gh-safe-repo

gh-safe-repo Erstelle GitHub-Repositories mit automatisch angewendeten sicheren Standardeinstellungen. Ersetzt die fünfminütige Checkliste für Einstellungen nach der Erstellung durch einen einzigen Befehl. gh-safe-repo create root@kitploit: Branch protection, immutable tags, Dependabot, restricte...

ShadowNet

Un grande grazie a Gesù per aver dato visibilità a questo strumento! Rivolgiti a Gesù prima che sia troppo tardi. : Lui ti ama 🛡️ ShadowNet: Protocollo di Anonimato Flow-Invariant Tecniche Tor + Mixnet Non affidarti più al mimetizzarti nella folla per essere anonimo come la normale Tor, ORA ESSERE...

xpfarm

XPFarm Ein Open-Source-Schwachstellenscanner, der bekannte Open-Source-Sicherheitstools hinter einer einheitlichen Web-Benutzeroberfläche bündelt. Index Abschnitt| Beschreibung ---|--- Warum| Motivation und Philosophie hinter XPFarm Eingebundene Tools| Die 10 Open-Source-Tools, die von XPFarm...

Trinity-Audio-CVE-Report

Trinity-Audio-CVE-Report CVE-2025-9196 के लिए प्रकटीकरण CVE-2025-9196 - ट्रिनिटी ऑडियो में कमजोरी यह रिपॉजिटरी Trinity Audio = 5.20.1,WordPress प्लगइन sergiotrinity द्वारा विकसित में खोजी गई एक कमजोरी का प्रकटीकरण करता है। 🛠 प्रभावित संस्करण उत्पाद : Trinity Audio संस्करण : v5.20.1 URL :...

BridgeHead

BridgeHead Accesso C++ nativo ad Active Directory via ADWS, senza .NET, senza WCF, senza stack HTTP. BridgeHead è una libreria statica C++20 che implementa l'intero stack del protocollo Active Directory Web Services ADWS direttamente su TCP. Chiamata così dal server bridgehead AD, il gateway...

grubcrawler

Crawler web agentico con anti-rilevamento, fallback visivo e mesh peer-to-peer. Endpoint · Mesh · Anti-rilevamento · Ghost Protocol · Stream live · Strumenti MCP · Avvio rapido · Benchmark · Architettura Motore di crawling web full-stack con rendering JavaScript, browser anti-rilevamento Camoufox...

CVE-2026-46331

CVE-2026-46331 pedit COW – Linux net/sched Packet-Editor Seitencache-Vergiftungs-Sicherheitslücke Executive Summary CVE-2026-46331 Spitzname „pedit COW“ ist eine lokale Linux-Kernel-Privilegienausweitungs-Schwachstelle im Traffic-Control-Subsystem. Ein unprivilegierter Benutzer in einem...

Unihackers---CVE-2025-55182-

ITALIAN GANG React2Shell PoC Questo repository fornisce un ambiente minimale intenzionalmente vulnerabile per testare gli scanner di sicurezza contro la recente vulnerabilità critica di RCE React2Shell che interessa React Server Components e Next.js. CVE-2025-55182 : Esiste una vulnerabilità di...

xcrawl3r

xcrawl3r xcrawl3r is a command-line utility designed to recursively spider webpages for URLs. It works by actively traversing websites - following links embedded in webpages, and parsing files including sitemaps & robots.txt - to uncover every URL. Unlike xurlfind3r that doesn't interact directly...

Invoke-BadSuccessor.ps1

Invoke-BadSuccessor Missbrauchen Sie Erstellungsrechte für Delegated Managed Service Accounts dMSA in anfälligen Organisationseinheiten OUs, um in Active-Directory-Umgebungen Privilegien zu eskalieren BadSuccessor-Schwachstelle – CVE-2025-53779. Übersicht Invoke-BadSuccessor automatisiert eine...

LeakGauge

LeakGauge Dies ist das Code-Repository für unser Paper: The Model's Tell: Measuring Context-Leakage Attack Signals with Behavior Gauges. ArXiv-Version und Paper-Link: https://arxiv.org/abs/2608.17829 Dieses Repository implementiert die LeakGauge-Pipeline zur Leakage-Erkennung:...

