fsociety

fsociety A Modular Penetration Testing Framework Install root@kitploit: pip install fsociety Update root@kitploit: pip install --upgrade fsociety Usage root@kitploit: usage: fsociety -h -i -s A Penetration Testing Framework optional arg...

snallygaster

snallygaster Finds file leaks and other security problems on HTTP servers. what? snallygaster is a tool that looks for files accessible on web servers that shouldn't be public and can pose a security risk. Typical examples include publicly accessible git repositories, backup files potentially...

waf-bypass

WAF Bypass Tool WAF Bypass Tool is an open source tool to analyze the security of any WAF for False Positives and False Negatives using predefined and customizable payloads. Check your WAF before an attacker does. WAF Bypass Tool is developed by Nemesida WAF team with the participation of...

tcpflow

TCPFLOW 1.5.0 Downloads directory: http://digitalcorpora.org/downloads/tcpflow/ Installation Most common GNU/Linux distributions ship tcpflow in their repositories. So on Debian/Ubuntu/etc you can say root@kitploit: sudo apt-get install tcpflow and on Fedora/RedHat/CentOS/etc you can say...

infisical

Платформа управления секретами с открытым исходным кодом : Синхронизируйте секреты/конфигурации в вашей команде/инфраструктуре и предотвращайте утечки секретов. Slack | Infisical Cloud | Самостоятельное развертывание | Документация | Веб-сайт | Twitter | Вакансии удаленно/SF Введение Infisical —...

NoLongerEvil-Thermostat

Configurazione Firmware Nest Thermostat 🏆 Vincitore del FULU Bounty 🏆 Hack House e questo progetto sono i vincitori ufficiali del FULU Bounty per Nest Learning Thermostat Gen 1/2 Alternativa Hardware: Se sei interessato al lato hardware, dai un'occhiata a https://sett.homes per un'opzione di...

cloudlist

Features • Installation • Usage • Configuration • Running cloudlist • Supported providers • Library • Join Discord Cloudlist is a multi-cloud tool for getting Assets from Cloud Providers. This is intended to be used by the blue team to augment Attack Surface Management efforts by maintaining a...

gdb-frontend

GDBFrontend is an easy, flexible and extensionable gui debugger. Installing Requirements GDB = 8.2 with python3 python3 = 3.6 tmux PIP Package Python Wheel Recommended You can install GDBFrontend with pip. root@kitploit: sudo python3 -m pip install gdbfrontend if it is already installed and you a...

hate_crack

root@kitploit: / | \ / | \ \ | | / \ \ / \ / \ /\ \ \ / | |/ / \ Y // | | \ / \ | | // \ | \ /|| /\ | \ / / // / / / / Installation Installing from source is the only supported path. hatecrack is not distributed on PyPI: pip install hate-crack resolves to a 0.0.0 placeholder that...

Malicious code in trongridet (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 d37e79174370b2dcd44b05ddb583e65d2e0b878033aa0702653294dc965a3483 Package appears to be designed for private key exfiltration, but no known usage. The name appears to be related to the cryptocurrency TRX Tron / Tronix. Some...

MAL-2026-14542 Malicious code in trongridet (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 d37e79174370b2dcd44b05ddb583e65d2e0b878033aa0702653294dc965a3483 Package appears to be designed for private key exfiltration, but no known usage. The name appears to be related to the cryptocurrency TRX Tron / Tronix. Some...

CVE-2022-33891

「💥」CVE-2022-33891 描述 Apache Spark UI 提供了通过配置选项 spark.acls.enable 启用 ACL 的可能性。配合身份验证过滤器，该功能会检查用户是否具有查看或修改应用程序的访问权限。如果 ACL 已启用，HttpSecurityFilter 中的某条代码路径可能允许攻击者通过提供任意用户名来执行冒充操作。恶意用户随后可能能够访问一个权限检查函数，该函数最终会根据其输入构建一个 Unix shell 命令并执行它。这将导致以 Spark 当前运行的用户身份执行任意 shell 命令。此漏洞影响 Apache Spark 3.0.3...

fwknop

fwknop - Single Packet Authorization Introduction fwknop implements an authorization scheme known as Single Packet Authorization SPA for strong service concealment. SPA requires only a single packet which is encrypted, non-replayable, and authenticated via an HMAC in order to communicate desired...

mariana-trench

Mariana Trench Mariana Trench is a security focused static analysis platform targeting Android. This guide will walk you through setting up Mariana Trench on your machine and get you to find your first remote code execution vulnerability in a small sample app. These instructions are also availabl...

yj_nearbyglasses

yjnearbyglasses tentativo di rilevare occhiali intelligenti nelle vicinanze e avvisarti. ⚠ ATTENZIONE! ⚠ nearby-glasses-alert.pages.dev NON È CORRELATO AL MIO PROGETTO. Molte app nel Play Store e nell'App Store hanno un nome simile a Nearby Glasses o addirittura identico. Sembrano usurpare il nom...

metabigor

Metabigor - OSINT power without API key hassle What is Metabigor? Metabigor maps a target's infrastructure without asking you to register for a single API key. Network ranges, certificates, related domains, exposed ports, CDN vendors, and code leaks - all from free sources, all pipeable into each...

pbtk

pbtk - Reverse engineering Protobuf apps Protobuf is a serialization format developed by Google and used in an increasing number of Android, web, desktop and more applications. It consists of a language for declaring data structures , which is then compiled to code or another kind of structure...

writehat

WriteHat is a reporting tool which removes Microsoft Word and many hours of suffering from the reporting process. Markdown -- HTML -- PDF. Created by penetration testers, for penetration testers - but can be used to generate any kind of report. Written in Django Python 3. Features: Effortlessly...

trivy-action

Trivy Action GitHub Action per Trivy !GitHub Releaserelease-imgrelease !GitHub Marketplacemarketplace-imgmarketplace !Licenselicense-imglicense Indice Utilizzo Scansione della pipeline CI Scansione della pipeline CI con configurazione Trivy Cache Configurazione di Trivy Scansione di un tarball Us...

github-dorks

Github Dorks Github Search is a quite powerful and useful feature that can be used to search for sensitive data on repositories. Collection of Github dorks can reveal sensitive personal and/or organizational information such as private keys, credentials, authentication tokens, etc. This list is...