netattack

NETATTACK The netattack.py is a python script that allows you to scan your local area for WiFi Networks and perform deauthentification attacks. The effectiveness and power of this script highly depends on your wireless card. NETATTACK 2 RELEASED https://github.com/chrizator/netattack2/ USAGE EASY...

sherlock

Hunt down social media accounts by username across 400+ social networks Installation • Usage • Contributing Installation !WARNING Packages for ParrotOS and Ubuntu 24.04, maintained by a third party, appear to be broken. Users of these systems should defer to uv/pipx/pip or Docker. Method| Notes...

PiDense

root@kitploit: ▄▄▄▄▄▄▄▄▄▄▄ ▄▄▄▄▄▄▄▄▄▄▄ ▄▄▄▄▄▄▄▄▄▄ ▄▄▄▄▄▄▄▄▄▄▄ ▄▄ ▄ ▄▄▄▄▄▄▄▄▄▄▄ ▄▄▄▄▄▄▄▄▄▄▄ ▐░░░░░░░░░░░▌▐░░░░░░░░░░░▌▐░░░░░░░░░░▌ ▐░░░░░░░░░░░▌▐░░▌ ▐░▌▐░░░░░░░░░░░▌▐░░░░░░░░░░░▌ ▐░█▀▀▀▀▀▀▀█░▌ ▀▀▀▀█░█▀▀▀▀ ▐░█▀▀▀▀▀▀▀█░▌▐░█▀▀▀▀▀▀▀▀▀ ▐░▌░▌ ▐░▌▐░█▀▀▀▀▀▀▀▀▀ ▐░█▀▀▀▀▀▀▀▀▀ ▐░▌ ▐░▌ ▐░▌ ▐░▌ ▐░▌▐░▌ ▐░▌▐░▌...

offensive-onos

Offensive ONOS My experiments in weaponizing ONOS applications. This is a part of research activity for my Cybersecurity M.Sc. Thesis link, focused on detection of Cross App Poisoning Attacks in Software Defined Networks. This research also led to discovery ofCVE-2023-24279 and CVE-2023-30093...

CVE-2023-36845-POC

CVE-2023-36845 PoC Automation Script This script provides an automated Proof of Concept PoC for the vulnerability identified as CVE-2023-36845, which affects the J-Web component of Juniper Networks Junos OS on EX and SRX Series devices. It demonstrates the potential for remote modification of the...

fierce

Fierce Fierce is a DNS reconnaissance tool for locating non-contiguous IP space. Useful links: Domain Name System DNS Domain Names - Concepts and Facilities Domain Names - Implementation and Specification Threat Analysis of the Domain Name System DNS Name Servers NS State of Authority Record SOA...

papers

Publications Une collection pratique de mes publications publiques, toutes réunies au même endroit. Vulnérabilités d'élévation de privilèges de Symantec Altiris Deployment Solution 13048 Publication Exploit-db à...

HSTP

Hyper Simple Text Protocol on Networks Try now: https://hstp.ai root@kitploit: npx hstp; The protocol aims to develop a application layer abstraction for the Hyper Service Transfer Protocol. HSTP is a recursion as nature of HSTP. This protocol implements itself as a interface. On every internet...

adidnsdump

Active Directory Integrated DNS dump tool By default any user in Active Directory can enumerate all DNS records in the Domain or Forest DNS zones, similar to a zone transfer. This tool enables enumeration and exporting of all DNS records in the zone for recon purposes of internal networks. For mo...

ICMP-TransferTools

ICMP-TransferTools ICMP-TransferTools is a set of scripts designed to move files to and from Windows hosts in restricted network environments. This is accomplished using a total of 4 different files, consisting of a python server and powershell client for each transfer direction Download & Upload...

rpcfirewall

أحتاج إلى مزيد من المعلومات اطّلع على مقالنا حول جدار حماية RPC أو محادثتنا في BlackHat لفهم أفضل لـ RPC وهجمات RPC والحل: جدار حماية RPC. انضم إلى مساحة عمل مجتمع Slack |Zero| Labs لأي أسئلة أو مشكلات أو ببساطة للتحية. نود أيضًا أن نسمع منك عبر البريد الإلكتروني إذا كنت من هذا النوع. اتصل بنا عل...

CVE-2024-3400-RCE-Scan

Cyberspace Mapping Dork Fofa root@kitploit: app="paloalto-GlobalProtect" https://en.fofa.info/result?qbase64=YXBwPSJwYWxvYWx0by1HbG9iYWxQcm90ZWN0Ig%3D%3D Zoomeye root@kitploit: app:"Palo Alto Networks firewall httpd"...

Unit42-Threat-Intelligence-Article-Information

Unit42-Threat-Intelligence-Article-Information Ceci est le dépôt des indicateurs de compromission IOC et autres données accompagnant les articles de renseignement sur les menaces publiés sur le site Web Palo Alto Networks Unit 42...

Palo Alto Networks PAN-OS Web Interface - Cross Site-Scripting

PAN-OS management web interface is vulnerable to reflected cross-site scripting. A remote attacker able to convince an administrator with an active authenticated session on the firewall management interface to click on a crafted link to that management web interface could potentially execute...

Mitel MiCollab - Arbitary File Read

The Mitel Collab Arbitrary File Read vulnerability allows an unauthenticated attacker to read arbitrary files from the underlying file system on a Mitel Collab server. Exploiting this flaw involves sending specially crafted requests to the server, bypassing access controls and allowing the attack...

DCBI-Netlog-LAB v1.0 - Command Injection

An issue in the component /networkconfig/nsgmasq.cgi of DCN Digital China Networks DCBI-Netlog-LAB v1.0 allows attackers to bypass authentication and execute arbitrary commands via a crafted request. id: CVE-2023-26802 info: name: DCBI-Netlog-LAB v1.0 - Command Injection author: pussycat0x...

Palo Alto Networks Expedition - OS Command Injection

An OS command injection vulnerability in Palo Alto Networks Expedition enables an unauthenticated attacker to run arbitrary OS commands as the www-data user in Expedition, which results in the disclosure of usernames, cleartext passwords, device configurations, and device API keys for firewalls...

blackbird

Blackbird Blackbird is a powerful OSINT tool that combines fast username and email searches across more than 600 platforms with free AI-powered profiling. By leveraging community-driven projects like WhatsMyName, it ensures low false positive rates and high-quality results. Features include smart...

CVE-2007-6638

CVE-2007-6638 March Networks DVR 3204 - Logfile Information Disclosure Exploit-DB publication at https://www.exploit-db.com/exploits/4797/ Author Alex Hernandez aka @alt3kx...

brawl-public-game-001

BRAWL One of the challenging problems for cyber security researchers developing detection and response capabilities is finding a realistic environment in which to test their hypothesis and capabilities. The cheapest method is to test capabilities on a small lab network. But this environment is...