injectAmsiBypass

Cobalt Strike BOF - Inietta bypass AMSI Cobalt Strike Beacon Object File BOF che bypassa AMSI in un processo remoto con code injection. Esecuzione di inject-amsiBypass BOF da CobaltStrike Cosa fa? 1. Usa l'argomento PID fornito per ottenere un handle sul processo remoto root@kitploit: hProc =...

ssh-auditor

SSH Auditor Features ssh-auditor will automatically: Re-check all known hosts as new credentials are added. It will only check the new credentials. Queue a full credential scan on any new host discovered. Queue a full credential scan on any known host whose ssh version or key fingerprint changes...

Grafana-CVE-2021-43798

CVE-2021-43798 Vulnerabilità di lettura arbitraria di file non autorizzata in Grafana 8.3.1 2021-12-07 Sicurezza: Risolve CVE-2021-43798. Per maggiori informazioni, consulta il nostro blog...

cariddi

Take a list of domains, crawl urls and scan for endpoints, secrets, api keys, file extensions, tokens and more Coded with 💙 by edoardottt Share on Twitter! Install • Usage • Get Started • Changelog • Contributing • License Installation 📡 Homebrew root@kitploit: brew install cariddi Snap...

VulnLab

VulnLab Ein Web-Schwachstellenlabor-Projekt, entwickelt von Yavuzlar. Logo Schwachstellen SQL-Injection Cross-Site-Scripting XSS Befehlseinschleusung Unsichere direkte Objektreferenzen IDOR Cross-Site-Request-Forgery CSRF XML-External-Entity XXE Unsichere Deserialisierung Dateiupload...

MANSPIDER

MANSPIDER Esplora le condivisioni SMB per informazioni interessanti. Ricerca nel contenuto dei file + regex supportata! Novità in v2.0 Manspider 2.0 è arrivato! Porta miglioramenti significativi: Estrazione del testo nuova e migliorata basata su Kreuzberg - ora supporta PDF, DOCX, XLSX, PPTX,...

LFISuite

LFI Suite O que é LFI Suite? LFI Suite é uma ferramenta totalmente automática capaz de escanear e explorar vulnerabilidades de Inclusão de Arquivo Local usando muitos métodos diferentes de ataque, listados na seção Recursos. Recursos Funciona com Windows, Linux e OS X Configuração Automática...

httpstat

httpstat httpstat visualizza le statistiche di curl1 in modo bello e chiaro. È uno script Python a file unico🌟 che non ha dipendenze👏 ed è compatibile con Python 3🍻. Caratteristiche Bell'output nel terminale — suddivisione dei tempi di DNS, TCP, TLS, elaborazione del server e trasferimento del...

CVE-2026-63179

Winter CMS (a Laravel-based PHP content management system) versions up to and including 1.2.12 allow authenticated backend users to disclose arbitrary files readable by the PHP process. The root cause is that the LESS parser (via the wikimedia/less.php integration in Winter Storm) was instantiate...

CVE-2026-63179 Winter: Local File Inclusion through @import directives in LESS compilation of backend customizable stylesheets and theme assets

Winter CMS is a content management system built on the Laravel PHP framework. In versions up to and including 1.2.12, authenticated backend users can disclose arbitrary files readable by the PHP process by injecting @import inline directives into LESS source that the backend compiles, because the...

CVE-2016-5195

Descrizione: dcow è un possibile exploit della vulnerabilità CVE-2016-5195. Eseguendo il programma come utente non privilegiato su un sistema vulnerabile, modificherà il file /etc/passwd, imponendo la password "dirtyCowFun" SHA-512, ma potrebbe essere modificata per standard più vecchi. In caso d...

angryFuzzer

AngryFuzz3r Status: Entwicklung Über das AngryFuzz3r-Projekt AngryFuzz3r ist eine Sammlung von Tools für Pentesting, um Informationen zu sammeln und Schwachstellen der Ziele basierend auf dem Fuzzedb-Projekt https://github.com/fuzzdb-project/fuzzdb zu entdecken. UrlFuzz3r-AngryFuzz3r1 Entdecken S...

SMBetray

SMBetray Version 1.0.0. This tool is a PoC to demonstrate the ability of an attacker to intercept and modify insecure SMB connections, as well as compromise some secured SMB connections if credentials are known. Background Released at Defcon26 at "SMBetray - Backdooring and Breaking Signatures" I...

PELoader

PELoader PELoader implementa varie tecniche di iniezione di shellcode e utilizza la libreria libpeconv per caricare file PE crittografati invece di iniettare shellcode in un thread remoto. Sono state implementate le seguenti tecniche: Module Stomping LoadLibrary Module Stomping NtMapViewOfSection...

log4j-detector

Log4j-detector Scanner che rileva versioni vulnerabili di Log4J per aiutare i team a valutare la loro esposizione a CVE-2021-44228 CRITICA, CVE-2021-45046, CVE-2021-45105 e CVE-2021-44832. Può cercare istanze di Log4J esaminando attentamente l'intero file-system, incluse tutte le applicazioni...

reko

reko - a general purpose decompiler. Reko Swedish: "decent, obliging" is a decompiler for machine code binaries. This project is freely available under the GNU General Public License. The project consists of front ends, core decompiler engine, and back ends to help it achieve its goals. A...

malicious-pdf

Malicious PDF Generator ☠️ Generate 67 malicious PDF test files for testing phone-home callbacks, SSRF, XSS, XXE, NTLM credential theft, and data exfiltration in PDF viewers, converters, and web applications. Can be used with Burp Collaborator or Interact.sh Used for penetration testing, bug bount...

HaE

Potenzia l'hacker etico per operazioni efficienti. Versione Network: overspace-labs/HaENet Versione File: overspace-labs/HaEFile Versione README: English | 简体中文 Introduzione al Progetto...

Koh

Koh Koh एक C और बीकन ऑब्जेक्ट फ़ाइल BOF टूलसेट है जो जानबूझकर टोकन/लॉगऑन सत्र रिसाव के माध्यम से उपयोगकर्ता क्रेडेंशियल सामग्री को कैप्चर करने की अनुमति देता है। कुछ कोड एलाड शमीर के इंटरनल-मोनोलॉग प्रोजेक्ट कोई लाइसेंस नहीं के साथ-साथ KB180548 से प्रेरित था। यह संभव क्यों है और Koh का दृष्टिकोण...

pcileech

PCILeech Summary: PCILeech uses PCIe hardware devices to read and write target system memory. This is achieved by using DMA over PCIe. No drivers are needed on the target system. PCILeech also works without hardware together with a wide range of software memory acqusition methods supported by the...