845080 matches found
CVE-2020-0796
CVE-2020-0796 Remote Code Execution POC c 2020 ZecOps, Inc. - https://www.zecops.com - Find Attackers' Mistakes Remote Code Execution POC for CVE-2020-0796 / "SMBGhost" Expected outcome: Reverse shell with system access. Intended only for educational and testing in corporate environments. ZecOps...
baserunner
Baserunner A tool for exploring and exploiting Firebase datastores. See this post on our blog for an overview of how Firebase works and why we developed this tool. Set up 1. git clone https://github.com/iosiro/baserunner.git 2. cd baserunner 3. npm install 4. npm run build 5. npm start 6. Go to...
kubolt
¿Qué? Kubolt es una utilidad simple para escanear clústeres de Kubernetes públicos no autenticados y ejecutar comandos dentro de contenedores ¿Por qué? A veces, el puerto 10250 de kubelet está abierto para acceso no autorizado y hace posible ejecutar comandos dentro de los contenedores usando la...
kubolt
Wat? Kubolt is simple utility for scanning public unauthinticated kubernetes clusters and run commands inside containers Why? Sometimes, the kubelet port 10250 is open to unauthorized access and makes it possible to run commands inside the containers using getrun function from kubelet:...
HikVision-CVE-2017-7921
HikVision-CVE-2017-7921 Identify potential vulnerabilities with CVE-2017-7921 exploit checks or by testing the /onvif-http/snapshot?auth=YWRtaW46MTEK URI on target IP addresses using a multi-threaded approach for faster results. Requirements root@kitploit: python3 Python Pacakges = requests,...
WarChild
War Child Warchild is a denial of service testing suite made for analysing the strength of your website against different kinds of denial of service attacks you will be facing which are mainly organised by crooks to cause damage to your website.. Installation root@kitploit: For Installing the...
andriller
Andriller CE Community Edition Andriller - is software utility with a collection of forensic tools for smartphones. It performs read-only, forensically sound, non-destructive acquisition from Android devices. It has features, such as powerful Lockscreen cracking for Pattern, PIN code, or Password...
PassMute
PassMute - A Password Trasmutation/Mutator tool This is a command-line tool written in Python that applies one or more transmutation rules to a given password or a list of passwords read from one or more files. The tool can be used to generate transformed passwords for security testing or researc...
PoC-CVE-2019-10743
Demo de Zip Slip Este proyecto demuestra la vulnerabilidad Zip Slip CVE-2019-10743 usando la versión vulnerable del paquete mholt/archiver. ¿Qué es Zip Slip? Zip Slip es una vulnerabilidad descubierta por los investigadores de seguridad de Snyk. Se encontró que la vulnerabilidad afecta a múltiple...
pentestkoala
Koala is a patched version of the dropbear SSH server that instead of binding to a port opens up reverse shells by connecting to a remote client. This is useful for gaining a pty terminal on an exploited machine and also for secure exfiltration of data via SSH port forwarding. Pivoting can also b...
Invoke-TheHash
Invoke-TheHash Invoke-TheHash contains PowerShell functions for performing pass the hash WMI and SMB tasks. WMI and SMB connections are accessed through the .NET TCPClient. Authentication is performed by passing an NTLM hash into the NTLMv2 authentication protocol. Local administrator privilege i...
bscan
:mag: una herramienta asíncrona de enumeración de objetivos :magright: Sinopsis bscan es una utilidad de línea de comandos para realizar recolección activa de información y enumeración de servicios. En esencia, bscan lanza de forma asíncrona procesos de utilidades de escaneo bien conocidas,...
bscan
:mag: an asynchronous target enumeration tool :magright: Synopsis bscan is a command-line utility to perform active information gathering and service enumeration. At its core, bscan asynchronously spawns processes of well-known scanning utilities, repurposing scan results into highlighted console...
TokenTactics
TokenTactics Conjunto de herramientas de manipulación de Tokens Web JSON "JWT" de Azure Los tokens de acceso de Azure permiten autenticarse en ciertos endpoints como un usuario que inicia sesión con un código de dispositivo. Incluso si usaron autenticación multifactor. Una vez que tienes el token...
Go-SCP
You can download this book in the following formats: PDF, Mobi and ePub. Introduction Go Language - Web Application Secure Coding Practices is a guide written for anyone who is using the Go Programming Language and aims to use it for web development. It was originally created by Checkmarx Securit...
CVE-2001-0934
CVE-2001-0934 Cooolsoft PowerFTP Server 2.03 allows remote attackers to obtain the physical path of the server root via the pwd command, which lists the full pathname. Securiteam publication at http://www.securiteam.com/exploits/6D00L2A35K.html External info at...
CVE-2023-32315-POC
CVE-2023-32315-POC CVE-2023-32315-Openfire-Bypass-Py Overview This code is a Python version POC for CVE-2023-32315. It performs a series of operations to verify whether the target website is affected by the CVE-2023-32315 vulnerability and attempts to execute certain operations on the affected...
joomla-cve-2018-6396
Joomla-CVE-2018-6396 Joomla! Component Google Map Landkarten = 4.2.3 - SQL Injection Date: 03/03/2018 Vendor Homepage: http://www.joomla-24.de/ Software Link: https://extensions.joomla.org/extensions/extension/maps-a-weather/maps-a-locations/google-map-landkarten/ Version: = 4.2.3 Tested on: KaLi...
fusee-gelee
fusee-gelee An implementation of the Fusee Gelee exploit CVE-2018-6242 for the Nintendo Switch, based on the vulnerability disclosed by Kate Temkin / ReSwitched in March 2018. Launches an arbitrary payload e.g. hekate on a Tegra X1 device in USB Recovery Mode RCM, bypassing the boot ROM's signatu...