TCPViewer

TCP Viewer A simple, native packet viewer for Mac. Website · Download · Docs · Releases TCP Viewer captures and reads network packets on macOS. It uses system libpcap for capture and Wireshark libraries for deep packet details. Features Native macOS app, built with AppKit Built on top of Wireshar...

grr

GRR Rapid Response is an incident response framework focused on remote live forensics. GRR is a python client agent that is installed on target systems, and python server infrastructure that can manage and talk to clients. Documentation Please visit our documentation website if you want to know...

grr

GRR Rapid Response — это платформа реагирования на инциденты, ориентированная на удаленную живую криминалистику. GRR — это клиент на Python агент, который устанавливается на целевые системы, и серверная инфраструктура на Python, которая может управлять клиентами и взаимодействовать с ними...

CVE-2020-9758

CVE-2020-9758 説明 LiveZilla Live Chat 8.0.1.3 Helpdesk の chat.php に問題が発見されました。 name パラメータにブラインド JavaScript インジェクションが存在します。 これをトリガーすると、URI 内のヘルプデスク従業員のユーザー名とパスワードを取得できます。 これにより、認証されていない状態からユーザーレベルのアクセスへの権限昇格が発生し、完全なアカウント乗っ取りに至ります。 この攻撃は、データベースに保存されているため複数の認証情報を取得します（ストアドXSS）。 これは、lgn および psswrd...

DrMITM

D̳r̳M̳I̳T̳M̳ DrMITM은 모든 트래픽을 글로벌하게 기록하도록 설계된 프로그램입니다. Diagram: 작동 방식 DrMITM은 웹사이트에 요청을 보내고, 웹사이트 서버가 요청 시 웹사이트 IP에 의존하도록 설계된 경우를 대비하여 웹사이트의 IP를 반환합니다. 또한 웹사이트로 가는 요청은 서버에도 전송되어, 서버는 웹사이트가 보내는 메시지를 기록합니다. 그런 다음 동일한 메시지를 반환하여 서버로 직접 보내는데, 서버는 이를 웹사이트로 간주할 수 있습니다. 하지만 프로그램이 IP를 변경한 후에는 우리의 요청을 웹사이트로...

misp-dashboard

misp-dashboard 1つ以上のMISPインスタンスのZMQフィードからライブデータと統計を表示するダッシュボードです。 このダッシュボードは、脅威インテリジェンス情報を収集するためのリアルタイムの状況認識ツールとして使用できます。 misp-dashboardには、各組織の貢献度と時間経過に伴うランキングを表示するゲーミフィケーションツールが含まれています。 このダッシュボードは、SOC（セキュリティ運用センター）、セキュリティチーム、またはサイバー演習中に、さまざまなMISPインスタンスで何が処理されているかを追跡するために使用できます。 機能 ライブダッシュボード...

ClickDesk Live Support Live Chat 2.0 - Cross-Site Scripting

A cross-site scripting vulnerability in clickdesk.php in ClickDesk Live Support - Live Chat plugin 2.0 for WordPress allows remote attackers to inject arbitrary web script or HTML via the cdwidgetid parameter. id: CVE-2011-5181 info: name: ClickDesk Live Support Live Chat 2.0 - Cross-Site Scripti...

WP Live Chat Support <= 8.0.27 — Stored Cross-Site Scripting

wp-live-chat-support plugin before 8.0.27 for WordPress contains a reflected cross-site scripting caused by insufficient sanitization in the GDPR page, letting attackers execute arbitrary scripts in the context of the victim's browser, exploit requires victim to visit a malicious page. id:...

Steveas WP Live Chat Shoutbox <= 1.4.2 - SQL Injection

The Steveas WP Live Chat Shoutbox WordPress plugin through 1.4.2 does not sanitise and escape a parameter before using it in a SQL statement via an AJAX action available to unauthenticated users, leading to a SQL injection. id: CVE-2023-1020 info: name: Steveas WP Live Chat Shoutbox = 1.4.2 - SQL...

