netlas-cookbook

Netlas CookBook L'objectif de ce guide est d'enseigner à toute personne intéressée par la cybersécurité, quel que soit son niveau de connaissance, comment tirer le meilleur parti des outils de recherche Netlas. C'est une lecture longue. Nous avons rassemblé autant de cas d'utilisation simples que...

CVE-2023-2732

CVE-2023-2732 MStore API = 3.9.2 - Contournement d'authentification https://www.wordfence.com/threat-intel/vulnerabilities/wordpress-plugins/mstore-api/mstore-api-392-authentication-bypass Description root@kitploit: The MStore API plugin for WordPress is vulnerable to authentication bypass in...

EagleEye

root@kitploit: $$$$$$$$\ $$\ $$$$$$$$\ $$ | $$ | $$ | $$ | $$$$$$\ $$$$$$\ $$ | $$$$$$\ $$ | $$\ $$\ $$$$$$\ $$$$$\ $$\ $$ $$\ $$ |$$ $$\ $$$$$\ $$ | $$ |$$ $$\ $$ | $$$$$$$ |$$ / $$ |$$ |$$$$$$$$ | $$ | $$ | $$ |$$$$$$$$ | $$ | $$ $$ |$$ | $$ |$$ |$$ | $$ | $$ | $$ |$$ | $$$$$$$$\$$$$$$$...

CVE-2024-0757-Exploit

CVE-2024-0757 Exploit Description Le plugin Insert or Embed Articulate Content into WordPress pour WordPress est vulnérable aux téléversements arbitraires de fichiers via des téléversements non sécurisés dans une archive zip dans toutes les versions jusqu'à la version 4.3000000023 incluse. Cela...

fb-phisher-python

Facebook Phishing Auteur original : Arslan Mughal PAR : arjunindia dépôt original : https://github.com/arslanmughal5566/facebookphishing À propos du script : Avec ce script, vous pouvez voler les identifiants de connexion Facebook en utilisant certaines compétences d'ingénierie sociale. Prérequis...

WSuspicious

WSuspicious Résumé Ceci est un programme de preuve de concept pour escalader les privilèges sur un hôte Windows en abusant de WSUS. Détails dans cet article de blog : https://www.gosecure.net/blog/2020/09/08/wsus-attacks-part-2-cve-2020-1013-a-windows-10-local-privilege-escalation-1-day/ Il a été...

Sudomy

Sudomy Subdomain Enumeration & Analysis Sudomy is a subdomain enumeration tool to collect subdomains and analyzing domains performing advanced automated reconnaissance framework. This tool can also be used for OSINT Open-source intelligence activities. Features ! For recent time, Sudomy has these...

FGscanner

FantaGhost URL Scanner 1.1 Дата выпуска : 2014/02/05 Продвинутый сканер веб-каталогов с поддержкой прокси и TOR Описание FGscanner — это продвинутый сканер веб-каталогов с открытым исходным кодом. Он находит скрытое содержимое на веб-сервере с помощью атаки по словарю. Сканер URL FantaGhost...

PenBox

PenBox – A Penetration Testing Framework A Penetration Testing Framework , The Hacker’s Repo our hope is in the last version we will have evry script that a hacker needs Information Gathering : nmap Setoolkit Port Scanning Host To IP wordpress user enumeration CMS scanner XSStracer - checks remot...

privaxy

Privaxy Next generation tracker and advertisement blocker About Privaxy is a MITM HTTPs proxy that sits in between HTTPs talking applications, such as a web browser and HTTP servers, such as those serving websites. By establishing a two-way tunnel between both ends, Privaxy is able to block netwo...

CVE-2022-36537-EXPLOIT

CVE-2022-36537 Краткое описание R1Soft Server Backup Manager использует ZK framework в качестве основного фреймворка. Его безопасность требует, чтобы все участники Web3-проектов уделяли больше внимания уязвимостям безопасности различных инфраструктур Web3 и своевременно их исправляли, чтобы...

xssor2

XSS'OR XSS'OR - Hackez avec JavaScript. EN LIGNE Vous pouvez essayer : https://xssor.io et http://xssor.io/ Il contient trois modules principaux : Encode/Decode, Codz, Probe. INSTALLATION Python 3 avec Django 3.0. ou Python 2 avec Django 1.11. git clone https://github.com/evilcos/xssor2 or downlo...

xssor2

XSS'OR XSS'OR - Hack with JavaScript. ONLINE You can have a try: https://xssor.io and http://xssor.io/ It contains three major modules: Encode/Decode, Codz, Probe. INSTALL Python 3 with Django 3.0. or Python 2 with Django 1.11. git clone https://github.com/evilcos/xssor2 or download directly cd...

log4j_checker

Log4jchecker.py CVE-2021-44228 Описание Этот скрипт на Python3 пытается найти серверы, уязвимые для CVE-2021-44228, также известной как Log4Shell, очень критической уязвимости, обнаруженной в библиотеке журналирования Log4j2 на Java. Он не полагается на внешние DNS-логи серверы для проверки и...

CVE-2024-7954-RCE

설명 SPIP 4.30-alpha2, 4.2.13 및 4.1.16 이전 버전에서 사용되는 porteplume 플러그인은 임의 코드 실행 취약점에 취약합니다. 원격의 인증되지 않은 공격자는 조작된 HTTP 요청을 전송하여 SPIP 사용자 권한으로 임의의 PHP 코드를 실행할 수 있습니다. 익스플로잇 개념 증명 root@kitploit: POST /index.php?action=porteplumeprevisu HTTP/1.1 Host: Hostname Content-Type:...

CVE-2019-5475-Nexus-Repository-Manager-

CVE-2019-5475-Nexus-Repository-Manager- 페이로드 root@kitploit: PUT /nexus/service/siesta/capabilities/xxxxxxxxx HTTP/1.1 Host: xxxx.xxxx.com User-Agent: Accept: application/json,application/vnd.siesta-error-v1+json,application/vnd.siesta-validation-errors-v1+json Accept-Language:...

remote-control

Remote Control for Laravel Предоставьте удалённый доступ к учётной записи пользователя, не передавая учётные данные. Установка Конфигурация Использование Маршрутизация Создание удалённого доступа Использование сгенерированного токена доступа Установка Remote Control можно установить через compose...

cve-2022-27255

CVE-2022-27255 - Débordement de tampon dans SIP ALG du SDK Realtek eCos Ce dépôt contient les supports de la présentation "Exploring the hidden attack surface of OEM IoT devices: pwning thousands of routers with a vulnerability in Realtek’s SDK for eCos OS.", présentée au DEFCON30. Le contenu de ...

CVE-2026-82635

Pake before 3.13.1 is vulnerable to arbitrary file write via its download_file Tauri command. The JavaScript-supplied filename is joined onto the user's Downloads directory without sanitization, so a filename containing path traversal sequences or an absolute path resolves outside ~/Downloads. Th...

CVE-2026-82635 Pake arbitrary file write via unsanitized download_file filename

Pake before 3.13.1 joins the JavaScript-supplied filename for the downloadfile Tauri command onto the user's Downloads directory with no sanitization. A filename containing path traversal sequences for example ../Library/LaunchAgents/com.evil.plist or an absolute path resolves outside /Downloads...