OpenSTAManager_RCE_Exploit-CVE-2026-38751-

OpenSTAManager RCE 利用工具 CVE-2026-38751 概述 此 Python 脚本利用 OpenSTAManager 2.10 版本中的一个远程代码执行漏洞，编号为 CVE-2026-38751。该利用工具允许经过身份验证的用户上传恶意模块并在目标系统上执行任意命令。 漏洞详情 CVE ID ：CVE-2026-38751 产品 ：OpenSTAManager 版本 ：2.10 类型 ：远程代码执行 RCE 攻击向量 ：基于 Web，需要有效身份验证 利用原理 该利用工具遵循以下步骤： 1. 身份验证 ：使用提供的凭据登录 OpenSTAManager 应用 2...

CVE-2012-2982

CVE-2012-2982 사용자 OstojaOfficial의 원본을 개선한 CVE-2012-2982 Webmin 1.580용 Python POC 이 스크립트는 원본 스크립트의 개선 버전으로, 사용자가 전체 스크립트를 살펴보지 않고도 데이터 입력 형식을 확인할 수 있도록 합니다. 이를 위해 해당 코드 섹션을 단순히 스크립트 시작 부분으로 이동했습니다: 동시에 스크립트가 계속 실행되는 것을 방지하기 위한 종료 명령어sys.exit1가 추가되었습니다. 또한 사용자가 익스플로잇을 호출할 때 Webmin 1.580 서비스가 실행 중인...

CVE-2017-0785

CVE-2017-0785 PoC Armis가 공개한 Android 정보 유출 취약점을 기반으로 한 개인 학습용입니다. 추가 자료: https://www.facebook.com/khelfatni 실행하려면 pybluez와 pwntools가 설치되어 있어야 합니다. root@kitploit: sudo apt-get install bluetooth libbluetooth-dev sudo pip install pybluez sudo pip install pwntools...

CVE-2024-3400

Уязвимость CVE-2024-3400 Описание Уязвимость CVE-2024-3400 — это уязвимость безопасности, затрагивающая межсетевые экраны PAN-OS версий 10.2, 11.0 и 11.1. Данная уязвимость эксплуатируется, когда включены конфигурации шлюза GlobalProtect и телеметрии устройств. Злоумышленник может воспользоваться...

CVE-glibc

CVE-glibc CVE-2015-0235 glibc होस्ट नाम द्वारा प्राप्त करें समस्या प्राप्त करने/जांचने के लिए कॉपी और पेस्ट करें root@kitploit: wget https://github.com/alanmeyer/CVE-glibc/raw/master/get-GHOST.sh chmod +x get-GHOST.sh ./get-GHOST.sh संदर्भ:...

httpgrep

Descrição Uma ferramenta Python rápida e assíncrona que varre servidores HTTPS e procura por strings ou padrões regex nos corpos e cabeçalhos de respostas HTTP. Ela aceita hosts únicos, URLs, faixas CIDR, faixas de IP ou arquivos; varre múltiplas portas por alvo porta única, listas separadas por...

httpgrep

Description A fast, asynchronous Python tool that scans HTTPS servers and greps for strings or regex patterns in HTTP response bodies and headers. It takes single hosts, URLs, CIDR ranges, IP ranges or files; scans multiple ports per target single, comma-lists or ranges, auto-detecting TLS vs pla...

androidReverse v20

Android Reverse A reverse engineering suite that runs entirely on Android. No PC, no ADB, no desktop tools — everything from APK extraction to native binary analysis happens on-device. MCP Server androidReverse includes a built-in Model Context Protocol server, allowing MCP-compatible AI clients ...

CVE-2026-74734

In the Linux kernel, the following vulnerability has been resolved: firewire: ohci: fix NULL pointer dereference in arcontextrelease During the error handling path of the driver's probe function, a NULL pointer dereference can occur in arcontextrelease. When pciprobe fails early e.g., if...