gimmepatz

😼 gimmePATz 😼 - Personal Access Token PAT recon tool Have you ever found a GitHub or a NPM personal access token PAT and wondered "Is this valid?" or "I wonder what a bad guy could do with this?" Well, if so, I've got the tool for you! Introducing gimmePatz, a comprehensive reconnaissance tool fo...

TIGMINT

TIGMINT : Twitter, Instagram and Geo-Tagging Media Intelligence Introduction An OSINT Open Source Intelligence software framework with an objective of making cyber investigations more convinient by implementing abstraction mechanisms to hide the background technical complexity also bundling...

ThingsBoard-IoT-Platform-CVE-2024-55466

ThingsBoard Privilege Escalation Using Stored XSS While tinkering with IoT technology, I found vulnerability in the Thingsboard Application that allowed avenues for privilege escalation. Thingsboard is an open-source application that allows device management, data collection, processing and...

copyfail

CVE-2026-31431 — "Copy Fail" Safe Detection Script A read-only detection script for the Copy Fail Linux kernel local privilege escalation vulnerability. No exploit code. No AFALG socket opened. No files written outside /etc/modprobe.d only when you apply the mitigation manually. Background Copy...

CVE-2024-6387

🇮🇱 BringThemHome NeverAgainIsNow 🇮🇱 We demand the safe return of all citizens who have been taken hostage by the terrorist group Hamas. We will not rest until every hostage is released and returns home safely. You can help bring them back home.https://stories.bringthemhomenow.net/ OpenSSH...

fileintel

fileintel This is a tool used to collect various intelligence sources for a given file. Fileintel is written in a modular fashion so new intelligence sources can be easily added. Files are identified by file hash MD5, SHA1, SHA256. The output is in CSV format and sent to STDOUT so the data can be...

fileintel

fileintel このツールは、指定されたファイルに関する様々なインテリジェンスソースを収集するために使用されます。 Fileintel はモジュール方式で記述されているため、新しいインテリジェンスソースを簡単に追加できます。 ファイルはファイルハッシュ（MD5、SHA1、SHA256）で識別されます。出力はCSV形式でSTDOUTに送られるため、データを保存したり他のプログラムにパイプしたりできます。CSV形式なので、Excelなどのスプレッドシートやデータベースシステムで簡単にインポートできます。 このツールはPython v2で動作しますが、Python...

tcpflow

TCPFLOW 1.5.0 ダウンロードディレクトリ: http://digitalcorpora.org/downloads/tcpflow/ インストール ほとんどの一般的なGNU/Linuxディストリビューションは、リポジトリにtcpflowを同梱しています。そのため、Debian/Ubuntuなどでは以下のように入力します。 root@kitploit: sudo apt-get install tcpflow Fedora/RedHat/CentOSなどでは以下のように入力します。 root@kitploit: sudo dnf install tcpflow...

CVE-2021-42013

CVE-2021-42013 - Apache 2.4.50 Path Traversal & Remote Code Execution RCE ⚠️ For educational and authorized security research purposes only Original Exploit Authors Very grateful to the original PoC author Walnut Security Services Pvt. Ltd Description An attacker could use a path traversal attack...

bopscrk

bopscrk Generate smart and powerful wordlists for targeted attacks Explore the docs » View Demo · Report Bug · Request Feature Table of contents 1. About the Project What's new Built with 2. Getting started Installation Run interactive mode 3. Usage How it works Tips Advanced usage Lyricpass 4...

CVE-2022-24449

CVE-2022-24449 Solar Appscreener XXE Suggested description An issue was found in Solar AppScreener SAST tool through 3.10.4. An unauthorized actor, may exploit effected hosts where vulnerable version is installed, by uploading specially crafted XML files on hosts, which has an expired or...

CVE-2022-32932

CVE-2022-32932 : ZinComputeProgramUpdateMutables OOB write due to double fetch issue 저자 commnet CVE-2022-32932 is another vulnerability I discovered in the ANE kernel interface; this is a double fetch issue that resulted in an interesting OOB write. Analysis: H11ANEIn::patchMutableSurface reachab...

aws-security-assessment-solution

セルフサービス型セキュリティ評価ソリューション v2.0 サイバーセキュリティは、多くのCIO、CISO、およびその顧客にとって非常に重要なトピックであり、懸念事項であり続けています。これらの重要な懸念に対応するため、AWSは顧客がアカウントを保護するために使用すべき主要なサービス群を開発しました。Amazon GuardDuty、AWS Security Hub、AWS Config、およびAWS Well-Architected...

CVE-2023-40028

CVE-2023-40028 POC for CVE-2023-40028: Ghost CMS Arbitrary File Read Description Ghost is an open source content management system. Versions prior to 5.59.1 are subject to a vulnerability which allows authenticated users to upload files that are symlinks. This can be exploited to perform an...

CryptoChat

CryptoChat : Beyond Secure Messaging 🛡️ Welcome to CryptoChat - where conversations remain truly private. Built on the robust Python ecosystem, our application ensures that every word you send is wrapped in layers of encryption. Whether you're discussing sensitive business details or sharing...

CVE-2026-26417

CVE-2026-26417 Broken Access Control in Password Reset Functionality Vulnerability Summary A broken access control vulnerability was identified in Tata Consultancy Services TCS – Cognix Recon Client v3.0. The issue allowed authenticated users to reset passwords of arbitrary user accounts by...

Brosec

Overview tl;dr Brosec is a terminal based reference utility designed to help us infosec bros and broettes with useful yet sometimes complex payloads and commands that are often used during work as infosec practitioners. An example of one of Brosec's most popular use cases is the ability to genera...

rosenbridge

project:rosenbridge : hardware backdoors in x86 CPUs github.com/xoreaxeaxeax/rosenbridge // domas // @xoreaxeaxeax Overview project:rosenbridge reveals a hardware backdoor in some desktop, laptop, and embedded x86 processors. The backdoor allows ring 3 userland code to circumvent processor...

whids

重要: このREADMEおよびその他のドキュメントは、最新のベータリリースで行われた変更を反映するように更新されていません（多くの変更が行われたため）。安定版がリリースされた時点で、これらすべてが更新される予定です（次期リリースまでのロードマップを参照）。ご自身の判断でベータリリースを実行し、質問があればお気軽にどうぞ。 概要 EDR （エンドポイント検出・対応）であり、検出に基づくアーティファクト収集機能を備えています。検出エンジンは、Windowsイベントをユーザー定義のルールと照合するために特別に設計された以前のプロジェクトGeneをベースに構築されています。...

CVE-2018-0952-SystemCollector

SystemCollector PoC for Privilege Escalation in Windows 10 Diagnostics Hub Standard Collector Service Affected Products Windows 10 Windows Server Windows Server 2016 Visual Studio 2015 Update 3 Visual Studio 2017 Summary The Diagnostics Hub Packaging library, used by Windows Standard Collector...