다. 이 문서는 실제 상황을 명확히 설명합니다. 취약점 CVE-2024-45519는 포트 10027의 postjournal 서비스를 통해 인증되지...

ida_kernelcache

idakernelcache: инструментарий IDA для анализа kernelcache iOS idakernelcache — это модуль IDAPython для IDA Pro, упрощающий работу с kernelcache iOS. Модуль предоставляет функции для: Преобразования новых статических тегированных указателей iOS 12 в обычные указатели ядра. Разбора сегмента...

ida_kernelcache

idakernelcache: An IDA Toolkit for analyzing iOS kernelcaches idakernelcache is an IDAPython module for IDA Pro to make working with iOS kernelcaches easier. The module provides functions to: Convert iOS 12's new static tagged pointers into normal kernel pointers. Parse the kernel's PRELINKINFO...

Inspeckage

Inspeckage - Инспектор Android-пакетов Inspeckage — это инструмент, разработанный для динамического анализа Android-приложений. Применяя хуки к функциям Android API, Inspeckage поможет вам понять, что Android-приложение делает во время выполнения. http://ac-pm.github.io/Inspeckage...