gokart

GoKart - Análise Estática de Segurança em Go O GoKart é uma ferramenta de análise estática para Go que encontra vulnerabilidades usando a forma SSA atribuição estática única do código fonte Go. Ela é capaz de rastrear a origem de variáveis e argumentos de funções para determinar se as fontes de...

gokart

GoKart - Go Security Static Analysis GoKart is a static analysis tool for Go that finds vulnerabilities using the SSA single static assignment form of Go source code. It is capable of tracing the source of variables and function arguments to determine whether input sources are safe, which reduces...

social-analyzer

Social Analyzer - API, CLI, and Web App for analyzing & finding a person's profile across +1000 social media \ websites. It includes different analysis and detection modules, and you can choose which modules to use during the investigation process. The detection modules utilize a rating mechanism...

santa

Santa !NOTE As of 2025, Santa is no longer maintained by Google. We encourage existing users to migrate to an actively maintained fork of Santa, such as https://github.com/northpolesec/santa. Santa is a binary and file access authorization system for macOS. It consists of a system extension that...

nosqlpot

NoSQL-Honeypot-Framework NoPo NoSQL-Honeypot-Framework NoPo is an open source honeypot for nosql databases that automates the process of detecting attackers,logging attack incidents. The simulation engines are deployed using the twisted framework.Currently the framework holds support for redis. N...

vhostawesome

FunWithVhosts Uma ferramenta projetada para verificar eficientemente hosts virtuais em múltiplos endereços IP. Descrição FunWithVhosts automatiza o processo de identificação de hosts virtuais em endereços IP fornecidos. O script verifica portas abertas, especificamente portas de servidores web, e...

findom-xss

FinDOM-XSS FinDOM-XSS is a tool that allows you to finding for possible and/ potential DOM based XSS vulnerability in a fast manner. Installation root@kitploit: $ git clone https://github.com/dwisiswant0/findom-xss.git --recurse-submodules Dependencies: LinkFinder Usage To run the tool on a targe...

dr_robot

root@kitploit: . . . . . . . : \ : \ : \ : . \ : / : . \ \ :| | | || || || : | || | \ | : | | | :| | . | || : \ | : \ | : || | | : | | | |. / | || |\ . / |/ . / | | :/ || || :/ :/ || : : : Copyright 2019 National Technology & Engineering Solutions of Sandia, LLC NTESS. Under the terms of...

dr_robot

. . . . . . . : \ : \ : \ : . \ : / : . \ :| | | || || || : | || | \ | : | | | :| | . | || : \ | : \ | : || | | : | | | |. / | | | |\ . / |/ ./ | | :/ | | || :/ :/ | | : : : Copyright 2019 National Technology & Engineering Solutions of Sandia, LLC NTESS. В соответствии с условиями Контракта...

HashCheck

PasswordHashCheck यह परियोजना लीक हुए पासवर्डों की खोज में सहायता करने का लक्ष्य रखती है, साथ ही k-अनामता विधि k-anonymity method का उपयोग करके उच्च स्तर की गोपनीयता बनाए रखती है। इसे प्राप्त करने के लिए, विभिन्न सेवाओं के API का उपयोग किया जाता है, जिसमें जाँचे जाने वाले पासवर्ड के हैश का केवल ए...

CVE-202122986-EXP

F5 BIG-IP 远程命令执行漏洞（CVE-2021-22986） Impact de la vulnérabilité F5 BIG-IP 16.x: 16.1.0.3 F5 BIG-IP 15.x: 15.1.0.4 F5 BIG-IP 14.x: 14.1.2.6 F5 BIG-IP 13.x: 13.1.3.4 F5 BIG-IP 12.x: 12.1.5.2 F5 BIG-IP 11.x: 11.6.5.2 fofa iconhash="-335242539" POC root@kitploit: POST /mgmt/tm/util/bash HTTP/1.1 Host:...

nebulousAD

⚠️ ملاحظة لمستخدمي NebulousAD اعتبارًا من 14 أبريل، لن تستضيف NuID بعد الآن واجهة برمجة تطبيقات NebulousAD التي يتواصل معها هذا الكود. كفريق صغير من المطورين، وجدنا أنه ليس من المجدي دعم ومراقبة وتطوير كل من بوابة NebulousAD وبوابة المطورين الخاصة بالمصادقة Developer Portal بشكل فعال. سيستمر الكود...

