revsuit

RevSuit - A Flexible and Powerful Reverse Connection Platform English ｜简体中文 Overview RevSuit is a flexible and powerful reverse connection platform designed for receiving connection from target host in penetration. It currently supports HTTP, DNS, RMI, LDAP, MySQL and FTP protocols. Flexible: 1...

InfraGuard

Red team infrastructure tracker and C2 redirector -- a modern alternative to RedWarden. InfraGuard sits between the internet and your C2 teamserver, validating every inbound request against your malleable C2 profile and blocking anything that doesn't conform. Scanners, bots, and blue team probes...

brpc

中文版 bRPC is an Industrial-grade RPC framework using C++ Language, which is often used in high performance system such as Search, Storage, Machine learning, Advertisement, Recommendation etc. "bRPC" means "better RPC". You can use it to: Build a server that can talk in multiple protocols on same...

ESP32-Bit-Pirate

ESP32 Bit Pirate ESP32 Bit Pirate is open-source firmware that turns your device into a multi-protocol development and analysis tool, inspired by the legendary Bus Pirate. It supports sniffing, sending, scripting, and interacting with various digital protocols I2C, UART, 1-Wire, SPI, etc. via a...

brutespray

Brutespray 创建者：Shane Young/@x90sky && Jacob Robles/@shellfail 灵感来源：Leon Johnson/@sho-luv 描述 Brutespray 自动对发现的服务尝试默认凭据。它接收来自 Nmap（GNMAP/XML）、Nessus、Nexpose、JSON 和列表的扫描输出，然后并行对 40 多种协议进行凭据暴力破解。使用 Go 构建，具有交互式终端界面、内置字典和恢复功能。 快速安装 root@kitploit: go install github.com/x90skysn3k/brutespray/v2@latest...

XFLTReaT

XFLTReaT This is just one thing of many things that was missing from the Internet. If you got tired of trying several tunnelling tools for each protocols, this must be your tool ^W framework. If you are interested in the details, please read the Wiki. Available modules TCP UDP ICMP SOCKS v4, 4a, ...

legba

legba 加入项目社区，尽在我们的服务器！ Legba 是一个多协议凭证暴力破解/密码喷洒和枚举工具，使用 Rust 和 Tokio 异步运行时构建，以实现更好的性能和稳定性，同时比同类工具消耗更少的资源。 主要特性 100% Rust - Legba 完全使用 Rust 编写，没有原生依赖，可以轻松编译为所有操作系统和架构。🦀 多协议 - 支持 HTTP、DNS、SSH、FTP、SMTP、RDP、VNC、SQL 数据库、NoSQL、LDAP、Kerberos、SAMBA、SNMP、STOMP、MQTT 及更多。 高性能 - 异步/并发架构，可自定义工作程序，实现最大速度。...

opencanary

OpenCanary de Thinkst Canary OpenCanary es un honeypot de red multiprotocolo. Su caso de uso principal es atrapar a los hackers después de que hayan violado redes no públicas. Tiene requisitos de recursos extremadamente bajos y puede ajustarse, modificarse y ampliarse. Visión general OpenCanary s...

dionaea

dionaea - atrapa bugs Dionaea pretende ser un sucesor de nepenthes, incorporando Python como lenguaje de scripting, usando libemu para detectar shellcodes y con soporte para ipv6 y tls. Protocolos blackhole epmap ftp http memcache mirror mqtt mssql mysql pptp sip smb tftp upnp Registro fail2ban...

thc-hydra

H Y D R A root@kitploit: c 2001-2023 van Hauser / THC https://github.com/vanhauser-thc/thc-hydra 许多模块由 David dot Maciejak @ gmail dot com 编写 BFG 代码由 Jan Dlabal 编写 根据 AGPLv3 许可证发布（参见 LICENSE 文件） 请勿用于军事或秘密服务组织，或用于非法目的。 （这只是作者的愿望，不具有约束力。许多在这些组织中工作的人 无论如何都不关心法律和道德。如果你忽视这一点，你就不是一个“好”人。） 注意：不，这不是一份...

