DbDat

DbDat Db Database Assessment Tool DbDat performs numerous checks on a database to evaluate security. The categories of checks performed are configuration, privileges, users, and information. Checks are performed by running queries or reading database configuration files. The goal of this tool is ...

pwnspoof

pwnSpoof from Punk Security generates realistic spoofed log files for common web servers with customisable attack scenarios. Every log bundle is unique and completely customisable, making it perfect for generating CTF scenarios and for training serials. Can you find the attacker session and build...

kube-monkey

kube-monkey 是 Netflix 的 Chaos Monkey 在 Kubernetes 集群上的一个实现。它会随机删除集群中的 Kubernetes k8s Pod，鼓励并验证故障弹性服务的开发。 在 Kubernetes Slack 上加入我们：kube-monkey。 kube-monkey 在每个工作日按预配置的时间（runhour，默认为上午 8 点）运行，并生成一个部署计划，这些部署将在同一天内的某个时间面对一次随机的 Pod 终止。一天内可能发生随机 Pod 终止的时间范围是可配置的，默认为上午 10 点到下午 4 点。 kube-monkey...

CVE-2022-39197-RCE

CVE-2022-39197-RCE First This project was modified from @its-arun project https://github.com/its-arun/CVE-2022-39197 When I tested the script, I found that the frida script could not query the data in the normal order. The method of modifying the frida script to modify the process name. Thanks to...

CVE-2023-4294

CVE ID : CVE-2023-4294 Vulnerability Type : Cross-Site Scripting Description : The URL Shortify plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the referrer header in versions up to, and including, 1.7.5 due to insufficient input sanitization and output escaping. This makes ...

raptor

root@kitploit: ╔═══════════════════════════════════════════════════════════════════════════╗ ║ ║ ║ ██████╗ █████╗ ██████╗ ████████╗ ██████╗ ██████╗ ║ ║ ██╔══██╗██╔══██╗██╔══██╗╚══██╔══╝██╔═══██╗██╔══██╗ ║ ║ ██████╔╝███████║██████╔╝ ██║ ██║ ██║██████╔╝ ║ ║ ██╔══██╗██╔══██║██╔═══╝ ██║ ██║ ██║██╔══█...

strelka-ui

Releases | Pull Requests | Issues !Pull...

CVE-2020-2555

CVE-2020-2555 Weblogic com.tangosol.util.extractor.ReflectionExtractor RCE com.supeream.CVE20202555 root@kitploit: / author:Y4er.com gadget: BadAttributeValueExpException.readObject com.tangosol.util.filter.LimitFilter.toString com.tangosol.util.extractor.ChainedExtractor.extract...

Salamandra

Salamandra Spy Microphone Detection Tool Salamandra is a tool to detect and locate spy microphones in closed environments. It find microphones based on the strength of the signal sent by the microphone and the amount of noise and overlapped frequencies. Based on the generated noise it can estimat...

LSTAR-EN

LSTAR - Aggressor Translated to English! By Google Translate and Deepl For the purpose of simplifying CS right-click and facilitating self-integration, refer to a large number of post-infiltration plugins Refactored and enriched host-related credential acquisition, multi-level intranet penetratio...

XeytanWin32-RAT

WARNING This is a buggy RAT, not completed, not stable. It still a "work in progress" application. Introduction Project created to kill some of my free time, It is not actively maintained. There are a lot of things to improve/fix, and it will take time to reach a stability on this project. Featur...

Log4j-CVE-2021-44228-Remediation

Log4j CVE-2021-44228 Remediation projectdescription Explore the docs » View Demo · Report Bug · Request Feature Table of Contents 1. About The Project Built With 2. Getting Started Prerequisites Installation 3. Usage 4. Roadmap 5. Contributing 6. License 7. Contact 8. Acknowledgments About The...

CVE-2022-29464

CVE-2022-29464 WSO2 RCE CVE-2022-29464 exploit and writeup. Details CVE-2022-29464 is critical vulnerability on WSO2 discovered by Orange Tsai. the vulnerability is an unauthenticated unrestricted arbitrary file upload which allows unauthenticated attackers to gain RCE on WSO2 servers via uploadi...

CVE-2025-30208

中文 | English Vite Dev Server Vulnerability Scanner 一个内外网通吃的自动化扫描器 An automated tool for scanning Vite development server vulnerabilities. This tool utilizes the FOFA API to collect potential targets and automatically detects specific vulnerabilities. Features Auto Automatic target asset collectio...

CVE-2020-17008

CVE-2020-17008 splWOW64 Elevation of Privilege C:\Windows\splwow64.exe Poc From: https://bugs.chromium.org/p/project-zero/issues/detail?id=2096 0x01 set splwow64poc.exe Low cd splwow64poc\x64\Release icacls splwow64poc.exe /setintegritylevel L root@kitploit: /setintegritylevel CIOI级别将完整性 ACE 显式...

wavecrack

Wavecrack Description A user-friendly Web interface to share an hashcat cracking box among multiple users with some pre-defined options. Screenshots The homepage Adding an hash to crack Seeing the results and some stats Outline This Web application can be used to launch asynchronous password crac...

wavecrack

Wavecrack 説明 hashcat によるクラック環境を複数ユーザーで共有するための、ユーザーフレンドリーな Web インターフェースです。いくつかの定義済みオプションを備えています。 スクリーンショット ホームページ クラックするハッシュの追加 結果と統計の表示 概要 この Web アプリケーションは、hashcat を用いた非同期パスワードクラック の実行に使用できます。 インターフェースは可能な限り ユーザーフレンドリー になるように設計されており、パスワードクラッキング手法の選択と、さまざまな攻撃モードを 自動で順次実行 することを容易にします。...

letsdefend-cve2024-3400-case-study

letsdefend-cve2024-3400-case-study Detection, analysis, and response strategies for CVE-2024-3400 exploitation attempts targeting Palo Alto PAN-OS GlobalProtect portals. Includes IOCs, exploit patterns, and mitigation guidance. CVE-2024-3400 Incident Investigation 🔍 Overview This repository...

Mailphish

Mailphish Coded By Pro MCracker Mailphish Will Help You To Create Professional Phishing Emails Fast And Easy Visit Our Websites For Learn Hacking Methods https://crackcodes.xyz And https://crackcodes.in If You Copy The Code And Make Your Own, Don't forget To Give Me Some Credit Kid! You Don't Get...

CVE-2023-1389

Description CVE-2023–1389 is an Unauthenticated Command Injection vulnerability in the TP-Link Archer AX21 WiFi router. A calllback in the country parameter uses the popen function, which is run as root, allowing the attacker to inject arbitrary values through GET or POST requests to the admin...