CVE-2024-51818

CVE-2024-51818 Fancy Product Designer = 6.4.3 - Неаутентифицированная SQL-инъекция Описание Плагин Fancy Product Designer для WordPress уязвим к SQL-инъекции в версиях до 6.4.3 включительно из-за недостаточного экранирования пользовательского параметра и отсутствия должной подготовки существующег...

domain_analyzer

Domain Analyzer v0.8.3 What Domain analyzer is a security analysis tool that automatically discovers and reports information about a given domain. Its main purpose is to analyze domains in an unattended way. It has many crazy features, such as getting more domains from DNS zones, automatic nmap,...

nwn-exploit

Эксплуатация Neverwinter Nights: Enhanced Edition Этот репозиторий содержит PoC для эксплуатации Neverwinter Nights: Enhanced Editions. В этом посте в блоге подробно описаны уязвимости и их эксплуатация. Версия Windows: 10.0.19045.2965 Neverwinter Night Enhanced Editions: уязвимая версия...

OffensivePipeline

OffensivePipeline OffensivePipeline 를 사용하면 C 도구를 다운로드하고 빌드하여 Red Team 훈련에서 탐지를 회피하기 위한 특정 수정 사항을 적용할 수 있습니다. OffensivePipeline의 일반적인 사용법은 Git 저장소에서 도구를 다운로드하고, 프로젝트에서 특정 값을 무작위화하고, 빌드한 후, 결과 바이너리를 난독화하고 셸코드를 생성하는 것입니다. 기능 현재는 C .Net Framework 프로젝트만 지원합니다. 공개 및 비공개자격 증명이 필요합니다 :D git 저장소를 클론할 수...

CQPToolkit

CQP Tool kit Le système fournit divers composants pour intégrer QKD dans un système de sécurité. Il est écrit en C++11 mais utilise des interfaces GRPC ce qui permet de l'intégrer avec de nombreux langages différents. Démarrage rapide Pour exécuter le logiciel nativement, soit : téléchargez et...

v8-sandbox-poc-clean

V8 Sandbox Escape PoC ⚠️ CRITICAL SECURITY WARNING ⚠️...

longtongue

Generate customized Password/Passphrase wordlist based on target information Coded with 💙 by edoardottt Share on Twitter! Installation ⬇️ pipx root@kitploit: pipx install longtongue Source root@kitploit: git clone https://github.com/edoardottt/longtongue.git cd longtongue pip install -r...

chromecookiestealer

Chrome Cookie Stealer and injector Attaches to Chrome using its Remote DevTools protocol and steals/injects/clears/deletes cookies. Heavily inspired by WhiteChocolateMacademiaNut. Cookies are dumped as JSON objects using Chrome's own format. The same format is used for cookies to be loaded. For...

trojanizer

TROJANIZER root@kitploit: Version release : v1.1 Stable Author : pedro ubuntu r00t-3xp10it Codename: TroiaRevisited Distros Supported : Ubuntu, Kali, Mint, Parrot OS Suspicious-Shell-Activity SSA RedTeam develop @2017 FRAMEWORK DESCRIPTION root@kitploit: The Trojanizer tool uses WinRAR SFX to...

shodan-dorks

Shodan dorks Description: This GitHub repository provides a range of search queries, known as "dorks," for Shodan, a powerful tool used to search for Internet-connected devices. The dorks are designed to help security researchers discover potential vulnerabilities and configuration issues in...

stegcloak

StegCloak The Cloak of Invisibility for your texts StegCloak is a pure JavaScript steganography module designed in functional programming style, to hide secrets inside text by compressing and encrypting the secret before cloaking it with special unicode invisible characters. It can be used to...

PwnKit-Exploit

PwnKit-Exploit CVE-2021-4034 @c0br40x a aidé à réaliser cette section du README !! Preuve de concept root@kitploit: debian@debian:/PwnKit-Exploit$ make cc -Wall exploit.c -o exploit debian@debian:/PwnKit-Exploit$ whoami debian debian@debian:/PwnKit-Exploit$ ./exploit Current User before execute...

fsmon

fsmon Low level filesystem monitor utility for Linux, Android, iOS and macOS. Author : pancake @ nowsecure License : MIT Designed for System administrators and incident responders Security researchers and forensic analysts Developers debugging I/O-heavy applications Reverse engineers interested i...

fubucker

Fubucker | CVE-2022-1386 - Fusion Builder CVE-2022-1386 - Fusion Builder install.sh sha1sum install.sh | grep 12345678 md5sum install.sh sha512sum install.sh bash install.sh JQ 설치 Linux : 명령 apt-get install jq -y Windows : WSL의 경우 Linux와 동일하게 설치하고, GitBash에서는 다음 명령을 실행하세요. 명령 curl -L -o C:/Progra...

pegasus-neo

root@kitploit: | \ | \ | | | | / / |/ / | | | / | | | | / / | | | \ \ || \ \ |\ | || |, |,|/,|/| | |/ ███▄ █ ▓█████ ▒█████ ██ ▀█ █ ▓█ ▀ ▒██▒ ██▒ ▓██ ▀█ ██▒▒███ ▒██░ ██▒ ▓██▒ ▐▌██▒▒▓█ ▄ ▒██ ██░ ▒██░ ▓██░░▒████▒░ ████▓▒░ ░ ▒░ ▒ ▒ ░░ ▒░ ░░ ▒░▒░▒░ ░ ░░ ░ ▒░ ░ ░ ░ ░ ▒ ▒░ ░ ░ ░ ░ ░ ░ ░ ▒ ░ ░ ░ ░ ░...

CVE-2023-2825-Gitlab

CVE-2023-2825 23 мая 2023 года GitLab выпустил версию 16.0.1, которая исправляет критическую уязвимость CVE-2023-2825, затрагивающую Community Edition CE и Enterprise Edition EE версии 16.0.0. Уязвимость позволяет неаутентифицированным пользователям читать произвольные файлы через ошибку обхода...

tenet

Tenet - A Trace Explorer for Reverse Engineers Overview Tenet is an IDA Pro plugin for exploring execution traces. The goal of this plugin is to provide more natural, human controls for navigating execution traces against a given binary. The basis of this work stems from the desire to research ne...

SharpHose

Présentation SharpHose est un outil de pulvérisation de mots de passe en C conçu pour être rapide, sûr et utilisable via l'execute-assembly de Cobalt Strike. Il offre un moyen flexible d'interagir avec Active Directory en utilisant des contextes joints et non joints au domaine, tout en pouvant...

CVE-2021-4034

CVE-2021-4034 Эксплойт повышения привилегий polkit за один день Просто выполните make, ./cve-2021-4034 и наслаждайтесь root-оболочкой. Оригинальный advisory от настоящих авторов находится здесь PoC Если эксплойт сработает, вы немедленно получите root-оболочку: root@kitploit:...

manul

Manul Manul is a coverage-guided parallel fuzzer for open-source and black-box binaries on Windows, Linux and macOS beta written in pure Python. Quick Start root@kitploit: pip3 install psutil git clone https://github.com/mxmssh/manul cd manul mkdir in mkdir out echo "AAAAAA" in/test python3...