SharpCovertTube

SharpCovertTube SharpCovertTube è un programma creato per controllare sistemi Windows da remoto caricando video su YouTube. Il programma monitora un canale YouTube finché non viene caricato un video, decodifica il codice QR dalla miniatura del video caricato ed esegue un comando. I codici QR nei...

Stompy

Stompy Eine PowerShell-Funktion zum Durchführen von Timestomping auf angegebenen Dateien und Verzeichnissen. Die Funktion kann Zeitstempel rekursiv für alle Dateien in einem Verzeichnis ändern. Zeitstempel für einzelne Dateien oder Verzeichnisse ändern. Zeitstempel rekursiv auf alle Dateien in...

CVE-2023-27350

CVE-2023-27350 POC per CVE-2023-27350 che interessa PaperCut MF/NG Analisi tecnica Un'analisi tecnica delle cause profonde della vulnerabilità, gli indicatori di compromissione e l'esposizione a internet sono disponibili sul nostro blog:...

penelope

Penelope is a modern shell handler for penetration testers and CTF players. It provides a more capable alternative to basic netcat listeners, adding automatic PTY upgrades, session management, logging, file transfers and helper modules. Table of Contents 📥 Installation ⚙️ Features 🖥️ Session...

FileWatchTower

FileWatchTower - FWT HINWEIS: Dieses Projekt wird nicht mehr gewartet und wurde aus archivierten Projekten als Referenz veröffentlicht. Es steht jedem zur Verfügung, der an der Entwicklung von Dateianalyse-Software interessiert ist. FWT ist ein Sicherheitsanalyse- und Dateiüberwachungstool, das...

wrongsecrets

OWASP WrongSecrets !Docker container testhttps://github.com/OWASP/wrongsecrets/actions/workflow...

WarChild

War Child Warchild — это набор тестов для анализа устойчивости вашего веб-сайта к различным видам атак типа «отказ в обслуживании», с которыми вы можете столкнуться, и которые в основном организуются злоумышленниками для нанесения ущерба вашему сайту. Установка root@kitploit: For Installing the...

flan

Flan Scan is a lightweight network vulnerability scanner. With Flan Scan you can easily find open ports on your network, identify services and their version, and get a list of relevant CVEs affecting your network. Flan Scan is a wrapper over Nmap and the vulners script which turns Nmap into a...

POC-CVE-2026-19286

Descrizione Codice proof of concept per l'exploit di CVE-2026-19286 Utilizzo python3 poc.py -url -uname -pword -c...

marfil

Marfil Marfil is an extension of the Aircrack-ng suite, used to assess WiFi network security. It allows to split the work of performing long running dictionary attacks among many computers. Motivation The Aircrack-ng suite provides the aircrack-ng tool, which is a 802.11 WEP and WPA/WPA2-PSK key...

CVE-2024-39205-Pyload-RCE

CVE-2024-39205-Pyload-RCE Pyload RCE con sandbox escape di js2py Riepilogo Qualsiasi pyload-ng eseguito con python3.11 o versioni precedenti è vulnerabile a RCE. Un attaccante può inviare una richiesta contenente qualsiasi comando shell e il server vittima lo eseguirà immediatamente. Fix Aggiorna...

firecall

firecall Automate SSH communication with firewalls, switches, etc. Description These scripts are designed to automate sending commands to a Cisco ASA firewall. The intended purpose here is to eliminate the need to manually log in to a firewall to make changes. This code can be run directly via...

gollina

root@kitploit: $ gollina -h gollina Follina MS-MSDT 0-day MS Office RCE PoC in Go -- @dwisiswant0 Usage: gollina -c COMMAND OPTIONS... Options: -h, --host Listener host default: 0.0.0.0 -p, --port Listener port default: 8090 -n, --name Word file name w/o extension, default: gollina -c, --command...

CVE-2022-28219

CVE-2022-28219 POC per CVE-2022-28219 che colpisce le build di ManageEngine ADAudit Plus precedenti alla 7060 Analisi Tecnica Maggiori dettagli sul nostro blog: https://www.horizon3.ai/red-team-blog-cve-2022-28219 Utilizzo root@kitploit: % python3 CVE-2022-28219.py -h usage: CVE-2022-28219.py -h ...

ldsview

ldsview Offline search tool for LDAP directory dumps in LDIF format. Features Fast and memory efficient parsing of LDIF files Build ldapsearch commands to extract an LDIF from a directory Show directory structure UAC and directory time format translation Config Config options can be passed as CLI...

Zin

Versione 1.0 😎 Zin 😎 Un injector di payload per bug bounty scritto in go Caratteristiche Inietta più payload in tutti i parametri Inietta un singolo payload in tutti i parametri Salva le risposte in una cartella di output Mostra il codice di stato e la lunghezza della risposta Può cercare pattern...

TerminalFix campaign deploys a reverse tunnel through multistage intrusion

In this article 1. Attack chain overview 2. Mitigation and protection guidance 3. Learn more Microsoft Threat Intelligence has observed a TerminalFix campaign, a variant of ClickFix, targeting organizations across multiple industries. The campaign uses compromised websites to display a fake...

netattack

NETATTACK The netattack.py is a python script that allows you to scan your local area for WiFi Networks and perform deauthentification attacks. The effectiveness and power of this script highly depends on your wireless card. NETATTACK 2 RELEASED https://github.com/chrizator/netattack2/ USAGE EASY...

dismap

🌀 Dismap - Asset discovery and identification tool 中文 Readme Dismap positioning is an asset discovery and identification tool. It can quickly identify protocols and fingerprint information such as web/tcp/udp, locate asset types, and is suitable for internal and external networks. It assists red...

dicerosbicornis

DicerosBicornis Una backdoor Windows furtiva basata su Python che utilizza la posta elettronica come server di comando e controllo. Requisiti Python 2.x Modulo PyCrypto Modulo WMI Modulo Enum34 Modulo Netifaces Modulo pypiwin32 Funzionalità Crittografia dei messaggi di trasporto AES + hashing...