adfsbrute

adfsbrute A script to test credentials against Active Directory Federation Services ADFS, calculating the ADFS url of an organization and allowing password spraying or bruteforce attacks. The main idea is carrying out password spraying attacks with a random and high delay between each test and...

winmagic_sd

关于 CVE-2020-11519 和 CVE-2020-11520 的技术文章 日期：2020年6月 作者：Dennis Elser（代码：github） 目录 引言 方法及技术描述 CVE-2020-11519 CVE-2020-11520 概念验证漏洞利用 披露时间线 解决方案 校验和 参考 引言 根据其官方网站介绍，Winmagic SecureDoc “使企业能够高效地处理其 IT...

Matroschka

Матрёшка About Matroshka is a command-line steganography tool written in pure Python. You can use it to hide and encrypt images or text in the least significant bits of pixels in an image. Encryption The encryption uses HMAC-SHA256 to authenticate the hidden data. Therefore the supplied MAC...

masq

Sit where the model sits. See what it can see. MASQ MASQ is a local security CLI for AI agent stacks. It sits in the same seat the model sits in: it reads MCP tool catalogs, completes the MCP handshake, looks through session logs, and probes local model HTTP ports. Then it prints findings and...

baserunner

Baserunner A tool for exploring and exploiting Firebase datastores. See this post on our blog for an overview of how Firebase works and why we developed this tool. Set up 1. git clone https://github.com/iosiro/baserunner.git 2. cd baserunner 3. npm install 4. npm run build 5. npm start 6. Go to...

baserunner

Baserunner Firebaseデータストアを探索・悪用するためのツールです。Firebaseの仕組みとこのツールを開発した理由については、こちらのブログ記事をご覧ください。 セットアップ 1. git clone https://github.com/iosiro/baserunner.git 2. cd baserunner 3. npm install 4. npm run build 5. npm start 6. ブラウザで http://localhost:47710 にアクセスします。 使い方 Baserunnerのインターフェースは次のようになります。...

CVE-2025-47577

CVE-2025-47577 - WordPress TI WooCommerce Wishlist = 2.9.2 - Arbitrary File Upload 🔥 Vulnerability Summary The WordPress plugin TI WooCommerce Wishlist version = 2.9.2 is vulnerable to an unauthenticated arbitrary file upload vulnerability. This allows attackers to upload any file type, including...

semgrep-rules

semgrep-rules "La superficie de ataque es la vulnerabilidad. Encontrar un bug allí es solo un detalle." -- Mark Dowd "Algunos detalles son más importantes que otros." -- Fedor G. Pikus Una colección de mis reglas de Semgrep para facilitar la investigación de vulnerabilidades. Entradas del blog...

semgrep-rules

semgrep-rules "The attack surface is the vulnerability. Finding a bug there is just a detail." -- Mark Dowd "Some details are more important than others." -- Fedor G. Pikus A collection of my Semgrep rules to facilitate vulnerability research. Blog posts...

CVE-2022-23277

exchCVE-2021-42321 This article is a tool related to the article "DotNet Security - CVE-2022-23277 Vulnerability Reproduction" by the 7bits Security Team. The authentication part needs to be manually added via Burp Suite. After successful exploitation, it will write 1.aspx to aspnetclient...

CVE-2025-5777

. PoC root@kitploit: POST /p/u/doAuthentication.do HTTP/1.1 Host: 167.xxx.xx.x Content-Length: 5 login . The tool verfiy then 20 more requests to exploit. . Usage:- python CVE‑2025‑5777.py python CVE‑2025‑5777.py -l test.txt...

CVE-2021-24155.rb

WordPress-Backup-RCE This Metasploit module allows an attacker with a privileged WordPress account to launch a reverse shell due to an arbitrary file upload vulnerability in Wordpress plugin Backup Guard versions prior to 1.6.0. This is due to an incorrect check of the uploaded file extension whi...

copy-fail-mcp

Copy Fail MCP 📖 安装指南 — 快速上手、手动安装和故障排除 CVE-2026-31431 — 有史以来最严重的 Linux 漏洞。现在可通过 MCP 控制。 732 字节的 Python。无需编译。无竞态条件。无需按发行版区分的偏移量。 一次执行，即可在 2017 年以来构建的所有 Linux 内核上通用提权至 root。 该工具是一个 MCP 服务器 + Web 仪表板，用于测试任何可达的 Linux 系统是否存在此漏洞。它的诞生是因为原始 PoC 已经非常易于使用——这只是额外增加了界面、网络扫描和主机群跟踪功能。 警告： 这是一个真实的内核...

Ducky-Exploit

Ducky-Exploit Introduction Ducky Exploit is python framework which helps as to code Digispark as Rubber Ducky This script has been tested on Kali Linux 18.2 Ubuntu 18.04 Windows Works with both Python2 and Python3 Keyboard Support Type US Type Keyboard Usage root@kitploit: git clone...

CVE-2025-4517-POC

CVE-2025-4517 Exploit NOTES This exploit and description are written by AI. If you find a mistake or issue, please let me know! This exploit was tested and confirmed working. Thank you! Overview This exploit leverages CVE-2025-4517 , a critical vulnerability in Python's tarfile module that allows...

powerglot

Powerglot Powerglot encodes several kind of scripts using polyglots, for example, offensive powershell scripts. It is not needed a loader to run the payload. In red-team exercises or offensive tasks, masking of payloads is usually done by using steganography, especially to avoid network level...

powerglot

Powerglot Powerglotは、ポリグロットを使用して、例えば攻撃的なPowerShellスクリプトなど、数種類のスクリプトをエンコードします。ペイロードを実行するためにローダーは必要ありません。...

nali

Nali IP地理位置情報とCDNプロバイダをオフラインで検索する端末ツール English 機能 複数のデータベースをサポート 純真 IPv4 オフラインデータベース ZX IPv6 オフラインデータベース Geoip2 都市データベース オプション IPIP データベース オプション ip2region データベース オプション DB-IP データベース オプション IP2Location DB3 LITE データベース オプション CDN サービスプロバイダの検索 パイプ処理をサポート インタラクティブ検索をサポート IPv4 と IPv6 の両方をサポート 多言語対応...

CVE-2024-52317

🚨🚨CVE-2024-52317🚨🚨 CVE-2024-52317 - Apache Tomcat HTTP/2 Data Leakage Vulnerability Overview CVE-2024-52317 is a vulnerability affecting Apache Tomcat's HTTP/2 implementation. The issue arises due to improper recycling of HTTP/2 request and response resources, potentially leading to data leakage...

SAP-memory-pipes-desynchronization-vulnerability-MPI-CVE-2022-22536

SAP-memory-pipes-desynchronization-vulnerability-MPI-CVE-2022-22536 该漏洞涉及什么？ SAP NetWeaver Application Server ABAP、SAP NetWeaver Application Server Java、ABAP Platform、SAP Content Server 7.53 以及 SAP Web Dispatcher 存在请求走私和请求拼接漏洞。未经身份验证的攻击者可以在受害者的请求前附加任意数据。这样一来，攻击者可以冒充受害者执行函数，或毒化中间 Web...