skyhook

Skyhook Skyhook est un utilitaire piloté par REST utilisé pour faire passer clandestinement des fichiers à l'intérieur et à l'extérieur de réseaux défendus par des implémentations IDS. Il est livré avec un client web pré-packagé qui utilise un mélange de React, de JavaScript vanille et de web...

skyhook

Skyhook Skyhook is a REST-driven utility used to smuggle files into and out of networks defended by IDS implementations. It comes with a pre-packaged web client that uses a blend of React, vanilla JS, and web assembly to manage file transfers. Key Links Download here See the user documentation to...

CVE-2018-20250

exp for Winrar에서 코드 실행 추출 Ridter의 poc 사용 방법? Python 3.7을 설치하고, 실행하려는 악성 파일을 준비한 다음, 원하는 값을 설정하기만 하면 됩니다. 이 exp 스크립트는 악성 아카이브 파일을 자동으로 생성합니다! 1. 원하는 값을 설정하세요 root@kitploit: ... ... The archive filename you want rarfilename = "test.rar" The evil file you want to run evilfilename = "calc.exe" The...

cve-2025-55182

침투 테스트 라이트업: Next.js RCE 및 Node.js Inspector 권한 상승 이 기술 라이트업은 취약한 Next.js 웹 애플리케이션을 호스팅하는 대상을 손상시키고, 수집한 자격 증명을 통해 초기 접근을 달성하며, 잘못 구성된 로컬 Node.js V8 인스펙터를 활용하여 루트 권한 상승을 수행하는 공격 경로를 상세히 설명합니다. 1단계: 외부 정찰 및 웹 익스플로잇 초기 푸팅프린팅 대상은 표준 HTTP/HTTPS 포트80/443에서 실행되는 Next.js 웹 애플리케이션을 호스팅합니다. 표준 디렉터리 열거 및 수...

CVE-2026-19490

CVE-2026-19490 — NetScaler ADC/Gateway SAML 인증 우회 Citrix NetScaler ADC / NetScaler Gateway에서 GET /cgi/samlauth의 SAML HTTP-Redirect 바인딩 핸들러를 통한 인증되지 않은 세션 위조. CVSS 4.0 9.3, CWE-288. Bulletin CTX696939 2026-08-19, 해결 방법 없음. 최초 보고에 대한 크레딧은 Samarth VashishtJPMorgan Chase 침투 테스트 팀에게 있으며, 근본 원인 분석과 이...

xcrawl3r

xcrawl3r xcrawl3r est un utilitaire en ligne de commande conçu pour parcourir récursivement les pages web à la recherche d'URL. Il fonctionne en traversant activement les sites web – en suivant les liens intégrés dans les pages et en analysant les fichiers y compris les sitemaps et robots.txt –...

xcrawl3r

xcrawl3r xcrawl3r is a command-line utility designed to recursively spider webpages for URLs. It works by actively traversing websites - following links embedded in webpages, and parsing files including sitemaps & robots.txt - to uncover every URL. Unlike xurlfind3r that doesn't interact directly...

CVE-2024-29849

CVE-2024-29849 Обход аутентификации Veeam Backup Enterprise Manager CVE-2024-29849 от Sina Kheirkhah @SinSinology из SummoningTeam @SummoningTeam Технический анализ Анализ первопричины уязвимости можно найти в моём блоге Краткое описание Поддерживаемые версии? Согласно официальному бюллетеню Veea...

mkdev

mkdev Real HTTPS for local dev — with a TUI and LAN sharing. mkdev runs trusted HTTPS on .local. A single Go binary: cert authority + reverse proxy + /etc/hosts + mDNS broadcast + a full TUI. What makes it different: LAN sharing Mark a route shared, hit https://app.local from your phone or any...

log4shell-tools

log4shell.tools log4shell.tools est un outil qui vous permet d'exécuter un test pour vérifier si l'une de vos applications est affectée par les récentes vulnérabilités de log4j : CVE-2021-44228 et CVE-2021-45046. Il s'agit du code qui alimente https://log4shell.alexbakker.me. Si vous souhaitez...

SharePointDumper

SharePointDumper SharePointDumper is a PowerShell-based extraction and auditing utility that enumerates SharePoint sites a user can access via Microsoft Graph and downloads files via SharePoint. It is designed for SOC / DLP testing, purple teaming, and non-sophisticated red-team assessments, and...

Learning-Linux-Binary-Analysis

Learning Linux Binary Analysis This is the code repository for Learning Linux Binary Analysis, published by Packt. Learning Linux Binary Analysis What is this book about? Learning Linux Binary Analysis is packed with knowledge and code that will teach you the inner workings of the ELF format, and...

CVE_2020_2546

Twitter: @Hktalent3135773 1、Weblogic RCE exploit CVE20202546 CVE-2020-2915 CVE-2020-2801 CVE-2020-2798 CVE-2020-2883 CVE-2020-2884 CVE-2020-2950 WebLogic RCE T3 payload exploit poc python3 2、exploit GIOP + send bind CVE-2020-2555、CVE-2019-2888、CVE-2019-2888 or others GIOP + send jta rmi or others...

PRISM-AP

PRISM-AP ОПИСАНИЕ: PRISM-AP — это автоматизированная платформа для проведения MITM-атак через RogueAP в беспроводных сетях. ВОЗМОЖНОСТИ: Простая настройка и использование, полная автоматизация Использует MANA Wi-Fi атаку для привлечения клиентских подключений Частичный обход HSTS с помощью...

slinger

slinger投石器 HTTP-клиент для Rust, созданный для хакеров. · ·...

CVE-2021-26855_PoC

CVE-2021-26855PoC Mes premières charges utiles SSRF CVE-2021-26855 sur Exchange Server 2019... Charge utile 1 root@kitploit: curl -i -s -k -X $'GET' -H $'Host: ' -H $'User-Agent: alex666' -H $'Connection: close' -b $'X-AnonResource=true;...

Squalr

Squalr Squalr Official Website Join us on our Discord Channel Squalr is a highly performant dynamic analysis reverse-engineering tool written in Rust. First and foremost, Squalr is a lightning fast memory scanner, allowing the user to search for and modify running process memory. Fast scans are...

ParsingPeas

ParsingPeas 🥒 Automated PEASS collection + a clean, portable HTML report for CTF & lab privilege-escalation work. Run one command on the target. ParsingPeas pulls LinPEAS/WinPEAS from your Kali host, runs the scan, ships the output back, and turns it into a single self-contained HTML report you c...

CVE-2022-36532

Доказательство концепции для CVE-2022-36532 Уязвимость в Bolt CMS версии 5.1.12 и ниже позволяет аутентифицированному пользователю с ролью EDITORROLE выполнить удалённый код. Эту уязвимость можно обнаружить с помощью этого скрипта; подробности об уязвимости см. на...

raxe-ce

Threat Detection for AI Agents Stop prompt injection, jailbreaks, and tool attacks before they execute. 100% local. Sub-5ms rule matching. Free forever. root@kitploit: pip install raxe && raxe scan "Ignore all previous instructions" Requires Python 3.10+ • 515+ rules + ML detection included Built...