certPinningVulnerableOkHttp

Aplicación simple-client de OkHttp vulnerable a CVE-2016-2402 Esto es un fork del simple-client por defecto del proyecto okhttp. Simple-client es una aplicación Java que simplemente hace una petición GET a https://api.github.com y obtiene los nombres de los contribuidores de okhttp. Este fork ha...

CVE-2024-57430

CVE-2024-57430 Una vulnerabilidad de inyección SQL en la función pjActionGetUser de PHPJabbers Cinema Booking System v2.0 permite a los atacantes manipular consultas de la base de datos a través del parámetro column. Explotar esta falla puede provocar divulgación no autorizada de información,...

reconerator

Overview This is a custom .NET assembly which will perform a number of situational awareness activities. There are a number of current featuresets: BASIC - Obtains information from the disk and registry. LDAP - Allows customised AD LDAP queries to be made. RESOLVEHOST - Performs DNS lookup querie...

s3sec

s3sec Test AWS S3 buckets for read/write/delete access This tool was developed to quickly test a list of s3 buckets for public read, write and delete access for the purposes of penetration testing on bug bounty programs. Screenshot Found a bug bounty using this tool? Feel free to add me as a...

ghidra_kernelcache

ghidrakernelcache: a Ghidra iOS kernelcache framework for reverse engineering This framework is the end product of my experience in Kernelcache reverse engineering , I usually look for vulnerabilities by manually auditing the kernel and its extensions and have automated most of the things that I...

backdoor-apk

backdoor-apk backdoor-apk is a shell script that simplifies the process of adding a backdoor to any Android APK file. Users of this shell script should have working knowledge of Linux, Bash, Metasploit, Apktool, the Android SDK, smali, etc. This shell script is provided as-is without warranty of...

backdoor-apk

backdoor-apk backdoor-apk — это shell-скрипт, упрощающий процесс внедрения бэкдора в любой APK-файл Android. Пользователи данного скрипта должны иметь практические знания Linux, Bash, Metasploit, Apktool, Android SDK, smali и т.д. Скрипт предоставляется «как есть» без каких-либо гарантий и...

CVE-2024-57429

CVE-2024-57429 A cross-site request forgery CSRF vulnerability in the pjActionUpdate function of PHPJabbers Cinema Booking System v2.0 allows remote attackers to escalate privileges by tricking an authenticated admin into submitting an unauthorized request. Impact: Exploitation of this CSRF...

CVE-2023-30212-POC

CVE-2023-30212-POC Creación de un entorno Docker vulnerable y explotación de vulnerabilidad en Ourphp versión 7.2.0 CVE 2023 30212 Paso 1. Descargue e instale Docker en su sistema. Estoy usando Docker porque es rápido y fácil instalar Ubuntu Paso 2. Configurar el entorno Docker root@kitploit: sud...

aurora

Aurora This is a proof-of-concept web app built on top of Frida. To get started: root@kitploit: npm install grunt server Then point your web browser at http://127.0.0.1:8010/...

modifyCertTemplate

Purpose This tool is designed to aid an operator in modifying ADCS certificate templates so that a created vulnerable state can be leveraged for privilege escalation and then reset the template to its previous state afterwards. This is specifically designed for a scenario where WriteProperty righ...

malwinx

Malwinx A normal flask web app to learn win32api with code snippets and references. Prerequisite You need to download the following package before starting it root@kitploit: pip install flask pip install pefile pip install requests Usage root@kitploit: $ python flaskapp.py Live Demo...

Centreon-RCE

Centreon-RCE Centreon v.19.04 Remote Code Execution exploit CVE-2019-13024 Revision of https://github.com/mhaskar/CVE-2019-13024 HOW TO USE: 1. Edit argument defaults for convenience, or don't bottom of script 2. If needed, edit 'editcommand' function to defeat defenses 3. '-v' for...

buster

Description Buster is an advanced OSINT tool used to: Get social accounts of an email using multiple sourcesgravatar,about.me,myspace,skype,github,linkedin,previous breaches Get links to where the email was found using google,twitter,darksearch and paste sites Get breaches of an email Get domains...

libsignal v0.102.2

Overview libsignal contains platform-agnostic APIs used by the official Signal clients and servers, exposed as a Java, Swift, or TypeScript library. The underlying implementations are written in Rust: libsignal-protocol: Implements the Signal protocol, including the Double Ratchet algorithm. A...

dump1090

Dump1090 README Dump 1090 is a Mode S decoder specifically designed for RTLSDR devices. The main features are: Robust decoding of weak messages, with mode1090 many users observed improved range compared to other popular decoders. Network support: TCP30003 stream MSG5..., Raw packets, HTTP. Embedd...

log4j-scan

log4j-scan A fully automated, accurate, and extensive scanner for finding vulnerable log4j hosts Features Support for lists of URLs. Fuzzing for more than 60 HTTP request headers not only 3-4 headers as previously seen tools. Fuzzing for HTTP POST Data parameters. Fuzzing for JSON data parameters...

nmapAutomator

nmapAutomator A script you can run in the background! Summary The main goal for this script is to automate the process of enumeration & recon that is run every time, and instead focus our attention on real pentesting. This will ensure two things: 1. Automate nmap scans. 2. Always have some recon...

cve-2021-45043

cve-2021-45043 HD-Network Real-time Monitoring System 2.0 permite la navegación de directorios ../ para leer /etc/shadow a través del parámetro sLanguage de /language/lang. publicación inicial https://cyberguy0xd1.medium.com/my-cve-2021-45043-lfi-write-up-441dad30dd7f explotación mediante burp GE...

metasploit-bailiwicked_domain-fix

🚀 metasploit-bailiwickeddomain-fix Fix forundefined method each in Metasploit’s bailiwickeddomain.rb CVE-2008-1447 DNS cache poisoning module 🔎 Problem While testing CVE-2008-1447 using Metasploit, the original module crashed with: root@kitploit: undefined method each for an instance of IPAddr...