words-scraper

Words Scraper Web scraper baseado em Selenium para gerar lista de senhas. Instalação root@kitploit: Download Firefox webdriver from https://github.com/mozilla/geckodriver/releases $ tar xzf geckodriver-vVERSION-HERE.tar.gz $ sudo mv geckodriver /usr/local/bin Make sure it is in your PATH $...

CVE-2023-31705

CVE-2023-31705 descrição Uma vulnerabilidade de Cross-site scripting XSS Refletido no Sourcecodester Task Reminder System 1.0 permite que um usuário autenticado injete javascript malicioso no parâmetro page. Tipo de Vulnerabilidade Cross Site Scripting XSS Fornecedor do Produto Sourcecodster Base...

Searpy

🥀 Searpy 🔧 Batch-Suchwerkzeug, verwendbar für Sammlung und Quellenverfolgung Unterstützt py2 und py3 1. Installation root@kitploit: git clone https://github.com/j3ers3/Searpy pip install -r requirements.txt 配置API及账号 ./config.py python Searpy -h 2. Hilfe root@kitploit: Searpy Engine Tookit...

Moderate: Red Hat Security Advisory: attr security update

An update for attr is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...

Moderate: Red Hat Security Advisory: pam security update

An update for pam is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the C...

ffuf

ffuf - Fuzz Faster U Fool A fast web fuzzer written in Go. Installation Example usage Content discovery Vhost discovery Parameter fuzzing POST data fuzzing Using external mutator Configuration files Help Interactive mode Installation Download a prebuilt binary from releases page, unpack and run! ...

multitor

multitor Create multiple TOR instances with load-balancing. Description • Introduction • How To Use • Parameters • Requirements • Docker • Other • License • Wiki Description It provides one single endpoint for clients. Supports HAProxy , socks protocol and http-proxy servers: polipo , privoxy and...

multitor

multitor Créez plusieurs instances TOR avec équilibrage de charge. Description • Introduction • Utilisation • Paramètres • Prérequis • Docker • Autres • Licence • Wiki Description Fournit un point d'accès unique pour les clients. Prend en charge HAProxy , le protocole socks et les serveurs...

keimpx

Introduction keimpx is an open source tool, released under the Apache License 2.0. It can be used to quickly check for valid credentials across a network over SMB. Credentials can be: Combination of user / plain-text password. Combination of user / NTLM hash. Combination of user / NTLM logon...

Exploit for Improper Isolation or Compartmentalization in Mozilla Firefox

CVE-2026-4692 — content processes can declare themselves in RD...

navgix

navgix navgix is a multi-threaded golang tool that will check for nginx alias traversal vulnerabilities Techniques Currently, navgix supports 2 techniques for finding vulnerable directories or location aliases. Those being the following: Heuristics navgix will make an initial GET request to the...

audit_couchdb

Audit CouchDB: The simple, clear, CouchDB security assessment Audit CouchDB is a simple tool with a powerful message. Given an Apache CouchDB URL, it will tell you everything you ever wanted to know about its security. Objective Audit CouchDB will perform the following actions: 1. Learn every...

Moderate: Red Hat Security Advisory: assertj-core security update

An update for assertj-core is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability...

CVE-2024-29269

CVE-2024-29269 जो TLR-2005KSH राउटर पर बिना प्रमाणीकरण के OS कमांड निष्पादन की अनुमति देता है। यह एक्सप्लॉइट प्रभावित राउटर पर मनमाने कमांड निष्पादित करने के लिए इस भेद्यता का लाभ उठाता है। Dork ZoomEye :- title:"Login to TLR-2005KSH" स्रोत:...

CVE-2024-2876

CVE-2024-2876 Descrição da Vulnerabilidade: O plugin Email Subscribers by Icegram Express – Email Marketing, Newsletters, Automation for WordPress & WooCommerce para WordPress é vulnerável a SQL Injection através da função ‘run’ da classe ‘IGESSubscribersQuery’ em todas as versões até e incluindo...

behave

Behave! A Still in Development monitoring browser extension for pages acting as bad boys. NB : This is the code repository of the project, if you're looking for the packed extensions: Firefox: https://addons.mozilla.org/en-US/firefox/addon/behave/ Chrome:...

CVE-2023-2822-demo

CVE-2023-2822-demo Aplicação Flask simples para implementar uma aplicação web intencionalmente vulnerável para demonstrar a CVE-2023-2822. Baseado no artigo em https://medium.com/@cyberninja717/reflected-cross-site-scripting-vulnerability-in-ellucian-ethos-identity-cas-logout-page-685bb1675dfb...

CVE-2022-0847

Análise da escalada de privilégios no kernel Linux CVE-2022-0847 Dirty Pipe toc Este artigo foi publicado originalmente na conta pública de segurança da Huawei; esta é a versão do blog mais completa. Link da publicação original: https://mp.weixin.qq.com/s/6VhWBOzJ7uu80nzFxe5jpg Introdução à...

heartbleed

Bug Heartbleed Description du scénario Le bug Heartbleed est un exemple d'attaque cybernétique qui exploite une vulnérabilité dans la bibliothèque OpenSSL. En résumé, une étape de validation manquante dans la bibliothèque OpenSSL pourrait permettre à un pirate d'accéder à des informations sensibl...

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP7 kernel was updated to fix various security issues: The following security issues were fixed: CVE-2025-68741: scsi: qla2xxx: Fix improper freeing of purex item bsc1255703. CVE-2025-68818: scsi: Revert "scsi: qla2xxx: Perform lockless command completion in abort pat...