secbench-dvwa

DAMN VULNERABLE WEB APPLICATION Damn Vulnerable Web Applicati...

Ares

Ares Ares is a Python Remote Access Tool. Warning: Only use this software according to your current legislation. Misuse of this software can raise legal and ethical issues which I don't support nor can be held responsible for. Ares is made of two main programs: A Command aNd Control server, which...

teler-waf

teler-waf teler-waf is a comprehensive security solution for Go-based web applications. It acts as an HTTP middleware, providing an easy-to-use interface for integrating IDS functionality with teler IDS into existing Go applications. By using teler-waf, you can help protect against a variety of...

cve-2025-13486-vuln-setup

CVE-2025-13486 कमजोर परीक्षण वातावरण ACF Extended RCE कमजोरी के परीक्षण के लिए एक-बार Docker सेटअप। त्वरित आरंभ root@kitploit: 1. प्लगइन्स डाउनलोड करें एक बार चलाएं ./download-plugins.sh 2. वातावरण शुरू करें docker-compose up -d --build 3. सेटअप के लिए 30 सेकंड प्रतीक्षा करें, फिर परीक्षण करें...

CVE-2024-46278-teedy_1.11_account-takeover

【CVE-2024-46278】teedy1.11account-takeover 【Teedy 1.11】account takeover via XSS Detail There is a vulnerability that causes XSS when downloading files. XSS vulnerability could allow a Teedy administrator to rob an account with a few clicks. This vulnerability is marked as CVE-2024-46278:...

ironclaw ironclaw-v1.4.0

IronClaw Your secure personal AI assistant, always on your side English | 简体中文 | Русский | 日本語 | 한국어 Reborn Quick Start • Philosophy • Features • Installation • Configuration • Security • Architecture IronClaw Reborn Quick Start IronClaw Reborn is the standalone runtime on the reborn-integration...

LKWA

LKWA Lesser Known Web Attack Lab is for intermediate pentester that can test and practice lesser known web attacks such as Object Injection, XSSI, PHAR Deserialization, variables variable ..etc. Write-ups are welcome. My own walk-through is here . Installation - Local Just clone the git with git...

CVE-2021-37833

CVE 2021-37833 Hotel Druid 3.0.2 रिफ्लेक्टेड क्रॉस-साइट स्क्रिप्टिंग भेद्यता Hotel Druid एप्लिकेशन के संस्करण 3.0.2 में कई पृष्ठों में एक रिफ्लेक्टेड क्रॉस-साइट स्क्रिप्टिंग भेद्यता मौजूद है जो जावास्क्रिप्ट कमांड के मनमाने निष्पादन की अनुमति देती है। https://vulners.com/cve/CVE-2021-37833 भेद्य...

probe-legacy

⚠️⚠️⚠️⚠️: इस रिपॉजिटरी में ooniprobe के पुराने कार्यान्वयन का स्रोत कोड है। कृपया, इसके बजाय देखें: 1. https://github.com/ooni/probe, मेटा-रिपॉजिटरी जहाँ आपको मुद्दे और सुविधा अनुरोध खोलने चाहिए; 2. https://github.com/ooni/probe-cli, जिसमें ooniprobe का नया कार्यान्वयन है जो Go में लिखा गया कमांड...

CVE-2022-25260

CVE-2022-25260 انتحال طلب الخادم شبه الأعمى قبل المصادقة من JetBrains Hub SSRF المتطلبات JetBrains Hub 2021.1.14276 كان JetBrains Hub قبل الإصدار 2021.1.14276 عرضة لضعف التحكم في الوصول CVE-2022-34894، مما يسمح للمهاجم بإنشاء خدمات غير موثوقة دون مصادقة حتى لو كان المستخدم الضيف معطلًا. وهذا يجعل...

skyvern v1.0.52

🐉 Automate Browser-based workflows using LLMs and Computer Vision 🐉 Skyvern automates browser-based workflows using LLMs and computer vision. It provides a Playwright-compatible SDK that adds AI functionality on top of playwright, as well as a no-code workflow builder to help both technical and...

CVE-2023-27163

Preuve de concept de SSRF sur Request-Baskets CVE-2023-27163 Ce dépôt contient une preuve de concept PoC pour CVE-2023-27163, une vulnérabilité de falsification de requête côté serveur SSRF découverte dans request-baskets jusqu'à la version 1.2.1. Cette vulnérabilité permet aux attaquants d'accéd...

smartmap

Godview Godview is a map based entirely on LLMs Large Language Models and OSM Open Street Map. Uses Anthropic, DeepSeek or Open AI. Godview also runs locally with Ollama. Website: godview.ai Installation Pull repository git clone https://github.com/space0blaster/godview.git Install Install...

CVE-2022-46152

CVE-2022-46152 OP-TEE OScleanupshmrefs Out-of-Bounds Read — Reproduction Environment Reference: https://optee.readthedocs.io/en/latest/building/devices/qemu.htmlqemu-v8 Security Advisory: https://github.com/OP-TEE/opteeos/security/advisories/GHSA-65w8-6mrg-52g7 Vulnerability Overview Field| Detai...

FruityWifi

FruityWiFi Wireless network auditing tool http://www.fruitywifi.com/ Important Note Debian 11 Bullseye: Please use Use Debian 11 Bullseye based systems. The Installer has been updated for resolving issues with old version. Note : Some modules will not work until they are upgraded to Python3...

crlfmap

CRLFMap CRLFMap هي أداة لاكتشاف ثغرات HTTP Splitting. لماذا؟ أردت كتابة أداة بلغة Golang من أجل التزامن أردت أن أكون قادرًا على فحص كلا المعاملات والمسارات التثبيت root@kitploit: go get github.com/ryandamour/crlfmap المساعدة root@kitploit: Available Commands: help Help about any command scan A...

hosts v3.16.111

!IMPORTANT Cloning this repository can take a long time! You probably just want to start with the latest version, not its whole history since 2018. Therefore you probably want to use git clone --depth 1 ... to save significant time. !NOTE With the exception of issues and PRs regarding changes to...

jdam

jdam - Structure-aware JSON fuzzing jdam is a Radamsa inspired tool for fuzzing arbitrary JSON objects in a structure-aware fashion, which ensures that fuzzing results will always be valid JSON. Many existing fuzzing tools will blindly alter the input and will often cause the result to be invalid...

enseal

enseal Secure, ephemeral secret sharing for developers. Stop pasting secrets into Slack. enseal makes the secure path faster than the insecure one — share .env files and secrets through encrypted, single-use channels with one command and zero setup. root@kitploit: sender $ enseal share .env Share...

bothan

bothan تأكيد أن عنوان ip:port يستضيف Empire. دعم لاحق لأنظمة C2 أخرى. الاستخدام root@kitploit: Direct single query ❯❯ bothan -v localhost:8080 DEBU2020-01-19T20:25:02-05:00 Requesting... host="localhost:8080" INFO2020-01-19T20:25:02-05:00 SUCCESS host="http://localhost:8080" tool=empire Take a...