CVE-2023-22527

CVE-2023-22527 Uno strumento di sfruttamento per attaccare i server Confluence vulnerabili a CVE-2023-22527 che porta a RCE, testato e provato come POC su istanze vulnerabili di Confluence Data Center e Server. Con questo, un attaccante può eseguire codice arbitrario sull'istanza vulnerabile...

SlackShell

SlackShell Descrizione e Changelog v1.0 Questo modulo PowerShell include varie funzioni che utilizzano l'API Slack per creare un canale di comando e controllo. La funzione principale, Start-Shell, si connette a un canale Slack specificato dall'utente e autentica utilizzando un token di...

wpbf

wpbf! wpbf is a bruteforce tool to remotely test password strength, username enumeration and plugin detection on a WordPress site. Description ^^^^^^^^^^^ The script will try to login into the WordPress dashboard through the login form using a mixture of enumerated usernames, a wordlist and...

prometheus

Installing Prometheus Prometheus è un'applicazione Ruby e funzionerà su qualsiasi sistema che esegue una versione recente 1.8.7 o superiore di Ruby. Per installare Prometheus, segui i seguenti passaggi: 1. Crea una directory chiamata prometheus. 2. Estrai i file di prometheus nella directory. 3...

retire.js

Retire.js What you require you must also retire There are a plethora of JavaScript libraries for use on the Web and in Node.JS apps out there. This greatly simplifies development, but we need to stay up-to-date on security fixes. "Using Components with Known Vulnerabilities" is now a part of the...

cuckooautoinstall

About CuckooAutoinstall Cuckoo Sandbox . auto install script What is Cuckoo Sandbox? Cuckoo Sandbox is a malware analysis system. What does that mean? It means that you can throw any suspicious file at it and get a report with details about the file's behavior inside an isolated environment. We...

gpoParser

gpoParser gpoParser एक उपकरण है जिसे Active Directory वातावरण में Group Policy Objects GPOs के माध्यम से लागू किए गए कॉन्फ़िगरेशन को निकालने और उनका विश्लेषण करने के लिए डिज़ाइन किया गया है। चूँकि इन सेटिंग्स की सूची बनाना थकाऊ और समय लेने वाला हो सकता है, यह उपकरण लागू नीतियों की स्पष्ट समझ प्रद...

APKLab

APKLab L'esperienza definitiva di reverse engineering Android direttamente nel tuo VS Code. APKLab integra perfettamente i migliori strumenti open-source: Apktool, smali-lsp, Jadx, uber-apk-signer, apk-mitm e altri direttamente in VS Code, così puoi concentrarti sull'analisi delle app e portarla ...

Clematis

Clematis 中文 | Englisch 🛠️ Ein leistungsstarkes Werkzeug zum Konvertieren von PE-Dateien EXE/DLL in positionsunabhängigen Shellcode. ✨ Hauptfunktionen Unterstützung für die Konvertierung von PE-Dateien EXE/DLL in Shellcode Kompatibel mit x86- und x64-Architekturen Unterstützung für...

ACEshark

ACEshark Was ist das? ACEshark ist ein Dienstprogramm zur schnellen Extraktion und Analyse von Windows-Dienstkonfigurationen und Access Control Entries, ohne dass Tools wie accesschk.exe oder andere nicht native Binärdateien benötigt werden. Warum? Dienstberechtigungen effizient identifizieren un...

windows-api-function-cheatsheets

Windows-API-Funktions-Cheatsheets Kontakt 🌨️ Snowcrash: [email protected] Inhaltsverzeichnis Windows-API-Funktions-Cheatsheets Dateioperationen Prozessverwaltung Speicherverwaltung Thread-Verwaltung Dynamische Linkbibliothek DLL-Verwaltung Synchronisierung Interprozesskommunikation...

onedrive_user_enum

onedriveuserenum v2.10 Gültige OneDrive-Benutzer enumerieren Eine vollständige Erläuterung der Enumerationstechnik und der OneDrive-Enumeration finden Sie im Blog hier: https://www.trustedsec.com/blog/onedrive-to-enum-them-all/ Wenn Sie nach der alten Version ohne Datenbank der OneDrive-Enumerati...

ez-pwnkit

ez-pwnkit Un'implementazione in puro Go dell'exploit CVE-2021-4034 PwnKit. L'exploit utilizza syscall.ForkExec per sopravvivere alla fine del programma principale. Installazione root@kitploit: git clone https://github.com/OXDBXKXO/ez-pwnkit.git cd ez-pwnkit make Poiché l'exploit si basa su una...

stackflow

stackflow Ferramenta universal de exploração de estouro de buffer baseado em pilha Usage root@kitploit: usage: ./stackflow.py OPTIONS optional arguments: -h, --help show this help message and exit -r RHOST, --rhost RHOST rhost -p RPORT, --rport RPORT rport -c CMDS, --cmds CMDS commands to send to...

claude-bug-bounty

BugHunter AI-powered bug bounty hunting — recon to report, in your terminal. Free Setup · Quick Start · Commands · What It Finds · Install · FAQ !AwareXonehttps://assets.kitploit.com/production/public/readmes/65/29e21784cbe8b37142a688801ddd02d4084136effa303a59c67cdd8...

claude-bug-bounty

BugHunter AI-संचालित बग बाउंटी हंटिंग — recon से रिपोर्ट तक, आपके टर्मिनल में। मुफ़्त सेटअप · त्वरित प्रारंभ · कमांड · यह क्या खोजता है · इंस्टॉल · FAQ !AwareXonehttps://assets.kitploit.com/production/public/readmes/65/29e21784cbe8b37142a688801ddd02d4084136effa3...

Cacti cmd_realtime.php - Command Injection

Cacti provides an operational monitoring and fault management framework. A command injection vulnerability on the 1.3.x DEV branch allows any unauthenticated user to execute arbitrary command on the server when registerargcargv option of PHP is On. In cmdrealtime.php line 119, the $pollerid used ...

PaloAlto Networks Expedition - Remote Code Execution

An OS command injection vulnerability in Palo Alto Networks Expedition allows an unauthenticated attacker to run arbitrary OS commands as root in Expedition, resulting in disclosure of usernames, cleartext passwords, device configurations, and device API keys of PAN-OS firewalls. id: CVE-2024-946...

NUUO NVRmini - Remote Command Execution

NUUO NVRmini is vulnerable to unauthenticated remote command execution through the upgradehandle.php file. The vulnerability allows an attacker to execute arbitrary commands by manipulating the uploaddir parameter. id: CVE-2018-14933 info: name: NUUO NVRmini - Remote Command Execution author:...

Mida eFramework <=2.9.0 - Remote Command Execution

Mida eFramework through 2.9.0 allows an attacker to achieve remote code execution with administrative root privileges. No authentication is required. id: CVE-2020-15920 info: name: Mida eFramework =2.9.0 - Remote Command Execution author: dwisiswant0 severity: critical description: Mida eFramewor...