CVE-2021-34730

Cisco RV110W UPnP 0day Analysis Preface UPnP has been a hot topic recently. I happened to have a Cisco RV110W device on hand. In August 2021, Cisco officially disclosed a 0day regarding UPnP in the RV series, but the specific details were not published. So I wanted to debug and exploit this...

metabigor

Metabigor - potencia OSINT sin la molestia de las claves API ¿Qué es Metabigor? Metabigor mapea la infraestructura de un objetivo sin pedirte que te registres para obtener una sola clave API. Rangos de red, certificados, dominios relacionados, puertos expuestos, proveedores de CDN y fugas de...

GhostESP

La plataforma de seguridad inalámbrica nativa de ESP-IDF para ESP32. Evaluación profunda de Wi-Fi y BLE, captura y exportación de nivel de investigación, y un ecosistema real de aplicaciones. Construida directamente sobre el ESP-IDF de Espressif en lugar de a través del núcleo Arduino, por lo que...

gasmask

gasmask Herramienta de recopilación de información todo en uno - OSINT Para obtener una lista completa de nuestras herramientas, visite nuestro sitio webhttps://www.twelvesec.com/ Escrito por: maldevel twitter mikismaos xvass ndamoulianos sbrb Dependencias Python 3.x validators python-whois...

gasmask

gasmask All in one Information gathering tool - OSINT For a full list of our tools, please visit our websitehttps://www.twelvesec.com/ Written by: maldevel twitter mikismaos xvass ndamoulianos sbrb Dependencies Python 3.x validators python-whois dnspython requests shodan censys mmap pprint...

ADTrapper

ADTrapper - Active Directory Security Analysis Platform Professional Active Directory Security Analysis and Threat Detection Platform Transform Windows authentication logs into actionable security insights with advanced threat detection and interactive visualizations Overview ADTrapper is a...

WebSecProbe

.png WebSecProbe is a security testing utility designed for web security researchers, penetration testers, and system administrators to analyze HTTP 403 Forbidden responses and access control behavior in web applications. The tool assists in identifying misconfigurations, inconsistent authorizati...

pentest-mcp

Pentest MCP Professional penetration-testing MCP server with modern transport/auth support and expanded recon tooling. What Changed in 0.9.0 Upgraded MCP SDK to @modelcontextprotocol/sdk@^1.26.0 Kept MCP Inspector at the latest release @modelcontextprotocol/inspector@^0.20.0 with bundled launcher...

CVE_2019_18935

RAUcrypto Combined exploit for Telerik UI for ASP.NET AJAX. File upload for CVE-2017-11317 and CVE-2017-11357 - will automatically upload the file .NET deserialisation for CVE-2019-18935 For exploitation to work, you generally need a version with hard coded keys, or you need to know the key, for...

Sububy

Sububy Sububy is a one stop subdomain enumeration suite written in ruby, it focuses on accuracy and quality with the flexibility of accessing some modules individually without having to stick with the tool execution flow, allowing you to integrate it with your work flow. Sububy comes with nine...

exploit-CVE-2024-25723

Exploit for CVE-2024-25723 This repository is dedicated to addressing CVE-2024-25723, a critical security vulnerability in ZenML, with an educational Proof of Concept PoC provided to illustrate the issue and encourage prompt mitigation. The PoC demonstrates how an unauthorized user could...

CVE-2023-38545

CVE-2023-38545: Curl Vulnerability Proof of Concept This repository contains a Proof of Concept PoC designed to test systems for the CVE-2023-38545 vulnerability. The vulnerability affects the curl utility, specifically versions between 7.69.0 and 8.3.1, and is related to the handling of HTTP...

raider

Enlaces rápidos Sitio web. Página de OWASP. Documentación. Instalación. FAQ. Primeros pasos. Arquitectura. Discusiones. Incidencias. Twitter. Fediverse. Qué es Raider OWASP Raider se desarrolló con el objetivo de mejorar las pruebas de autenticación web. Desde entonces ha evolucionado y puede...

XSHOCK

⚡ xShock ShellShock ⚡ Written by TMRSWRR Version 1.0.0 xShock ShellShock CVE-2014-6271 This tool exploits shellshock. Instagram: TMRSWRR 🖼️ Screenshots 🖼️ 📹 How to use 📹 Click on the image... 📒 Read Me 📒 All founded directories will be saved in vulnurl.txt file. The results of the executed commands...

waybackpack

waybackpack Waybackpack es una herramienta de línea de comandos que te permite descargar el archivo completo de Wayback Machine para una URL determinada. Por ejemplo, para descargar todas las copias de la página de inicio del Departamento de Trabajo hasta 1996 que resulta ser el primer año en que...

waybackpack

waybackpack Waybackpack is a command-line tool that lets you download the entire Wayback Machine archive for a given URL. For instance, to download every copy of the Department of Labor's homepage through 1996 which happens to be the first year the site was archived, you'd run: root@kitploit:...

ferret

Ferret The collaborative MITM proxy for security testers. Capture HTTP traffic, annotate requests with AI, run hunt sessions, replay traffic, and track findings from one interface. Quick start · Features · Screenshots · Configuration · Security · Contributing Quick start Install root@kitploit: gi...

flashingestor

flashingestor A TUI for Active Directory collection. Philosophy The main goals of this project are: 1. Be a full data ingestor compatible with BloodHound CE Community Edition 2. Be faster, less noisy, and more customizable than other collectors 3. Provide a friendly TUI terminal user interface wi...

pdfjs-vuln-demo

PDF.js Vulnerability Demo Project This project is intended to serve as a proof of concept to demonstrate exploiting the vulnerability in the PDF.js pdfjs-dist library reported in CVE-2024-4367 Getting Things Running Fork and clone from this repository npm install npm run dev Testing Things Out...

cve-2020-0688

cve-2020-0688 Usage: root@kitploit: usage: cve-2020-0688.py -h -s SERVER -u USER -p PASSWORD -c CMD optional arguments: -h, --help show this help message and exit -s SERVER, --server SERVER ECP Server URL Example: http://ip/owa -u USER, --user USER login account Example: domain\user -p PASSWORD,...