uxss-poc

Universal Cross Site Scripting PoC This is a PoC for CVE-2015-0072 for sequentialy get the targeted websites cookies. Disclaimer This Proof of Concept is for educational purpose only. Please do not use it against any system without prior permission. You are responsible for yourself for what you d...

mssqlproxy

mssqlproxy mssqlproxy は、侵害されたMicrosoft SQL Serverを経由してソケット再利用を通じて制限された環境で横断移動（ラテラルムーブメント）を実行するためのツールキットです。クライアントには impacket とSQLサーバー上の sysadmin 権限が必要です。 続行する前に こちらの記事 をよくお読みください。 これは3つの部分から構成されています： CLRアセンブリ : assembly.cs をコンパイル コアDLL : reciclador.sln をコンパイル クライアント :...

mssqlproxy

mssqlproxy mssqlproxy is a toolkit aimed to perform lateral movement in restricted environments through a compromised Microsoft SQL Server via socket reuse. The client requires impacket and sysadmin privileges on the SQL server. Please read this article carefully before continuing. It consists of...

Tunna

Tunna Tunna is a set of tools which will wrap and tunnel any TCP communication over HTTP. It can be used to bypass network restrictions in fully firewalled environments. v1.1 Alpha version root@kitploit: | | | || | | | ' | ' \ / | | || || | | | | | | | | | || ,|| ||| ||,| Tunna 0.1, for HTTP...

maltrail

Maltrail Maltrail is a network traffic detection system that identifies communication with known malicious infrastructure and reports selected traffic anomalies. It matches domains, URLs, IP addresses, IP:port pairs, and User-Agent values observed on the network against a set of indicators called...

CVE-2024-32136

BWL Advanced FAQ Manager 2.0.3 - 认证后SQL注入 漏洞标题： BWL Advanced FAQ Manager 2.0.3 - 认证后SQL注入 日期： 2024年4月14日 漏洞作者： Ivan Spiridonov xbz0n 软件链接： https://codecanyon.net/item/bwl-advanced-faq-manager/5007135 版本： 2.0.3 测试环境： Ubuntu 20.04 CVE： CVE-2024-32136 SQL注入...

CVE-2023-22809

Linux Privilege Escalation Exploit for CVE-2021-3560 Sudoedit a.k.a -e - Local Privilege Escalation For educational and authorized security research purposes only Original Exploit Authors n3m1dotsys Vulnerability Description In Sudo before 1.9.12p2, the sudoedit aka -e feature mishandles extra...

nepstech-xpon-router-CVE-2024-40119

nepstech-xpon-router-CVE-2024-40119 Author: Subhodeep Baroi CVE-2024-40119: CSRF Vulnerability in Nepstech Wifi Router NTPL-XPON1GFEVN v1.0 Description CVE-2024-40119 is a Cross-Site Request Forgery CSRF vulnerability in the Nepstech Wifi Router xpon NTPL-XPON1GFEVN v1.0 firmware v2.0.1. This...

EvilSlackbot

EvilSlackbot A Slack Attack Framework for conducting Red Team and phishing exercises within Slack workspaces. Disclaimer This tool is intended for Security Professionals only. Do not use this tool against any Slack workspace without explicit permission to test. Use at your own risk. Background...

cve-2017-7494

Basic Setup Install Samba version 4.5.9 https://download.samba.org/pub/samba/stable/samba-4.5.9.tar.gz https://wiki.samba.org/index.php/BuildSambafromSource Get patched version of Impacket pip install -r requirements.txt Usage 1. Start Samba server in interactive mode + debug print sudo...

scallion

2020 项目更新 Scallion 是一个用于学习 OpenCL 和 RSA 的业余项目。我们目前没有在维护 scallion 。它在两个重要方面已经过时： 1. Tor 已经迁移到 v3 Onion 地址，而 scallion 不支持此版本。旧的 v2 地址将在 2021 年 10 月 停止工作。新规范使用了不同的密码学原语，整体上更加复杂。我们在 GPU 上批量生成 RSA 密钥的技巧在新的 ECDSA 密钥需求下无法以相同方式工作。在 GPU 上生成类似（但不兼容）的 ECDSA 密钥是可能的，用于比特币地址生成。请参见 vanitygen-plus 或更早的...

scallion

2020 Project Update Scallion was a hobby project to learn OpenCL and RSA. We are not currently maintaining scallion. It has bitrotted in two important ways: 1. Tor has moved on to v3 Onion addresses, which scallion does not support. Old v2 addresses will stop working in October of 2021. The new...

nray

nray Overview Nray is a free, platform and architecture independent port and application layer scanner. nray runs in a distributed manner to speed up scans and to perform scans from different vantage points. Event-based results allow to further process information during the scan, e.g. using tool...

dark-fantasy-hack-tool

DARK FANTASY HACK TOOL Written by @ritvikb99 and @CodesWhite and @meuzgebre Requirements file idea given by @Swastik2561 For security purposes only ! Installation: root@kitploit: $ pipenv install or: root@kitploit: $ pip3 install -r requirements.txt Features: DOS Tool: To take down small websites...

ShadowSpray

ShadowSpray A tool to spray Shadow Credentials across an entire domain in hopes of abusing long forgotten GenericWrite/GenericAll DACLs over other objects in the domain. Why this tool In a lot of engagements I see in BloodHound that the group "Everyone" / "Authenticated Users" / "Domain Users" or...

docker_escape_pwn

Escape from Docker using CVE-2017-1000112 and CVE-2017-18344. Including: gaining root privilage get all capbilities namespace recovery filesystem recovery cgroup limitation bypass seccomp bypass...

uhubctl

uhubctl uhubctl es una utilidad para controlar la alimentación USB por puerto en concentradores USB inteligentes. Un concentrador inteligente se define como aquel que implementa conmutación de alimentación por puerto. La idea original de este código se inspiró en hub-ctrl.c de Niibe Yutaka:...

dawgmon

dawgmon - Dawg the Hallway Monitor SUMMARY The name of this tool is based upon an episode season 10, episode 10 of South Park in which Cartman is Dawg the Hallway Monitor patrolling the hallways of his school. It's a tool which helps one to monitor changes which have taken place on a Linux-based...

CVE-2023-23752

CVE-2023-23752 Bulk scanner + get config from CVE-2023-23752 Screenshot Installations clone this repository install the requirements root@kitploit: pip3 install -r requirements.txt...

casbin

Apache Casbin 新闻 ：还在担心如何编写正确的 Apache Casbin 策略吗？Apache Casbin online editor 即将为你提供帮助！请访问：https://casbin.apache.org/editor/ Apache Casbin 是一个强大且高效的开源访问控制库，适用于 Golang 项目。它支持基于各种访问控制模型来执行授权。 Apache Casbin 支持的所有语言： 目录 支持的模型 工作原理 功能 安装 文档 在线编辑器 教程 快速开始 策略管理 策略持久化 多节点策略一致性 角色管理器 基准测试 示例 中间件 我们的采用者 支持的模...