kostebek

أداة استطلاع مقدمة Kostebek هي أداة استطلاع تستخدم معلومات العلامات التجارية للشركات لاكتشاف نطاقاتها. المرجع : https://evren.ninja/en/post/recon-is-everywhere/ فيديو توضيحي : الإعداد تحميل Kostebek git clone https://github.com/esecuritylab/kostebek المتطلبات root@kitploit: sudo pip3 install...

BGGP

سباق جائزة الغولف الثنائية الكبرى يحتوي هذا المستودع على ملفات سباق جائزة الغولف الثنائية الكبرى، مرتبة حسب السنة. BGGP هي مسابقة سنوية للملفات الصغيرة، حيث يقوم المشاركون بإنشاء أصغر ملفات ممكنة تؤدي وظيفة محددة. لا يمكن أن يتجاوز حجم الملفات 4096 بايت...

IotShark

cs219-f19-final-project IoTShark This is our final project for CS 219 for the Fall 2019 quarter. IoTShark is a IOT monitoring service that allows users to monitor their IOT devices for trends in data sent/received. Ordinarily, setting up a man in the middle attack with proper configurations can...

Phisher-man

Phisher-Man2 Samples Phishing tools made for Linux it contains 30 different type of Phishing Pages Requirements made for Linux System if you are using Kali Linux root@kitploit: pip install Flask any other Linux distributions root@kitploit: pip install Flask apt update sudo apt install apache2 sud...

s3dns

S3DNS s3dns is a lightweight DNS server that helps uncover cloud storage buckets AWS S3, Google Cloud Storage, and Azure Blob by resolving DNS requests, tracing CNAMEs, and matching known bucket URL patterns. It's a handy companion for pentesters , bug bounty hunters , and cloud security analysts...

agx-exploit

Презентация и демонстрация CVE-2022-32947 Посмотрите прямую трансляцию с Lina и Cyan здесь!!! ✨ 日本語の配信はこちら！！ ✨...

exploit-CVE-2014-6271

Shellshock exploit + vulnerable environment Shellshock, also known as Bashdoor, is a family of security bugs in the widely used Unix Bash shell, the first of which was disclosed on 24 September 2014. Many Internet-facing services, such as some web server deployments, use Bash to process certain...

goproxy

GoProxy GoProxy est une bibliothèque permettant de créer un serveur proxy HTTP/HTTPS personnalisé en utilisant Go alias Golang, avec plusieurs paramètres configurables disponibles. L'objectif de ce projet est d'offrir un serveur proxy optimisé, utilisable avec un volume de trafic raisonnable, tou...

CVE-2023-49988

CVE-2023-49988 Hotel Booking Management v1.0 - SQL Injection Vulnerability in the "npss" parameter at rooms.php Description : A SQL Injection vulnerability exists in version 1 of the Hotel Booking Management. A malicious attacker can issue SQL commands to the MySQL database when editing the price...

CRSprober

CRSprober الوصف تكشف هذه الأداة عن بُعد إصدار OWASP Core Rule Set CRS المستخدم بواسطة جدار حماية تطبيقات الويب ModSecurity. كما تحدّد مستوى البارانويا PL المُكوَّن في CRS، مما يوفر رؤى حول الوضع الأمني لجدار الحماية دون الحاجة إلى وصول محلي. المتطلبات الأساسية Python 3 الاستخدام python crsprober....

CVE-2022-22963

CVE-2022-22963 - Spring4shell To run the vulnerable SpringBoot application run this docker container exposing it to port 8080. Example: root@kitploit: docker run -it -d -p 8080:8080 bobcheat/springboot-public Exploit Curl command: root@kitploit: curl -i -s -k -X $'POST' -H $'Host: 192.168.1.2:808...

teletunnel

TeleTunnel v2 A Telegram-based remote access tool for Windows. Disclaimer: For authorized use on systems you own only ! Please 🙇 Features Remote administration via a Telegram bot. Secure control only accepts commands from your specified Telegram user ID. The bot have these features: root@kitploit...

h0neytr4p

Adjusted for T-Pot This fork of h0neytr4p was revised for T-Pot with the following features: Add Docker support Dockerfile, docker-compose.yml Use a single logfile instead of two Log to JSON instead of CSV Enrich JSON log file with additional info i.e. Cookies, Headers, Destination Port, etc...

yaraast

yaraast Parse, analyze, and transform YARA rules with a Python AST toolkit Overview...

BlueMap

BlueMap: An Interactive Exploitation Toolkit for Azure BlueMap helps penetration testers and red teamers to perform Azure auditing, discovery & enumeration, and exploitation in interactive mode that saves complex opsec and overhead that usually exists in Azure penetration testing engagements. The...

CVE-2020-0618

CVE-2020-0618 RCE في SQL Server Reporting Services CVE-2020-0618 التحقق من الثغرة POC يمكن إرسال طلب HTTP التالي إلى الخادم لاستغلال التطبيق: root@kitploit: POST /ReportServer/pages/ReportViewer.aspx HTTP/1.1 Host: target Content-Type: application/x-www-form-urlencoded Content-Length: X...

es_inject

CVE-2014-3120 Elastic Search Remote Code Execution This project demonstrates the CVE-2014-3120 vulnerability/misconfiguration. It allows you to read from and append to files on the system hosting ES, provided the user running ES has access to them. Notes This does not require a web server. Save i...

CVE-2026-4020

В этом репозитории нет README...

CVE-2026-8461-EXP

CVE-2026-8461 "PixelSmash" — FFmpeg MagicYUV Heap OOB Write PoC !WARNING This repository contains a working exploit PoC for a heap corruption vulnerability. It is intended solely for authorized security research, CTF contexts, and defensive analysis. Do not use against systems you do not own or...

ExifSmugglingPoC

Exif Smuggling A Proof-of-Concept evolution of Cache Smuggling. This attack conceals an executable payload inside a JPG's Exif data. As a result, image caching such as that of a Web Browser can be used to passively download the payload. As a result, the example loader chromepoc.ps1 does not need ...