atomic-red-team

Atomic Red Team Atomic Red Team™ is a library of tests mapped to the MITRE ATT&CK® framework. Security teams can use Atomic Red Team to quickly, portably, and reproducibly test their environments. Get started You can execute atomic tests directly from the command line, no installation required. S...

dorkscout

dorkscout dorkscout は、Google検索を通じてインターネット上で脆弱なアプリケーションや秘密のファイルを見つけることを自動化するツールです。最初に https://www.exploit-db.com/google-hacking-database からダークリストを取得し、その後、指定されたターゲットまたは見つけたすべてのものをスキャンします。 インストール dorkscout はさまざまな方法でインストールできます。 Go パッケージ Golang Packages golang パッケージマネージャー を通じて root@kitploit: go get...

shocker

Shocker A tool to find and exploit servers vulnerable to Shellshock Ref: https://en.wikipedia.org/wiki/Shellshocksoftwarebug Released as open source by NCC Group Plc - https://www.nccgroup.trust/ Developed By: Tom Watson, tom dot watson at nccgroup dot trust https://github.com/nccgroup/shocker...

shocker

Shocker Shellshock脆弱性のあるサーバーを発見し、悪用するためのツール Ref: https://en.wikipedia.org/wiki/Shellshocksoftwarebug NCC Group Plc によりオープンソースとして公開 - https://www.nccgroup.trust/ 開発者: Tom Watson, tom dot watson at nccgroup dot trust https://github.com/nccgroup/shocker AGPLのもとでリリースされています。詳細はLICENSEを参照してください。 ヘルプテキス...

objection

📱objection - Runtime Mobile Exploration objection is a runtime mobile exploration toolkit, powered by Frida, built to help you assess the security posture of your mobile applications, without needing a jailbreak. Supports both iOS and Android. Inspect and interact with container file systems...

CVE-2024-51378

CyberPanel 命令注入漏洞 - CVE-2024-51378 针对 CyberPanel 预认证 RCE（远程代码执行）的命令注入漏洞利用 作者： Luka Petrovic refr4g 披露日期： 2024 年 10 月 概述 针对 CyberPanel 中命令注入漏洞（CVE-2024-51378）的概念验证（PoC）利用代码。该漏洞允许未认证的攻击者通过向 /dns/getresetstatus 和 /ftp/getresetstatus 端点发送精心构造的 OPTIONS HTTP 请求，在易受攻击的服务器上注入并执行任意命令，可能导致系统完全沦陷。 影响 能够通过网络...

smogcloud

☁️ Smogcloud Find exposed AWS cloud assets that you did not know you had. A comprehensive asset inventory is step one to any capable security program. We made smogcloud to enable security engineers, penetration testers, and AWS administrators to monitor the collective changes that create dynamic...

Facad1ng

If you find this GitHub repo useful, please consider giving it a star! ⭐️ Facad1ng is an open-source URL masking and analysis tool designed for security research, phishing awareness, and defensive testing. It demonstrates how adversaries may disguise malicious links using URL manipulation and...

Singularity

Singularity - Stealthy Linux Kernel Rootkit "Shall we give forensics a little work?" This project was inspired by a very special woman to me: Mocinha Singularity is a powerful Linux Kernel Module LKM rootkit designed for modern 6.x kernels. It provides comprehensive stealth capabilities through...

mcpsnoop

Wireshark for MCP. A transparent proxy that shows every real tool call between your AI client and your MCP servers, live in your terminal. The problem The official MCP Inspector connects as its own client, so it never sees what your client Cursor, Claude Code, Codex actually sends your server. An...

RLSA-2026:67848 Important: postgresql:18 security update

PostgreSQL is an advanced object-relational database management system DBMS. Security Fixes: postgresql: PostgreSQL: SQL injection in pgcreatesubscriber allows arbitrary SQL execution as superuser CVE-2026-6476 postgresql: PostgreSQL: Arbitrary code execution via integer wraparound in tsvector an...

postgresql:18 security update

An update is available for module.pgvector, module.pgrepack, module.postgres-decoderbufs, module.pgaudit, pgrepack, pgvector, postgres-decoderbufs, pgaudit. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is availab...

eaphammer

by Gabriel Ryan s0lst1c3 Current release: v1.14.1 Supports Python 3.9+. Overview EAPHammer is a toolkit for performing targeted evil twin attacks against WPA2-Enterprise networks. It is designed to be used in full scope wireless assessments and red team engagements. As such, focus is placed on...

CVE-2026-73072

cve-id 捐赠 帮助维护此项目 如果您觉得此项目有用，请考虑通过 PayPal 或 ABA Mobile 支持其持续维护。 ❤️ 您捐款的 10% 将捐献给甘塔博帕医院。 ❤️ 每笔捐款的 10% 将捐献给甘塔博帕儿童医院。 | 选择付款方式 使用 ABA Mobile 扫码 · 点击放大 ---|--- ⚡ 简单用法 直接从 GitHub 运行外部下载脚本的最新版本： root@kitploit: bash 此命令需要 Bash 和 curl。如果您不信任来源，请在运行前查看远程脚本。 仅在安全且获得授权的环境中使用此项目，例如： 本地虚拟机 Docker 容器 隔离的实验室环境...

CVE-2022-4510-WalkingPath

CVE-2022-4510-Binwalk 此脚本允许您生成针对CVE-2022-4510 Binwalk漏洞的利用程序。这些利用程序可用于测试和演示。支持的选项包括SSH、命令执行和反弹Shell。 前提条件 Python 3.x 使用方法 1. 克隆仓库或下载脚本文件。 2. 使用所需选项运行脚本。可用选项如下： ssh：生成SSH利用程序。 参数： file：输入.png文件的路径。 pub：公钥文件的路径。 command：生成执行命令的利用程序。 参数： --command：要执行的命令。 file：输入.png文件的路径。 reverse：生成反弹Shell利用程序。 参数：...

cracken

Cracken Crackenは、高速なパスワードワードリスト生成、Smartlist作成、パスワードハイブリッドマスク分析ツールであり、純粋で安全なRustで書かれています（詳細はtalk/を参照）。maskprocessor、hashcat、Crunch、そして🤗 HuggingFaceのtokenizersのような素晴らしいツールに触発されています。 何？なぜ？うぉっと？？ DeepSec2021で、NLPトークナイザーを利用してパスワード内の共通の部分文字列を活用するハイブリッドマスクとしてパスワードを分析する新しい方法を発表しました（詳細はtalk/を参照）。...

cracken

Cracken Cracken is a fast password wordlist generator, Smartlist creation and password hybrid-mask analysis tool written in pure safe Rust more on talk/. Inspired by great tools like maskprocessor, hashcat, Crunch and 🤗 HuggingFace's tokenizers. What? Why? Woot?? At DeepSec2021 we presented a new...

laravel-crypto-killer

Laravel crypto killer A tool designed to exploit bad implementations of decryption mechanisms in Laravel applications. This tool was firstly designed to craft payloads targeting the Laravel decrypt function from the package Illuminate\Encryption. It can also be used to decrypt any data encrypted...

zscan

Zscan a scan blasting tool set 📄中文文档 Result output format -A partial screenshot of the output Introduce🎉 ​ Zscan is an open source collection of Intranet port scanners, blasting tools, and other utilities. Based on host discovery and port scanning, you can blow up mysql, MSSQL, Redis, Mongo,...

recollapse

REcollapse REcollapse is a helper tool for black-box regex fuzzing to bypass validations and discover normalizations in web applications. It can also be helpful to bypass WAFs and weak vulnerability mitigations. For more information, take a look at the REcollapse blog post. The goal of this tool ...