3427358 matches found
cve-2025-4615
CVE-2025-4615 — Technical Analysis & Proof of Concept Vulnerability: Improper Neutralization of Input in PAN-OS Management Web Interface Vendor Advisory: https://security.paloaltonetworks.com/CVE-2025-4615 CVSS 4.0: 6.9 MEDIUM — Integrity HIGH, Availability HIGH CWE: CWE-83 Improper Neutralizatio...
oppo-pgem10-ghostlock
OPPO Find X6 Pro GhostLock अनुकूलन परियोजना अवलोकन यह परियोजना OPPO Find X6 Pro PGEM10 पर CVE-2026-43499 GhostLock भेद्यता के अनुकूलन अनुसंधान के लिए है। NebuSec CyberMeowfia मूल शोषण वास्तुकला पर आधारित, oppo-ghostlock अनुकूलन दृष्टिकोण का संदर्भ लेते हुए। उपकरण जानकारी मद| मान ---|--- उपकरण| OP...
Hermes-Proxy
Hermes Proxy Hermes Proxy is a desktop HTTP/HTTPS interception app built with Electron and Vite. It captures requests/responses, lets you replay requests, and export/import HAR files. Features Live traffic table with request/response details Replay requests with editable URL/headers Export all...
opensquat
openSquat Core 📑 Table of Contents What is openSquat? Featured In Open-Core Model Key Features Quick Start Requirements Usage Premium and API Modes Configuration Automation CLI Reference Contributing Author License 🎯 What is openSquat? openSquat is an Open Source Intelligence OSINT security tool...
opensquat
Núcleo de openSquat 📑 Tabla de Contenidos ¿Qué es openSquat? Destacado en Modelo Open-Core Características Clave Inicio Rápido Requisitos Uso Modos Premium y API Configuración Automatización Referencia de CLI Contribuciones Autor Licencia 🎯 ¿Qué es openSquat? openSquat es una herramienta de...
CVE-2022-23935
CVE-2022-23935 The Exiftool software program, in versions prior to 12.38, has a security vulnerability that can be exploited through a specially crafted filename. This vulnerability allows for command injection, where an attacker can execute arbitrary commands on the system by appending a pipe...
CVE-2024-6387
CVE-2024-6387...
on-the-fly
on-the-fly root@kitploit: ▒█████ ███▄ █ ▄▄▄█████▓ ██░ ██ ▓█████ █████ ██▓ ▓██ ██▓ ▒██▒ ██▒ ██ ▀█ █ ▓ ██▒ ▓▒▒▓██░ ██ ▓█ ▀ ▓██ ▓██▒ ▒██ ██▒ ▒██░ ██▒▓██ ▀█ ██▒ ▒ ▓██░ ▒░░▒██▀▀██ ▒███ ▒████ ▒██░ ▒██ ██░ ▒██ ██░▓██▒ ▐▌██▒ ░ ▓██▓ ░ ░▓█ ░██ ▒▓█ ▄ ░▓█▒ ▒██░ ░ ▐██▓░ ░ ████▓▒░▒██░ ▓██░ ▒██▒ ░ ░▓█▒░██▓▒░▒██...
ipv4Bypass
ipv4Bypass Using IPv6 to Bypass Security Dependences tested on Kali Linux python3 nmap arp-scan apt-get install arp-scan python-nmap https://pypi.org/project/python-nmap/ Example on how to run the tool root@kitploit: $ python bypass.py -i eth0 -r 10.5.192.0/24 $ python bypass.py -h Usage: bypass....
RSPET
RSPET RSPET Reverse Shell and Post Exploitation Tool is a Python based reverse shell equipped with functionalities that assist in a post exploitation scenario. DISCLAIMER: This software is provided for educational and PenTesting purposes and as a proof of concept. The developers do not endorse,...
Rootsmart-v2.0
Rootsmart 2.0 w/ cve-2019-2215 + Ransomware अस्वीकरण यह प्रोजेक्ट केवल शैक्षिक उद्देश्यों के लिए है। इस प्रोजेक्ट में rkshrksh/2048-Game और kangtastic/cve-2019-2215 से कोड का उपयोग किया गया है। परियोजना विवरण यह प्रोजेक्ट सिंगापुर इंस्टीट्यूट ऑफ टेक्नोलॉजी के मोबाइल सुरक्षा मॉड्यूल का हिस्सा है। ...
nCPU
A complete computer in which every layer — arithmetic, OS, compiler, display — is either a trained neural network or runs entirely on GPU. The model doesn't run on the computer. The model is the computer. nCPU is one repository pursuing one thesis from five directions: a computer can be built out...
dissect
dissect Dissect is a digital forensics & incident response framework and toolset that allows you to quickly access and analyse forensic artefacts from various disk and file formats, developed by Fox-IT part of NCC Group. This project is a meta package, it will install all other Dissect modules wi...
rusty-hog
Rusty Hog is a secret scanner built in Rust for performance, and based on TruffleHog which is written in Python. Rusty Hog provides the following binaries: Ankamali Hog: Scans for secrets in a Google doc. Berkshire Hog: Scans for secrets in an S3 bucket. Choctaw Hog: Scans for secrets in a Git...
DefaultCreds-cheat-sheet
Default Credentials Cheat Sheet One place for all the default credentials to assist pentesters/blue Teamers during engagements, featuring default login/password details for various products sourced from multiple references. P.S : Most of the credentials were extracted from changeme,routersploit a...
ghost-checker
ghost-checker Test wether you're exposed to ghost CVE-2015-0235. All kudos go to Qualys Security Usage root@kitploit: /tmp/ghost-checker master$ make cc -o ghost ghost.c /tmp/ghost-checker master$ ./ghost not vulnerable /tmp/ghost-checker master$ make clean rm ghost Credits Qualys Security Team...
visual-forensic-steganography
Visual Forensic Steganography The VFS tool allows to perform visual attacks on different digital image formats. This feature is very useful for detecting the use of certain steganographic techniques, especially LSB Least Significant Bit, and for malware analysts analyzing pieces of stegomalware...
CVE-2023-29343
CVE-2023-29343 This is PoC for arbitrary file write bug in Sysmon version 14.14 After last patch Sysmon would check if Archive directory exists and if it exists it would check if archive directory is owned by NT AUTHORITY\SYSTEM and access is only granted to NT AUTHORITY\SYSTEM. If both condition...
Nosql-MongoDB-injection-username-password-enumeration
Nosql injection username and password enumeration script Using this script, we can enumerate Usernames and passwords of Nosqlmongodb injecion vulnerable web applications. Exploit Title: Nosql injection username/password enumeration. Author: Kalana Sankalpa Anon LK. Website:...