elpscrk

Elpscrk - v2.0 Un perfilador inteligente de contraseñas comunes de usuarios, nombrado así por la misma herramienta en la serie Mr.Robot, S01E01 😄 En palabras simples, elpscrk te preguntará toda la información que conozcas sobre tu objetivo y luego intentará generar todas las contraseñas posibles...

wordlist_generator

wordlistgenerator La herramienta wordlistgenerator genera una lista de palabras única para tu objetivo utilizando las técnicas mencionadas en el video de tomnomnom "Who, What, Where, When". Toma URLs de gau para extraer directorios, nombres de archivo o palabras de las páginas. Como característic...

qark

Kit de Revisión Rápida de Android Esta herramienta está diseñada para buscar varias vulnerabilidades de seguridad en aplicaciones Android, ya sea en código fuente o en APKs empaquetadas. La herramienta también es capaz de crear APKs desplegables de "Prueba de Concepto" y/o comandos ADB, capaces d...

ctf-screenshotter

screenshotter web Un desafío web CTF sobre cómo hacer capturas de pantalla. Está inspirado en un error encontrado en la vida real. El desafío fue creado por @LiveOverflow para https://cscg.de/. Mira el video writeup aquí: https://www.youtube.com/watch?v=FCjMoPpOPYI Ejecutar el desafío Para ejecut...

crawpy

Crawpy Yet another content discovery tool written in python. What makes this tool different than others: Sends asynchronous HTTP requests, fast Calibration mode, applies filters on its own Recursive scan mode with additional flags Report generation, you can later go and check your results Multipl...

reproducer-poc-CVE-2022-0847

Naive detector and reproducer of CVE-2022-0847 dirty pipe. Uses simple generator of syscall sequences / programs from purposefully limited set of building blocks / input values only generation, no advanced fuzzing; no mutation; no coverage guidance; no shrinking / minimization and detects...

solidity_CVE-2021-42574-POC

solidityCVE-2021-42574-POC 31 ene 2023, Altin tin-z, github.com/tin-z PoC POC de CVE-2021-42574 para solidity y el compilador solc. instalar root@kitploit: solc and select 0.8.17 version https://github.com/crytic/solc-select foundry https://github.com/foundry-rs/foundry desplegar contrato...

vmlinux-to-elf

vmlinux-to-elf 이 도구는 vmlinux/vmlinuz/bzImage/zImage 커널 이미지원시 바이너리 블롭 또는 이미 존재하지만 심볼이 제거된 .ELF 파일에서 함수 및 변수 심볼을 복구하여 완전히 분석 가능한 .ELF 파일을 얻을 수 있게 해 줍니다. 이를 위해 이 도구는 커널에서 커널 심볼 테이블kallsyms을 스캔합니다. kallsyms는 거의 모든 커널에 대부분 변경되지 않은 채로 존재하는 압축된 심볼 테이블입니다. 해당 심볼 테이블은 원래 압축되어 있기 때문에 원본 바이너리에는 보이지 않는 문자열도...

syft

Syft 컨테이너 이미지와 파일시스템에서 SBOMSoftware Bill of Materials, 소프트웨어 자재 명세서을 생성하기 위한 CLI 도구이자 Go 라이브러리입니다.Grype와 같은 스캐너와 함께 사용하면 취약점 탐지에 탁월합니다. 주요 기능 컨테이너 이미지 , 파일시스템 , 아카이브 에 대한 SBOM을 생성합니다 지원 스캔 대상 전체 목록은 문서 참조 수십 가지 패키징 생태계를 지원합니다 예: Alpine apk, Debian dpkg, RPM, Go, Python, Java, JavaScript, Ruby,...

CVE-2018-4878

CVE-2018-4878 Samples Sample source: https://github.com/brianwrf/CVE-2017-4878-Samples Analysis report: http://blog.talosintelligence.com/2018/02/group-123-goes-wild.html Exploit source in Python script: https://github.com/vysec/CVE-2018-4878 cve-2018-4878.py is the exploit generation script, the...

NSEC3-Encloser-Attack

Generación de Zonefiles para el Ataque NSEC3-Encloser Este proyecto genera zonefiles DNS con parámetros NSEC3 personalizados para reproducir y evaluar los ataques descritos en CVE-2023-50868. Requisitos Python3 probado en Python3.10 Dependencias de Python instaladas: cryptography 42.0.5 dnspython...

SecureForce

SecureForce - Penetration Testing Framework A simplified but highly capable penetration testing framework built for authorized security testing and competitive analysis. SecureForce provides an intuitive interface for exploit management, payload generation, and controlled exploitation. Features...

CVE-2017-8759

Introducción y exploit de la vulnerabilidad CVE-2017-8759 Generando un archivo...

Linux Distros Unpatched Vulnerability : CVE-2026-89581

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - bpf, x86: Fix per-CPU address resolution into an extended register The destination of the per-CPU address MOV is encoded in ModRM.reg, which is extended by REX....

Payload_CVE_2013_2186

PayloadCVE20132186 Code generate payload for CVE-2013-2186...

Purpleteam

Purpleteam work in progress Scripts i made to trigger events for SOC detections, mapped to MITRE ATT&CK techniques...

REpsych

REpsych : Psychological Warfare in Reverse Engineering github.com/xoreaxeaxeax/repsych // domas // @xoreaxeaxeax Overview The REpsych toolset is a proof-of-concept illustrating the generation of images through a program's control flow graph CFG. A typical function's CFG| A REpsych generated CFG...

REpsych

REpsych : Psychological Warfare in Reverse Engineering github.com/xoreaxeaxeax/repsych // domas // @xoreaxeaxeax Overview The REpsych toolset is a proof-of-concept illustrating the generation of images through a program's control flow graph CFG. A typical function's CFG| A REpsych generated CFG...

CVE-2026-35194

CVE-2026-35194 — Apache Flink SQL Code Injection Remote code execution on Apache Flink TaskManagers via SQL code generation injection...

CVE-2026-7298

Improper neutralization of input during web page generation 'cross-site scripting' vulnerability in IdeaSoft Software Industry and Trade Inc. Smart E-Commerce allows Reflected XSS. This issue affects Smart E-Commerce: through 11092026. NOTE: The vendor was contacted early about this disclosure bu...