CVE-2020-1206

في ثغرة SMBGhost CVE-2020-0796 تحدثت عن تقنية write-what-where primitive من خلال استخدام خطأ تجاوز عدد صحيح integer overflow لتغيير المؤشر Alloc.Userbuffer ليشير إلى عنوان نريده وكتابة بيانات عشوائية فيه. على غرار SMB Ghost، توجد هذه الثغرة أيضًا في دالة Srv2DecompressData في srv2.sys. دعنا نراجع...

frida

Frida Dynamic instrumentation toolkit for developers, reverse-engineers, and security researchers. Learn more at frida.re. Two ways to install 1. Install from prebuilt binaries This is the recommended way to get started. All you need to do is: root@kitploit: pip install frida-tools CLI tools pip...

[SECURITY] [DLA 4755-1] libvncserver security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-4755-1 [email protected] https://www.debian.org/lts/security/ Abhijith PA August 25, 2026 https://wiki.debian.org/LTS -...

words-scraper

Words Scraper Selenium based web scraper to generate passwords list. Installation root@kitploit: Download Firefox webdriver from https://github.com/mozilla/geckodriver/releases $ tar xzf geckodriver-vVERSION-HERE.tar.gz $ sudo mv geckodriver /usr/local/bin Make sure it is in your PATH $ geckodriv...

words-scraper

शब्द स्क्रैपर पासवर्ड सूची उत्पन्न करने के लिए सेलेनियम-आधारित वेब स्क्रैपर। स्थापना root@kitploit: Download Firefox webdriver from https://github.com/mozilla/geckodriver/releases $ tar xzf geckodriver-vVERSION-HERE.tar.gz $ sudo mv geckodriver /usr/local/bin Make sure it is in your PATH $...

CVE-2023-31705

CVE-2023-31705 विवरण सोर्सकोडस्टर टास्क रिमाइंडर सिस्टम 1.0 में एक परावर्तित क्रॉस-साइट स्क्रिप्टिंग XSS भेद्यता एक प्रमाणित उपयोगकर्ता को पेज पैरामीटर में दुर्भावनापूर्ण जावास्क्रिप्ट इंजेक्ट करने की अनुमति देती है। भेद्यता प्रकार क्रॉस साइट स्क्रिप्टिंग XSS उत्पाद का विक्रेता Sourcecodster...

Searpy

🥀 Searpy 🔧 बैच खोज उपकरण, संग्रह और ट्रेसेबिलिटी के लिए उपयोगी py2 और py3 का समर्थन करता है 1. स्थापित करें root@kitploit: git clone https://github.com/j3ers3/Searpy pip install -r requirements.txt 配置API及账号 ./config.py python Searpy -h 2. सहायता root@kitploit: Searpy Engine Tookit optional...

CVE-2024-31964

CVE-2024-31964 CVE-2024-31964 PoC: Mitel 6900w 시리즈 SIP 전화기 - 임시 인증 우회 취약점 세부 정보 요약 여러 Mitel 제품의 HTTP 관리 웹사이트 패널에서 임시 인증 우회 취약점으로 구성됩니다. 영향 공격자가 장치 구성을 수정하고, 영향을 받는 장치에 대해 서비스 거부 공격을 수행할 수 있게 합니다. 요구 사항 사용자가 몇 분 전에, 그리고 공격자와 동일한 소스 IP에서 성공적으로 로그인했어야 합니다. 제안된 CVSS 제안된 CVSS: CVSS v4.0 점수: 7.2 CVSS...

Moderate: Red Hat Security Advisory: attr security update

An update for attr is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...

Moderate: Red Hat Security Advisory: pam security update

An update for pam is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the C...

CVE-2018-10933

CVE-2018-10933 pour tester ce code : téléchargez la version vulnérable de libssh depuis la page d'accueil : https://www.libssh.org/files/0.7/libssh-0.7.4.tar.xz décompressez et compilez, puis allez dans le répertoire example, il y a un serveur sshd simple utilisant libssh nommé : samplesshd-cb...

ffuf

ffuf - Fuzz Faster U Fool A fast web fuzzer written in Go. Installation Example usage Content discovery Vhost discovery Parameter fuzzing POST data fuzzing Using external mutator Configuration files Help Interactive mode Installation Download a prebuilt binary from releases page, unpack and run! ...

multitor

multitor Create multiple TOR instances with load-balancing. Description • Introduction • How To Use • Parameters • Requirements • Docker • Other • License • Wiki Description It provides one single endpoint for clients. Supports HAProxy , socks protocol and http-proxy servers: polipo , privoxy and...

multitor

multitor Créez plusieurs instances TOR avec équilibrage de charge. Description • Introduction • Utilisation • Paramètres • Prérequis • Docker • Autres • Licence • Wiki Description Fournit un point d'accès unique pour les clients. Prend en charge HAProxy , le protocole socks et les serveurs...

keimpx

Introduction keimpx is an open source tool, released under the Apache License 2.0. It can be used to quickly check for valid credentials across a network over SMB. Credentials can be: Combination of user / plain-text password. Combination of user / NTLM hash. Combination of user / NTLM logon...

Exploit for Improper Isolation or Compartmentalization in Mozilla Firefox

CVE-2026-4692 — content processes can declare themselves in RD...

navgix

navgix navgix is a multi-threaded golang tool that will check for nginx alias traversal vulnerabilities Techniques Currently, navgix supports 2 techniques for finding vulnerable directories or location aliases. Those being the following: Heuristics navgix will make an initial GET request to the...

audit_couchdb

Audit CouchDB: The simple, clear, CouchDB security assessment Audit CouchDB is a simple tool with a powerful message. Given an Apache CouchDB URL, it will tell you everything you ever wanted to know about its security. Objective Audit CouchDB will perform the following actions: 1. Learn every...

Moderate: Red Hat Security Advisory: assertj-core security update

An update for assertj-core is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability...

Aurora-Incident-Response

Aurora Incident Response Documentation de réponse aux incidents simplifiée. Développé par des intervenants en incidents pour des intervenants en incidents. Aurora amène le « Spreadsheet of Doom » utilisé dans la classe SANS FOR508 au niveau supérieur. Ayant dirigé de nombreux cas et enseigné à ta...