nikto

nikto Nikto web server scanner - https://cirt.net/Nikto2 Full documentation - https://github.com/sullo/nikto/wiki Run normally: root@kitploit: git clone https://github.com/sullo/nikto Main script is in program/ cd nikto/program Run using the shebang interpreter ./nikto.pl -h http://www.example.co...

nikto

nikto Nikto web server scanner - https://cirt.net/Nikto2 Documentazione completa - https://github.com/sullo/nikto/wiki Esecuzione normale: root@kitploit: git clone https://github.com/sullo/nikto Main script is in program/ cd nikto/program Run using the shebang interpreter ./nikto.pl -h...

wifite2

Wifite This repo is a complete re-write of wifite, a Python script for auditing wireless networks. Wifite runs existing wireless-auditing tools for you. Stop memorizing command arguments & switches! Wifite is designed to use all known methods for retrieving the password of a wireless access point...

CVE-2026-75573

CVE-2026-75573 affects mongodrdl , the data replication daemon in MongoDB Connector for BI . The root cause is that when a TLS private-key password is supplied both via the connection URI and the corresponding command-line option, mongodrdl may write that password to standard error . A local atta...

CVE-2026-75573 MongoDB Connector for BI mongodrdl Logs TLS Private-Key Password When Duplicate Options Are Supplied

In MongoDB Connector for BI, mongodrdl may write a TLS private-key password to standard error when the password is supplied through both the connection URI and the corresponding command-line option. A local user with access to the captured command output and encrypted key file may use the disclos...

EUVD-2026-67084

In MongoDB Connector for BI, mongodrdl may write a TLS private-key password to standard error when the password is supplied through both the connection URI and the corresponding command-line option. A local user with access to the captured command output and encrypted key file may use the disclos...

dnstwist

See what sort of trouble users can get in trying to type your domain name. Find lookalike domains that adversaries can use to attack you. Can detect typosquatters, phishing attacks, fraud, and brand impersonation. Useful as an additional source of targeted threat intelligence. DNS fuzzing is an...

hacktricks

HackTricks Hacktricks Logos und Bewegungsdesign von @ppieranacho . HackTricks lokal ausführen root@kitploit: Download latest version of hacktricks git clone https://github.com/HackTricks-wiki/hacktricks Select the language you want to use export LANG="master" Leave master for english "af" for...

RedGuard

RedGuard - Hervorragendes C2 Front Flow Control Werkzeug Englisch | 中文文档 0x00 Einführung Was ist RedGuard RedGuard, ein abgeleitetes Tool, das auf Command and Control C2 front flow control Technologie basiert, hat ein leichteres Design, effiziente Traffic-Interaktion und zuverlässige Kompatibilit...

wave-share

wave-share A proof-of-concept for WebRTC signaling using sound. Works with all devices that have microphone + speakers. Runs in the browser. Nearby devices negotiate the WebRTC connection by exchanging the necessary Session Description Protocol SDP data via a sequence of audio tones. Upon...

thc-hydra

H Y D R A root@kitploit: c 2001-2023 by van Hauser / THC https://github.com/vanhauser-thc/thc-hydra Many modules were written by David dot Maciejak @ gmail dot com BFG code by Jan Dlabal Licensed under AGPLv3 see LICENSE file Please do not use in military or secret service organizations, or for...

thc-hydra

H Y D R A root@kitploit: c 2001-2023 di van Hauser / THC https://github.com/vanhauser-thc/thc-hydra Molti moduli sono stati scritti da David dot Maciejak @ gmail dot com Codice BFG di Jan Dlabal Concesso in licenza AGPLv3 vedi file LICENSE Si prega di non utilizzare in organizzazioni militari o d...

evilginx2

Evilginx 3.0 Evilginx è un framework per attacchi man-in-the-middle utilizzato per il phishing di credenziali di accesso insieme ai cookie di sessione, permettendo così di bypassare la protezione dell'autenticazione a due fattori. Questo strumento è il successore di Evilginx, rilasciato nel 2017,...

evilginx2

Evilginx 3.0 Evilginx is a man-in-the-middle attack framework used for phishing login credentials along with session cookies, which in turn allows to bypass 2-factor authentication protection. This tool is a successor to Evilginx, released in 2017, which used a custom version of nginx HTTP server...

snmpwn

SNMPwn is an SNMPv3 user enumerator and attack tool. It is a legitimate security tool designed to be used by security professionals and penetration testers against hosts you have permission to test. It takes advantage of the fact that SNMPv3 systems will respond with "Unknown user name" when an...

kubesploit

Kubesploit Kubesploit è un server e agente di Command & Control HTTP/2 cross-platform per post-exploitation progettato specificamente per ambienti containerizzati, scritto in Golang e basato sul progetto Merlin di Russel Van Tuyl @Ne0nd0g. La Nostra Motivazione Durante la ricerca su Docker e...

juicy-potato

Juicy Potato abusing the golden privileges A sugared version ofRottenPotatoNG, with a bit of juice, i.e. another Local Privilege Escalation tool, from a Windows Service Accounts to NT AUTHORITY\SYSTEM Summary RottenPotatoNG and its variants leverages the privilege escalation chain based on BITS...

CVE-2024-43468_mTLS_go

CVE-2024-43468 SCCM SQL Injection Exploit mTLS-Client-Zertifikate aus macOS-Schlüsselbund-Version Go-Implementierung des CVE-2024-43468-Exploits, der den macOS-Schlüsselbund für die mTLS-Authentifizierung verwendet ohne dass Schlüssel aus dem Schlüsselbund exportiert werden müssen. Zusätzlich:...

Pachine

Pachine Implementazione Python per CVE-2021-42278 Escalation dei Privilegi di Active Directory. Installazione root@kitploit: $ pip3 install impacket Utilizzo root@kitploit: Impacket v0.9.23 - Copyright 2021 SecureAuth Corporation usage: pachine.py -h -scan -spn SPN -impersonate IMPERSONATE...

flare-emu

flare-emu flare-emu unisce un framework di analisi binaria supportato, come IDA Pro o Radare2, con il framework di emulazione Unicorn per fornire all'utente un'interfaccia facile da usare e flessibile per scrivere script di emulazione. È progettato per gestire tutte le attività di manutenzione...