bypass-url-parser

Bypass Url Parser Outil qui teste DE NOMBREUSES contournements d'URL pour atteindre une page protégée 40X. Si vous vous demandez pourquoi ce code n'est qu'un vil wrapper curl, voici pourquoi : La plupart des requêtes Python font de l'encodage/décodage d'URL/chemin/paramètre, et je déteste ça. Si ...

shhgit

🚨 shhgit больше не поддерживается. Если вам нужна поддержка или консультация по сканированию секретов, напишите мне на [email protected] 🚨 shhgit помогает прогрессивным командам разработки, эксплуатации и безопасности защищать свой код, находя секреты до того, как они приведут к утечке...

shhgit

🚨 shhgit is no longer maintained. If you need support or consultation for your secret scanning endeavours, drop me an e-mail [email protected] 🚨 shhgit helps secure forward-thinking development, operations, and security teams by finding secrets across their code before it leads to a security...

cve-2022-22947

cve-2022-22947 Spring Cloud Gateway는 Spring의 API 게이트웨이입니다. 3.1.0 및 3.0.6포함 이전 버전에는 SpEL 표현식 주입 취약점이 존재하며, 공격자가 Actuator API에 접근할 수 있는 경우 이 취약점을 이용하여 임의의 명령을 실행할 수 있습니다. 사용법: root@kitploit: ➜ ./cve-2022-22947 -h Usage of cve-2022-22947: -c string Execute command, Example: whoami default "id" -d...

TrashEmail

tl;dr TrashEmail is hosted Telegram bot that can save your private email address by offering disposable email address. It can create, manage, disposable email address and link them with your telegram bot chat. Where is the bot? - @trashemailbot How can I create dispoable mail id? - Decide a...

batchql

BatchQL BatchQL is a GraphQL security auditing script with a focus on performing batch GraphQL queries and mutations. This script is not complex, and we welcome improvements. When exploring the problem space of GraphQL batching attacks, we found that there were a few blog posts on the internet,...

batchql

BatchQL BatchQL est un script d'audit de sécurité GraphQL axé sur l'exécution de requêtes et mutations GraphQL par lots. Ce script n'est pas complexe, et nous accueillons favorablement les améliorations. En explorant le problème des attaques par lots GraphQL, nous avons constaté qu'il existait...

cve-2021-41773

Cve-2021-41773-grabber Уязвимость обхода пути и раскрытия файлов в Apache HTTP Server 2.4.49 Этот скрипт собирает уязвимые серверы для CVE-2021-41773 из Shodan Как использовать : используйте Python 3 установите модуль shodan " pip install shodan" измените ключевое слово в скрипте на ваше ключевое...

Nosql-MongoDB-injection-username-password-enumeration

Nosql injection username and password enumeration script Using this script, we can enumerate Usernames and passwords of Nosqlmongodb injecion vulnerable web applications. Exploit Title: Nosql injection username/password enumeration. Author: Kalana Sankalpa Anon LK. Website:...

pingap

pingap Before the pingap version is stable, no pull requests will be accepted. If you have any questions, please create a new issue first. Overview Pingap is a high-performance reverse proxy powered by the Cloudflare Pingora . It simplifies operational management by enabling dynamic, zero-downtim...

bmcweb

Веб-сервер OpenBMC Этот компонент представляет собой попытку создать универсальный "делающий всё" встроенный веб-сервер для OpenBMC. Возможности Веб-сервер реализует несколько отдельных интерфейсов: Веб-сокет событий DBus. Позволяет регистрироваться для отслеживания изменений определённых путей и...

Octopus

What is Octopus ? Octopus is an open source, pre-operation C2 server based on python which can control an Octopus powershell agent through HTTP/S. The main purpose of creating Octopus is for use before any red team operation, where rather than starting the engagement with your full operational...

CVE-2023-32117

CVE-2023-32117 Integrate Google Drive ","username":"admin","name":"admin","email":"[email protected]","role":"Administrator","folders":,"id":2,"avatar":"img alt='' src="http:///%5C/%5C/2.gravatar.com%5C/avatar%5C/b58996c504c5638798eb6b511e6f49af?s=32&d=mm&r=g"...

owasp-java-encoder

OWASP Java Encoder 프로젝트 컨텍스트 기반 출력 인코딩Contextual Output Encoding은 크로스 사이트 스크립팅Cross-Site Scripting을 차단하기 위해 필요한 컴퓨터 프로그래밍 기법입니다. 이 프로젝트는 Java 1.8 이상에서 사용할 수 있는, 간단하게 바로 적용 가능한 고성능 인코더 클래스로, 부가적인 요소가 거의 없습니다. OWASP Java Encoder에 대한 더 자세한 문서는 https://owasp.org/www-project-java-encoder/ 에서 확인하세요...

fwknop

fwknop - Autorisation par paquet unique Introduction fwknop implémente un schema d'autorisation connu sous le nom d'Autorisation par paquet unique SPA pour un masquage robuste des services. SPA ne nécessite qu'un seul paquet, qui est chiffré, non rejouable, et authentifié via un HMAC, afin de...

fwknop

fwknop - Single Packet Authorization Introduction fwknop implements an authorization scheme known as Single Packet Authorization SPA for strong service concealment. SPA requires only a single packet which is encrypted, non-replayable, and authenticated via an HMAC in order to communicate desired...

nextjs-middleware-bypass-demo

CVE-2025-29927 Демонстрация Оригинальная статья: https://zhero-web-sec.github.io/research-and-things/nextjs-and-the-corrupt-middleware Установка Сначала запустите сервер разработки: root@kitploit: npm i npm run dev Откройте http://localhost:3000 в вашем браузере, чтобы увидеть результат. Попытка...

python-hacklib

hacklib Toolkit for hacking enthusiasts using Python. hacklib is a Python module for hacking enthusiasts interested in network security. It is no longer in active development. Installation To get hacklib, simply run in command line: root@kitploit: pip install hacklib hacklib also has a user...

Panoptic

Panoptic Panoptic est un outil open source de test d'intrusion qui automatise la recherche et la récupération de fichiers journaux et de configuration courants via des vulnérabilités de traversée de chemin. Fonctionnalités Analyse asynchrone concurrente avec un pool de travailleurs configurable...

catphish

CATPHISH Generate similar-looking domains for phishing attacks. Check expired domains and their categorized domain status to evade proxy categorization. Whitelisted domains are perfect for your C2 servers. Perfect for Red Team engagements. Installation root@kitploit: bundle install Current...