PHP-Shell-Detector

Web Shell Detector Web Shell Detector – is a php script that helps you find and identify php/cgiperl/asp/aspx shells. Web Shell Detector has a “web shells” signature database that helps to identify “web shell” up to 99%. By using the latest javascript and css technologies, web shell detector has ...

HTTPUploadExfil

HTTPUploadExfil HTTPUploadExfil is a very simple HTTP server written in Go that's useful for getting files and other information off a machine using HTTP. While there are many use-cases, it's meant to be used in low-stakes offensive scenarios e.g., CTFs. Think of this as python3 -m http.server bu...

soc-faker

soc-faker soc-faker is used to generate fake data for use by Security Operation Centers, Information security professionals, product teams, and many more. Getting Started soc-faker works with Python 3.6 or greater. You can install soc-faker using pip as well as cloning this repository directly. A...

mallory

mallory Proxy HTTP/HTTPS sobre SSH. Instalación Máquina local: go install github.com/justmao945/mallory/cmd/mallory@latest Servidor remoto: necesitamos nuestro viejo amigo sshd Configuración Archivo de configuración La ruta predeterminada es $HOME/.config/mallory.json, se puede establecer al...

Grafana-CVE-2021-43798

Grafana-CVE-2021-43798 Grafana File-Read 影響バージョン：8.0.0-lastest Poc-http-get /public/plugins/plugins-lst/../../../../../../../../filename Default plugins-lst root@kitploit: alertlist annolist grafana-azure-monitor-datasource barchart bargauge cloudwatch dashlist elasticsearch gauge geomap...

SharpSploit

SharpSploit SharpSploit is a .NET post-exploitation library written in C that aims to highlight the attack surface of .NET and make the use of offensive .NET easier for red teamers. SharpSploit is named, in part, as a homage to the PowerSploit project, a personal favorite of mine! While SharpSplo...

upb-any-recursion-audit

upb Any 递归审计（Ruby / PHP 绑定） 针对 protobuf 的 Python 和 JavaScript 绑定中已确认的 Any 解包递归 CVE 的后续研究（最近的是 CVE-2026-0994，这是 jsonformat.py 中 ConvertAnyMessage 的一个纯 Python bug，它通过 methodcaller 而非 ConvertMessage 进行递归，并静默跳过了深度计数器）。 问题： 捆绑在 Ruby 和 PHP 原生扩展中的 C upb 核心是否存在同一类 bug？ 简短回答：不存在。 在此测试的每种情况下，JSON...

acheron

概要 Acheron は、SysWhisper3 / FreshyCalls / RecycledGate に着想を得たライブラリで、ほとんどの機能が Go アセンブリで実装されています。 acheron パッケージを使用すると、Golang のトレードクラフトに間接システムコール機能を追加し、ユーザーモードフックや インストルメンテーションコールバック を利用して、ntdll.dll に戻らない異常なシステムコールを検出する AV/EDR をバイパスできます。 主な機能 依存関係なし Pure Go と Go アセンブリによる実装...

acheron

About Acheron is a library inspired by SysWhisper3/FreshyCalls/RecycledGate, with most of the functionality implemented in Go assembly. acheron package can be used to add indirect syscall capabilities to your Golang tradecraft, to bypass AV/EDRs that makes use of usermode hooks and instrumentatio...

CVE-2021-44228

Log4jの脆弱性 - CVE-2021-44228 📗 はじめに この脆弱性は2021年12月9日に発見され、CVE-2021-44228 として識別されています。この欠陥はJavaのログパッケージに影響を及ぼし、深刻度スコア（CVSS）は 10点であり、ホストへのリモートアクセス実行を可能にします。この脆弱性はセキュリティコミュニティでは LOG4SHELLとして知られています。 LOG4J脆弱性の影響を受けるソフトウェアベンダーのリストが必要な場合は、以下のリポジトリを確認してください。 GitHub/Log4jAttackSurface 偵察...

DAws

Hello everyone, About There's multiple things that makes DAws better than every Web Shell out there: 1. Bypasses Security SystemsIPS, WAFs,etc like Suhosinuses up to 20 php functions just to get a command executed. 2. Drops CGI Shells and communicate with them to bypass Security Systems. 3. Uses...

RedPersist

RedPersist RedPersist is a Windows Persistence tool written in C Compiling Project Below 3rd party libraries are used in this project. TaskScheduler https://github.com/dahall/TaskScheduler Fody https://github.com/Fody/Fody Load the Visual Studio project up and go to "Tools" "NuGet Package Manager...

CVE-2024-4577

CVE-2024-4577 Vulnerability Checker This script is designed to check for the vulnerability described by CVE-2024-4577, which involves exploiting certain PHP configurations to execute arbitrary code remotely. It sends a POST request to specified endpoints on a list of domains and checks if the...

crawpy

Crawpy もう1つのPythonで書かれたコンテンツ発見ツールです。 このツールが他と違う点: 非同期HTTPリクエストを高速に送信 キャリブレーションモード：自動的にフィルタを適用 追加フラグ付きの再帰スキャンモード レポート生成：後で結果を確認可能 複数URLスキャン 実行例 自動キャリブレーションと再帰モードを有効にした実行例 レポート例 レポート例はこちら root@kitploit: https://morph3.blog/crawpy/example.html https://morph3.blog/crawpy/example.txt インストール...

crawpy

Crawpy Yet another content discovery tool written in python. What makes this tool different than others: Sends asynchronous HTTP requests, fast Calibration mode, applies filters on its own Recursive scan mode with additional flags Report generation, you can later go and check your results Multipl...

cve-collector

CVE-Collector Simple Latest CVE Collector Written in Python There are various methods for collecting the latest CVE Common Vulnerabilities and Exposures information. This code was created to provide guidance on how to collect, what information to include, and how to code when creating a CVE...

CVE-2025-61777

CVE-2025-61777 1. 在 FlagforgeCTF 上未经授权修改徽章模板 CVE-2025-61777 摘要 Flagforge 应用程序（https://flagforge.xyz）在其管理 API 端点中暴露了严重漏洞，具体为 /api/admin/badge-templates（GET）和 /api/admin/badge-templates/create（POST）。这两个端点均缺少身份验证和授权控制，允许未经身份验证的用户检索敏感的徽章模板数据，并在 MongoDB...

CVE-2022-45988

CVE-2022-45988 StarSoftComm HP CooCare An elevation of privilege vulnerability exists I have contacted with hp-security-alert They have fixed this bug. About StarSoftComm CooCare HP-PSRT-IR 4106 The vendor responded with the following information: Follow these steps to update: 1. Launch eService ...

CitrixBleed-2-CVE-2025-5777-PoC-

CitrixBleed 2 CVE-2025-5777 终极解析 An Out-of-Bounds Memory Read in NetScaler ADC / Gateway — 从成因到攻防演练的全景手册 poc用法：python3 poc.py https://gateway.example.com exp用法：python3 exp.py https://gateway.example.com admin 7acbb35f4d... 目录 root@kitploit: 0x00 引言 / 速览 0x01 背景：NetScaler 架构与 CitrixBleed 1 回顾 0x02...

CallbackHell

CallbackHell Exploit for CVE-2021-40449 Win32k - LPE CallbackHell Description Technical Writeup PoC References Description CVE-2021-40449 is a use-after-free in Win32k that allows for local privilege escalation. The vulnerability was found in the wild by Kaspersky. The discovered exploit was...