AppInfoScanner

Este proyecto es solo la punta del iceberg de lo que planeamos. Si estás interesado en este proyecto o deseas participar en el desarrollo futuro o en trabajos de traducción, envía un correo a [email protected] indicando tus habilidades e intereses. AppInfoScanner Una herramienta de escaneo d...

ThisSeemsWrong

Fix for this issue appeared as CVE-2024-49746: bulletin, patch "This seems wrong" Above title is the comment from Parcel::continueWrite method, which is actually responsible for resizing Parcel objects, either when explicitly request by user for example through setDataSize or when calling one of...

CVE-2022-24481-analysis

CVE-2022-24481 Type Confusion Type confusion Vulnerable File clfs.sys Root Cause Because the validation logic for rgContainers0 is not strict, after forging rgContainers0, ClientContext overlaps with the ContainerContext structure. If the fake data is accepted, after CloseHandle,...

CVE-2020-0688

Exploit and detect tools for CVE-2020-0688Microsoft Exchange default MachineKeySection deserialize vulnerability build root@kitploit: csc ExchangeCmd.cs csc ExchangeDetect.cs usage root@kitploit: ExchangeDetect root@kitploit: ExchangeCmd sub commands: exec args exec command arch get remote proces...

uhubctl

uhubctl uhubctl is utility to control USB power per-port on smart USB hubs. Smart hub is defined as one that implements per-port power switching. Original idea for this code was inspired by hub-ctrl.c by Niibe Yutaka: https://www.gniibe.org/development/ac-power-control-by-USB-hub Compatible USB...

ESP32-Bit-Pirate

ESP32 Bit Pirate ESP32 Bit Pirate is open-source firmware that turns your device into a multi-protocol development and analysis tool, inspired by the legendary Bus Pirate. It supports sniffing, sending, scripting, and interacting with various digital protocols I2C, UART, 1-Wire, SPI, etc. via a...

lazybee

ABOUT TOOL : Lazybee tool is a python based script from which you can generate random wordlist for brutefocre attacks. This tool has a unique features like wordlist generating time calculation and direct .txt saving in current directory. This tool works on both rooted Android device and Non-roote...

lazybee

ACERCA DE LA HERRAMIENTA : Lazybee es una herramienta basada en Python con la que puedes generar listas de palabras aleatorias para ataques de fuerza bruta. Esta herramienta tiene características únicas como el cálculo del tiempo de generación de la lista y el guardado directo de archivos .txt en...

MyJWT

MyJWT codebeat badge Introducción Esta CLI es para pentesters, jugadores de CTF o desarrolladores. Puedes modificar tu jwt, firmar, inyectar, etc... Consulta la Documentación para más información. Si ves problemas o mejoras, envía un issue. Responderé lo antes posible. ¡Disfruta! : Documentación ...

CVE-2021-21315-PoC

CVE-2021-21315-systeminformation This is Proof of Concept for CVE-2021-21315 which affects The System Information Library for Node.JS npm package "systeminformation". npmjs.com/systeminformation "be sure to check or sanitize service parameters that are passed to si.inetLatency, si.inetChecksite,...

CVE-2021-21985_PoC

CVE-2021-21985 Código Vulnerable CLASS/METHODs disponibles, una pequeña muestra con fines de PoC: com.vmware.vsan.client.services.capability.VsanCapabilityProvider root@kitploit: ../snip getClusterCapabilityData getHostCapabilityData getHostsCapabilitiyData getIsDeduplicationSupported...

vk-geosearch

vk-geosearch Search for photos by geo-tags on the social networkvk.com Dependencies requests Installation root@kitploit: git clone https://github.com/yevgen2020/vk-geosearch.git pip3 install requests cd vk-geosearch chmod +x search.py Usage To search for photos in VK, you need a service access ke...

enumy

Enumy Enumy es un ejecutable portátil ultrarrápido que puedes colocar en una máquina Linux objetivo durante una prueba de penetración o CTF en la fase posterior a la explotación. Ejecutar enumy enumerará la máquina en busca de vulnerabilidades de seguridad comunes. Instalación Puedes descargar el...

enumy

Enumy Enumy is an ultra fast portable executable that you drop on target Linux machine during a pentest or CTF in the post exploitation phase. Running enumy will enumerate the box for common security vulnerabilities. Installation You can download the final binary from the release x86 or x64 tab...

LadonGo

Escáner Ladon para Golang Wiki http://k8gege.org/Ladon/LadonGo.html Introducción LadonGo es un framework de escáner de penetración de intranet de código abierto, que se puede utilizar para detectar fácilmente hosts vivos en segmentos C, B, A, identificación de huellas dactilares, escaneo de...

forticrack_v8

Forticrack v8.0.0 Decrypt and extract FortiOS 8.0.0 firmware images. This script extends Bishop Fox's Forticrack to support 8.0.0 firmware images. Also, RandoriSec's article on FortiGate 7.4.7 firmware encryption was really helpful to reverse the encryption for FortiOS 8.0.0, since it looks like ...

Exploit for CVE-2024-7804

CVE-2024-7804 — PyTorch Distributed RPC Unsafe Deserialization...

CVE-2016-2098

CVE-2016-2098 Action Pack in Ruby on Rails before 3.2.22.2, 4.x before 4.1.14.2, and 4.2.x before 4.2.5.2 allows remote attackers to execute arbitrary Ruby code by leveraging an application's unrestricted use of the render method. https://vulners.com/cve/CVE-2016-2098 Usage root@kitploit: git clo...

CVE-2026-53625-GLPI-PoC

CVE-2026-53625 - GLPI Privilege Escalation via authtype Manipulation PoC 📌 Overview This repository provides an ethical Proof-of-Concept PoC for CVE-2026-53625 , a High severity privilege escalation vulnerability in GLPI affecting all versions from 0.70 through 11.0.7. A low-privilege user...

Chimera

Chimera Hardware Emulation & Proximity Exploitation Why Hak5 gear is heavy and obvious. My phone has a full Linux kernel in it, so I made it do the same job — HID emulation, RNDIS, mass storage, the whole thing — straight through ConfigFS. No extra hardware. No cables dangling out of a bag. Plug...