AD-description-password-finder

AD description password finder The purpose of this tool is to check if passwords are stored in clear text in the description of Active Directory accounts. The requirements are : having a copy of the ntds.dit and SYSTEM hive If you don't have python, you can use the .exe version of the scripts in...

cgi-bin-shellshock

How to use Clone the repository or just copy-paste the one you prefer root@kitploit: sudo git clone https://github.com/Gurguii/shellshock.sh Run the script Bash root@kitploit: bash shellshock.sh -u -h -p Python root@kitploit: python3 shellshock.py -u -lh -lp Note: default LPORT is 4444, URL...

LdapRelayScan

LDAP Relay Scan A tool to check Domain Controllers for LDAP server protections regarding the relay of NTLM authentication. If you're interested in the specifics of the error-based enumeration, see below. For details regarding what can be done when you identify a lack of LDAP protections, see the...

CVE-2017-16995

Linux Kernel Version 4.14 - 4.4 Ubuntu && Debian Description This vulnerability exists in the eBPF bpf2 system call in the Linux kernel. When a user provides a malicious BPF program that causes a calculation error in the eBPF verifier module, it leads to arbitrary memory read/write issues...

deploy-goad

Deploy GOAD v2 on Ubuntu Linux 22.04 This script streamlines the prerequisites needed when deploying the Active Directory lab provided by https://github.com/Orange-Cyberdefense/GOAD High level description Ensure computer has VTx extensions enabled in BIOS Install Ubuntu Server 22.04 Configure...

oauth-scan

OAUTHScan Description OAUTHScan is a Burp Suite Extension written in Java with the aim to provide some automatic security checks, which could be useful during penetration testing on applications implementing OAUTHv2 and OpenID standards. The plugin looks for various OAUTHv2/OpenID vulnerabilities...

Azure_Workshop

Azure Red Team Attack and Detect Workshop This is a vulnerable-by-design Azure lab containing 2 x attack paths with common misconfigurations. These vulnerabilities are intended to represent those found in live production environments and the attack vectors are intended to be as realistic as...

zairo

zairo Diff 보안 스캐너는 변경 사항의 영향을 놓칩니다. Zairo는 그 영향을 찾아내고 취약점을 탐색합니다. Zairo는 컨텍스트를 포함해 코드에서 변경된 부분을 스캔하고, 확인할 수 있는 하위 그래프subgraph를 생성한 후 선택한 LLM을 사용해 취약점을 찾습니다. 설치 root@kitploit: pipx install zairo 사용법 root@kitploit: 아직 커밋하지 않은 모든 것을 스캔 zairo . PR/브랜치 diff 스캔 zairo . --base main --target HEAD 높은 심각도의...

CVE-2025-29927

Next.js CVE-2025-29927 This repository contains a proof of concept for CVE-2025-29927 vulnerability in Next.js, where the internal header x-middleware-subrequest can be exploited to bypass middleware checks such as authentication. Affected Versions Next.js 15.x 🧪 This project was tested with...

mwcfg

악성코드 구성 추출기 MalDuck용 악성코드 구성 추출 도구 및 모듈 이 프로젝트는 무료🍺입니다. 상업적으로, 개인적으로, 또는 원하는 방식으로 사용하세요. 이 프로젝트를 가장 쉽게 사용하는 방법은 mwcfg.info를 방문하여 바로 악성코드 구성을 추출하는 것입니다! 이 프로젝트가 마음에 들고 악성코드와의 싸움을 지원하기 위해 💰 기부를 원하신다면... 저는 🍺를 마시지 않으므로 16oXesi7uv3jdPZxxwarHSD2f3cNMpaih9로 약간의 ₿를 보내 🍵를 사주세요. 설치: root@kitploit: sudo ap...

mwcfg

Malware Configuration Extractor A Malware Configuration Extraction Tool and Modules for MalDuck This project is FREE as in FREE 🍺, use it commercially, privately or however you see fit. The easiest way to use this project is to visit mwcfg.info, and start extracting malware config right away! If...

SCMKit

SCMKit Description S ource C ode M anagement Attack Toolkit - SCMKit is a toolkit that can be used to attack SCM systems. SCMKit allows the user to specify the SCM system and attack module to use, along with specifying valid credentials username/password or API key to the respective SCM system...

cve-2023-5044

CVE-2023-5044 Ingress Nginx Exploit Proof-Of-Concept This is a quick Go program to exploit the recent CVE in the Ingress Nginx controller. Details on how to do this are already out there via Rory McCune's blog at https://raesene.github.io/blog/2023/10/29/exploiting-CVE-2023-5044/, this just...

ubuntu-privesc-lab

ubuntu-privesc-lab Full penetration testing workflow: credential brute force, SSH access and privilege escalation CVE-2021-4034 OVERVIEW This project demonstrates a full penetration testing workflow against a vulnerable Ubuntu virtual machine. The attack chain includes reconnaissance, credential...

openssl-heartbleed-fix

openssl-heartbleed-fix OpenSSL Heartbleed CVE-2014-0160 수정 스크립트 Sammy Fung [email protected] OpenSSL Heartbleed CVE-2014-0160 http://www.us-cert.gov/ncas/alerts/TA14-098A 버그는 네트워크 보안 전문가들에 의해 발견되었으며, 일부 OpenSSL 버전을 사용하는 많은 시스템이 영향을 받습니다. 이론적으로, 많은 웹 서버의 SSL 인증서가 영향을 받은 것으로 추정되므로, 수정된 버전의...

NegoExRelay

Negoexrelayx - Negoex relaying tool Toolkit for abusing Kerberos PKU2U and NegoEx. Requires impacket It is recommended to install impacket from git directly to have the latest version available. negoexrelayx.py This tool allows you to relay NegoEx with PKU2U authentication to other copmuter and...

CVE-2024-36401

CVE-2024-36401: GeoServer Unauthenticated Remote Code Execution Exploiter a Vulnerability detection and Exploitation tool for GeoServer Unauthenticated Remote Code Execution CVE-2024-36401. Installation root@kitploit: git clone https://github.com/RevoltSecurities/CVE-2024-36401.git cd...

DC30-Badge-Challenge-Writeup

DC30-Badge-Challenge-Writeup Table of Contents Intro Challenge Part 1: Gathering Notes Challenge Part 2: Calling YИИEႱ Challenge Part 2A: Alice Challenge Part 2B: Bob Challenge Part 2C: Carol Challenge Part 2D: Dan Challenge Part 2E: Eve Challenge Part 2F: Trevor Challenge Part 3: The Final Threa...

drawio-threatmodeling

Draw.io libraries for threat modeling This is a collection of custom libraries to turn the free and cross-platform Draw.io diagramming application into the perfect tool for threat modeling. Data Flow Diagrams Data Flow Diagramming is a simple diagramming technique used to gain an understanding of...

CVE-2022-29469

CVE-2022-29469 Thanks To All SynixCyberCrimeMY Members + Muslim Hackers How To Usage ? git clone https://github.com/S4muraiMelayu1337/CVE-2022-29469/ cd CVE-2022-29469 pip3 install -r requirements.txt python3 cve.py...