polkit-auto-exploit

polkit-auto-exploit Automatic Explotation PoC for Polkit CVE-2021-3560 Summary CVE-2021-3560 is an authentication bypass on polkit, which allows unprivileged user to call privileged methods using DBus, in this exploit we will call 2 privileged methods provided by accountsservice CreateUser and...

mip22

mip22 mip22 v3.3 mip22 is a advanced phishing tool 83 default websites, clone any site with manual method, add any site with customize method, mask link with subdomains, url shortener, audio notice for view the credentials live, music in background etc... The program is made for educational...

go_parser

Yet Another Golang binary parser for IDAPro English |中文 NOTE : Now the latest master branch is the Python3 version. The old master branch has been changed to branch py2 , and temporarily not maintained. Instructions for Python3 branch This version is developed and tested on macOS/Windows, IDA7.4+...

go_parser

Yet Another Golang binary parser for IDAPro English | 中文 注意 ： 最新的 master 分支为 Python3 版，以前的 master 分支已重命名为 py2 分支，并且暂停维护。 Python3 版本使用说明 此版本是在 macOS/Windows 上 IDA7.4+, python3.8.x 版本测试通过，如果在其他平台上测试存在问题，欢迎提issue 或者 PR。 另外需要注意，macOS 上 IDA7.4+ 是使用系统默认安装的 Python3，这样可能导致自己安装的第三方库无法加载，需要切换到brew 安装的...

nightHawkResponse

nightHawk Response 专为异步取证数据展示而构建的应用程序，基于 Elasticsearch 后端。 该应用程序旨在导入 Mandiant Redline "collections" 文件，并提供了灵活的搜索、堆叠和标记功能。 该应用的诞生源于无法在单一视图中控制多个调查（或数百个终端）的需求。 为了导入 Redline 审计数据，我们创建了 nightHawkResponse，这是一个完全成熟的 GOpher 应用程序，旨在配合此框架使用。该应用的源代码在此仓库中提供，已编译的二进制文件并运行在 ISO 中，从初次启动即可导入数据。 版本 2.0 - 预计 2020 年...

whids

IMPORTANT: this README and other documentation is not updated to reflect the changes made to latest beta releases as a lot of changes happened. All this will be updated in time when a stable version will be released see Roadmap until next release. Feel free to run beta releases on your own and as...

CVE-2019-0232_tomcat_cgi_exploit

Apache Tomcat CGI Exploit Script Description A Python script designed to exploit CGI vulnerabilities in Apache Tomcat servers by executing a reverse shell connection. Usage Example Features Automated exploit for Apache Tomcat CGI vulnerabilities Customizable target and attacker parameters Simple...

aiengine

...

apkleaks

APKLeaks Scanning APK file for URIs, endpoints & secrets. Installation from Pypi from Source from Docker Usage Options Output Pattern Arguments for disassembler License Acknowledments Installation It's fairly simple to install APKLeaks : from PyPi root@kitploit: $ pip3 install apkleaks from Sourc...

CVE-2022-24715-go

CVE-2022-24715 El exploit de Icinga Web 2 escrito en go. El código Python original se puede encontrar en: https://packetstormsecurity.com/files/173516/Icinga-Web-2.10-Remote-Code-Execution.html...

netzob

=========================================================== Netzob : Protocol Reverse Engineering, Modeling and Fuzzing .. image:: https://img.shields.io/badge/Python-3-brightgreen.svg :target: https://github.com/netzob/netzob :alt: Python3 See complete documentation here:...

titus

Titus: High-Performance Secrets Scanner Titus is a high-performance secrets scanner that detects credentials, API keys, and tokens in source code, files, and git history. It ships with 487 detection rules covering hundreds of services and credential types, drawn from NoseyParker and Kingfisher...

MetabaseRCE_CVE-2023-38646

Metabase Pre-Auth RCE CVE-2023-38646 PoC Una prueba de concepto de CVE-2023-38646, un exploit de Metabase que permite al usuario ejecutar código de forma remota RCE utilizando el token de configuración encontrado en /api/session/properties para enviar un payload codificado en base64 Uso...

offensive-docker

Offensive Docker 是一个包含常用工具的镜像，可快速轻松搭建渗透测试环境。 ➡️ 注意： 请查看下一个仓库，了解如何在 Google Cloud Platform 或 Digital Ocean（含免费额度）的 VPS 上启动 Offensive Docker。Offensive Docker VPS 目录 链接 特性 环境要求 已安装的工具...

cve-2019-2618

cve-2019-2618 Vulnerabilidad de Carga en Weblogic Necesita nombre de usuario y contraseña-CVE-2019-2618 Uso de Python root@kitploit: python CVE-2019-2618.py url username password Descifrar la contraseña de Weblogic root@kitploit: root@f0cb7e674d7e:/Oracle cat...

SUID3NUM

SUID3NUM A standalone python2/3 script which utilizes python's built-in modules to find SUID bins, separate default bins from custom bins, cross-match those with bins in GTFO Bin's repository & auto-exploit those, all with colors! ͡ʘ ͜ʖ ͡ʘ Description A standalone script supporting both python2 &...

orbitaldump

OrbitalDump A simple multi-threaded distributed SSH brute-forcing tool written in Python. How it Works When the script is executed without the --proxies switch, it acts just like any other multi-threaded SSH brute-forcing scripts. When the --proxies switch is added, the script pulls a list usuall...

CVE-2024-34102

Cosmic Sting : Exploiteur CVE-2024-34102 Cosmic Sting est un outil basé sur Go conçu pour exploiter CVE-2024-34102, une vulnérabilité d'exécution de code à distance. Détails de CVE-2024-34102 Les versions 2.4.7, 2.4.6-p5, 2.4.5-p7, 2.4.4-p8 et antérieures d'Adobe Commerce sont affectées par une...

CVE-2022-22947

CVE-2022-22947 poc: pocsuite -r CVE-2022-22947POCEXP.py -u url --verify exp: pocsuite -r CVE-2022-22947POCEXP.py -u url --attack --command "command" 免责声明 此工具仅用于学习、研究和自查。不应将其用于非法目的。使用本工具产生的一切风险与我无关！ Disclaimer This tool is for study, research, and self-examination only. It should not be used for...

sparx_hack

Multiple vulnerabilities in Sparx Pro Cloud Server and Enterprise Architect Exploit code for executing arbitrary SQL command in Sparx PCS server without authentication. NOTE: the key is NOT correct to prevent s|rIpt kIddi3 from easy hacking ;- Full writeup:...