PutScanner

🔍 PUT निर्देशिका स्कैनर एक पैठ परीक्षण उपकरण जो HTTP PUT विधि के माध्यम से लिखने योग्य वेब निर्देशिकाओं की पहचान करता है, विशेष रूप से CVE-2025-24813 Apache Tomcat में मनमाना फ़ाइल अपलोड का पता लगाने के लिए डिज़ाइन किया गया। 📌 विशेषताएं स्मार्ट प्रोटोकॉल हैंडलिंग : फ़ॉलबैक के साथ HTTPS/HTTP का...

pcileech

PCILeech Summary: PCILeech uses PCIe hardware devices to read and write target system memory. This is achieved by using DMA over PCIe. No drivers are needed on the target system. PCILeech also works without hardware together with a wide range of software memory acqusition methods supported by the...

OSINT-Framework

OSINT Framework http://osintframework.com Notes OSINT framework focused on gathering information from free tools or resources. The intention is to help people find free OSINT resources. Some of the sites included might require registration or offer more data for $$$, but you should be able to get...

pqaudit

pqaudit Scan codebases for quantum-vulnerable cryptography. Get a clear picture of what needs to migrate before Q-Day. pqaudit detects usage of RSA, ECDSA, Ed25519, ECDH, DH, and other algorithms broken by Shor's algorithm. It also identifies already-migrated PQC usage ML-KEM, ML-DSA, SLH-DSA so...

log4shell-docker-lab

Log4Shell docker lab for CVE-2021-44228 The components This docker lab makes use of three components, being: The vulnerable spring-boot application An HTTP server that hosts .class files used for remote code execution An LDAP referral server which redirects specific LDAP queries to the HTTP serve...

CVE-2024-5124

deploy victim server: Install docker root@kitploit: Install packages required for the installation sudo apt-get update sudo apt install --yes ca-certificates curl sudo install -m 0755 -d /etc/apt/keyrings sudo curl -fsSL https://download.docker.com/linux/debian/gpg -o /etc/apt/keyrings/docker.asc...

ComfyEngine

ComfyEngine Qt-based memory scanner / watchlist playground inspired by Cheat Engine but built natively for Linux and tuned for my workflow: clean docks, pointer graphs, fast patching, and zero fear of losing context when you bounce between scanner, scripts, and notes. ComfyEngine gives you a clea...

go-get-rce

इस रिपॉजिटरी में README नहीं है।...

CVE-2024-38063-poc

Real POC published https://github.com/ynwarcs/CVE-2024-38063 and I have updated in my code as well, This can cause crash into your system so use VM or just learning thing, you can get RCE by making changes in the code. Usage iface Most probably this is enabled bydefault. Check the...

blackvue-cve-2023

BlackVue DR750 CVEs + more The below is for educational purposes only, do not try this on any device you do not own or have permission to use. As of writing, there are about 300 vulnerable BlackVue devices online, which can easily be discovered and exploited, and no official patch is out. BlackVu...

wpscan

WPScan WordPress Security Scanner WPScan WordPress Vulnerability Database - WordPress Security Plugin INSTALL Prerequisites Optional but highly recommended: rbenv Ruby = 3.3 - Recommended: latest stable Curl = 7.72 - Recommended: latest stable The 7.29 has a segfault The 7.72 could result in...

wpscan

WPScan वर्डप्रेस सुरक्षा स्कैनर WPScan वर्डप्रेस भेद्यता डेटाबेस - वर्डप्रेस सुरक्षा प्लगइन स्थापना पूर्वापेक्षाएँ वैकल्पिक लेकिन अत्यधिक अनुशंसित: rbenv Ruby = 3.3 - अनुशंसित: नवीनतम स्थिर Curl = 7.72 - अनुशंसित: नवीनतम स्थिर 7.29 में एक segfault है 7.72 कुछ मामलों में Stream error in the HTTP/2...

authelia

!OpenSSF Best...

CVE-2022-31813

लैब प्रारंभ करें docker compose up --build सामान्य पहुंच root@kitploit: GET / HTTP/1.1 Host: 127.0.0.1:8080 User-Agent: Mozilla/5.0 Macintosh; Intel Mac OS X 10157 AppleWebKit/537.36 KHTML, like Gecko Chrome/145.0.0.0 Safari/537.36 Accept:...

SOC_287

SOC287 - Arbitrary File Read on Checkpoint Security Gateway CVE-2024-24919 Overview This repository contains a detailed walkthrough of the CVE-2024-24919 vulnerability affecting Check Point Security Gateways. The vulnerability allows arbitrary file read, potentially exposing sensitive system file...

cve-2025-29927-lab

This repository contains a deliberately vulnerable web application built using Next.js. It is designed to demonstrate and study the security issue known as CVE-2025-29927. The goal of this project is to help security researchers, students, and bug bounty hunters understand how the vulnerability...

laZzzy

laZzzy laZzzy is a shellcode loader that demonstrates different execution techniques commonly employed by malware. laZzzy was developed using different open-source header-only libraries. Features Direct syscalls and native Nt functions not all functions but most Import Address Table IAT evasion...

PersistBOF

PersistBOF A tool to help automate common persistence mechanisms. Currently supports Print Monitor SYSTEM, Time Provider Network Service, Start folder shortcut hijacking User, Junction Folder User, Xll Add-In User. Usage Clone, run make, add .cna to Cobalt Strike client. run: help persist-ice in ...

CVE-2022-45354

Download Monitor = 4.7.60 - Sensitive Information Exposure via REST API CVE-2022-45354:version found on http://wordpress.lan Details : CVE-2022-45354:version matched at http://wordpress.lan Protocol : HTTP Full URL : http://wordpress.lan/wp-content/plugins/download-monitor/readme.txt Timestamp :...

cve-2024-34351-demo

Démonstration de CVE-2024-34351 Application Next.js 14.0.0 minimale pour démontrer CVE-2024-34351 -- une vulnérabilité de Server-Side Request Forgery SSRF dans les Server Actions de Next.js. Découverte par Adam Kues et Shubham Shah chez Assetnote. Corrigée dans Next.js 14.1.1. Comment fonctionne ...