uefi_retool

uefiretool Uno strumento per il reverse engineering del firmware UEFI. Analisi del firmware UEFI con lo script uefiretool Utilizzo: Copia lo script idaplugin/uefianalyser.py e la directory idaplugin/uefianalyser nella directory dei plugin di IDA Modifica il file config.json PEDIR è una directory...

EUVD-2026-67354

WatchGuard Dimension contains an authenticated SQL injection vulnerability in the scheduled report feature which allows an authenticated user with report administration permissions gain arbitrary command execution as the Dimension WebUI process user by sending specially crafted requests...

EUVD-2026-67341

WatchGuard Dimension contains an authenticated SQL injection vulnerability in the audit report feature which allows an authenticated user with report administration permissions gain arbitrary command execution as the Dimension WebUI process user by sending specially crafted requests...

EUVD-2026-67351

WatchGuard Dimension contains an authenticated SQL injection vulnerability in the log viewer feature which allows an authenticated user with report administration permissions gain arbitrary command execution as the Dimension WebUI process user by sending specially crafted requests...

sub404

Sub404: Uno strumento veloce per verificare la vulnerabilità di takeover di sottodomini Cos'è Sub 404 Sub 404 è uno strumento scritto in Python utilizzato per verificare la possibilità di vulnerabilità di takeover di sottodomini ed è veloce perché asincrono. Perché Durante il processo di...

exist

EXIST Sistema di aggregazione di informazioni esterne contro le minacce informatiche ⚠️ Questo repository non è più mantenuto / archiviato. I problemi di sicurezza non verranno risolti. EXIST è un'applicazione web per aggregare e analizzare CTI intelligence sulle minacce informatiche. EXIST è...

exist

EXIST EXternal Information aggregation System against cyber Threat ⚠️ This repository is unmaintained / archived. Security issues will not be fixed. EXIST is a web application for aggregating and analyzing CTI cyber threat intelligence. EXIST is written by the following software. Python 3 Django...

Maryam

OWASP Maryam OWASP Maryam is a modular open-source framework based on OSINT and data gathering. It is designed to provide a robust environment to harvest data from open sources and search engines quickly and thoroughly. Installation Supported OS Linux FreeBSD Darwin OSX root@kitploit: $ pip insta...

frida-fuzzer

Frida API Fuzzer v1.4 Copyright C 2020 Andrea Fioraldi [email protected] Released under the Apache License v2.0 This experimental fuzzer is meant to be used for API in-memory fuzzing. The design is highly inspired and based on AFL/AFL++. ATM the mutator is quite simple, just the AFL's havoc...

PrintSpoofer

PrintSpoofer Da LOCAL/NETWORK SERVICE a SYSTEM sfruttando SeImpersonatePrivilege su Windows 10 e Server 2016/2019. Per maggiori informazioni: https://itm4n.github.io/printspoofer-abusing-impersonate-privileges/. Utilizzo Puoi controllare il messaggio di aiuto usando l'opzione -h. root@kitploit:...

FullPowers

FullPowers FullPowers è uno strumento Proof-of-Concept che ho realizzato per recuperare automaticamente il set di privilegi predefinito di un account di servizio, inclusi SeAssignPrimaryToken e SeImpersonate. Motivazione Su Windows, alcuni servizi eseguiti come LOCAL SERVICE o NETWORK SERVICE son...

FAMA

VERALTET: LabCIF - Forensische Analyse für mobile Apps Erste Schritte Android-Extraktions- und Analyse-Framework mit integriertem Autopsy-Modul. Dumpen Sie einfach Benutzerdaten von einem Gerät und erstellen Sie leistungsstarke Berichte für Autopsy oder externe Anwendungen. Funktionen Extrahieren...

trident

trident Il progetto Trident è uno strumento automatico di password spraying sviluppato per soddisfare i seguenti requisiti: la possibilità di essere distribuito su diverse piattaforme cloud/provider di esecuzione la possibilità di pianificare campagne di spraying in base alla politica di blocco...

trident

trident The Trident project is an automated password spraying tool developed to meet the following requirements: the ability to be deployed on several cloud platforms/execution providers the ability to schedule spraying campaigns in accordance with a target’s account lockout policy the ability to...

lockphish

Lockphish v2.0 Lockphish it's the first tool 07/04/2020 for phishing attacks on the lock screen, designed to grab Windows credentials, Android PIN and iPhone Passcode using a https link. LockPhish Tutorial: https://www.kalilinux.in/2020/05/lockphish.html Author: The Linux Choice Who deleted his...

adbsploit

ADBSploit Uno strumento basato su Python per sfruttare e gestire dispositivi Android tramite ADB Attualmente in sviluppo Screenrecord Stream Screenrecord Estrai Contatti Estrai SMS Estrai Chat App di Messaggistica WhatsApp/Telegram/Line Installa Backdoor E altro ancora... Installazione...

adbsploit

ADBSploit A python based tool for exploiting and managing Android devices via ADB Currently on development Screenrecord Stream Screenrecord Extract Contacts Extract SMS Extract Messasing App Chats WhatsApp/Telegram/Line Install Backdoor And more... Installation root@kitploit: First Download or...

PowerSploit

Dieses Projekt wird nicht mehr unterstützt PowerSploit ist eine Sammlung von Microsoft PowerShell-Modulen, die Penetrationstestern in allen Phasen einer Bewertung helfen können. PowerSploit besteht aus den folgenden Modulen und Skripten: Codeausführung Code auf einem Zielcomputer ausführen...

nexphisher

Project not maintained anymore. UseZPhisher Installation : apt update apt install git -y git clone git://github.com/htr-tech/nexphisher.git cd nexphisher SETUP : bash setup SETUP TERMUX : bash tmuxsetup Run : bash nexphisher Single Command : root@kitploit: apt update ; apt install git -y ; git...

pe_tree

PE Tree PE Tree is a Python module for viewing Portable Executable PE files in a tree-view using pefile and PyQt5. It can also be used with IDA Pro, Ghidra, Volatility, Rekall and minidump to view and dump in-memory PE files, as well as perform import table reconstruction. Table of contents 1...