crowbar

Crowbar - Herramienta de fuerza bruta ¿Qué es Crowbar? Crowbar anteriormente conocido como Levye es una herramienta de fuerza bruta que se puede utilizar durante pruebas de penetración. Fue desarrollada para forzar algunos protocolos de una manera diferente a otras herramientas populares de fuerz...

CVE-2021-32644

CVE-2021-32644 该漏洞是影响 Ampache 4.4.3 之前版本的 XSS 漏洞。 https://nvd.nist.gov/vuln/detail/CVE-2021-32644 安装及运行步骤 1. Ampache 安装 进行安装时，请先在 docker-compose.yml 文件中配置端口转发。 当前安装的 Ampache 版本为 4.4.2。 root@kitploit: $docker-compose up 2. 访问 Amapache 转到 http://web-server ip:port/ 2. 访问 Amapache 并配置 MySQL 转到...

incriminator

Incriminator Incriminator es un proyecto de código abierto con fines educativos que te permite incriminar otros dispositivos durante un ciberdelito. El proyecto está ahora en la versión 1.0 Si encuentras un error, por favor, repórtalo. Gracias por descargar... SOLO CON FINES EDUCATIVOS!!!!!!! ¡No...

CVE-2021-44228

Log4j Vulnerability - CVE-2021-44228 📗 Introduction This vulnerability was discovered on December 9, 2021, identified with CVE-2021-44228 , this flaw affects the java log package, generating a Severity Score CVSS of 10 points , providing execution of remote access to the host. This vulnerability...

apache_skywalking

Apache SkyWalking SkyWalking ：一个 APM（应用程序性能监控）系统，专为 微服务、云原生和基于容器（Docker、Kubernetes、Mesos）的架构而设计。 简介 SkyWalking 是一个开源 APM 系统，为云原生架构下的分布式系统提供监控、追踪和诊断能力。 核心功能如下。 服务、服务实例、端点指标分析 根因分析。在运行时对代码进行剖析。 服务拓扑图分析 服务、服务实例和端点依赖分析 检测慢服务和慢端点 性能优化 分布式追踪和上下文传播 数据库访问指标。检测慢数据库访问语句（包括 SQL 语句）。 告警 SkyWalking...

CVE-2022-41040

CVE-2022-41040 CVE-2022-41040 nuclei template Unverified! Usage root@kitploit: git clone https://github.com/numanturle/CVE-2022-41040 cd CVE-2022-41040 nuclei -u https://target -t owa.yaml root@kitploit: GET...

CVE-2021-41773

CVE-2021-41773 Hello guys, yesterday The new CVE-2021-41773 for apache 2.4.49 verison is released. So in this case, i want to explain about this apache vulnerability. Playground So, I think you guys want to test this vulnerability in website. So i have a playground place for you guys. This is the...

exe2powershell

exe2powershell exe2powershell - exe2bat reborn for modern Windows exe2bat reborn in exe2powershell for modern Windows exe2powershell is used to convert any binary file .exe to a BAT file. The resulting BAT file contains only "echo" command and finally a powershell command to re-create the origina...

CVE-2019-9053-exploit

CVE-2019-9053-exploit working exploit for CVE-2019-9053 I edited oryginal exploit and now its working well. Oryginal exploit had some problems like missing syntax. Usage: Example usage no cracking password: exploit.py -u http://target-uri Example usage with cracking password: exploit.py -u...

CVE-2020-0688-Scanner

CVE-2020-0688-Scanner This script scans an IP/range/CIDR and outputs the Microsoft Exchange Servers and Versions discovered. The specified IP/range/CIDR will be scanned with masscan on port tcp/443. After a successful scan it tries to HTTP GET "/owa/auth/logon.aspx" with curl to grab the Outlook...

Pegasus---Forbidden-Buster

Pegasus - Forbidden Buster Autor: Letda Kes dr. Sobri, S.Kom. Una herramienta de pruebas de penetración para eludir respuestas HTTP 401/403 mediante diversas técnicas de manipulación de cabeceras y fuzzing de rutas. Características Prueba diversas manipulaciones de cabeceras X-Forwarded-For,...

maigret

Maigret English · 简体中文 Maigret 仅凭一个用户名,就能在大量站点上查找其账号,并从网页中收集所有可获取的公开信息,为目标人物生成一份档案。无需任何 API 密钥。AI 画像演示 。 赞助商 711Proxy 提供可靠的住宅代理,适用于网页抓取、用户名查询及公开数据采集。覆盖 200+ 个国家超 1 亿 住宅 IP · 高成功率 · 稳定快速。 特别优惠 :免费试用!轮换住宅代理低至 $0.55/GB 。无并发限制的不限量住宅代理低至 $15/小时 。 9Proxy 提供住宅代理,低至 $0.018/IP 或 $0.68/GB 。覆盖 90+ 国家超 2000 ...

CVE-2021-22054

CVE-2021-22054 Generate SSRF payloads References https://blog.assetnote.io/2022/04/27/advisory-vmware-workspace-one-uem/ https://blog.assetnote.io/2022/04/27/vmware-workspace-one-uem-ssrf/ Examples root@kitploit: generate POC python3 ssrf.py --url https://target.com --url https://example.com...

PSPKIAudit

PSPKIAudit Kit de herramientas de PowerShell para auditar Active Directory Certificate Services AD CS. Está construido sobre el kit de herramientas PSPKI Microsoft Public License de PKISolution. Este repositorio contiene una versión más reciente de PSPKI que la disponible en PSGallery consulte el...

cve-2026-41200-stig-manager-oidc-reflected-xss

CVE-2026-41200 — STIG Manager OIDC Reflected XSS PoC Conceptual Proof of Concept for the reflected Cross-Site Scripting XSS vulnerability in STIG Manager versions 1.5.10 through 1.6.7. Vulnerability Summary A reflected XSS vulnerability exists in the STIG Manager Web App OIDC authentication error...

firmadyne

Table of Contents Table of Contents Introduction Setup Extractor Database Binaries QEMU Usage FAQ run.sh is not generated Log ends with "Kernel panic - not syncing: No working init found" A process crashed, e.g. dopagefault 2: sending SIGSEGV for invalid read access from 00000000 How do I debug t...

CVE-2020-8289

CVE-2020-8289 – Remote Code Execution as SYSTEM/root via Backblaze Summary Name: Remote Code Execution as SYSTEM/root via Backblaze CVE: CVE-2020-8289 Discoverer: Jason Geffner Vendor: Backblaze Product: Backblaze for Windows and Backblaze for macOS Risk: Critical Discovery Date: 2020-03-13...

CVE-2020-25078

D-Link DCS Series Account Password Information Disclosure Vulnerability D-Link DCS Series account password information disclosure vulnerability, obtain account password via script to log in. Vulnerability ID CVE-2020-25078 Tool Usage python3 CVE-2020-25078.py -u http://127.0.0.1:1111 single URL...

PwnXSS

Un potente escáner XSS hecho en Python 3.7 Instalación Requisitos: BeautifulSoup4 root@kitploit: pip install bs4 requests root@kitploit: pip install requests python 3.7 Comandos: root@kitploit: git clone https://github.com/pwn0sec/PwnXSS chmod 755 -R PwnXSS cd PwnXSS python3 pwnxss.py --help Uso...

CVE-2023-1405

CVE-2023-1405 Formidable Forms = 6.1.2 - Unauthenticated PHP Object Injection Description: The Formidable Forms plugin for WordPress is vulnerable to PHP Object Injection in versions up to, and including, 6.1.2 via deserialization of untrusted input from form submissions. This allows...