POC-CVE-2023-32233

Use-After-Free no Netfilter nftables ao processar solicitações em lote Demonstração Detalhes da Vulnerabilidade O código afetado é originário do kernel Linux oficial de https://kernel.org/ e faz parte do componente Netfilter nftables net/netfilter/nftablesapi.c. Netfilter nftables permite atualiz...

xsssniper

XSSSNIPER xsssniper is an handy xss discovery tool with mass scanning functionalities. Usage: root@kitploit: Usage: xsssniper.py options Options: -h, --help show this help message and exit -u URL, --url=URL target URL --post try a post request to target url --data=POSTDATA post data to use...

hershell

Hershell NOTE: the project has been forked on this repo, check there for any other developments. Hershell is a simple TCP reverse shell written in Go. It uses TLS to secure the communications, and provide a certificate public key fingerprint pinning feature, preventing from traffic interception...

Network-Detection-Engine

versione: 0.001 Motore di Rilevamento Rete root@kitploit: Un leggero 'Motore di Rilevamento Intrusioni di Rete' cattura il traffico live e rileva attacchi live reali in tempo reale. Zig0.15.2. Caratteristiche root@kitploit: - Cattura live dei pacchetti usando libpcap - Parsing personalizzato dei...

chlonium

Chlonium Chlonium is an application designed for cloning Chromium Cookies. From Chromium 80 and upwards, cookies are encrypted using AES-256 GCM, with a state key which is stored in the Local State file. This state key is encrypted using DPAPI. This is a change from older versions, which used DPA...

botb

Break out the Box BOtB BOtB is a container analysis and exploitation tool designed to be used by pentesters and engineers while also being CI/CD friendly with common CI/CD technologies. What does it do? BOtB is a CLI tool which allows you to: Exploit common container vulnerabilities Perform commo...

kickthemout

KickThemOut KickThemOut - Kick Devices Off Your Network A tool to kick devices out of your network and enjoy all the bandwidth for yourself. It allows you to select specific or all devices and ARP spoofs them off your local area network. Compatible with Python 3+ 🎉. Not compatible with Windows...

Spoof_AnyMail

SpoofAnyMail Das leistungsstärkste Fake-Mail-Sender-Tool SpoofAnyMail Unentdeckbares Tool Befehle zum Ausführen des Tools in deinem Terminal root@kitploit: Note : Tool is Made of Educational Purposes only. Please try not to harm anyone device it's For Fun Purpose Not For Revenge Join Us All...

recon-ng

The Recon-ng Framework Recon-ng content now available on Pluralsight! Recon-ng is a full-featured reconnaissance framework designed with the goal of providing a powerful environment to conduct open source web-based reconnaissance quickly and thoroughly. Recon-ng has a look and feel similar to the...

permission-manager

Permission manager Welcome to the Permission Manager! 🎉 🎉 Permission Manager is an application developed by SIGHUP that enables a super-easy and user-friendly RBAC management for Kubernetes. If you are looking for a simple and intuitive way of managing your users within a Kubernetes cluster, this...

CVE-2023-1389

Descrizione CVE-2023–1389 è una vulnerabilità di Iniezione di Comandi non autenticata nel router WiFi TP-Link Archer AX21. Un callback nel parametro country utilizza la funzione popen , eseguita come root, consentendo all'attaccante di iniettare valori arbitrari tramite richieste GET o POST...

cert-pinning-flaw-poc

POC difetto di certificate pinning Semplice script POC per testare CVE-2016-2402 e difetti simili. Leggi il mio post sul blog per i dettagli. Questa utility imposterà un server HTTPS che fornisce una catena di certificati dannosa al client per un dominio specifico. Se il traffico di un'app con...

beagle

Beagle 1. About Beagle 2. Installation 1. Docker 2. Python Package 3. Configuration 3. Web Interface 1. Uploading Data 2. Browsing Existing Graphs 3. Graph Interface 1. Inspecting Nodes and Edges 2. Expanding Neighbours 3. Hiding Nodes 4. Running Mutators 5. Toggling Node and Edge Types 6...

wavecrack

Wavecrack Description A user-friendly Web interface to share an hashcat cracking box among multiple users with some pre-defined options. Screenshots The homepage Adding an hash to crack Seeing the results and some stats Outline This Web application can be used to launch asynchronous password crac...

log4j-CVE-2021-44228

Apache Log4j Zero Day aka Log4Shell aka CVE-2021-44228 Introduzione Riprodurre il problema in ambiente k8s Configurare un ambiente k8s con la vulnerabilità Soluzioni possibili KubeArmor Security Policy Non consentire alcuna esecuzione dalla JVM/Java Regole basate su Default Deny...

hashcobra

hashcobra hashcobra Hash Cracking tool. Description This tool uses a new method to crack hashes. With the help of rainbow tables concept this tool generates rainbow tables from wordlists to heavily optimize the cracking process. Usage root@kitploit: $ ./hashcobra -H --== hashcobra by sepehrdad ==...

reconspider

Most Advanced Open Source Intelligence OSINT Framework ReconSpider ReconSpider is most Advanced Open Source Intelligence OSINT Framework for scanning IP Address, Emails, Websites, Organizations and find out information from different sources. ReconSpider can be used by Infosec Researchers,...

CVE-2026-71518

CVE-2026-71518 — Bypass dell'autorizzazione senza autenticazione in Typemill Le varianti URL equivalenti a livello di percorso aggirano i download dei media limitati per ruolo La restrizione è basata sul percorso grezzo della richiesta; il file viene letto dal percorso risolto dal sistema operati...

CVE-2019-19576

class.upload.php = 2.0.3 Caricamento arbitrario di file Autore - Jinny Ramsmark Vendor interessato - Verot.net Prodotto interessato - class.upload.php = 2.0.3 Testato su Ubuntu 19.10 appena installata con PHP7.3 e Apache/2.4.38 In particolare Debian/Ubuntu è risultata vulnerabile poiché aggiungon...

spraygen

Spraygen पासवर्ड स्प्रेइंग के लिए पासवर्ड सूची जनरेटर - अच्छाइयों से पहले से तैयार संस्करण 1.7 महीनों, ऋतुओं, वर्षों, खेल टीमों NFL, NBA, MLB, NHL, खेल स्कोर, "पासवर्ड" और एक निर्दिष्ट आकार के पुनरावृत्त कीस्पेस के क्रमपरिवर्तन उत्पन्न करता है। सभी क्रमपरिवर्तन सामान्य विशेषताओं के साथ उत्पन्न हो...