DahuaConsole

Dahua Console Versión: Pre-alpha Bugs: Efectivamente TODO: Muchas cosas Requisitos de instalación root@kitploit: sudo pip3 install -r requirements.txt Argumentos root@kitploit: -h, --help show this help message and exit --rhost RHOST Remote Target Address IP/FQDN --rport RPORT Remote Target Port...

freeradius-server

El servidor FreeRADIUS Introducción El Proyecto del servidor FreeRADIUS es un servidor de políticas multiprotocolo de alto rendimiento y altamente configurable, que admite RADIUS, DHCPv4, DHCPv6, DNS, TACACS+ y VMPS. Está disponible bajo los términos de la GNU GPLv2. El uso de RADIUS permite...

ncrack

ncrack Ncrack 是一款高速网络认证破解工具。它旨在帮助企业通过主动测试所有主机和网络设备的弱密码来保障网络安全。安全专业人员在审计客户时也同样依赖 Ncrack。Ncrack 采用模块化方法设计，命令行语法类似于 Nmap，并拥有一个可根据网络反馈调整自身行为的动态引擎。它能够快速且可靠地对多个主机进行大规模审计。 Ncrack 的功能包括一个非常灵活的界面，让用户能够完全控制网络操作，从而实现极其复杂的暴力破解攻击；内置易于使用的定时模板；类似 Nmap...

changeme

changeme 一个默认凭证扫描器。 关于 changeme 接续商业扫描器停止的地方。它专注于检测默认和后门凭证，而不一定检测常见凭证。它的默认模式是扫描 HTTP 默认凭证，但也支持其他凭证。 changeme 设计为可以轻松添加新凭证，而无需编写任何代码或模块。changeme 将凭证数据与代码分离。所有凭证都存储在 yaml 文件中，因此它们既易于人类阅读，也便于 changeme 处理。凭证文件可以通过使用 ./changeme.py --mkcred 工具并回答几个问题来创建。 changeme 支持...

LogMePwn

LogMePwn LogMePwn is a fully automated, multi-protocol, reliable, super-fast scanning and validation toolkit for the Log4J RCE CVE-2021-44228 vulnerability. Tool Highlights Inherent support for automatic Canary Tokens generation using emails or webhooks. Multi-protocol support: HTTP, IMAP, SSH,...

[SECURITY] Fedora 44 Update: curl-8.18.0-10.fc44

curl is a command line tool for transferring data with URL syntax, supporting FTP, FTPS, HTTP, HTTPS, SCP, SFTP, TFTP, TELNET, DICT, LDAP, LDAPS, FILE, IMA P, SMTP, POP3 and RTSP. curl supports SSL certificates, HTTP POST, HTTP PUT, FTP uploading, HTTP form based upload, proxies, cookies,...

CVE-2023-21971_Analysis

CVE-2023-21971 Connector/J RCE Analysis References Remote Code Execution RCE in com.mysql:mysql-connector-j | CVE-2023-21971 | Snyk New Vulnerability in MySQL JDBC Driver: RCE and Unauthorized DB Access MYSQL JDBC Deserialization Analysis - 跳跳糖 tttang.com Vulnerability Overview Vulnerability in...

gpasskey

======== gpasskey .. image:: https://gitlab.com/renich/gpasskey/-/raw/master/assets/banner.svg :width: 100% :align: center :alt: gpasskey banner | .. image:: https://gitlab.com/renich/gpasskey/badges/master/pipeline.svg :target: https://gitlab.com/renich/gpasskey/-/commits/master :alt: pipeline...

Oracle MySQL Server 安全漏洞

Oracle MySQL Server is an open source relational database management system for storing, managing and retrieving data. A denial of service vulnerability exists in Oracle MySQL Server. The vulnerability stems from a failure of the Server: Optimizer component to properly handle a specific request a...

NetSecBed: A Container-Native Testbed for Reproducible Cybersecurity Experimentation

Cybersecurity research increasingly depends on reproducible evidence, such as traffic traces, logs, and labeled datasets, yet most public datasets remain static and offer limited support for controlled re-execution and traceability, especially in heterogeneous multi-protocol environments. This...