leprechaun

Leprechaun root@kitploit: .-----. / V \ |...| |.....| .-' '-. .-. .-./ .--. |\ /| .-;.-"-.-;;-, =/ . -;,-;, . .-.-. . / ||'-'|| \ ,'--;.\ .;--' // o \ // --.. o '';,//| || : || |\ ;' \ '.\--' |"""""""|// / ':.// ,/\ | '---'| ||| ; Leprechaun ; ;""|""; \ / | '. vonahisec .' .' / \ '. '-,...

java-stager

java-stager A PoC Java Stager which can download, compile, and execute a Java file in memory. This is for research purposes only, do not use this where you are unauthorised to do so. What is this? This is based on the work of James Williams from his talk "Next Gen AV vs My Shitty Code" available...

gogsownz

GogsOwnz GogsOwnz è un semplice script per ottenere diritti di amministratore e RCE su un server Gogs/Gitea. Sfrutta vulnerabilità in Gogs/Gitea, tra cui CVE-2018-18925 , CVE-2018-20303. Disclaimer legale Questo script è fornito così com'è. Senza garanzia, usalo a tuo rischio, per favore rispetta...

revshellgen

🚀 RevShellGen Reverse Shell Generator Automate reverse shell generation with style Generate, encode, and catch reverse shells without the hassle Features • Installation • Usage • Shell Types • Contributing 📖 About RevShellGen is a powerful command-line tool that simplifies the process of generati...

CVE-2024-23108

CVE-2024-23108: Fortinet FortiSIEM - Iniezione di comandi di secondo ordine non autenticata Exploit proof of concept per eseguire ciecamente comandi come root su appliance FortiSIEM vulnerabili Blog Post Causa principale e indicatori di compromissione qui:...

lupo

For instructions on how to use Lupo, visit https://github.com/malienist/lupo/wiki/Lupo-Wiki Lupo — Malware IOC Extractor Debugging module for Malware Analysis Automation For a step by step post on how to use Lupo, with images and instructions, please see this post:...

VulnNodeApp

VulnNodeApp Un'applicazione vulnerabile realizzata utilizzando node.js, express server e il template engine ejs. Questa applicazione è destinata esclusivamente a scopi didattici. Configurazione Clona questo repository root@kitploit: git clone https://github.com/4auvar/VulnNodeApp.git Configurazio...

watchTowr-vs-SonicWall-PreAuth-RCE-Chain

SonicWall SMA 100 PreAuth RCE Chain PoC PoC per la catena RCE PreAuth di SonicWall SMA 100 CVE-2023-44221, CVE-2024-38475 Consulta il nostro post sul blog per i dettagli tecnici https://github.com/user-attachments/assets/b157b39c-d7bd-4385-af7a-e465f8fd4a41 PoC in Azione root@kitploit: python...

certsync

certsync certsync is a new technique in order to dump NTDS remotely, but this time without DRSUAPI : it uses golden certificate and UnPAC the hash. It works in several steps: 1. Dump user list, CA informations and CRL from LDAP 2. Dump CA certificate and private key 3. Forge offline a certificate...

certsync

certsync certsync è una nuova tecnica per dumpare NTDS da remoto, ma questa volta senza DRSUAPI : utilizza golden certificate e UnPAC the hash. Funziona in diverse fasi: 1. Estrai elenco utenti, informazioni CA e CRL da LDAP 2. Estrai certificato CA e chiave privata 3. Forga offline un certificat...

sharingan

Sharingan Sharingan is a recon multitool for offensive security / bug bounty WIP, will I ever finish? Who knows Cloning for development Outside of your gopath git clone https://github.com/leobeosab/sharingan Installing go get github.com/leobeosab/sharingan/cmd/sharingancli Dependencies NMap Go...

sharingan

Sharingan Sharingan ist ein Recon-Multitool für offensive Sicherheit / Bug Bounty WIP, werde ich jemals fertig? Wer weiß Klonen für die Entwicklung Außerhalb deines GOPATH git clone https://github.com/leobeosab/sharingan Installation go get github.com/leobeosab/sharingan/cmd/sharingancli...

kbd-audio

kbd-audio This is a collection of command-line and GUI tools for capturing and analyzing audio data. Keytap The most interesting tool is called keytap - it can guess pressed keyboard keys only by analyzing the audio captured from the computer's microphone. Check this blog post for more details:...

crestron_getsudopwd

crestrongetsudopwd Basato sulla scoperta di Ricky Lawshae sui dispositivi Crestron TSW-X60 e MC3, questo strumento mira a sfruttare il CVE-2018-13341. Utilizzando l'indirizzo MAC del dispositivo preso di mira, è possibile recuperare la password dell'account nascosto "crengsuperuser" che possiede...

robodroid

RoboDroid RoboDroid è uno strumento software all'avanguardia progettato per semplificare la gestione e molto presto anche il deployment di macchine Android per l'utilizzo in ambienti Cyber Range. Con RoboDroid, gli utenti possono facilmente configurare e personalizzare comportamenti predefiniti p...

CVE-2025-32463-EXPLOIT

Xpl0it — Sudo NSS Library Hijack | v0.0.4 Autor: 0xb0rn3 | 0xbv1 Typ: Proof of Concept PoC Sicherheitsforschungswerkzeug CVE: CVE-2023-42456 Technik: sudo -R chroot NSS-Bibliotheksinjektion → Privilegieneskalation zu root ⚠️ Haftungsausschluss Dieses Tool ist nur für autorisierte Penetrationstests...

cve-2019-6693

FortiGate Password Decrypt Script - CVE-2019-6693 🔐 An authorized remote user with access or knowledge of the standard encryption key could gain access and decrypt the FortiOS backup files and all non-administrator passwords, private keys, and High Availability HA passwords. Overview This Python...

foolav

foolav Executable compiled with this code is useful during penetration tests where there is a need to execute some payload meterpreter maybe? while being certain that it will not be detected by antivirus software. The only requirement is to be able to upload two files: binary executable and paylo...

CVE-2021-41773

Exploração de Path Traversal e RCE no Apache CVE-2021-41773 & CVE-2021-42013 Estas são vulnerabilidades críticas de path traversal que afetam o Apache HTTP Server 2.4.49 e 2.4.50. Elas permitem que atacantes: Acessem arquivos fora da raiz web LFI Obtenham Execução Remota de Código RCE se CGI...

cirrusgo

CirrusGo Ein schnelles Tool zum Scannen von SAAS/PAAS-Apps, geschrieben in Go SAAS App Unterstützung : salesforce contentful nächste Version Hinweis: Flag -o output funktioniert nicht Installation : golang 1.18Ver root@kitploit: go install -v github.com/Ph33rr/cirrusgo/cmd/cirrusgo@latest or go...