BruteConda

Si esto te ha ayudado, quizás puedas ayudarme patrocinándome, lo que me ayudará a crear mejores "herramientas de código abierto" BruteConda ¡Una herramienta de fuerza bruta de directorios que hace tu vida más fácil! ¿Por qué solo BruteConda? Rápida y eficiente Fácil de usar Amigable con el usuari...

CVE-2019-10392

CVE-2019-10392 RCE with Git Client Plugin 2.8.2 Authenticated 0x01 docker 启动 docker run -p 8080:8080 -p 50000:50000 jenkins/jenkins:lts-alpine 0x02 漏洞环境 root@kitploit: Jenkins 2.176.3 Git Client Plugin 2.8.2 https://updates.jenkins-ci.org/download/plugins/git-client/ Git Plugin 3.12.0 参考链接...

wifi-agent

wifi-agent wifi-agent Punto de acceso malicioso. El programa está hecho solo con fines educativos para ver cómo funciona el método de punto de acceso malicioso. Cualquier uso innecesario del programa está prohibido y el fabricante no tiene responsabilidad por cualquier uso ilegal por parte de...

CVE-2025-4601

CVE-2025-4601 - WordPress RealHomes Theme = 4.4.0 - Privilege Escalation 🔥 Vulnerability Summary The WordPress theme RealHomes versions = 4.4.0 is vulnerable to a privilege escalation vulnerability. This allows authenticated users with low privileges such as subscribers to escalate their roles to...

secrets-manager-rs

secs-man secs-man is a tool for managing backups of secrets with tool-independence in mind: if you encrypt your secrets with this software, you should be able to decrypt and restore them without this software. Even if secs-man disappears from the face of the Earth, your data is still accessible...

project-rvbbit

Project RVBBIT: Linux Kernel Rootkit Proof-of-Concept 📖 Overview Project RVBBIT is an educational proof-of-concept demonstrating advanced stealth techniques used by Linux kernel rootkits. It is intended exclusively for cybersecurity research, defensive training, and understanding how modern...

cred_scanner

credscanner A simple command line tool for finding AWS credentials in files. Optimized for use with Jenkins and other CI systems. I suspect there are other, better tools out there such as git-secrets, but I couldn't find anything to run a quick and dirty scan that also integrates well with Jenkin...

cred_scanner

credscanner Una herramienta de línea de comandos simple para encontrar credenciales de AWS en archivos. Optimizada para su uso con Jenkins y otros sistemas de CI. Supongo que existen otras herramientas mejores como git-secrets, pero no encontré nada que hiciera un escaneo rápido y sucio que tambi...

CVE-2023-1405

CVE-2023-1405 Formidable Forms = 6.1.2 - Unauthenticated PHP Object Injection Description: The Formidable Forms plugin for WordPress is vulnerable to PHP Object Injection in versions up to, and including, 6.1.2 via deserialization of untrusted input from form submissions. This allows...

CVE-2017-5638

CVE-2017-5638 Apache Struts 2.3.5 Example:...

awesome-censys-queries

Awesome Censys Queries Una colección de consultas fascinantes y extravagantes de Censys Search. Contribuciones ¿Encontraste una consulta impresionante? Envíala aquí ¿Interesado en contribuir de otra manera? Consulta las pautas de contribución Recursos Censys Search CensysGPT Beta - Consultas...

FOXCMS-CVE-2025-29306-POC

FOXCMS Parameter Injection RCE – CVE-2025-29306 This repository contains a Python-based PoC for a Remote Code Execution RCE vulnerability affecting FOXCMS v1.2, a Chinese open-source content management system. CVE-ID: CVE-2025-29306 Affects: FOXCMS v1.2 Type: Service Parameter Injection → Code...

cve-2020-27955

cve-2020-27955 cve-2020-27955 Reproduction 1. Create a GitHub repository 2. git clone https://github.com/attacker/poc.git . 3. echo calc.exe git.cmd 4. git lfs track “.dat” 5. echo “Junk” large.dat 6. git add -A 7. git commit -m “POC” 8. git push -u origin master -f...

CVE-2024-1209

CVE-2024-1209 Sensitive Information Exposure via assignments in LearnDash. Unauthenticated visitors can browse and download uploaded assignments. Vulnerability: CVE-2024-1209 Sensitive Information Exposure via assignments CVSS: 5.3 Medium Software: LearnDash sfwd-lms Affected versions: = 4.10.1...

CVE-2019-5418

CVE-2019-5418 Test case Run : root@kitploit: $ rails s PoC : root@kitploit: Accept: ../../../../../../../../etc/passwd Req 1 - root@kitploit: GET /shitblock HTTP/1.1 Host: REDACTED:3000 User-Agent: Mozilla/5.0 Windows NT 10.0; Win64; x64; rv:65.0 Gecko/20100101 Firefox/65.0 Accept:...

cygor

Cygor General Overview Cygor is a modular asset discovery framework that brings scanning, parsing, and service enumeration together in one workflow. It replaces the patchwork of separate tools with an automated process that handles discovery, enrichment, and targeted enumeration seamlessly —...

keyhog

Website · Documentation · Architecture · Vyre GPU engine KeyHog: GPU-accelerated secret scanner for code, cloud, and CI KeyHog is an open-source secret scanner in Rust that finds and verifies leaked API keys, tokens, passwords, and credentials across source code, Git history, containers, cloud...

AzSubEnum

AzSubEnum - Enumeración de Subdominios de Servicios Azure AzSubEnum es una herramienta especializada de enumeración de subdominios adaptada para servicios de Azure. Esta herramienta está diseñada para buscar e identificar meticulosamente subdominios asociados con varios servicios de Azure. Median...

logrotten

!WARNING This repository has been moved to https://codeberg.org/whotwagner/logrotten. Please visit the new location for the latest updates. Winning a race condition in logrotate to elevate privileges Brief description logrotate is prone to a race condition after renaming the logfile. If logrotate...

msdat

Quentin HARDY --- [email protected] [email protected] MSDAT MSDAT M icros oft SQL D atabase A ttacking T ool es una herramienta de pruebas de penetración de código abierto que prueba la seguridad de las bases de datos Microsoft SQL de forma remota. Ejemplos de uso de MSDAT: Tiene una ba...