XPL-SEARCH

XPL SEARCH root@kitploit: Cerca exploit/vulnerabilità in più database online! XPL SEARCH è uno strumento multipiattaforma Windows e Linux, sviluppato in PHP con l'obiettivo di aiutare la comunità hacker a trovare exploit o vulnerabilità, utilizzando database online. Di seguito l'elenco dei databa...

CheeseTools

CheeseTools Questo repository è stato creato basandosi sul già esistente MiscTool, quindi un grande ringraziamento a rasta-mouse per averli rilasciati e per avermi dato la giusta motivazione per lavorarci. CheeseExec Esecuzione comandi / Movimento laterale tramite funzionalità simile a PsExec. De...

CVE-2026-63077

Nicht authentifizierte Remote-Code-Ausführung in JetBrains TeamCity CVE-2026-63077 Übersicht Dies ist ein Proof-of-Concept-Exploit-Skript für CVE-2026-63077. Organisationen können dieses Skript verwenden, um ihre Erkennungs- und Behebungsmaßnahmen zu validieren. Für eine vollständige technische...

APT_REPORT

APTREPORT raccolto da @blackorbird https://x.com/blackorbird Interessante raccolta di report APT, sample, malware, tecnologia e intelligence Gruppi APT per paese Gruppi di attori delle minacce monitorati da Palo Alto Networks Unit 42...

vmlinux-to-elf

vmlinux-to-elf Dieses Tool ermöglicht es, aus einem vmlinux/vmlinuz/bzImage/zImage-Kernelabbild entweder einem rohen Binär-Blob oder einer bereits vorhandenen, aber von Symbolen befreiten .ELF-Datei eine vollständig analysierbare .ELF-Datei mit wiederhergestellten Funktions- und Variablensymbolen...

Cheatsheet-God

diff UPDATE: Added my huge link of bookmarks / references ❤️ root@kitploit: Hai un milione di segnalibri salvati? Tutti questi segnalibri contengono informazioni uniche? Repo GitHub contrassegnati con la stella per dopo? Bene, questa è una raccolta di tutte queste risorse in un unico repo noto com...

strix

Strix Lo strumento open-source di pentesting con l'IA. Hacker IA autonomi che trovano e correggono le vulnerabilità della tua app. !TIP Novità! Strix si integra perfettamente con GitHub Actions e le pipeline CI/CD. Scansiona automaticamente le vulnerabilità a ogni pull request e blocca il codice...

strix

Strix The open-source AI pentesting tool. Autonomous AI hackers that find and fix your app’s vulnerabilities. !TIP New! Strix integrates seamlessly with GitHub Actions and CI/CD pipelines. Automatically scan for vulnerabilities on every pull request and block insecure code before it reaches...

firejail

Firejail Firejail ist ein leichtgewichtiges Sicherheitswerkzeug, das dazu dient, ein Linux-System zu schützen, indem es eine eingeschränkte Umgebung für die Ausführung von potenziell nicht vertrauenswürdigen Anwendungen einrichtet. Genauer gesagt handelt es sich um ein SUID-Sandbox-Programm, das...

CVE-2026-19295

IBM Langflow OSS versions 1.0.0 through 1.11.1 are vulnerable to arbitrary OS command execution (CWE-95, Eval Injection) with a CVSS score of 9.9 (CRITICAL) . An authenticated attacker can save a flow with a crafted type field value that reaches Pydantic's ForwardRef evaluation path, where eval()...

CVE-2026-19295 Langflow is affected by multiple remote code execution vulnerabilities due to insufficient code-execution policy enforcement

IBM Langflow OSS 1.0.0 through 1.11.1 allows an authenticated attacker to execute arbitrary operating system commands in the server process by saving a flow with a crafted type field value and triggering a build of a wrapper flow that references it. This allowed privilege escalation from...

sshimpanzee

Sshimpanzee Sshimpanzee permite construir um servidor ssh reverso estático. Em vez de escutar em uma porta e aguardar conexões, o servidor ssh iniciará uma conexão reversa para o IP do atacante, como um shell reverso comum. Sshimpanzee permite aproveitar todos os recursos de uma conexão ssh comum...

S4UTomato

S4UTomato Elevar Conta de Serviço para LocalSystem via Kerberos. Batatas Tradicionais Amigos familiarizados com a série de elevação de privilégio "Potato" devem saber que ela pode elevar privilégios de conta de serviço para privilégios de sistema local. As técnicas de exploração iniciais do...

CVE-2025-64649

IBM Concert versions 1.0.0 through 2.3.1 are affected by improper certificate validation , allowing a remote attacker to perform unauthorized actions via man-in-the-middle techniques. The vulnerability carries a CVSS 3.1 score of 5.9 (MEDIUM) with a high attack complexity, no privileges required,...

CVE-2025-64649 Multiple Vulnerabilities in IBM Concert Software

IBM Concert 1.0.0 through 2.3.1 could allow a remote attacker to perform unauthorized actions using man in the middle techniques due to improper certificate validation...

ldap-swak

LDAP Swiss Army Knife Многофункциональная утилита для LDAP-сервера. Быстрая настройка LDAP-сервера для тестовых целей, MitM-прокси для перехвата открытого текста или пересылки учетных данных NTLM, а также эксплуатация различных уязвимостей Java JNDI/LDAP-клиентов. Автор: Moritz Bechler...

CVE-2025-36290 IBM Integrated Analytics System (IIAS) is affected by improper SSL/TLS certificate validation vulnerability in JWT service component

IBM Integrated Analytics System 1.0.0.0 through 1.0.31.0 does not validate or improperly validates TLS certificate validation, which could allow an attacker to obtain sensitive information using man in the middle techniques...

CVE-2025-36290

IBM Integrated Analytics System (IIAS) versions 1.0.0.0 through 1.0.31.0 contain a vulnerability in the JWT service component (apjwtservice.py module), where SSL/TLS server certificate validation is not enabled on an SSL/TLS connection. This allows a remote attacker to perform man-in-the-middle a...

DbgShell

DbgShell Um front-end PowerShell para o mecanismo de depuração do Windows. Pronto para navegar com tab até a glória? Para uma introdução mais rápida, dê uma olhada em Começando. Avisos 1. Este projeto não é produzido, endossado ou monitorado pela equipe do depurador do Windows. Embora a equipe do...

PowerShell-Suite

PowerShell-Suite В интернете есть отличные инструменты и ресурсы для выполнения большинства задач в PowerShell, однако иногда возникает необходимость собрать утилиту для конкретной цели или заполнить онтологический пробел. Это набор PowerShell-утилит, которые я собрал либо ради интереса, либо...