cracken

Cracken Cracken is a fast password wordlist generator, Smartlist creation and password hybrid-mask analysis tool written in pure safe Rust more on talk/. Inspired by great tools like maskprocessor, hashcat, Crunch and 🤗 HuggingFace's tokenizers. What? Why? Woot?? At DeepSec2021 we presented a new...

RsWindowsThingies

RsWindowsThingies Cose di Windows... ma in Rust Strumenti listenmft Osserva le modifiche ai valori di una voce. root@kitploit: listenmft 0.2.0 Matthew Seyer See the differences in MFT attirbues. USAGE: listenmft.exe OPTIONS FLAGS: -h, --help Prints help information -V, --version Prints version...

hardcodes

hardcodes extract strings from source code...

Tracgram

Trackgram Instagram स्थान सुविधाओं का उपयोग करके किसी खाते को ट्रैक करें उपयोग root@kitploit: At this moment the usage of Trackgram is extremly simple: 1. Download this repository 2. Go through the instalation steps 3. Change the parameters in the tracgram main method directly: + Mandatory: -...

S2-053-CVE-2017-12611

S2-053-CVE-2017-12611 Un semplice script per sfruttare RCE per Struts 2 S2-053 CVE-2017-12611 Utilizzo root@kitploit: exploit.py Esempio root@kitploit: $ python s2-053-exploit.py "http://127.0.0.1" "name" "uname -a" Generated EXP:...

instantbox

En | 简 | 繁 instantbox Get a clean, ready-to-go Linux box in seconds. Introduction What is instantbox? It's a project that spins up temporary Linux systems with instant webshell access from any browser. What can an instantbox do?...

instantbox

En | 简 | 繁 instantbox Ottieni una box Linux pulita e pronta all'uso in pochi secondi. Introduzione Cos'è instantbox?...

CVE-2024-21006

CVE-2024-21006 CVE-2024-21006 Beschreibung Schwachstelle im Oracle-WebLogic-Server-Produkt von Oracle Fusion Middleware Komponente: Core. Betroffene unterstützte Versionen sind 12.2.1.4.0 und 14.1.1.0.0. Eine leicht ausnutzbare Schwachstelle ermöglicht es einem nicht authentifizierten Angreifer m...

CVE-2021-4045

CVE-2021-4045 CVE-2021-4045 è una vulnerabilità di Command Injection che consente l'esecuzione remota di codice nella telecamera IP TP-Link Tapo c200. Colpisce tutte le versioni del firmware precedenti alla 1.1.16 Build 211209 Rel. 37726N a causa di controlli insufficienti sull'input utente in...

CLZero

CLZero Un progetto per il fuzzing dei vettori di attacco di Request Smuggling HTTP/1.1 CL.0. Informazioni Grazie a @albinowax, @defparam e @d3d, altrimenti questo strumento non esisterebbe. Ispirato dallo strumento Smuggler, tutti i gadget di attacco sono stati adattati da Smuggler e da...

crawpy

Crawpy Un altro strumento di scoperta dei contenuti scritto in Python. Cosa rende questo strumento diverso dagli altri: Invia richieste HTTP asincrone, veloce Modalità di calibrazione, applica filtri in autonomia Modalità di scansione ricorsiva con flag aggiuntivi Generazione di report, puoi...

crawpy

Crawpy Yet another content discovery tool written in python. What makes this tool different than others: Sends asynchronous HTTP requests, fast Calibration mode, applies filters on its own Recursive scan mode with additional flags Report generation, you can later go and check your results Multipl...

ble_proxy

BLE HTTP Proxy System Ein Bluetooth Low Energy BLE basiertes HTTP-Proxy-System, das den Web-Browser-Verkehr über ein iOS-Gerät leitet. Dies ermöglicht das Surfen im Internet über die Internetverbindung des iOS-Geräts unter Verwendung von BLE als Transportschicht. Architekturübersicht root@kitploi...

enumy

Enumy Enumy è un eseguibile portatile ultra veloce che si inserisce nella macchina Linux di destinazione durante un pentest o CTF nella fase di post-exploitation. Eseguire enumy enumererà la macchina per vulnerabilità di sicurezza comuni. Installazione Puoi scaricare il binario finale dalla sched...

enumy

Enumy Enumy is an ultra fast portable executable that you drop on target Linux machine during a pentest or CTF in the post exploitation phase. Running enumy will enumerate the box for common security vulnerabilities. Installation You can download the final binary from the release x86 or x64 tab...

CVE-2023-0214

SWG Exploit Generator root@kitploit: ██████╗ ██████╗ ████████╗███████╗ ██╔═████╗██╔══██╗╚══██╔══╝██╔════╝ ██║██╔██║██████╔╝ ██║ ███████╗ ████╔╝██║██╔═══╝ ██║ ╚════██║ ╚██████╔╝██║ ██║ ███████║ ╚═════╝ ╚═╝ ╚═╝ ╚══════╝ von 0PTS Proof of Concept für die Schwachstelle HTTP Response Splitting in...

katana

A next-generation crawling and spidering framework Features • Installation • Usage • Scope • Config • Filters • Join Discord Features Fast And fully configurable web crawling Standard and Headless mode JavaScript parsing / crawling Customizable automatic form filling Scope control - Preconfigured...

All-in-One WP Migration and Backup < 7.106 - Arbitrary Log File Write

The All-in-One WP Migration and Backup WordPress plugin before 7.106 does not properly sanitise a user-supplied value before using it to build a file path. This makes it possible for unauthenticated attackers to create or append a log file in arbitrary locations outside the intended storage...

DbgShell

DbgShell Ein PowerShell-Frontend für die Windows-Debugger-Engine. Bereit, sich per Tab durch die Glorie zu navigieren? Für eine schnellere Einführung werfen Sie einen Blick auf Getting Started. Haftungsausschlüsse 1. Dieses Projekt wird nicht vom Windows-Debugger-Team erstellt, unterstützt oder...

vulhub

Vulhub is an open-source collection of pre-built, ready-to-use vulnerable Docker environments. With just one command you can launch a vulnerable environment for security research, learning, or demonstration, no prior Docker experience required. 中文版本Chinese version Quick Start Install Docker examp...