ssrfuzz

SSRFUZZ SSRFuzz is a tool to find Server Side Request Forgery vulnerabilities, with CRLF chaining capabilities Why? I wanted to write a tool in Golang for concurrency I wanted to fuzz parameters for SSRF vulnerablities, as well as fuzz both paths and parameters for CRLF injections I was inspired ...

DeimosC2

DeimosC2 Deimos 状态: 已废弃 DeimosC2 已不再维护，并且存在已知的 XSS 漏洞 CVE-2025-26244。 感谢 JaRm222 发现该漏洞并通知我们。他的漏洞分析文章可在此处找到。 DeimosC2 是一款后渗透命令与控制（C2）工具，利用多种通信方式来控制已被入侵的机器。DeimosC2 的服务端和代理已在 Windows、Darwin 和 Linux 上测试并正常运行。它完全使用 Golang 编写，前端采用 Vue.js。 监听器功能 每个监听器拥有独立的 RSA 公钥和私钥，用于加密代理通信 动态即时生成代理 监听器及其关联代理的图形化地图 代理...

acheron

About Acheron is a library inspired by SysWhisper3/FreshyCalls/RecycledGate, with most of the functionality implemented in Go assembly. acheron package can be used to add indirect syscall capabilities to your Golang tradecraft, to bypass AV/EDRs that makes use of usermode hooks and instrumentatio...

webanalyze

webanalyze This is a port of Wappalyzer in Go. This tool is designed to be performant and allows to test huge lists of hosts. !NOTE Because Wappalyzer removed the public access to their app definitions, webanalyze currently loads definitions from enthec. Installation and usage Precompiled release...

Slackor

Slackor 维护于 https://github.com/n00py/Slackor 一个使用Slack作为命令与控制通道的Golang植入程序。 本项目受 Gcat 和 Twittor 启发。 本工具作为概念验证发布。在创建任何Slack应用之前，请务必阅读并理解 Slack App Developer Policy。 设置 注意：服务器使用Python 3编写 要使其工作，您需要： 一个Slack工作区 使用以下权限注册一个应用： channels:read channels:history channels:write files:write:user files:read...

GoAT

GoAT Golang Advanced Trojan es un troyano creado en Go, que utiliza Twitter como servidor C&C. GoAT tiene capacidades muy únicas e impresionantes, incluyendo ejecución de comandos multihilo y un sofisticado módulo rootkit de autodefensa escrito en C. Si no estás familiarizado con el malware, por...

Supernova

Supernova Shellcode 加密与混淆工具。 描述 Supernova 是一款开源工具，使用户能够安全地加密和/或混淆原始 shellcode。 -red?link=https%3A%2F%2Fgithub.com%2Fnickvourd%2FSupernova%2Freleases Supernova 提供了许多超越常见 shellcode 加密工具的功能。更多信息请参阅 功能 部分。 关于命令行用法和示例，请参阅我们的 Wiki。 如果您发现任何错误，请毫不犹豫地报告它们。您的反馈对于改进本项目质量至关重要！ 免责声明...

CVE-2016-5195

CVE-2016-5195 Versión en golang portada de dirtycow.c make setup && ./main...

net/url: golang: golang net/url: Denial of Service from quadratic complexity in path resolution

A flaw was found in net/url, a component of golang. This vulnerability arises when resolving relative paths that contain numerous parent directory '..' segments. A remote attacker could exploit this by providing a specially crafted path, leading to quadratic time complexity and excessive memory...

mime: golang: Golang MIME: Denial of Service via maliciously-crafted MIME header

A flaw was found in the Golang MIME Multipurpose Internet Mail Extensions package. A remote attacker could exploit this vulnerability by sending a maliciously-crafted MIME header containing many invalid encoded-words. This could lead to excessive CPU consumption, resulting in a Denial of Service...

Important: Red Hat Security Advisory: opentelemetry-collector security update

An update for opentelemetry-collector is now available for Red Hat Enterprise Linux 9.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, ...

Important: Red Hat Security Advisory: opentelemetry-collector security update

An update for opentelemetry-collector is now available for Red Hat Enterprise Linux 10.0 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating,...

mime: golang: Golang MIME: Denial of Service via maliciously-crafted MIME header

A flaw was found in the Golang MIME Multipurpose Internet Mail Extensions package. A remote attacker could exploit this vulnerability by sending a maliciously-crafted MIME header containing many invalid encoded-words. This could lead to excessive CPU consumption, resulting in a Denial of Service...

net/url: golang: golang net/url: Denial of Service from quadratic complexity in path resolution

A flaw was found in net/url, a component of golang. This vulnerability arises when resolving relative paths that contain numerous parent directory '..' segments. A remote attacker could exploit this by providing a specially crafted path, leading to quadratic time complexity and excessive memory...

AVBypass

绕过杀毒软件保护 要求 已安装 golang 用法 root@kitploit: 1 - create your payload go run create.go e.g: go run create.go 1.1.1.1 443 SecRetkira https://www.youtube.com/watch?v=Rv4VzpGCEEM 2 - in output folder you will find shell.go compile it go build shell.go 3 - now you have exe file to execute run netcat 4 - y...

NTLMRecon

概述 NTLMRecon 是 Sachin Kamath（AKA pwnfoo）所编写原始 NTLMRecon 工具的 Golang 版本。NTLMRecon 可用于对目标 Web 服务器进行暴力破解，以识别常见支持 NTLM 身份验证的应用程序端点。这些端点包括 Exchange Web Services 端点，后者通常可用于绕过多重身份验证。 该工具支持从暴露的 NTLM 身份验证端点收集元数据，包括计算机名、Active Directory 域名以及 Active Directory 林名。这些信息无需事先认证即可获取，只需向服务器发送 NTLM NEGOTIATEMESSAGE...

fawkes

Agente Fawkes para Mythic C2 Fawkes es un agente de Mythic C2 creado completamente con prompts vibe-coded. Comenzó como un "me pregunto" y se ha convertido en un objetivo. Mi objetivo es no escribir ni una sola línea de código para este agente, produciéndolo exclusivamente mediante un prompt...

evine

Evine Interactive CLI Web Crawler. Evine is a simple, fast, and interactive web crawler and web scraper written in Golang. Evine is useful for a wide range of purposes such as metadata and data extraction, data mining, reconnaissance and testing. If you like the project, give it a star. It forces...

evine

Evine 交互式 CLI 网络爬虫。 Evine 是一个用 Golang 编写的简单、快速且交互式的网络爬虫和网页抓取工具。 Evine 适用于多种用途，例如元数据和数据提取、数据挖掘、侦察和测试。 如果您喜欢这个项目，请给它一个星标。这能激励我继续开发该项目！ 安装 从二进制文件 预编译的二进制发布版也提供（建议使用）。 从源码 root@kitploit: go get github.com/saeeddhqan/evine "$GOPATH/bin/evine" -h 从 GitHub root@kitploit: git clone...

VULNERABLE-CVE-2024-45337

VULNERABLE-CVE-2024-45337 Un proyecto de ejemplo que muestra código Go vulnerable a CVE-2024-45337. Este es un proyecto complementario de: https://github.com/NHAS/CVE-2024-45337-POC Así tienes algo que explotar. Uso root@kitploit: go run solver.go -authorised-pubkey ided25519.pub -allowed...