pillager

Pillager Pillage filesystems for sensitive information with Go. Table of Contents 1. Summary 2. Installation 3. Usage 4. Exfiltration 5. Documentation Summary Pillager is designed to provide a simple means of leveraging Go's strong concurrency model to recursively search directories for sensitive...

CVE-2020-14181

CVE-2020-14181 PoC para CVE-2020-14181 Las versiones afectadas de Atlassian Jira Server y Data Center permiten a un usuario no autenticado enumerar usuarios a través de una vulnerabilidad de divulgación de información en el endpoint /ViewUserHover.jspa. Esta vulnerabilidad fue descubierta por...

Joomla-CVE-2023-23752

Joomla-CVE-2023-23752 此Python实现通过演示CVE-2023-23752的利用过程，达到教育目的。该代码提供了关于如何利用此漏洞的见解。 目录 关于 安装 用法 贡献 漏洞环境部署 致谢 许可证 免责声明 关于 本项目展示了一个Python实现，旨在演示CVE-2023-23752信息泄露漏洞。它包含一个docker-compose.yml文件，以简化设置和执行，使其对于高效演示或测试概念验证特别有用。 安装 要正确运行exploit.py文件，请下载项目文件并执行以下代码以安装必要的依赖： root@kitploit: pip install -r...

CVE-2019-7642

CVE-2019-7642 Los routers D-Link con la función mydlink tienen algunas interfaces web sin requisitos de autenticación. Un atacante puede obtener de forma remota los registros de consultas DNS y los registros de inicio de sesión de los usuarios. Los objetivos vulnerables incluyen, entre otros, las...

wifiphisher

About Wifiphisher is a rogue Access Point framework for conducting red team engagements or Wi-Fi security testing. Using Wifiphisher, penetration testers can easily achieve a man-in-the-middle position against wireless clients by performing targeted Wi-Fi association attacks. Wifiphisher can be...

CVE-2022-46463

CVE-2022-46463 Harbor public镜像下载 Harbor是一款开源的镜像托管平台。 此脚本通过列举所有的pulic镜像，支持dump操作（类似docker pull），方便从公开暴露的镜像中查找敏感泄漏信息。 Usage root@kitploit: $ python3 harbor.py https://192.168.11.11 + grafana/grafana + library/openjdk $ python3 harbor.py https://192.168.11.11 --dump library/openjdk:8 + Dumping...

longtongue

基于目标信息生成自定义密码/密码短语单词列表 由 edoardottt 用 💙 编写 在 Twitter 上分享！ 安装 ⬇️ pipx root@kitploit: pipx install longtongue 源码 root@kitploit: git clone https://github.com/edoardottt/longtongue.git cd longtongue pip install -r requirements.txt python3 longtongue.py 使用方法 💻 root@kitploit: usage: longtongue -h -p | -...

lua-ffi-libinjection

Name lua-resty-libinjection - LuaJIT FFI bindings for libinjection Status This library is in active development and is production ready Description This library provides FFI bindings for libinjection, a SQL/SQLi and XSS tokenizer and analyzer. Installation Install this library as you would any...

AppInfoScanner

This project is currently just the tip of the iceberg of the planned project. If you are interested in this project or want to participate in subsequent development or translation work, please send an email to [email protected] stating your skills and requests. AppInfoScanner A mobile Androi...

trape

trape stable v2.0 People tracker on the Internet: Learn to track the world, to avoid being traced. Trape is an OSINT analysis and research tool, which allows people to track and execute intelligent social engineering attacks in real time. It was created with the aim of teaching the world how larg...

PoC-CVE-2000-0649

PoC-CVE-2000-0649 Una pequeña herramienta para crear un PoC para CVE-2000-0649. Uso Este script verifica si el servidor es vulnerable a CVE-2000-0649. Ten en cuenta experimentar con HTTP, HTTPS y diferentes rutas. En mi experiencia, la divulgación ocurre principalmente al conectar a través de HTT...

google-dorks-bug-bounty

漏洞赏金用的Google Dorks 一份用于漏洞赏金、Web应用安全和渗透测试的Google Dorks列表 在线工具 带排除项的宽泛域名搜索 root@kitploit: site:example.com -www -shop -share -ir -mfa PHP扩展带参数 root@kitploit: site:example.com ext:php inurl:? API端点 root@kitploit: site:example.com inurl:api | site:/rest | site:/v1 | site:/v2 | site:/v3 敏感扩展名...

php-exploit_cve-2022-31630

CVE-2022-31630 – Proof of Concept Exploit Advertencia: Este código fue creado únicamente con fines educativos y de prueba en un entorno de laboratorio aislado. El uso en otros sistemas sin autorización es ilegal e irresponsable. 📌 Descripción CVE-2022-31630 es una vulnerabilidad de lectura fuera ...

Cortex-XDR-Config-Extractor

Cortex XDR Config Extractor ⚠️ For more information, please visit https://laokoon-security.com/cortex-xdr-config-exctractor/ currently in German only This tool is meant to be used during Red Team Assessments and to audit the XDR Settings. With this tool its possible to parse the Database Lock File...

flashlight

渗透测试人员自动化信息收集工具 视频： https://www.youtube.com/watch?v=EUMKffaAxzs&list=PL1BVM6VWlmWZOv9Hv8TV2v-kAlUmvA5g7&index=4 https://www.youtube.com/watch?v=qCgW-SfYl1c&list=PL1BVM6VWlmWZOv9Hv8TV2v-kAlUmvA5g7&index=5 https://www.youtube.com/watch?v=98Soe01swR8&list=PL1BVM6VWlmWZOv9Hv8TV2v-kAlUmvA5g7&index=6...

RED_HAWK

Version 2.0.0 By R3D@0R2H1N A.K.A Tuhinshubhra All in one tool for Information Gathering and Vulnerability Scanning Scans That You Can Perform Using RED HAWK : Basic Scan Site Title NEW IP Address Web Server Detection IMPROVED CMS Detection Cloudflare Detection robots.txt Scanner Whois Lookup...

CVE-2025-25964

CVE-2025-25964: Inyección SQL en School Information Management System v1.0 Introducción En el panorama digital actual, la inyección SQL SQLi sigue siendo una de las vulnerabilidades más comunes y peligrosas encontradas en aplicaciones web. Esta publicación de blog analiza una vulnerabilidad críti...

kali-linux-tools-interface

Kali Linux Tools Interface A graphical interface to use information security tools by the browser. Explore the article » Available only in Brazilian Portuguese Report Bug · Request Feature ⚠️ ALERT 🚧 As I am involved in other projects, I am no longer supporting this project. However, the code...

CVE-2025-30208

🔥 CVE-2025-30208 Vite Arbitrary File Read Vulnerability Scanner Advanced vulnerability scanner for CVE-2025-30208 with enterprise-grade features Professional penetration testing tool for Vite Arbitrary File Read vulnerability detection 🚀 Quick Start • 📋 Features • 🔧 Usage • 📊 Examples • 🛡️ Securit...

CVE-2022-23046

CVE-2022-23046 El descubrimiento original y el PoC manual provienen de Fluidattacks: PhpIPAM v1.4.4 permite a un usuario administrador autenticado inyectar sentencias SQL en el parámetro "subnet" al buscar una subred a través de app/admin/routing/edit-bgp-mapping-search.php. Este PoC ejecuta SQLi...