2114750 matches found
Metadata-Attacker
Metadata-Attacker With this small suite of open source pentesting tools you're able to create an image .jpg, audio .mp3 or video .mp4 file containing your custom metadata or a set of cross-site scripting vectors to test any webservice against possible XSS vulnerabilities when displaying unfiltere...
mubeng
An incredibly fast proxy checker & IP rotator with ease. Contributing • What's new • Documentation • Report Issues Features Why mubeng? Installation Binary Docker Source Usage Basic Options Notes Install SSL Certificate Examples Proxy checker Proxy IP rotator Burp Suite Upstream Proxy OWASP ZAP...
CVE-2024-6387-Vulnerability-Checker
CVE-2024-6387 Vulnerability Checker Overview This Python script is designed to check SSH servers for the CVE-2024-6387 vulnerability, specifically targeting the recently discovered regreSSHion , which is associated with specific versions of OpenSSH. The tool supports multiple IP addresses, URLs,...
ibombshell
ibombshell - Dynamic Remote Shell root@kitploit: ,--.!, / -- / / / // / / / / ,d08b. '| / / / / / \ / / / / / 0088MM / / // / // / / / / / / // // / / / / / / / 9MMP' ///// // //./// ///// + Starting the console... Console ready! ibombshell is a tool written in Powershell that allows you to...
RTA
Red Team Automation RTA RTA provides a framework of scripts designed to allow blue teams to test their detection capabilities against malicious tradecraft, modeled after MITRE ATT&CK. RTA is composed of python scripts that generate evidence of over 50 different ATT&CK tactics, as well as a compil...
thc-hydra
H Y D R A root@kitploit: c 2001-2023 by van Hauser / THC https://github.com/vanhauser-thc/thc-hydra Many modules were written by David dot Maciejak @ gmail dot com BFG code by Jan Dlabal Licensed under AGPLv3 see LICENSE file Please do not use in military or secret service organizations, or for...
thc-hydra
H Y D R A root@kitploit: c 2001-2023 by van Hauser / THC https://github.com/vanhauser-thc/thc-hydra Many modules were written by David dot Maciejak @ gmail dot com BFG code by Jan Dlabal Licensed under AGPLv3 see LICENSE file 軍事機関や秘密情報機関、または違法な目的で使用しないでください。...
CVE-2018-16341
CVE-2018-16341 Nuxeo Authentication Bypass Remote Code Execution 10.3 using a SSTI - CVE-2018-16341 Detailed analysis not english : https://www.freebuf.com/vuls/193000.html https://blog.riskivy.com/nuxeo-rce-analysis-cve-2018-16341/ Security Advisory :...
Moxy
Moxy Moxy Next-Gen Man in the middle proxy Open-source DAST tool for pentesting powered by agentic AI capabilities Supporting Ollama. Built on top of browser-use, Moxy streamlines dynamic application security testing. 🚀 INSANELY EASY TO USE And it's free, who doesn't like free stuff? Preview Aler...
android-app
ProtonVPN Android 版 版权所有 c 2019 Proton AG 下载 !在 GitHub 获取https://assets.kitploit.com/production/public/readmes/50914/e73aa9f910b0d8c3484bda6ecf61bb21d05d928d646a676d8ec96cf26268cc8f/3d54d459ee...
f5_scanner
f5scanner F5 mass scanner and CVE-2020-5902 checker This tool is mass scanner with 30 threads hardcoded use with caution How to setup root@kitploit: $ python3 -m venv venv $ source venv/bin/activate $ python3 -m pip install -r requirements.txt How to run Single IP python3 f5scanner.py --ip...
teampcp-supply-chain-attack
TeamPCP 供应链攻击：技术分析与检测指南 CVE-2026-33634 （CVSS 9.4）——2026 年迄今影响最大的 CI/CD 供应链攻击。 2026 年 3 月 19 日至 25 日期间，威胁行为者 TeamPCP （也被追踪为 DeadCatx3、PCPcat、ShellForce、CanisterWorm）在五个生态系统中实施了一次级联供应链入侵：GitHub Actions、Docker Hub、OpenVSX、npm 和 PyPI。该活动始于一个未完全轮换的 GitHub PAT，随后蔓延至两家主要开源安全厂商（Aqua Security 和...
In-Spectre-Meltdown
In-Spectre-Meltdown This tool allows to check speculative execution side-channel attacks that affect many modern processors and operating systems designs. CVE-2017-5754 Meltdown and CVE-2017-5715 Spectre allows unprivileged processes to steal secrets from privileged processes. These attacks prese...
CVE-2019-0708-scan
Microsoft 3389 Remote Vulnerability CVE-2019-0708 Mass Detection Tool 0x001 Detection on Windows root@kitploit: https://github.com/robertdavidgraham/rdpscan C:\Users\K8team\Desktop\rdpscan-master\vs10\Release 的目录 2019/06/02 02:11 . 2019/06/02 02:11 .. 2019/06/02 01:55 2,582,016 libcrypto-11.dll...
CVE-2024-44258
CVE-2024-44258: Symlink Vulnerability in ManagedConfiguration Framework Summary CVE-2024-44258 highlights a symlink vulnerability within the ManagedConfiguration framework and the profiled daemon in Apple devices. When restoring a crafted backup, the migration process fails to validate whether th...
CVE-2022-24990
CVE-2022-24990 CVE-2022-24990 Information Disclosure + RCE All-in-One This PoC writes a file to the target, here it writes phpinfo. If you need other functionality, modify it yourself. Do not use for illegal purposes...
WhiteBeam
Transparent endpoint security Features Block and detect advanced attacks Modern audited cryptography: RustCrypto for hashing and encryption Highly compatible: Development focused on all platforms incl. legacy and architectures Source available: Audits welcome Reviewed by security researchers with...
RelayKing-Depth
RelayKing v1.10 Dominate the domain. Relay to royalty. RelayKing is a comprehensive relay detection and enumeration tool designed to identify relay attack opportunities in Active Directory environments. Actual reporting options. Comprehensive attack coverage. Find the hidden relay vectors and...
UACME
UACMe Defeating Windows User Account Control by abusing built-in Windows AutoElevate backdoor. This project demonstrates various UAC bypass techniques and serves as an educational resource for understanding Windows security mechanisms. ⚠️ Warning : This tool demonstrates security vulnerabilities...
