2115222 matches found
ssh3
!NOTE SSH3 is probably going to change its name. It is still the SSH Connection Protocol RFC4254 running on top of HTTP/3 Extended connect, but the required changes are heavy and too distant from the philosophy of popular SSH implementations to be considered for integration. The specification dra...
sitedorks
Want to get the latest updates? Be sure to тнР this repo! тнР Now also available, Sitedorks Web тнР About SiteDorks Search Google, Bing, Brave, Ecosia, Yahoo or Yandex for a search term with several websites. A default list is already provided, which contains Moltbook, Grok, Github, Gitlab, Surveymonke...
CVE-2025-68937
CVE-2025-68937 - Gitea/Forgejo Template Symlink RCE Automated proof-of-concept for CVE-2025-68937 : directory traversal via symlink dereferencing in Gitea and Forgejo template repository processing, leading to remote code execution. Any authenticated user no admin required can obtain a shell as t...
CVE-2025-55182-Exploit-extension
RSC Fingerprint Detector A Chrome extension for detecting React Server Components RSC and Next.js App Router fingerprints on web pages. тЪая╕П Important Notice This extension is intended for educational and security research purposes only. It includes functionality that may be used to test for...
makin
I create makin to make initial malware assessment little bit easier for me, I think it's useful for others as well, It helps to reveal a debugger detection techniques used by a sample. Any feedback is greatly appreciated: @qazqaz How does it work? makin opens a sample as a debuggee and injects...
advisory-database
┘В╪з╪╣╪п╪й ╪и┘К╪з┘Ж╪з╪к ┘Ж╪╡╪з╪ж╪н ╪з┘Д╪г┘Е╪з┘Ж ┘Д╪к╪║┘Д┘К┘Б ╪и╪з┘К╪л┘И┘Ж ┘З╪░┘З ┘Е╪│╪к┘И╪п╪╣ ┘Е┘Е┘Д┘И┘Г ┘Д┘Д┘Е╪м╪к┘Е╪╣ ┘К╪н╪к┘И┘К ╪╣┘Д┘Й ┘Ж╪╡╪з╪ж╪н ╪г┘Е╪з┘Ж ┘Д┘Д╪н╪▓┘Е ╪з┘Д┘Е┘Ж╪┤┘И╪▒╪й ╪╣┘Д┘Й https://pypi.org. ╪к┘И╪м╪п ╪з┘Д┘Ж╪╡╪з╪ж╪н ┘Б┘К ╪п┘Д┘К┘Д vulns ┘И╪к╪│╪к╪о╪п┘Е ╪к╪▒┘Е┘К╪▓ YAML ╪и╪к┘Ж╪│┘К┘В ╪и╪│┘К╪╖. ╪з┘Д┘Е╪│╪з┘З┘Е╪й ╪и╪з┘Д┘Ж╪╡╪з╪ж╪н ╪е┘Ж╪┤╪з╪б ╪╖┘Д╪и ╪│╪н╪и ┘К┘Е┘Г┘Ж ╪к╪╣╪п┘К┘Д ╪з┘Д╪е╪п╪о╪з┘Д╪з╪к ╪з┘Д┘Е┘И╪м┘И╪п╪й ╪и╪и╪│╪з╪╖╪й ╪╣┘Ж ╪╖╪▒┘К┘В ╪е┘Ж╪┤╪з╪б ╪╖┘Д╪и ╪│╪н╪и. ┘Д╪е╪п╪о╪з┘Д ╪е╪п╪о╪з┘Д ╪м╪п┘К╪п╪М ╪г┘Ж╪┤╪ж...
CVE-2024-21546
CVE-2024-21546 Python Exploit ЁЯФе Description This Python exploit script targets a vulnerable Laravel Filemanager created by UniSharp , which allows authenticated users to bypass file restrictions and upload malicious files. This can lead to Remote Code Execution RCE when the uploaded payload is...
twitter-intelligence
Twitter Intelligence A project written in Python for twitter tracking and analysis without using Twitter API. Prerequisites This project is a Python 3.x application. The package dependencies are in the file requirements.txt. Run that command to install the dependencies. root@kitploit: pip3 instal...
WAF_buster
WAFbuster Disrupt WAF by abusing SSL/TLS Ciphers About WAFbuster This tool was created to Analyze the ciphers that are supported by the Web application firewall being used at the web server end.Reference:https://0x09al.github.io/waf/bypass/ssl/2018/07/02/web-application-firewall-bypass.html.It...
