brutemap

Brutemap .. image:: https://brutemap-dev.github.io/static/brutemap-logo.jpg :target: https://brutemap-dev.github.io :alt: Brutemap Logo |Build Status| |Python| |License| .. |Build Status| image:: https://travis-ci.org/brutemap-dev/brutemap.svg?branch=master :target:...

nishang

Nishang Nishang is a framework and collection of scripts and payloads which enables usage of PowerShell for offensive security, penetration testing and red teaming. Nishang is useful during all phases of penetration testing. By Nikhil Mittal Founder of Altered Security - Hands-on red team and...

CVE-2020-9496

CVE-2020-9496 XML-RPC request are vulnerable to unsafe deserialization and Cross-Site Scripting issues in Apache OFBiz 17.12.03 Install requirements root@kitploit: $ pip install -r requirements.txt $ wget https://jitpack.io/com/github/frohoff/ysoserial/master-SNAPSHOT/ysoserial-master-SNAPSHOT.ja...

CVE-2021-35215

CVE-2021-35215 SolarWinds Orion Platform ActionPluginBaseView 反序列化RCE，需要登录。 PoC root@kitploit: POST /Orion/RenderControl.aspx HTTP/1.1 Host: 192.168.137.130:8787 Content-Length: 3648 Cache-Control: max-age=0 Origin: http://192.168.137.130:8787 Upgrade-Insecure-Requests: 1 DNT: 1 Content-Type:...

CVE-2024-23692

POC - Rejetto HTTP 文件服务器中的未认证 RCE 漏洞 - CVE-2024-23692 概述 POC - Rejetto HTTP 文件服务器中的未认证 RCE 漏洞 - CVE-2024-23692 CVE-2024-23692 - YouTube CVE-2024-23692 是 Rejetto HTTP 文件服务器（HFS）2.3m 版本中的一个严重漏洞，允许未经认证的远程代码执行（RCE）。 该漏洞使攻击者能够在服务器上执行任意代码，带来严重的安全风险。在本文中，我们探讨 Rejetto HFS、受影响的版本、该漏洞的影响，以及其发现和修复的时间线。 阅读相关...

slipstream

NAT Slipstreaming NAT Slipstreaming permite a un atacante acceder remotamente a cualquier servicio TCP/UDP vinculado a cualquier sistema detrás del NAT de la víctima, evitando el NAT/cortafuegos de la víctima control remoto arbitrario de agujeros en el cortafuegos, simplemente con que la víctima...

slipstream

NAT Slipstreaming NAT Slipstreaming allows an attacker to remotely access any TCP/UDP service bound to any system behind a victim's NAT, bypassing the victim's NAT/firewall remote arbitrary firewall pinhole control, just by the victim visiting a website. v1 developed by : @SamyKamkar //...

-EXPLOIT-CVE-2023-36025

EXPLOIT CVE-2023-36025 - Description Windows SmartScreen Security Feature Bypass Vulnerability Usage NOTE handler waiting for tcp request for target P.S configure CVE-2023-36025.vbs file to change the ip and port to machine ip and port that is being used for the TCP handler configure reverse TCP...

fbchecker

ABANDONED Facebook block multiple access with their API FACEBOOK MASS ACCOUNT CHECKER Facebook Mass Account Checker Without Locked Account Simple Installation : root@kitploit: apt install git php -y git clone https://github.com/fdciabdul/fbchecker cd fbchecker php fbcheck.php Usage root@kitploit:...

fbchecker

ABANDONADO Facebook bloquea el acceso múltiple con su API COMPROBADOR MASIVO DE CUENTAS DE FACEBOOK Comprobador Masivo de Cuentas de Facebook Sin Cuenta Bloqueada Instalación simple : root@kitploit: apt install git php -y git clone https://github.com/fdciabdul/fbchecker cd fbchecker php fbcheck.p...

