PassMute

PassMute - Инструмент для трансмутации/мутации паролей Это инструмент командной строки, написанный на Python, который применяет одно или несколько правил трансмутации к заданному паролю или списку паролей, прочитанных из одного или нескольких файлов. Инструмент может использоваться для генерации...

a2sv

1. A2SVとは？ SSL脆弱性の自動スキャン。 HeartBleed、CCSインジェクション、SSLv3 POODLE、FREAK... など A. サポート脆弱性 root@kitploit: - CVE-2007-1858 Anonymous Cipher - CVE-2012-4929 CRIMESPDY - CVE-2014-0160 CCS Injection - CVE-2014-0224 HeartBleed - CVE-2014-3566 SSLv3 POODLE - CVE-2015-0204 FREAK Attack - CVE-2015-4000 LOGJAM...

a2sv

1. A2SV? Auto Scanning to SSL Vulnerability. HeartBleed, CCS Injection, SSLv3 POODLE, FREAK... etc A. Support Vulnerability root@kitploit: - CVE-2007-1858 Anonymous Cipher - CVE-2012-4929 CRIMESPDY - CVE-2014-0160 CCS Injection - CVE-2014-0224 HeartBleed - CVE-2014-3566 SSLv3 POODLE -...

CVE-2019-5418-Scanner

CVE-2019-5418-Scanner 멀티스레드 Golang 스캐너로, CVE-2019-5418에 취약한 Ruby 엔드포인트를 식별합니다. 사용법 root@kitploit: Usage of ./CVE-2019-5418-Scanner: -auth string Perform a scan using a auth token i.e Basic YmFzZTY0VG9rZW5WYWx1ZQ== default "nope" -http Use HTTP over HTTPS -insecure Ignore SSL/TLS Errors -log Log...

droid-hunter

root@kitploit: .---. .----------- / \ / ------ / / \ / ----- ╔╦╗╦═╗╔═╗╦╔╦╗ ╦ ╦╦ ╦╔╗╔╔╦╗╔═╗╦═╗ ////// ' / --- ║║╠╦╝║ ║║ ║║───╠═╣║ ║║║║ ║ ║╣ ╠╦╝ //// / // : : --- ═╩╝╩╚═╚═╝╩═╩╝ ╩ ╩╚═╝╝╚╝ ╩ ╚═╝╩╚═ // / / / '-- By HaHwul // //..\ www.hahwul.com ====UU====UU==== https://github.com/hahwul/droid-hunter...

droid-hunter

root@kitploit: .---. .----------- / \ / ------ / / \ / ----- ╔╦╗╦═╗╔═╗╦╔╦╗ ╦ ╦╦ ╦╔╗╔╔╦╗╔═╗╦═╗ ////// ' / --- ║║╠╦╝║ ║║ ║║───╠═╣║ ║║║║ ║ ║╣ ╠╦╝ //// / // : : --- ═╩╝╩╚═╚═╝╩═╩╝ ╩ ╩╚═╝╝╚╝ ╩ ╚═╝╩╚═ // / / / '-- By HaHwul // //..\ www.hahwul.com ====UU====UU==== https://github.com/hahwul/droid-hunter...

maltrail

Maltrail Maltrail is a network traffic detection system that identifies communication with known malicious infrastructure and reports selected traffic anomalies. It matches domains, URLs, IP addresses, IP:port pairs, and User-Agent values observed on the network against a set of indicators called...

raptor

Raptor is a web-based web-serivce + UI github centric source-vulnerability scanner i.e. it scans a repository with just the github repo url. You can setup webhooks to ensure automated scans every-time you commit or merge a pull request. The scan is done asynchonously and the results are available...

CVE-2021-22205

CVE-2021-22205 GitLab CE/EE Preauth RCE с использованием ExifTool Этот проект предназначен только для обучения, если чьи-то права были нарушены, пожалуйста, свяжитесь со мной, чтобы удалить проект, и последнееНЕ ИСПОЛЬЗУЙТЕ ЕГО НЕЗАКОННО. Если вы совершите незаконные действия при использовании...

dirtycow.cr

dirtycow CVE-2016-5195 익스플로잇 설치 릴리스 섹션으로 이동하거나 crystal 환경을 사용하세요. 사용법 root@kitploit: dirtycow --target /path/to/root/file --string "string to write" --offset...

rekall

Rekall discontinuation This project is no longer maintained. In December 2011, a new branch within the Volatility project was created to explore how to make the code base more modular, improve performance, and increase usability. This branch was later forked to become Rekall. The modularity allow...

