goIssue_kirkstone

OpenEmbedded-Core OpenEmbedded-Core è un layer che contiene i metadati principali per le versioni correnti di OpenEmbedded. È senza distribuzione può creare un'immagine funzionale con DISTRO = "nodistro" e contiene solo supporto per macchine emulate. Per informazioni su OpenEmbedded, consulta il...

goIssue_dunfell

OpenEmbedded-Core OpenEmbedded-Core è un layer che contiene i metadati core per le versioni correnti di OpenEmbedded. È senza distribuzione può creare un'immagine funzionale con DISTRO = "nodistro" e contiene solo supporto per macchine emulate. Per informazioni su OpenEmbedded, consulta il sito w...

URL_CHECKER

Controllo URL Phishing Uno strumento leggero basato sul web che rileva se un URL è probabilmente phishing o sicuro utilizzando un approccio ibrido di Machine Learning Random Forest/SVM e analisi euristica basata su regole. Realizzato a scopo educativo e per sperimentazione in cybersecurity e IA...

ThreatSentry-AI

ThreatSentry AI: أداة صيد التهديدات المدعومة بالذكاء الاصطناعي أتمتة اكتشاف الأصول الخارجية، وإثراء ذكي ببيانات متعددة المصادر، والاستفادة من التعلم الآلي الجماعي للتنبؤ بالمخاطر وترتيب أولوياتها. حوّل إرهاق التنبيهات إلى استخبارات قابلة للتنفيذ. 🚀 بيان المهمة ThreatSentry AI تقضي على إرهاق تنبيه...

OverRide

OverRide Explore desmontagem, exploração binária & engenharia reversa através de 10 pequenos desafios. Na pasta de cada nível você encontrará: flag - senha para o próximo nível README.md - como encontrar a senha source.c - o binário com engenharia reversa dissasemblynotes.md - notas sobre asm...

waybackurls

waybackurls Accept line-delimited domains on stdin, fetch known URLs from the Wayback Machine for .domain and output them on stdout. Usage example: root@kitploit: ▶ cat domains.txt | waybackurls urls Install: root@kitploit: ▶ go install github.com/tomnomnom/waybackurls@latest Credit This tool was...

CVE-2020-1472-Easy

CVE-2020-1472-Easy Questa è decisamente una cosa che non vorresti eseguire su nulla a cui tieni. Costruito da un write-up e dal lavoro di @obfuscatee e un'altra fonte Utilizza codice da https://github.com/dirkjanm/CVE-2020-1472 https://github.com/SecuraBV/CVE-2020-1472...

NewMachineAccount

NewMachineAccount Visão Geral NewMachineAccount.exe é uma ferramenta exe autônoma e simples para criar novas contas de máquina com senha personalizada em um domínio especificado. Uso root@kitploit: NewMachineAccount.exe v1.0 by @decoderit -dc -name -domain -password -ou -user -pass -uac Parâmetro...

yeti

Yeti Platform Yeti aims to bridge the gap between CTI and DFIR practitioners by providing a Forensics Intelligence platform and pipeline for DFIR teams. It was born out of frustration of having to answer the question "where have I seen this artifact before?" or "how do I search for IOCs related t...

Damn-Vulnerable-ML-Model

Questo repository non contiene un README...

log4shell

log4shell पायथन स्क्रिप्ट जो सर्वर फ़ाइल सिस्टम को log4j जार के लिए स्कैन करती है जो CVE-2021-44228 और CVE-2021-45046 के प्रति संवेदनशील हैं। स्क्रिप्ट फ़ाइल सिस्टम zip, ear, war सहित में पुनरावर्ती रूप से जाती है और log4j संस्करण 2. से 2.15 को org/apache/logging/log4j/core/lookup/JndiLookup.clas...

ZeroLogon-Exploit

ZeroLogon - शोषण और उदाहरण परीक्षण PoC को Secura से संशोधित किया गया, CVE-2020-1472, मशीन के पासवर्ड को शून्य करने के लिए। मशीन पर पासवर्ड बदलने के लिए Microsoft के NetrServerPasswordSet2 फ़ंक्शन का उपयोग किया जाता है। यह शोषण Impacket के nrpc.py मॉड्यूल का लाभ उठाता है NetrServerPasswordSet2 को...

notionterm

notionterm Embed reverse shell inNotion pages. Hack while taking notes FOR ➕: Hiding attacker IP in reverse shell No direct interaction between attacker and target machine. Notion is used as a proxy hosting the reverse shell Demo/Quick proof insertion within report High available and shareable...

sploit

sploit Sploit is a Go package that aids in binary analysis and exploitation. The motivating factor behind the development of sploit is to be able to have a well designed API with functionality that rivals some of the more common Python exploit development frameworks while taking advantage of the ...

zerologon-lab

zerologon-lab Skripte für eine Laborumgebung zur Demonstration der Zerologon-Sicherheitslücke CVE-2020-1472. Verwendung zerologon.py root@kitploit: zerologon.py -h --reset --restore HEX dcname dcip Versuch, die Zerologon-Sicherheitslücke gegen einen Domain Controller auszunutzen. Argumente: dcnam...

schrodingers-toctou

cat-states Minimal proofs-of-concept for compiler-invented loads — situations where a single C-level read of memory compiles to two or more architectural reads of the same address. We call these cat-states – if the pattern is used across a check/use boundary, the compiler may emit a time-of-check...

retdec

Warning The RetDec project is currently in a limited maintenance mode due to a lack of resources: Pull Requests are welcomed. They are reviewed with priority, if possible without delays. Issues are reacted on with delays up to one quarter. Issues are not actively solved unless they relate to a...

Manati

ManaTI-Projekt Machine Learning für intuitive Bedrohungsanalyse Das Ziel des ManaTI-Projekts ist es, Techniken des maschinellen Lernens zu entwickeln, um einem intuitiven Bedrohungsanalysten zu helfen, die Entdeckung neuer Sicherheitsprobleme zu beschleunigen. Das maschinelle Lernen wird zur...

dnsteal

dnsteal v 2.0 This is a fake DNS server that allows you to stealthily extract files from a victim machine through DNS requests. Below are a couple of different images showing examples of multiple file transfer and single verbose file transfer: Support for multiple files Gzip compression supported...

ZerologonWithImpacket-CVE2020-1472

Combinazione di Exploit Zerologon e Impacket CVE-2020-1472 Questo repository contiene un'implementazione aggiornata 2024 dell'exploit Zerologon combinato con gli strumenti Impacket per sfruttare la CVE-2020-1472 Zerologon. Questo exploit prende di mira ambienti Windows Server per manipolare le...