FreePBX-CVE-2025-57819

FreePBX CVE-2025-57819 — حقن SQL غير مصادق عليه حتى RCE بصلاحيات الجذر الخطورة: حرجة النوع: حقن SQL غير مصادق عليه ← تنفيذ تعليمات برمجية عن بُعد البرنامج المتأثر: FreePBX وحدة endpoint تم الاختبار على: FreePBX على CentOS 7، Apache 2.4، PHP 7.4، MariaDB 5.5 نظرة عامة توجد ثغرة حقن SQL غير مصادق...

meg

meg meg is a tool for fetching lots of URLs but still being 'nice' to servers. It can be used to fetch many paths for many hosts; fetching one path for all hosts before moving on to the next path and repeating. You get lots of results quickly, but non of the individual hosts get flooded with...

botb

Break out the Box BOtB BOtB is a container analysis and exploitation tool designed to be used by pentesters and engineers while also being CI/CD friendly with common CI/CD technologies. What does it do? BOtB is a CLI tool which allows you to: Exploit common container vulnerabilities Perform commo...

CVE-2026-23744-RCE-for-MCPjam-inspector-v1.4.2

CVE-2026-23744-RCE-for-MCPjam-inspector-v1.4.2 MCPJam Inspector 3. एक्सप्लॉइट प्रारंभ करें root@kitploit: python3 CVE-2026-23744.py -u -i -p 4. बेहतर उपयोग के लिए मैं सुझाव देता हूँ कि टर्मिनल को पूरी तरह कार्यात्मक बनाने के लिए अपडेट करें, अन्यथा आप ctrl^c जैसे कमांड का उपयोग नहीं कर पाएँगे। उदा...

cve-2026-46391

CVE-2026-46391 - @haxtheweb/open-apis में SSRF के माध्यम से क्रेडेंशियल एक्सपोज़र CVE-2026-46391 के लिए प्रूफ ऑफ कॉन्सेप्ट। @haxtheweb/open-apis के cacheAddress एंडपॉइंट में SSRF कमजोरी को ट्रिगर करता है और कॉलबैक में भेजे गए सेवा खाता क्रेडेंशियल्स को कैप्चर करता है। निर्माण root@kitploit: go...

redsnarf

root@kitploit: . \ \ | / / / \ | // \ / |\ \ / \ \ \ \ | | \ // // |/ \ | / | | /| | || /\ / /| /| || / / / / / / [email protected] @redsnarf RedSnarf is a pen-testing / red-teaming tool by Ed Williams for retrieving hashes and credentials from Windows workstations, servers and...

tls

ztls Zig में लिखा गया QUIC के लिए एक TLS 1.3 कार्यान्वयन, जो RFC 8446 TLS 1.3 और RFC 9001 QUIC-TLS का सख्ती से पालन करता है। स्थिति पहलू| जानकारी ---|--- API स्थिरता| उत्पादन-स्तर Zig संस्करण| 0.16.0 प्लेटफ़ॉर्म| Linux, macOS, Windows प्रदर्शन नोट 2 ms हैंडशेक लक्ष्य Ed25519 और RSA-2048 प्रमाणपत्...

kiterunner

Kiterunner Introduction For the longest of times, content discovery has been focused on finding files and folders. While this approach is effective for legacy web servers that host static files or respond with 3xx’s upon a partial path, it is no longer effective for modern web applications,...

mip22

mip22 mip22 v3.3 mip22 is a advanced phishing tool 83 default websites, clone any site with manual method, add any site with customize method, mask link with subdomains, url shortener, audio notice for view the credentials live, music in background etc... The program is made for educational...

openstego

OpenStego OpenStego is a steganography application that provides two functionalities: 1. Data Hiding: It can hide any data within an image file. 2. Watermarking: Watermarking image files with an invisible signature. It can be used to detect unauthorized file copying. Usage For GUI: Use menu...

strix v1.6.1

Strix The open-source AI pentesting tool. Autonomous AI hackers that find and fix your app’s vulnerabilities. !TIP New! Strix integrates seamlessly with GitHub Actions and CI/CD pipelines. Automatically scan for vulnerabilit...

go_parser

Yet Another Golang binary parser for IDAPro English |中文 NOTE : Now the latest master branch is the Python3 version. The old master branch has been changed to branch py2 , and temporarily not maintained. Instructions for Python3 branch This version is developed and tested on macOS/Windows, IDA7.4+...

CVE-2025-6218-WinRAR-RCE-POC

CVE-2025-6218: WinRAR Path Traversal RCE ⚠️ गंभीर कमजोरी - सक्रिय शोषण की पुष्टि CVE-2025-6218 WinRAR में एक गंभीर पथ ट्रैवर्सल कमजोरी है जो मनमाना कोड निष्पादन की अनुमति देती है। वर्तमान में APT समूहों जैसे GOFFEE, Bitter APT-C-08 और Gamaredon द्वारा शोषित। 📋 सूची अवलोकन तकनीकी विवरण शोषण तंत्र...

behave

Behave! A Still in Development monitoring browser extension for pages acting as bad boys. NB : This is the code repository of the project, if you're looking for the packed extensions: Firefox: https://addons.mozilla.org/en-US/firefox/addon/behave/ Chrome:...

ldsview

ldsview Offline search tool for LDAP directory dumps in LDIF format. Features Fast and memory efficient parsing of LDIF files Build ldapsearch commands to extract an LDIF from a directory Show directory structure UAC and directory time format translation Config Config options can be passed as CLI...

seccubus

About Seccubus Seccubus automates regular vulnerability scans with various tools and aids security people in the fast analysis of its output, both on the first scan and on repeated scans. On repeated scan delta reporting ensures that findings only need to be judged when they first appear in the...

bpflock

bpflock - Lock Linux machines bpflock - eBPF driven security for locking and auditing Linux machines. Note: bpflock is currently in experimental stage , it may break, options and security semantics may change, some BPF programs will be updated to use Cilium ebpf library. Sections 1. Introduction...

confused

Confused A tool for checking for lingering free namespaces for private package names referenced in dependency configuration for Python pypi requirements.txt, JavaScript npm package.json, PHP composer composer.json or MVN maven pom.xml. What is this all about? On 9th of February 2021, a security...

twebit

Bitcoin analysis with machine learning How it works? 1- Get tweets from twitter 2- Filter tweets 3- Tweet classification with naive bayes algorithm Positive,negative and neut Installation root@kitploit: git clone https://github.com/omergunal/twebit cd twebit pip3 install -r requirements.txt Updat...

python-inquestlabs

مُتقاعد نوفمبر 2025 inquestlabs واجهة بلغة Python وأداة سطر أوامر للتفاعل مع واجهة برمجة تطبيقات InQuest Labs. لاحظ أن مفتاح API ليس مطلوبًا للتفاعل مع هذه الواجهة البرمجية. ومع ذلك، يوفر مفتاح API القدرة على زيادة فترة الاسترجاع lookback، وإزالة قيود المعدل، وتنزيل العينات المتاحة. يمكن للمستخدم...