inquisitor

Inquisitor Nota Questo progetto è solo parzialmente completo e devo ancora implementare molte delle funzionalità descritte nel seguente post del blog che ho scritto: https://penafieljlm.com/2017/07/14/inquisitor/. Inquisitor è un semplice strumento per raccogliere informazioni su aziende e...

test-your-sysadmin-skills

:star: "Ein großartiger Admin muss nicht alles wissen, aber er sollte in der Lage sein, erstaunliche Lösungen für unmögliche Projekte zu finden. " - cwheeler33 ServerFault :star: "Meine Fähigkeiten bestehen darin, Dinge zum Laufen zu bringen, nicht eine Milliarde Fakten zu kennen. ... Wenn ich ei...

hershell

Hershell NOTE: the project has been forked on this repo, check there for any other developments. Hershell is a simple TCP reverse shell written in Go. It uses TLS to secure the communications, and provide a certificate public key fingerprint pinning feature, preventing from traffic interception...

boobsnail

Seguici su Twitter! BoobSnail BoobSnail consente di generare macro XLM Excel 4.0. Il suo scopo è supportare RedTeam e BlueTeam nella generazione di macro XLM. Caratteristiche: varie tecniche di infezione; varie tecniche di offuscamento; traduzione delle formule in lingue diverse dall'inglese; può...

haptyc

Haptyc Test Generation Framework What's Haptyc? Haptyc is a python library which was built to add payload position support and Sniper/Clusterbomb/Batteringram/Pitchfork attack types into Turbo Intruder. While Haptyc accomplishes these goals fairly well it also introduces a simpler way to express...

acltoolkit

acltoolkit acltoolkit is an ACL abuse swiss-army knife. It implements multiple ACL abuses. Table of Contents acltoolkit Table of Contents Installation Usage Commands get-objectacl set-objectowner give-genericall give-dcsync add-groupmember set-logonscript Installation root@kitploit: pip install...

acltoolkit

acltoolkit acltoolkit é um canivete suíço de abuso de ACL. Ele implementa múltiplos abusos de ACL. Índice acltoolkit Índice Instalação Uso Comandos get-objectacl set-objectowner give-genericall give-dcsync add-groupmember set-logonscript Instalação root@kitploit: pip install acltoolkit-ad ou...

dockerized-android

Dockerized Android Dockerized Android is a container-based framework that allows to execute and Android Emulator inside Docker and control it through a browser. This project has been developed in order to provide a starting point for integrating mobile security components into Cyber Ranges but it...

memoro

Memoro Memoro is a highly detailed heap profiler. Memoro not only shows you where and when your program makes heap allocations, but will show you how your program actually used that memory. Memoro collects detailed information on accesses to the heap, including reads and writes to memory and when...

CVE-2025-68325

CVE-2025-68325 schcake non considera il caso in cui cakeenqueue restituisce un risultato non nullo, portando a uno squilibrio del qlen nell'albero qdisc e innescando un null-deref nel suo scheduler padre, ad esempio qfq. Versioni interessate Corretto in v6.19-rc1 Gravità Bassa Patch root@kitploit...

linset

Linset Is Not a Social Enginering Tool First of all, commented that this is a project for educational purposes that have served to me and hopefully others to be more in touch with the world of programming and Wireless. It is prohibited under any circumstances the use this tool in foregin Wireless...

linset

Linset non è uno strumento di ingegneria sociale Prima di tutto, va detto che questo è un progetto a scopo educativo che è servito a me e, si spera, anche ad altri per entrare più in contatto con il mondo della programmazione e del Wireless. È vietato in qualsiasi circostanza usare questo strumen...

gixy

GIXY Overview Gixy is a tool to analyze Nginx configuration. The main goal of Gixy is to prevent security misconfiguration and automate flaw detection. Currently supported Python versions are 2.7, 3.5, 3.6 and 3.7. Disclaimer: Gixy is well tested only on GNU/Linux, other OSs may have some issues...

Security Bulletin: Langflow is vulnerable to Server-Side Request Forgery due to missing or bypassable URL validation in multiple components

Summary Langflow contains multiple Server-Side Request Forgery vulnerabilities across several components where authenticated users can supply attacker-controlled URLs or database connection strings that reach internal network hosts without adequate validation. The LMStudio model and embeddings...

packer-tutorial

Inhaltsverzeichnis 1. Was ist ein Packer? : Eine Einführung in den Zweck von Packern und ein Leitfaden durch die Entwicklungserfordernisse eines Packers. 2. Voraussetzungen : Werkzeuge, die du für dieses Tutorial benötigst. 3. Ein Vorgeschmack : Eine Demonstration dessen, was du mit diesem Tutori...

CVE-2026-76650

A NULL pointer dereference vulnerability exists in TL-WR841N v14 in the UPnP service when processing SOAP state variable query requests. A specially crafted SOAP query may trigger unexpected termination or instability of the process hosting the UPnP service. Successful exploitation may result in ...

heaptrace

Informazioni heaptrace è un debugger dell'heap per tracciare le operazioni sull'heap di glibc in binari ELF64 x8664. Il suo scopo è aiutare a visualizzare le operazioni sull'heap durante il debug di binari o lo heap pwn. sostituisce gli indirizzi con simboli facili da comprendere rileva corruzion...

kernel-exploit-factory

kernel-exploit-factory Wird ständig aktualisiert...... Linux-Kernel-CVE-Exploit-Analysebericht und zugehörige Debug-Umgebung. Sie müssen den Linux-Kernel nicht mehr kompilieren und Ihre Umgebung nicht mehr konfigurieren. Dieses Repository dient dazu, alle Linux-Kernel-Exploits und die zugehörige...

kernel-exploit-factory

kernel-exploit-factory Keep updating...... Linux kernel CVE exploit analysis report and relative debug environment. You don't need to compile Linux kernel and configure your environment anymore. This repository is to extract all Linux kernel exploit and relative debug environment. You can use Qem...

capa

Website | Download | Web Interface capa detects capabilities in executable files. You run it against a PE, ELF, .NET module, shellcode file, or a sandbox report and it tells you what it thinks the program can do. For example, it might suggest that the file is a backdoor, is capable of installing...