DraculaOS
Kali Linux based OVA file for OSINT investigations and Cyber Intelligence. DOWNLOAD The download link for the DRACULA Os OVA can be found at the following link. The DraculaOs OVA download file is 8 GB in size. https://easyupload.io/o1y3jt...
RAU_crypto
RAUcrypto Combined exploit for Telerik UI for ASP.NET AJAX. File upload for CVE-2017-11317 and CVE-2017-11357 - will automatically upload the file .NET deserialisation for CVE-2019-18935 Now supports testing for the target's ability to pull in remote payloads from an attacker-hosted SMB service...
dfirtriage
dfirtriage Windows-рдЖрдзрд╛рд░рд┐рдд рдШрдЯрдирд╛ рдкреНрд░рддрд┐рдХреНрд░рд┐рдпрд╛ рдХреЗ рд▓рд┐рдП рдбрд┐рдЬрд┐рдЯрд▓ рдлреЛрд░реЗрдВрд╕рд┐рдХ рдЕрдзрд┐рдЧреНрд░рд╣рдг рдЙрдкрдХрд░рдгред рдЙрдкрдпреЛрдЧ рдХреИрд╕реЗ рдХрд░реЗрдВ рдЪрд▓рд╛рдиреЗ рдХреЗ рд▓рд┐рдП, рд▓рдХреНрд╖реНрдп рдпрд╛ рдХрдиреЗрдХреНрдЯреЗрдб USB рдбреНрд░рд╛рдЗрд╡ рдкрд░ dfirtriage.exe рдбрд╛рд▓реЗрдВ рдФрд░ рд╡реНрдпрд╡рд╕реНрдерд╛рдкрдХ рдЕрдзрд┐рдХрд╛рд░реЛрдВ рдХреЗ рд╕рд╛рде рдирд┐рд╖реНрдкрд╛рджрд┐рдд рдХрд░реЗрдВ, рд╕рд╣рд╛рдпрддрд╛ рдХреЗ рд▓рд┐рдП -hред DFIRTriage v6.0 рдЙрдкрдпреЛрдЧрдХрд░реНрддрд╛ рдореИрдиреБрдЕрд▓ рд╡рд┐рд╡рд░рдг рдпрд╣ рджрд╕реНрддрд╛рд╡реЗрдЬрд╝ DFIRtriage рдЙрдкрдХ...
dfirtriage
dfirtriage Digital forensic acquisition tool for Windows-based incident response. How to Use To run, drop dfirtriage.exe on the target or connected USB drive and execute with admin rights, -h for help. DFIRTriage v6.0 User's Manual Description This document outlines the functionality and proper u...
androidqf
androidqf androidqf Android Quick Forensics is a portable tool to simplify the acquisition of relevant forensic data from Android devices. androidqf is intended to provide a simple and portable cross-platform utility to quickly acquire data from Android devices. It is similar in functionality to...
fake-sms
Fake-SMS A simple command line tool using which you can skip phone number based SMS verification by using a temporary phone number that acts like a proxy. Latest update : The tool no longer uses upmasked.com, as the service went down. We are using another provider which provides more phone number...
beelzebub
Beelzebub Deception Runtime Framework Beelzebub is an open-source deception runtime that deploys adaptive, LLM-powered decoy services across SSH, HTTP, TCP, TELNET, and MCP protocols. It goes beyond passive honeypots by actively engaging attackers in realistic interactions, collecting high-fideli...
bbscope
bbscope.com Web interface and API for aggregating bug bounty program scopes from HackerOne, Bugcrowd, Intigriti, and YesWeHack. Quick start Docker root@kitploit: cd website cp .env.example .env Edit .env тАФ at minimum set POSTGRESPASSWORD and your platform credentials docker compose up -d --build...
ProxyBroker
ProxyBroker .. image:: https://img.shields.io/pypi/v/proxybroker.svg?style=flat-square :target: https://pypi.python.org/pypi/proxybroker/ .. image:: https://img.shields.io/travis/constverum/ProxyBroker.svg?style=flat-square :target: https://travis-ci.org/constverum/ProxyBroker .. image::...
opencve
What is OpenCVE? OpenCVE is a Vulnerability Intelligence Platform that helps you monitor and manage CVEs efficiently. It aggregates vulnerabilities from multiple sources MITRE, NVD, RedHat, Vulnrichment... and lets you filter, track, and organize them by vendor, product, severity, and more. You c...
CVE-2024-27630
CVE-2024тАУ27630 Vulnerability Details Overview In Savane v3.12 and prior, a lack of validation on the fileid parameter when deleting a file from /bugs/index.php leads to an Insecure Direct Object Reference IDOR vulnerability that can cause an authenticated administrator of a group with a bug track...