DevSecOpsGuideline

OWASP DevSecOps 指南 OWASP DevSecOps 指南介绍了如何实现安全流水线、运用最佳实践，并引入可在此方面使用的工具。此外，该项目还致力于帮助我们在开发流程中推广“左移安全”文化。 本项目适用于任何拥有开发流水线（换言之，即 DevOps 流水线）的各种规模的公司。 我们力求在此项目中勾勒出安全 DevOps 流水线的整体视图，然后根据我们定制化的需求加以改进。 理想目标是“尽早发现安全问题（无论是设计缺陷还是应用漏洞）。” 初始步骤 DevSecOps 的核心就是将安全融入 DevOps。但要跟上 CI/CD 的节奏，安全必须尽早注入软件编写与测试环节。 OWA...

Check-for-CVE-2023-32629-GameOver-lay

Comprobar CVE-2023-32629 GameOverlay Resumen del script: El script está diseñado para realizar comprobaciones de seguridad en un sistema Ubuntu para detectar vulnerabilidades relacionadas con los fallos GameOverlay. Verifica dos vulnerabilidades específicas, CVE-2023-2640 y CVE-2023-32629, que...

workshop_firmware_reverse_engineering

工作坊：固件逆向工程 此仓库包含 幻灯片 和动手实践材料，内容围绕 Emproof 在 ScapyCon Automotive 2025 上举办的固件逆向工程工作坊。该工作坊面向具有最少安全经验的技术受众，通过实用、自包含的任务教授基础知识。主题包括： 基础文件/ELF分析； 软件破解与密钥生成； 字符串解密与恶意软件分类； 嵌入式Linux固件解包； 裸机分析； 密码检测； 混淆/反分析技术及其绕过方法； 如果这也合你胃口，还可以查看 Emproof 技术网络研讨会系列，其中包含更多练习和录制课程。 工作坊内容由 Tim Blazytko 设计与组织，Simran Kathpalia...

cve-2018-9207

CVE-2018-9207 Esto es parte de Cved: una herramienta para gestionar contenedores Docker vulnerables. Cved: https://github.com/git-rep-src/cved Fuente de la imagen: https://github.com/cved-sources/cve-2018-9207 Autor de la imagen: https://github.com/lcashdol/Exploits/tree/master/CVE-2018-9207...

scannerl

Scannerl Scannerl is a modular distributed fingerprinting engine implemented by Kudelski Security. Scannerl can fingerprint thousands of targets on a single host, but can just as easily be distributed across multiple hosts. Scannerl is to fingerprinting what zmap is to port scanning. Scannerl wor...

scannerl

Scannerl Scannerl es un motor modular de fingerprinting distribuido implementado por Kudelski Security. Scannerl puede generar huellas digitales de miles de objetivos en un solo host, pero también puede distribuirse fácilmente a través de múltiples hosts. Scannerl es al fingerprinting lo que zmap...

buster

Description Buster is an advanced OSINT tool used to: Get social accounts of an email using multiple sourcesgravatar,about.me,myspace,skype,github,linkedin,previous breaches Get links to where the email was found using google,twitter,darksearch and paste sites Get breaches of an email Get domains...

buster

Descripción Buster es una herramienta OSINT avanzada utilizada para: Obtener cuentas sociales de un correo electrónico usando múltiples fuentes gravatar, about.me, myspace, skype, github, linkedin, brechas anteriores Obtener enlaces a donde se encontró el correo usando google, twitter, darksearch...

CVE-2011-2523

CVE-2011-2523 Explotación 🚀 Uso Este script PoC te permite explotar el CVE-2011-2523 Ejecución de Comando Backdoor en VsFTPd 2.3.4 ayuda ⚒️ Instalación root@kitploit: git clone https://github.com/ByteForgeFr/CVE-2011-2523 cd CVE-2011-2523 Install the needed requirements pip install pwntools argpar...

seekr

A multi-purpose toolkit for gathering and managing OSINT-Data with a neat web-interface. Introduction Seekr is a multi-purpose toolkit for gathering and managing OSINT-data with a sleek web interface. Our desktop view enables you to have all of your favourite OSINT tools integrated in one. The...