CVE-2022-45771-Pwndoc-LFI-to-RCE

Pwndoc 로컬 파일 포함LFI을 통해 서버에서 Node.js 코드를 원격 실행RCE할 수 있는 취약점, @yuriisanin 발견 기능 --payload-file을 사용하여 서버 측에서 실행할 사용자 지정 Node.js 코드 익스플로잇 후 정리 요구 사항 PwnDoc 인스턴스의 관리자 계정 사용법 root@kitploit: $ ./CVE-2022-45771-Pwndoc-LFI-to-RCE.py -h CVE-2022-45771 Pwndoc-LFI-to-RCE v1.1 - by Remi GASCOU Podalirius usag...

Win-PortFwd

Win-PortFwd Скрипт PowerShell для настройки переадресации портов Windows с помощью встроенного клиента netsh Установка: git clone https://github.com/deepzec/Win-PortFwd.git Использование: .\win-portfwd.ps1 или powershell.exe -noprofile -executionpolicy bypass -file .\win-portfwd.ps1 Пример :...

klar

Klar Integration of Clair and Docker Registry supports both Clair API v1 and v3 Klar is a simple tool to analyze images stored in a private or public Docker registry for security vulnerabilities using Clair https://github.com/coreos/clair. Klar is designed to be used as an integration tool so it...

rtty_CVE-2025-56708-CVE-2025-56709

CVE-2025-56708&CVE-2025-56709 【CVE-2025-56709】savepath 버퍼 오버플로우 취약점 개요 rtty totalsize = ctx-remainsize = bufferpullu32beinfo; ment = findmountpointsavepath; if ment uint64t avail; if !strcmpment-mnttype, "ramfs" struct sysinfo si; if sysinfo&si logerr"download file fail: '%s'\n", strerrorerrno;...

CVE-2014-0816

CVE-2014-0816 이것은 CVE-2014-0816 JVNDB-2014-000026: Norman Security Suite에서 권한 상승 취약점에 대한 익스플로잇입니다. 이 익스플로잇은 ngs.sys / ngs64.sys의 IOCTL 핸들러 취약점을 이용하여 비관리자 권한에서 SYSTEM 권한으로 CMD.exe를 실행합니다. 사용법 root@kitploit: C:\Users\user\Desktop exploitngs.exe Exploit Norman General Security Driver ngs.sys /...

WhoDat

Проект WhoDat ПРИМЕЧАНИЕ: В ходе разработки PyDat 5 внутренние операции изменили направление, что привело к закрытию проекта PyDat. Хотя было проделано много работы для завершения возможностей PyDat 5, некоторые возможности остаются не полностью протестированными. Проект WhoDat представляет собой...

shadowd

Logo Shadow Daemon is a web application firewall that intercepts requests at the application level. This repository contains the main component of Shadow Daemon that handles the analysis and storage of requests. Documentation For the full documentation please refer to shadowd.zecure.org...

twint

TWINT - Twitter Intelligence Tool No authentication. No API. No limits. Twint is an advanced Twitter scraping tool written in Python that allows for scraping Tweets from Twitter profiles without using Twitter's API. Twint utilizes Twitter's search operators to let you scrape Tweets from specific...

qu1ckdr0p2

소개 HTTP 또는 HTTPS를 통해 페이로드 및 포스트 익스플로잇 바이너리를 빠르게 호스팅합니다. OSCP / PNPT 같은 시험 또는 HTB / 등 CTF에서 사용하도록 설계되었습니다. 풀 리퀘스트와 이슈 환영합니다. 모든 기여도 환영합니다. Qu1ckdr0p2에는 별칭 및 검색 기능이 함께 제공됩니다. 도구는 qu1ckdr0p2-tools 저장소에 있습니다. 기본적으로 --https 옵션 사용 시 자체 서명된 인증서를 생성하며, 웹서버 실행 시 tun0 인터페이스가 우선적으로 사용되고, 그렇지 않으면 eth0을 사용합니다...