CVE-2024-23334-PoC

CVE‑2024‑23334 Path Traversal - PoC Criei este script para automatizar a exploração do CVE‑2024‑23334 na máquina Chemistry do Hack The Box. Esta vulnerabilidade afeta aiohttp versões ≥ 1.0.5 e 3.9.2 quando a aplicação está configurada para servir arquivos estáticos com followsymlinks=True,...

everest-backup-cve-2025-11380

CVE-2025-11380 رمز إثبات المفهوم لـ CVE-2025-11380 - وصول غير مصرح به إلى النسخ الاحتياطي في إضافة Everest Backup لووردبريس. رابط منشور المدونة قريباً...

fix-CVE-2020-15228

Исправление CVE-2020-15228 set-env, add-path в Github-Actions Этот скрипт изменяет строки в вашем файле GitHub Actions. Вы передаёте ему имя каталога, и он ищет все файлы с расширениями ".sh" или ".yml". Он распознаёт следующие строки: root@kitploit: echo ::set-env name=FOOBAR::$FOOBAR echo...

POC-CVE-2025-24813

CVE-2025-24813 – Ambiente di Dimostrazione PoC Questo repository contiene una semplice applicazione costruita per osservare il comportamento di CVE-2025-24813, una vulnerabilità recente in Apache Tomcat relativa all'uso del DefaultServlet con scrittura abilitata readonly=false, che consente...

uac

Unix-like Artifacts Collector UAC About • Documentation • Main Features • Supported Operating Systems • Usage • Contributing • Support • License 🔎 About UAC UAC Unix-like Artifacts Collector is a powerful and extensible incident response tool designed for forensic investigators, security analysts...

warcannon

WARCannon - Elaborazione WARC parallela catastroficamente potente WARCannon è stato costruito per semplificare e rendere economico il processo di 'greping su internet'. Con WARCannon puoi: Costruire e testare pattern regex su veri dati Common Crawl Caricare facilmente dataset Common Crawl per...

snallygaster

snallygaster Finds file leaks and other security problems on HTTP servers. what? snallygaster is a tool that looks for files accessible on web servers that shouldn't be public and can pose a security risk. Typical examples include publicly accessible git repositories, backup files potentially...

snallygaster

snallygaster Encontra vazamentos de arquivos e outros problemas de segurança em servidores HTTP. o quê? snallygaster é uma ferramenta que procura por arquivos acessíveis em servidores web que não deveriam ser públicos e podem representar um risco de segurança. Exemplos típicos incluem repositório...

CVE-CVE-2025-25231

CVE-2025-25231 Nuclei Template تم كتابة هذا القالب لأداة Nuclei لاكتشاف الثغرة CVE-2025-25231 Path Traversal ثانوي في منتج Omnissa Workspace ONE UEM. شرح الثغرة CVE-2025-25231 هي ثغرة من نوع Path Traversal تسمح للمهاجم بالوصول إلى ملفات حساسة للقراءة فقط على الخادم عن طريق إرسال طلبات GET معدلة إ...

tcpflow

TCPFLOW 1.5.0 Downloads directory: http://digitalcorpora.org/downloads/tcpflow/ Installation Most common GNU/Linux distributions ship tcpflow in their repositories. So on Debian/Ubuntu/etc you can say root@kitploit: sudo apt-get install tcpflow and on Fedora/RedHat/CentOS/etc you can say...

pwnspoof

pwnSpoof from Punk Security generates realistic spoofed log files for common web servers with customisable attack scenarios. Every log bundle is unique and completely customisable, making it perfect for generating CTF scenarios and for training serials. Can you find the attacker session and build...

jsteg

jsteg root@kitploit: go get lukechampine.com/jsteg jsteg is a package for hiding data inside jpeg files, a technique known as steganography. This is accomplished by copying each bit of the data into the least-significant bits of the image. The amount of data that can be hidden depends on the...

pe_to_shellcode

petoshellcode Converts PE so that it can be then injected just like a normal shellcode. At the same time, the output file remains to be a valid PE. Supports both 32 and 64 bit PEs Authors:@hasherezade & @hh86 Objective The goal of this project is to provide a possibility to generate PE files that...

github-dorks

Github Dorks Github Search is a quite powerful and useful feature that can be used to search for sensitive data on repositories. Collection of Github dorks can reveal sensitive personal and/or organizational information such as private keys, credentials, authentication tokens, etc. This list is...

bfac

BFAC Erweitertes Testen von Backup-Datei-Artefakten für Webanwendungen BFAC Backup File Artifacts Checker ist ein automatisiertes Tool, das nach Backup-Artefakten sucht, die den Quellcode der Webanwendung offenlegen können. Die Artefakte können auch zur Offenlegung sensibler Informationen wie...

rehex

Reverse Engineers' Hex Editor A cross-platform Windows, Linux, macOS, BSD hex editor for reverse engineering, and everything else. An online copy of the manual can be accessed here: solemnwarning.net/rehex/manual/. Features Large 1TB+ file support Decoding of integer/floating point value types...

oletools

python-oletools oletools is a package of python tools to analyze Microsoft OLE2 files also called Structured Storage, Compound File Binary Format or Compound Document File Format, such as Microsoft Office 97-2003 documents, MSI files or Outlook messages, mainly for malware analysis, forensics and...

Manalyze

Manalyze Introduzione Manalyze è un tool di analisi statica per file PE che puoi utilizzare per condurre una valutazione primaria su un eseguibile o un insieme di eseguibili. Raccoglie segnali deboli che potrebbero indicare un comportamento malevolo e mostra informazioni che possono aiutare una...

SMBetray

SMBetray Version 1.0.0. This tool is a PoC to demonstrate the ability of an attacker to intercept and modify insecure SMB connections, as well as compromise some secured SMB connections if credentials are known. Background Released at Defcon26 at "SMBetray - Backdooring and Breaking Signatures" I...

osv.dev

Documentazione La documentazione completa è disponibile qui. La documentazione delle API è disponibile qui. Dump dei dati Sono disponibili dump dei dati da un bucket GCS all'indirizzo gs://osv-vulnerabilities. Per maggiori informazioni, consulta la nostra documentazione. Visualizzare l'interfacci...