Subrake

Subrake 🦅 Un scanneur et outil DNS automatisé Transfert de zone, Prise de contrôle de zone DNS, Prise de contrôle de sous-domaine. Contexte 📈 Subrake, initialement lancé comme un projet personnel pour l'énumération de sous-domaines, est désormais un outil de scan DNS détaillé qui peut vous aider ...

wholeaked

Introduction root@kitploit: , ,' ', Utku Sen's |,-' wholeaked /c '\ ' |' -. "When you have eliminated the impossible, /-' \ whatever remains, however improbable, /'-'\ must be the truth" - Sherlock Holmes ' \ wholeaked is a file-sharing tool that allows you to find the responsible person in case...

CVE-2018-20555

CVE-2018-20555 Le plugin Wordpress appelé Social Network Tabs, créé par la société Design Chemical, divulgue deux fois le accesstoken, accesstokensecret, consumerkey et consumersecret Twitter de son utilisateur, ce qui conduit à une prise de contrôle de son compte Twitter. Ceci est causé par les...

haaukins

Haaukins Haaukins is a highly accessible and automated virtualization platform for security education, it has three main components Docker, Virtualbox and Golang, the communication and orchestration between the components managed using Go programming language. The main reason of having Go...

userland-exec

Exécution en espace utilisateur L'exécution en espace utilisateur remplace l'image du processus existant dans l'espace d'adressage courant par une nouvelle. Elle imite le comportement de l'appel système execve, mais les structures de processus décrivant l'image du processus restent inchangées. En...

plution

plution Prototype pollution scanner using headless chrome What this is Plution is a convenient way to scan at scale for pages that are vulnerable to client side prototype pollution via a URL payload. In the default configuration, it will use a hardcoded payload that can detect 11 of the cases...

CVE-2021-46366

CVE-2021-46366 : Attaque par force brute de mots de passe via CSRF + Redirection Ouverte dans Magnolia CMS Un problème dans la page de connexion de Magnolia CMS v6.2.3 et versions antérieures permet aux attaquants d'exploiter à la fois une vulnérabilité de Redirection Ouverte et une Cross-Site...

CVE-2019-14234

Exploitation de la vulnérabilité d'injection SQL dans JSONField/HStoreField de Django CVE-2019-14234 Django a publié une mise à jour de sécurité le 1er août 2019, corrigeant une vulnérabilité d'injection SQL dans les deux champs de modèle JSONField et HStoreField. Lien de référence :...

assetfinder

assetfinder Find domains and subdomains potentially related to a given domain. Install If you have Go installed and configured i.e. with $GOPATH/bin in your $PATH: root@kitploit: go get -u github.com/tomnomnom/assetfinder Otherwise download a release for your platform. To make it easier to execut...

CVE-2018-16987

CVE-2018-16987 Il s'agit d'une vulnérabilité de stockage en clair d'informations sensibles et d'exposition d'informations sensibles que j'ai découverte dans Squash TM lors d'un test d'intrusion. SquashTM Squash TM est une interface web utilisée pour gérer les cas de test. Lien vers le projet...

thc-hydra

H Y D R A root@kitploit: c 2001-2023 by van Hauser / THC https://github.com/vanhauser-thc/thc-hydra Many modules were written by David dot Maciejak @ gmail dot com BFG code by Jan Dlabal Licensed under AGPLv3 see LICENSE file Please do not use in military or secret service organizations, or for...

Plate: Media embed provider metadata can bypass URL sanitization and execute iframe JavaScript

Summary The media embed renderer trusts serialized provider or sourceUrl metadata and skips the URL protocol validation that normally blocks unsafe media embed URLs. A crafted Plate document can set a known video provider while keeping url as a javascript: iframe source. When a victim opens that...

GHSA-QJ6X-XX2H-8HVV Plate: Media embed provider metadata can bypass URL sanitization and execute iframe JavaScript

Summary The media embed renderer trusts serialized provider or sourceUrl metadata and skips the URL protocol validation that normally blocks unsafe media embed URLs. A crafted Plate document can set a known video provider while keeping url as a javascript: iframe source. When a victim opens that...

GHSA-M9MQ-7M7Q-XC6P browse-mcp has an arbitrary file write via unconfined download and state paths

Impact browserdownload wrote a fetched file to joinsavedir, filename with no validation of savedir, and browsersavestate / browserloadstate honored an explicit path unchanged. The MCP caller controls these arguments a malicious MCP client, or an autonomous agent steered by indirect prompt injecti...

browse-mcp has an arbitrary file write via unconfined download and state paths

Impact browserdownload wrote a fetched file to joinsavedir, filename with no validation of savedir, and browsersavestate / browserloadstate honored an explicit path unchanged. The MCP caller controls these arguments a malicious MCP client, or an autonomous agent steered by indirect prompt injecti...

EUVD-2026-65581

browse-mcp is a Playwright-based headless-browser MCP server for MCP-capable agents. Prior to 0.8.2, browserdownload writes a fetched response body to joinsavedir, filename without validating the caller-controlled savedir, while browsersavestate and browserloadstate honor a caller-controlled path...

CVE-2026-55557 browse-mcp: Arbitrary file write via unconfined download and state paths

browse-mcp is a Playwright-based headless-browser MCP server for MCP-capable agents. Prior to 0.8.2, browserdownload writes a fetched response body to joinsavedir, filename without validating the caller-controlled savedir, while browsersavestate and browserloadstate honor a caller-controlled path...

CVE-2026-55557

browse-mcp is a Playwright-based headless-browser MCP server for MCP-capable agents. Prior to 0.8.2 , the browser_download function writes a fetched response body to join(save_dir, filename) without validating the caller-controlled save_dir, and browser_save_state / browser_load_state honor a cal...

CVE-2026-55557 browse-mcp: Arbitrary file write via unconfined download and state paths

browse-mcp is a Playwright-based headless-browser MCP server for MCP-capable agents. Prior to 0.8.2, browserdownload writes a fetched response body to joinsavedir, filename without validating the caller-controlled savedir, while browsersavestate and browserloadstate honor a caller-controlled path...

VX-API

géré par vx-underground | suivez-nous sur Twitter | téléchargez des échantillons de malwares sur la page VXUG/samples VX-API Version: 2.01.015 Développeur : smellyvx Le VX-API est une collection de fonctionnalités malveillantes conçues pour faciliter le développement de malwares. Il est recommand...