rdpscan-BlueKeep

rdpscan para la vulnerabilidad CVE-2019-0708 bluekeep Este es un escáner rápido y sucio para la vulnerabilidad CVE-2019-0708 en Microsoft Remote Desktop. Ahora mismo, hay alrededor de 900.000 máquinas en Internet público vulnerables a esta vulnerabilidad, por lo que muchos esperan que pronto...

CVE-2026-46331-pedit-cow

CVE-2026-46331-pedit-cow Write-up and exploitation steps for the pedit COW vulnerability CVE-2026-46331. Overview This challenge demonstrates pedit COW, a Linux kernel flaw in the traffic-control subsystem's packet-editing action actpedit. The vulnerability allows an unprivileged user to overwrit...

CVE-2024-7627

Exploit for CVE-2024-7627 — Bit File Manager WordPress Unauthenticated RCE Exploit 📌 Description This repository contains a proof-of-concept PoC exploit for CVE-2024-7627 , a critical Unauthenticated Remote Code Execution RCE vulnerability in the Bit File Manager WordPress plugin versions 6.0 –...

CVE-2022-0439

CVE-2022-0439 CVE-2022-0439 - Email Subscribers & Newsletters 5.3.2 - Inyección SQL ciega de Subscriber+ Requisitos sqlmap instalado y un nombre de usuario y contraseña válidos con subscriber+ Uso root@kitploit: usage: CVE-2022-0439.py -h -w URL -u USERNAME -p PASSWORD options: -h, --help show th...

redis-checker

redis-checker Detecta servidores Redis expuestos root@kitploit: usage: redis-checker.py -h -u URL -f FILE -p PROXY -P PORT -s SSL options: -h, --help show this help message and exit -u URL, --url URL URL to test -f FILE, --file FILE File of urls -p PROXY, --proxy PROXY Proxy for debugging -P PORT...

how-to-check-patch-secure-log4j-CVE-2021-44228

How-to-check-log4j-CVE-2021-44228 What is log4j ? LOG4J is a open-source Java-based Apache Software used for logging services. What is log4j Vulnerability CVE-2021-44228 ? The Log4j vulnerability allows remote code execution by simply typing a specific string into a textbox , works on every progr...

WP-Ateck

WP-Ateck With this program you can penetrate WordPress sites. What is a CMS? A content management system CMS manages the creation and modification of digital content. It typically supports multiple users in a collaborative environment. Some noteable examples are: WordPress, Joomla, Drupal etc...

CVE-2021-3456

CVE-2021-3456 Una cadena práctica que comienza con un archivo PDF inocuo y termina en una shell inversa en una instancia EC2 de AWS El Comienzo: Creando un Payload PDF Todo comienza en el frente del ataque. Usando el objeto WScript integrado de PowerShell, incrustamos un script dentro de un PDF q...

rails-rce-cve-2016-0752

Explotando CVE-2016-0752 Esta aplicación sirve como una Prueba de Concepto vulnerable para explotar CVE-2016-0752. Para más información, consulta esta entrada de blog, que explica la vulnerabilidad, los pasos necesarios para explotarla, la solución y un enlace a un módulo de metasploit. Empezando...

CVE-2026-13001

CVE-2026-13001 Podlove Podcast Publisher CVSS 9.8 Critical | Unauthenticated Arbitrary File Upload leading to Remote Code Execution Overview Critical vulnerability in the Podlove Podcast Publisher WordPress plugin versions up to and including 4.5.1 that allows unauthenticated attackers to upload...

hontel

HonTel HonTel is a Honeypot for Telnet service. Basically, it is a Python v2.x application emulating the service inside the chroot environment. Originally it has been designed to be run inside the Ubuntu/Debian environment, though it could be easily adapted to run inside any Linux environment...

applepie

applepie, a hypervisor implementation for Bochs Hello! Welcome to applepie! This is a tool designed for fuzzing, introspection, and finding bugs! This is a hypervisor using the Windows Hypervisor Platform API present in recent versions of Windows specifically this was developed and tested on...

Karkinos

Disclaimer This is an OLD project I did in university... all code was improvised as I progressed, and hardly anything was planned. This tool should be used on applications/networks that you have permission to attack only. Any misuse or damage caused will be solely the users’ responsibility. What ...

spiderfoot

SpiderFoot es una herramienta de automatización de inteligencia de código abierto OSINT. Se integra con casi todas las fuentes de datos disponibles y utiliza una variedad de métodos para el análisis de datos, facilitando la navegación de esos datos. SpiderFoot tiene un servidor web integrado para...

spiderfoot

SpiderFoot is an open source intelligence OSINT automation tool. It integrates with just about every data source available and utilises a range of methods for data analysis, making that data easy to navigate. SpiderFoot has an embedded web-server for providing a clean and intuitive web-based...

xeca

xeca xeca is a project that creates encrypted PowerShell payloads for offensive purposes. Creating position independent shellcode from DLL files is also possible. Note: Please place your custom AMSI bypass in src/assets/amsi-bypass.ps1. Table of Contents xeca Install How It Works Mitigations...

reverse-engineering

Reverse Engineering resources A curated list of awesome reversing resources Awesome Reversing Books Courses Practice Hex Editors Binary Format Disassemblers Binary Analysis Bytecode Analysis Import Reconstruction Dynamic Analysis Debugging Mac Decrypt Document Analysis Scripting Android Yara Book...

debianopenssl

debianopenssl Private keys vulnerable to Debian OpenSSL bug CVE-2008-0166 In 2008 a bug in Debian's and Ubuntu's OpenSSL package led to predictable private keys. While the number of keys is limited, it takes a few considerations to create a proper list of all plausibly affected keys. This...

ATMMalScan

Introduction ATMMalScan is a commandline tool for Windows operating systems version 7 and higher, which helps to search for malware traces on an ATM during the DFIR process. This tool examines the running processes of a system, as well as the hard disk, depending on the specified file path. To sc...

CVE-2024-34470

CVE-2024-34470 Description: An Unauthenticated user can abuse Path Traversal vulnerability exists in the /public/loader.php file. The path parameter does not properly filter whether the file and directory passed are part of the webroot, allowing an attacker to read arbitrary files on the server...