1332 matches found
nikto
nikto Nikto web server scanner - https://cirt.net/Nikto2 Full documentation - https://github.com/sullo/nikto/wiki Run normally: root@kitploit: git clone https://github.com/sullo/nikto Main script is in program/ cd nikto/program Run using the shebang interpreter ./nikto.pl -h http://www.example.co...
m4ngl3m3
m4ngl3m3! Quick Installation: root@kitploit: $ git clone https://github.com/localh0t/m4ngl3m3 $ cd m4ngl3m3 $ ./main.py Basic Help: root@kitploit: usage: main.py -h -fy FROMYEAR -ty TOYEAR -sy -nf NUMBERSFILE -sf SYMBOLSFILE -cf CUSTOMFILE -sbs -sap -mm MUTATIONMETHODS MUTATIONMODE STRINGSFILE...
wsvuls
WSVuls Escáner de vulnerabilidades de sitios web que detecta problemas versión de servidor desactualizada y cabeceras HTTP inseguras...
wsvuls
WSVuls Website vulnerability scanner detect issues outdated server software and insecure HTTP headers...
Chuanhu Chat - Directory Traversal
The gaizhenbiao/chuanhuchatgpt application is vulnerable to a path traversal attack due to its use of an outdated gradio component. The application is designed to restrict user access to resources within the webassets folder. However, the outdated version of gradio it employs is susceptible to pa...
Presentations
Presentations Non uptodate list of presentations we gave at public events...
CVE-2023-22527
CVE-2023-22527 CVE-2023-22527 - RCE Remote Code Execution Vulnerability in Out-of-Date Versions of Confluence Data Center and Server Advisory Release Date Tue, Jan 16 2024 01:00 EST Products: Confluence Data Center Confluence Server Affected Versions: 8.0.x 8.1.x 8.2.x 8.3.x 8.4.x 8.5.0-8.5.3...
pyfiscan
pyfiscan Acerca de Pyfiscan es un escáner gratuito de vulnerabilidades y versiones de aplicaciones web que se puede utilizar para localizar versiones obsoletas de aplicaciones web comunes en servidores Linux. Un caso de uso típico es que los proveedores de alojamiento supervisen las instalaciones...
qark
Quick Android Review Kit This tool is designed to look for several security related Android application vulnerabilities, either in source code or packaged APKs. The tool is also capable of creating "Proof-of-Concept" deployable APKs and/or ADB commands, capable of exploiting many of the...
CVE-2024-41651
Blind SSRF to RCE Exploit - PrestaShop 8.1.7 This document outlines a Blind SSRF to RCE exploit on a fresh PrestaShop 8.1.7 docker installation. Prerequisites Ensure you have at least an outdated module installed, for example: psfacetedsearch Download the original package: Download psfacetedsearc...
vulnerability-assessment
openssh-vulnerability-assessment Professional cybersecurity assessment demonstrating vulnerability identification, CVSS severity scoring, MITRE ATT&CK framework application, and detailed remediation planning for OpenSSH 6.6.1p1 critical vulnerabilities CVE-2016-0777, CVE-2015-5600 🛡️ OpenSSH...
kirjuri
Kirjuri has been deprecated. I have started a new project that covers most of the use cases that Kirjuri handles and a lot more. Check out the DFIRe case management application for all your case and evidence management needs. SECURITY UPDATE 7.5.2021 As this project has been inactive for years, i...
lscript
El script lazy no se ha actualizado por un tiempo debido a que he estado muy ocupado con mi vida. Intentaré subir una actualización cuando encuentre tiempo Bienvenido al script LAZY v2.1.4 Un video hecho por Hackersploit : https://www.youtube.com/watch?v=oBpo5sElrMY Un video hecho por sstec:...
Vulnerability-Management
Vulnerability Management Report Prepared for: CyberTech Solutions Prepared by: Victoria Simon Date: April 10, 2024 1. Executive Summary This report details the findings from a comprehensive vulnerability assessment conducted on CyberTech Solutions' Linux infrastructure and web applications using...
crapsecrets
最初从 badsecrets 0.7.0 分叉而来 偶尔同步，直到 2025 年 3 月！ 已过时，部分模块和测试用例未更新！ 适用于 ASP.NET 受损 Machine Key 测试！ 这是 CrapBadSecrets mkdir -p /ctools/ cd /ctools/ git clone https://github.com/irsdl/crapsecrets/ cd /ctools/crapsecrets pip3 install -r requirements.txt export PYTHONPATH=$pwd:$PYTHONPATH python3...
Audit-BlackBox-Web-to-Root
Pentest Lab: Web and System Exploitation Chain Drupal to Root Disclaimer This project was carried out in a controlled and isolated laboratory environment for educational and academic purposes. No real infrastructure was targeted. The goal is to learn how to secure systems by understanding attack...
CVE-2026-85640
Zohocorp ManageEngine Endpoint Central versions below 11.5.2600.15 are vulnerable to Privilege Escalation Due to Outdated Component...
CVE-2026-85640
Zohocorp ManageEngine Endpoint Central versions below 11.5.2600.15 are affected by a Privilege Escalation Due to Outdated Component vulnerability. The CVSS 3.1 score is 6.3 (MEDIUM) with a local attack vector, low complexity, and low privileges required, resulting in low impact on confidentiality...
