CVE-2024-25600-Bricks-Builder-plugin-for-WordPress

CVE-2024-25600 Exploit Tool 🚀 Description 📝 This tool 🛠️ is designed to exploit the CVE-2024-25600 vulnerability 🕳️ found in the Bricks Builder plugin for WordPress. The vulnerability allows for unauthenticated remote code execution on affected websites 💻. The tool automates the exploitation...

CVE-2007-2447

CVE-2007-2447 CVE-2007-2447 - Samba usermap स्क्रिप्ट। https://amriunix.com/post/cve-2007-2447-samba-usermap-script/ उपयोग: root@kitploit: $ python usermapscript.py RHOST -- लक्ष्य पता RPORT -- लक्ष्य पोर्ट TCP : 139 LHOST -- सुनने का पता LPORT -- सुनने का पोर्ट स्थापना root@kitploit: sudo apt...

shellsum

Shellsum What is this? A defense tool - detect web shells in local directories via md5sum Features Fast speed Lightweight Big database Table output Usages Install root@kitploit: git clone https://github.com/ManhNho/shellsum.git chmod 755 -R shellsum/ cd shellsum/ pip install -r requirements.txt R...

bluing

Bluing An intelligence gathering tool for hacking Bluetooth English · 简体中文 %20%7C%20Kali%202022.4%20\x64%20%7C%20Kali%20NetHunter%202022.4%20\aarch64-brightgreen Bluing formerly bluescan is a Blu etooth In telligence G athering tool written primarily in Python. It can help us snoop on the...

CVE-2022-1388-rs

CVE-2022-1388-rs Scanner and Interactive shell for CVE-2022-1388 F5 BIG-IP iControl REST Auth Bypass RCE written in Rust Summary To wrap things up here is an overview of the necessary conditions of a request for exploiting this vulnerability: Connection header must include X-F5-Auth-Token...

nomore403

NoMore403 nomore403 एक कमांड-लाइन टूल है जो HTTP एक्सेस-कंट्रोल बाईपास और पार्सर असंगतियों का परीक्षण 401, 403, और संबंधित प्रतिक्रियाओं के आसपास करने के लिए है। यह टूल व्यावहारिक वेब सुरक्षा कार्य के लिए डिज़ाइन किया गया है: बग बाउंटी, पेनिट्रेशन टेस्टिंग, सुरक्षा समीक्षा, और एक्सेस-कंट्रोल नियम...

CVE-2018-6574

CVE-2018-6574 Go 1.8.7 से पहले, Go 1.9.x 1.9.4 से पहले, और Go 1.10 pre-releases Go 1.10rc2 से पहले, go get को स्रोत कोड बिल्ड के दौरान रिमोट कमांड निष्पादन की अनुमति देते हैं, gcc या clang प्लगइन सुविधा का लाभ उठाकर, क्योंकि -fplugin= और -plugin= आर्गुमेंट्स को ब्लॉक नहीं किया गया था। from mitre...

sccmsqlclient

sccmsqlclient عميل MSSQL مخصص لاستكشاف واستغلال قاعدة بيانات SCCM. استعلامات استطلاع تشغيل سكربتات PowerShell على العملاء المُدارين استخراج الأسرار التثبيت PIPX root@kitploit: $ pipx install git+https://github.com/synacktiv/sccmsqlclient/ PIP يمكنك التثبيت عن طريق استنساخ المستودع وتثبيت التبعيات...

wifi-agent

wifi-agent wifi-agent Rogue access point. The program is made for educational purposes only for to see how the rogue access point method works. Any unnecessary use of the program is prohibited and the manufacturer has no responsibility for any illegal use by anyone. Use the tool at your own risk...

MalScan

MalScan MalScan is a simple PE File Heuristics Scanners written in python that you can use to quickly analyze a PE file and find out whether anything suspicious exists. It is a simple tool so doesn't offers much fancy features. You are free to extend it or do whatever you want with it. Things...

Kitsune

Kitsune Kitsune is a Polymorphic Command & Control. This tool allows you to get a graphical version of your favourite hacking tools, such as NetExec, Villain or Evil-WinRM among others. In addition, brings many improvements such as automatic reconnection, reports, history and some extra functions...

cuckoo-droid

CuckooDroid - स्वचालित एंड्रॉइड मैलवेयर विश्लेषण। योगदानकर्ता: Check Point Software Technologies LTD. CuckooDroid, Cuckoo Sandbox का एक विस्तार है, जो संदिग्ध फ़ाइलों के विश्लेषण को स्वचालित करने के लिए एक ओपन सोर्स सॉफ़्टवेयर है। CuckooDroid, Cuckoo में एंड्रॉइड एप्लिकेशन के निष्पादन और विश्लेषण...

ReconDog

ReconDog Reconnaissance Swiss Army Knife Main Features Wizard + CLA interface Can extracts targets from STDIN piped input and act upon them All the information is extracted with APIs, no direct contact is made to the target Utilities Censys: Uses censys.io to gather massive amount of information...

nanodump

NanoDump एक लचीला उपकरण जो LSASS प्रक्रिया का मिनीडंप बनाता है। विषय सूची 1. उपयोग 2. विशेषताएँ 3. तकनीकों का संयोजन 4. उदाहरण 5. HTTPS रीडायरेक्टर 1. उपयोग root@kitploit: usage: Z:\nanodump.x64.exe --write C:\Windows\Temp\doc.docx --valid --duplicate --elevate-handle --duplicate-elevate...

nanodump

NanoDump A flexible tool that creates a minidump of the LSASS process. Table of contents 1. Usage 2. Features 3. Combining Techniques 4. Examples 5. HTTPS Redirectors 1. Usage root@kitploit: usage: Z:\nanodump.x64.exe --write C:\Windows\Temp\doc.docx --valid --duplicate --elevate-handle...

CVE-2024-41570

CVE-2024-41570 | Havoc C2 SSRF مع RCE | استغلال شل عكسي آلي عبر WebSocket يوفر هذا المشروع نصًا برمجيًا لإثبات المفهوم PoC مبنيًا على Python لاستغلال خدمة قائمة على WebSocket ضعيفة. يقوم البرنامج النصي بأتمتة تسجيل الوكيل، توصيل حمولة WebSocket، وتنفيذ الأوامر عن بُعد لإنشاء شل عكسي. الميزات يسجل...

swarm

swarm v0.6.0 English | 中文. Swarm is an open source modular distributed penetration testing Tool that use distributed task queue to implement communication in the master-slave mode system and use MongoDB for data storage. It consists of a distributed framework and function modules. The function...

Router-Exploit-Shovel

Router Exploit Shovel Automated Application Generation for Stack Overflow Types on Wireless Routers Router exploits shovel is an automated application generation tool for stack overflow types on wireless routers. The tool implements the key functions of exploits, it can adapt to the length of the...

bypass-firewalls-by-DNS-history

Bypass firewalls by abusing DNS history This script will try to find: the direct IP address of a server behind a firewall like Cloudflare, Incapsula, SUCURI ... an old server which still running the same inactive and unmaintained website, not receiving active traffic because the A DNS record is n...

AIX360

AI Explainability 360 v0.3.0 ✨ جديد: طوّرت IBM Research مجموعة أدوات جديدة باسم In-Context Explainability 360 ICX360 تعمل على توسيع نطاق قابلية التفسير لتشمل نماذج اللغة الكبيرة LLMs ، وتحديدًا فيما يتعلق بالمدخلات المُعطاة لنموذج اللغة الكبير. يرجى الاطلاع عليها! 🚀✨ مجموعة أدوات AI Explainabilit...