kodex

Kodex Community Edition - CE is an open-source toolkit for privacy and security engineering. It helps you to automate data security and data protection measures in your data engineering workflows. It offers the following functionality: Read data items from a variety of sources such as files,...

wholeaked

Introduction root@kitploit: , ,' ', Utku Sen's |,-' wholeaked /c '\ ' |' -. "When you have eliminated the impossible, /-' \ whatever remains, however improbable, /'-'\ must be the truth" - Sherlock Holmes ' \ wholeaked is a file-sharing tool that allows you to find the responsible person in case...

wholeaked

소개 root@kitploit: , ,' ', Utku Sen's |,-' wholeaked /c '\ ' |' -. "When you have eliminated the impossible, /-' \ whatever remains, however improbable, /'-'\ must be the truth" - Sherlock Holmes ' \ wholeaked는 파일 공유 도구로, 유출 사고 발생 시 책임자를 찾을 수 있도록 해줍니다. Go로 작성되었습니다. 어떻게? wholeaked는 공유할 파일과 수신자 목록을...

shellnoob

ShellNoob Writing shellcodes has always been super fun, but some parts are extremely boring and error prone. Focus only on the fun part, and use ShellNoob! For a quick overview, check the slides for the Black Hat Arsenal talk: link Want to contribute? Feature request? Bug report? Swears? All...

CVE-2019-12840_POC

CVE-2019-12840POC Webmin パッケージ更新の認証済みリモートコマンド実行のためのPoC Metasploit モジュールの代替手段。 すべての功績は Özkan Mustafa Akkuş 氏に帰属します。 https://www.pentest.com.tr/exploits/Webmin-1910-Package-Updates-Remote-Command-Execution.html...

kurukshetra

Kurukshetra Kurukshetra is a web framework that’s developed with the aim of being the first open source framework which provides a solid foundation to host reasonably complex secure coding challenges while still providing the ability to efficiently and dynamically execute each challenge on the...

fprobe

FProbe FProbe - Fast HTTP Probe Installation root@kitploit: GO111MODULE=on go get -u github.com/theblackturtle/fprobe Features Take a list of domains/subdomains and probe for working http/https server. Optimize RAM and CPU in runtime. Support special ports for each domain Verbose in JSON format...

fprobe

FProbe FProbe - 빠른 HTTP 프로브 설치 root@kitploit: GO111MODULE=on go get -u github.com/theblackturtle/fprobe 기능 도메인/서브도메인 목록을 가져와 작동 중인 http/https 서버를 확인합니다. 실행 중 RAM과 CPU를 최적화합니다. 각 도메인에 대해 특수 포트 지원 JSON 형식의 상세 출력이며 Status Code, Content Type, Location 같은 추가 헤더를 포함합니다. 사용법 root@kitploit: Usage of...

EUVD-2026-70785

MOOS core-moos through 10.4.0 contains a remote process termination vulnerability in the SuicidalSleeper component that uses a hard-coded passphrase for multicast command authorization. Any multicast-reachable peer can enumerate MOOS processes and send termination commands to trigger process...

EUVD-2026-70801

MOOS-IvP through 24.8.1 contains a remote code execution vulnerability in alogsplit's SplitHandler::handlePreCheckSplitDir function that fails to sanitize shell metacharacters in log file pathnames. Attackers can embed shell syntax in log file names or the --dir parameter to execute arbitrary...

EUVD-2026-70814

MOOS-IvP uMemWatch through 24.8.1 constructs shell commands from attacker-chosen MOOS client names without sanitization. Attackers can inject shell metacharacters into client names to execute arbitrary commands as the uMemWatch process user through unquoted redirection targets in system calls...

EUVD-2026-70817

A weakness has been identified in SpecterOps BloodHound up to 9.5.1. The affected element is the function NewV2API of the file cmd/api/src/api/registration/v2.go of the component Graph Write Endpoint. Executing a manipulation can lead to improper authorization. It is possible to launch the attack...

EUVD-2026-70815

MOOS-IvP iSay through 24.8.1 contains a remote code execution vulnerability in the SAYMOOS variable handler that passes unsanitized text to a shell command. Attackers can publish SAYMOOS messages containing backticks or command substitution syntax to execute arbitrary commands as the iSay process...

EUVD-2026-70768

A vulnerability was determined in D-Link DNS-320 ShareCenter 2.06B01. This affects an unknown part of the file /cgi/filesharing.cgi of the component File Sharing. Executing a manipulation of the argument fileurl can lead to os command injection. The attack can be launched remotely. The exploit ha...

EUVD-2026-70766

A vulnerability was found in D-Link DNS-340L 1.01B04. Affected by this issue is some unknown functionality of the file /cgi-bin/dropbox.cgi of the component CGI Handler. Performing a manipulation of the argument callbackurl/syncinterval results in os command injection. The attack can be initiated...

veinmind-tools

veinmind-tools Documentatie veinmind-tools este un set de instrumente de securitate pentru containere, dezvoltat de Changting Technology, incubat de echipa Muyun, bazat pe veinmind-sdk. veinmind, numele chinezesc 问脉 , simbolizează Securitatea containerelor văzută prin tendoane și artere,...

pown

Pown Pown.js is a security testing and exploitation toolkit built on top of Node.js and NPM. Unlike traditional security tools, notably Metasploits, Pown.js considers frameworks to be an anti-pattern. Therefore, each feature in Pown is in fact a standalone NPM module allowing greater degree of...

pown

Pown Pown.jsは、Node.jsとNPM上に構築されたセキュリティテストおよびエクスプロイテーションツールキットです。従来のセキュリティツール、特にMetasploitとは異なり、Pown.jsはフレームワークがアンチパターンであると考えています。そのため、Pownの各機能は実際には独立したNPMモジュールであり、再利用性と柔軟性を高めています。新しい機能の作成は、新しいモジュールをNPMに公開するだけです。このモジュールはCLIを起動するための簡単な手段を提供します。その結果、pownを使って独自のツールを簡単に構築したり、新しいツールを構成によって作成したりできます。...

container-cve-2021-22555

CVE-2021-22555 재현기를 컨테이너로 먼저, 이 저장소는 편리한 사전 빌드 컨테이너로 여기에서 익스플로잇 코드를 가져옵니다: https://github.com/google/security-research/tree/master/pocs/linux/cve-2021-22555 사전 빌드 컨테이너: quay.io/cgwalters/cve-2021-22555 완화: seccomp 프로필 강력한 완화 방법은 cloneCLONENEWUSER을 거부하는 seccomp를 활성화하는 것입니다. 상위 Kubernetes 문서에는 이에 대...

mesh-kridik

mesh-kridik Kubernetes 서비스 메시 보안을 강화하세요!! mesh-kridik는 Istio 서비스 메시가 있는 Kubernetes 클러스터에서 다양한 보안 검사를 수행하고 보안 보고서를 출력하는 오픈 소스 보안 검사기입니다. 보안 검사 테스트는 istio 보안 모범 사례의 완전한 구현입니다. 보안 검사는 Istio 서비스 메시가 있는 Kubernetes 클러스터에서 수행되며 OPAOpen Policy Agent를 활용하여 보안 규칙을 적용합니다. 출력 감사 보고서에는 보안 문제의 근본 원인과 보안 문제에 대한...