SearchWP Live Ajax Search < 1.6.2 - Unauthenticated Arbitrary Post Title Disclosure

The plugin does not ensure that users making. alive search are limited to published posts only, allowing unauthenticated users to make a crafted query disclosing private/draft/pending post titles along with their permalink id: CVE-2022-2535 info: name: SearchWP Live Ajax Search 1.6.2 -...

webscan

webscan webscan is a browser-based network IP scanner and local IP detector. It detects IPs bound to the user/victim by listening on an RTP data channel via WebRTC and looping back to the port across any live IPs, as well as discovering all live IP addresses on valid subnets by monitoring for...

detux

Detux: The Multiplatform Linux Sandbox Introduction: Detux is a sandbox developed to do traffic analysis of the Linux malwares and capture the IOCs by doing so. QEMU hypervisor is used to emulate Linux Debian for various CPU architectures. The following CPUs are currently supported: x86 x86-64 AR...

memhunter

Memhunter Automated hunting of memory resident malware at scale This project is WORK IN PROGRESS. Expect feature changes and binary releases on the upcoming weeks. Overview Memhunter is an endpoint sensor tool that is specialized in detecing resident malware, improving the threat hunter analysis...

CVE-2023-31595

CVE-2023-31595 IC Realtime ICIP-P2012T는 열린 포트를 통한 부적절한 접근 제어Incorrect Access Control에 취약함 IC Realtime IP PTZ Dome Camera ICIP-P2012 소프트웨어 버전: 2.420 노출된 포트9989는 요청 시점의 라이브 스냅샷을 반환하며, 스크립트를 사용하면 매 x초마다 라이브 피드 이미지를 얻는 데 악용될 수 있습니다. 이 취약점은 데이터의 기밀성에 심각한 영향을 미치며, 정찰 단계사람 식별, 비밀번호 등에서 모든 위협에 사용될 수 있습니다...

CVE-2026-89625

A flaw was found in the Linux kernel's HID Human Interface Device Sony driver, affecting Guitar Hero Live GHL dongles. A race condition occurs during the driver unbinding process where a periodic timer can be re-armed after the memory it uses has been freed. This Use-After-Free UAF vulnerability...

LiveHiddenCamera

Скрытая живая камера Live Hidden Camera LHC — это библиотека, которая записывает живое видео и аудио с Android-устройства без предварительного просмотра. Мотивация Я работаю над исследовательским Android-вредоносным ПО и решил создать многофункциональный RAT Remote Administration Tool. Я работал...

hyperfox

Hyperfox Hyperfox is a security auditing tool that proxies and records HTTP and HTTPS traffic between two points. Installation You can install the latest version of hyperfox to /usr/local/bin with the following command requires admin privileges: root@kitploit: curl -sL...

Fu3l-F1lt3r

root@kitploit: |\ \ |\ |\ |\ \ |\ / |\ \ |\ \ |\ \ \ \ /\ \ \\ ||\ /\ \ \ \ \ /|/|\ \ \ \| \ \||\ /\ \ |\ \ \ \ \ \ \\ \ |\ \ \ \ \ \ |/ \ \ \ \ \ \ \ \ |\ \ \ \ \ \ | \ \ \\ \ \ \ \ \ \ \ | \ \ \ \ \ \ \ \ \ \ \ | \ \ \ \|\ \ \ \ \ \ \ \ |\ \\ \ || ||||||...

termshark

Termshark A terminal user-interface for tshark, inspired by Wireshark. V2.4 is out now with packet search and profiles for colors and columns! See theChangeLog. If you're debugging on a remote machine with a large pcap and no desire to scp it back to your desktop, termshark can help! Features Rea...

Simple-Live-Data-Collection

Простой инструмент для сбора данных в реальном времени Как это работает? 1- Создайте сервер 2- Подключите администратора и клиента к серверу 3- Чтобы собрать информацию, отправьте запрос на сервер через администратора, а затем клиенту Установка root@kitploit: git clone...