CVE-2023-50164-ApacheStruts2-Docker

CVE-2023-50164 : Container Docker vulnerabile Apache Struts 2 Apache ha recentemente pubblicato un advisory relativo a CVE-2023-50164, una vulnerabilità critica con un punteggio di gravità di 9.8 che colpisce Apache Struts 2. CVE-2023-50164 è strettamente legata all'architettura Apache Struts di...

CVE-2016-10956-mail-masta

Mail Masta - Lokales Dateilesen CVE-2016-10956 Das mail-masta-Plugin 1.0 für WordPress ermöglicht lokales Dateilesen in countofsend.php und csvexport.php. Verwendung root@kitploit: $ ./CVE-2016-10956mailmasta.py -h + Mail Masta - Local File Read CVE-2016-10956 usage: CVE-2016-10956mailmasta.py -h...

CVE-2020-7471-Django

CVE-2020-7471-PoC Django PoC für die SQL-Injection-Schwachstelle in PostgreSQL mit Django, gefunden in Django 1.11 vor 1.11.28, 2.2 vor 2.2.10 und 3.0 vor 3.0.3 Die Klasse django.contrib.postgres.aggregates.StringAgg zur Verwendung der PostgreSQL-STRINGAGG-Funktion wies eine...

cracken

Cracken Cracken is a fast password wordlist generator, Smartlist creation and password hybrid-mask analysis tool written in pure safe Rust more on talk/. Inspired by great tools like maskprocessor, hashcat, Crunch and 🤗 HuggingFace's tokenizers. What? Why? Woot?? At DeepSec2021 we presented a new...

RsWindowsThingies

RsWindowsThingies Cose di Windows... ma in Rust Strumenti listenmft Osserva le modifiche ai valori di una voce. root@kitploit: listenmft 0.2.0 Matthew Seyer See the differences in MFT attirbues. USAGE: listenmft.exe OPTIONS FLAGS: -h, --help Prints help information -V, --version Prints version...

hardcodes

hardcodes extract strings from source code...

Tracgram

Trackgram Instagram स्थान सुविधाओं का उपयोग करके किसी खाते को ट्रैक करें उपयोग root@kitploit: At this moment the usage of Trackgram is extremly simple: 1. Download this repository 2. Go through the instalation steps 3. Change the parameters in the tracgram main method directly: + Mandatory: -...

S2-053-CVE-2017-12611

S2-053-CVE-2017-12611 Un semplice script per sfruttare RCE per Struts 2 S2-053 CVE-2017-12611 Utilizzo root@kitploit: exploit.py Esempio root@kitploit: $ python s2-053-exploit.py "http://127.0.0.1" "name" "uname -a" Generated EXP:...

CVE-2024-21006

CVE-2024-21006 CVE-2024-21006 Beschreibung Schwachstelle im Oracle-WebLogic-Server-Produkt von Oracle Fusion Middleware Komponente: Core. Betroffene unterstützte Versionen sind 12.2.1.4.0 und 14.1.1.0.0. Eine leicht ausnutzbare Schwachstelle ermöglicht es einem nicht authentifizierten Angreifer m...

CVE-2021-4045

CVE-2021-4045 CVE-2021-4045 è una vulnerabilità di Command Injection che consente l'esecuzione remota di codice nella telecamera IP TP-Link Tapo c200. Colpisce tutte le versioni del firmware precedenti alla 1.1.16 Build 211209 Rel. 37726N a causa di controlli insufficienti sull'input utente in...

CLZero

CLZero Un progetto per il fuzzing dei vettori di attacco di Request Smuggling HTTP/1.1 CL.0. Informazioni Grazie a @albinowax, @defparam e @d3d, altrimenti questo strumento non esisterebbe. Ispirato dallo strumento Smuggler, tutti i gadget di attacco sono stati adattati da Smuggler e da...

crawpy

Crawpy Yet another content discovery tool written in python. What makes this tool different than others: Sends asynchronous HTTP requests, fast Calibration mode, applies filters on its own Recursive scan mode with additional flags Report generation, you can later go and check your results Multipl...

crawpy

Crawpy Un altro strumento di scoperta dei contenuti scritto in Python. Cosa rende questo strumento diverso dagli altri: Invia richieste HTTP asincrone, veloce Modalità di calibrazione, applica filtri in autonomia Modalità di scansione ricorsiva con flag aggiuntivi Generazione di report, puoi...

ble_proxy

BLE HTTP Proxy System Ein Bluetooth Low Energy BLE basiertes HTTP-Proxy-System, das den Web-Browser-Verkehr über ein iOS-Gerät leitet. Dies ermöglicht das Surfen im Internet über die Internetverbindung des iOS-Geräts unter Verwendung von BLE als Transportschicht. Architekturübersicht root@kitploi...

enumy

Enumy Enumy è un eseguibile portatile ultra veloce che si inserisce nella macchina Linux di destinazione durante un pentest o CTF nella fase di post-exploitation. Eseguire enumy enumererà la macchina per vulnerabilità di sicurezza comuni. Installazione Puoi scaricare il binario finale dalla sched...

enumy

Enumy Enumy is an ultra fast portable executable that you drop on target Linux machine during a pentest or CTF in the post exploitation phase. Running enumy will enumerate the box for common security vulnerabilities. Installation You can download the final binary from the release x86 or x64 tab...

CVE-2023-0214

SWG Exploit Generator root@kitploit: ██████╗ ██████╗ ████████╗███████╗ ██╔═████╗██╔══██╗╚══██╔══╝██╔════╝ ██║██╔██║██████╔╝ ██║ ███████╗ ████╔╝██║██╔═══╝ ██║ ╚════██║ ╚██████╔╝██║ ██║ ███████║ ╚═════╝ ╚═╝ ╚═╝ ╚══════╝ von 0PTS Proof of Concept für die Schwachstelle HTTP Response Splitting in...

All-in-One WP Migration and Backup < 7.106 - Arbitrary Log File Write

The All-in-One WP Migration and Backup WordPress plugin before 7.106 does not properly sanitise a user-supplied value before using it to build a file path. This makes it possible for unauthenticated attackers to create or append a log file in arbitrary locations outside the intended storage...

DbgShell

DbgShell Ein PowerShell-Frontend für die Windows-Debugger-Engine. Bereit, sich per Tab durch die Glorie zu navigieren? Für eine schnellere Einführung werfen Sie einen Blick auf Getting Started. Haftungsausschlüsse 1. Dieses Projekt wird nicht vom Windows-Debugger-Team erstellt, unterstützt oder...

Trawler

التنقيب عن آليات الاستمرارية في ويندوز ما هو؟ Trawler هو سكريبت PowerShell مصمم لمساعدة المستجيبين للحوادث على اكتشاف المؤشرات المحتملة للاختراق على أنظمة ويندوز، مع التركيز بشكل أساسي على آليات الاستمرارية بما في ذلك المهام المجدولة، الخدمات، تعديلات التسجيل، عناصر بدء التشغيل، تعديلات الملفات...