CVE-2022-44268

CVE-2022-44268 🧙‍♂️ CVE-2022-44268 ImageMagick मनमानी फ़ाइल पढ़ना - प्रूफ ऑफ कॉन्सेप्ट एक्सप्लॉइट वीडियो 📼 https://youtu.be/quKxwNAMBIA उपयोग 🛠 इमेज को जहरीला बनाएं ☣️ root@kitploit: python3 CVE-2022-44268.py --image imagetopoison.png --file-to-read /etc/hosts --output poisoned.png root@kitploit:...

Email-exploit-Moniker-Link-CVE-2024-21413-

ईमेल शोषण Moniker Link-CVE-2024-21413-Module — दस्तावेज़ीकरण अवलोकन: एक व्यावहारिक PoC जो HTML ईमेल में Moniker Link के उपयोग को प्रदर्शित करता है ताकि Outlook से SMB कनेक्शन ट्रिगर हो सके, जिससे Responder के माध्यम से पीड़ित के netNTLMv2 हैश को कैप्चर किया जा सके। यह पेनिट्रेशन टेस्टिंग,...

hikvision-unauthenticated-rce-cve-2021-36260

Vulnerabilidade RCE CVE-2021-36260 da Hikvision Descrição da vulnerabilidade Os atacantes podem usar esta vulnerabilidade para obter controle total do dispositivo com um shell root irrestrito, mesmo que o proprietário do dispositivo esteja limitado a um shell protegido limitado psh. Além de invad...

XSpear

XSpear XSpear هو ماسح ضوئي لـ XSS مبني على ruby gems !IMPORTANT مستودع XSpear مؤرشف تم أرشفة هذا المستودع وهو الآن للقراءة فقط. لم يعد XSpear قيد الصيانة النشطة. جرب Dalfox بدلاً من ذلك 🌙🦊 ماسح ضوئي XSS أسرع وأكثر قوة مع ميزات متقدمة. → https://github.com/hahwul/dalfox الميزات الرئيسية فحص XSS...

usbrip

usbrip inherited from "USB Ripper", not "USB R.I.P." is a simple forensics tool with command line interface that lets you keep track of USB device artifacts i.e., USB event history on Linux machines. Table of Contents: Description Quick Start Showcase System Log Structure Dependencies deb pip...

usbrip

usbrip herdado de "USB Ripper", não "USB R.I.P." é uma ferramenta forense simples com interface de linha de comando que permite rastrear artefatos de dispositivos USB ou seja, histórico de eventos USB em máquinas Linux. Índice: Descrição Início Rápido Demonstração Estrutura do Log do Sistema...

CVE-2023-27524-Apache-Superset-Auth-Bypass-and-RCE

CVE-2023-27524: Apache Superset - Bypass de Autenticação e RCE Apache Superset, uma ferramenta de código aberto amplamente utilizada para visualização e exploração de dados, foi identificada como tendo potenciais fragilidades de segurança que podem levar a bypass de autenticação e execução remota...

CVE-2024-53677

POC स्रोत https://y4tacker.github.io/2024/12/16/year/2024/12/Apache-Struts2-%E6%96%87%E4%BB%B6%E4%B8%8A%E4%BC%A0%E9%80%BB%E8%BE%91%E7%BB%95%E8%BF%87-CVE-2024-53677-S2-067/ RCE शर्तें 1. खतरनाक एक्सटेंशन पर कोई प्रतिबंध नहीं है 2. फ़ाइल अपलोड करते समय, फ़ाइल का नाम अपलोड पैरामीटर से लिया जाता है...