loki

English | 简体中文 Alibaba Cloud Credentials for Go Alibaba Cloud Credentials for Go 是帮助 GO 开发者管理凭据的工具。 本文将介绍如何获取和使用 Alibaba Cloud Credentials for Go。 要求 请确保你的系统安装了 1.12.x 或更新版本的 Go 环境。 安装 使用 go get 下载安装 root@kitploit: go get -u github.com/aliyun/credentials-go 快速使用 在您开始之前，您需要注册阿里云帐户并获取您的凭证。 凭证类型...

shocker

Shocker A tool to find and exploit servers vulnerable to Shellshock Ref: https://en.wikipedia.org/wiki/Shellshocksoftwarebug Released as open source by NCC Group Plc - https://www.nccgroup.trust/ Developed By: Tom Watson, tom dot watson at nccgroup dot trust https://github.com/nccgroup/shocker...

patator

Patator Patator was written out of frustration from using Hydra, Medusa, Ncrack, Metasploit modules and Nmap NSE scripts for password guessing attacks. I opted for a different approach in order to not create yet another brute-forcing tool and avoid repeating the same shortcomings. Patator is a...

web

通过您自己的 Linux 硬件实现全网广告拦截 Pi-hole 网站 | 文档 | Discourse 论坛 | 捐赠 Pi-hole Web 界面 Pi-hole® 的 Web 界面（基于 AdminLTE）提供了一个集中位置，用于管理您的 Pi-hole 并查看由 FTLDNS™ 生成的统计信息。 易于解读 ：简洁的图表和美观的颜色让 Pi-hole 的统计信息更容易理解 响应式布局 ：在台式机、平板电脑和移动设备上都能出色显示 实用 ：通过我们的设置来控制与配置您的 Pi-hole 洞察深入 ：使用查询日志（包括长期统计数据）深入了解您网络的活动情况 安装 安装 Pi-hole...

fail2ban-log4j

fail2ban-log4j fail2ban filter that catches attacks against log4j CVE-2021-44228 Installation Copy this file to your fail2ban filter.d directory, which is usually something like /etc/fail2ban/filter.d or similar. Add an apache-jndi section to your jail.local or jail.conf: root@kitploit: apache-jn...

ketshash

Ketshash A little tool for detecting suspicious privileged NTLM connections, in particular Pass-The-Hash attack, based on event viewer logs. The tool was published as part of the "Pass-The-Hash detection" research - more details on "Pass-The-Hash detection" are in the blog post:...

key-transparency-auditor

key-transparency-auditor 基于 密钥透明度 规范，为 Signal 的密钥透明度服务实现的一个第三方审计器参考实现。 概述 该服务使用 Java 编写，基于 Micronaut 框架。要构建并运行单元测试，请运行以下命令： root@kitploit: ./mvnw clean test 在根目录中执行。 主类是...

port-scan-automation

LazyMap - Auto NMAP Scanning Script Automate NMAP scans and custom Nessus polices. Developed by Daniel Compton https://github.com/commonexploits/port-scan-automation.git Released under AGPL see LICENSE for more information Installing root@kitploit: git clone...

CVE-2024-21111

CVE-2024-21111 Oracle VirtualBox Prior to 7.0.16 is vulnerable to Local Privilege Escalation via Symbolic Link Following leading to Arbitrary File Delete and Arbitrary File Move. VirtualBox attempts to move log files as NT AUTHORITY\SYSTEM in C:\ProgramData\VirtualBox which all users can write to...

CVE-2021-21234

CVE-2021-21234 Directory traversal vulnerability in the spring-boot-actuator-logview library https://blogg.pwc.no/styringogkontroll/unauthenticated-directory-traversal-vulnerability-in-a-java-spring-boot-actuator-library-cve-2021-21234...

reversemap

reversemap 分析Web服务器日志中的SQL注入尝试 该程序可以以批处理模式或交互模式运行。 在批处理模式下，程序将接受Apache Web服务器日志，并从日志中反混淆请求的URL。 在交互模式下，程序将提示用户输入，并打印反混淆后的结果。 该程序可以反混淆以下混淆技术： SQL CHAR编码 SQL CAST编码 SQL关键字的大小写编码 Substring（实验性 - 默认禁用，因为嵌套查询会失败） 欢迎Pull requests、补丁和反馈。...

ollydbg-binary-execution-visualizer

This repository does not have a README...

CVE-2025-60503

...

CVE-2022-22965

CVE-2022-22965 2022.04.02 16:44 Optimized POC, no longer a one-time validation Warning: This program will destroy log information integrity, please back up server data! Use only if you have server penetration test authorization! pocsuite -r CVE-2022-22965POCEXP.py -u url As shown below, the progr...

CVE-2026-22356

CVE-2026-22356: Jetpack CRM Path Traversal Vulnerability and RCE Warning: This tool should only be used in authorized test environments. The user is solely responsible for illegal use. 📥 Requirements root@kitploit: pip3 install requests urllib3 $ python3 exploit.py https://example.com --rce --cmd...

AI-driven-MITRE-Attack

POC : AI-driven MITRE Attack Detection and Alert Enrichment This repository demonstrates a machine learning pipeline for detecting MITRE ATT&CK techniques from logs and enriching the output using a local LLM. Overview The project is divided into two main components : 1. Machine Learning Model ML ...

z9

z9 PowerShell Log Analyzer Japanese Abstract This tools detects the artifact of the PowerShell based malware from the eventlog of PowerShell logging. Online Demo Install root@kitploit: git clone https://github.com/Sh1n0g1/z9 cd z9 pip install -r requirements.txt How to use root@kitploit: usage:...

CVE-2026-88009

A flaw was found in Traefik, an open source HTTP reverse proxy and load balancer. This vulnerability allows a remote attacker to bypass security controls by sending a specially crafted HTTP/1 request. The request target is incorrectly processed, leading to cross-vhost routing bypass, path-scoped...

CVE-2021-44228

Log4j Vulnerability - CVE-2021-44228 📗 Introduction This vulnerability was discovered on December 9, 2021, identified with CVE-2021-44228 , this flaw affects the java log package, generating a Severity Score CVSS of 10 points , providing execution of remote access to the host. This vulnerability...

loglizer

loglizer Loglizer 是一个基于机器学习的日志分析工具包，用于自动化异常检测。 Loglizer是一款基于AI的日志大数据分析工具, 能用于自动异常检测、智能故障诊断等场景 日志在众多软件系统的开发和维护过程中至关重要。它们记录了系统运行期间的详细运行时信息，使开发人员和运维工程师能够监控其系统并跟踪异常行为和错误。Loglizer 提供了一套工具包，实现了多种基于机器学习的日志分析技术，用于自动化异常检测。 🔭 如果您在研究中使用了 Loglizer，并希望发表论文，请引用以下论文。 Shilin He, Jieming Zhu, Pinjia He, Michael R...