amavis

Installation Use your system's amavis package if possible. Prerequisites Software dependencies are tracked via Dist::Zilla. Some of them involve non-perl development libraries and GCC as a build dependency if obtained from CPAN: libdb libidn2 libssl libzmq3 On Debian 13 for example, one can insta...

CVE-2026-92361 ag-ui-protocol ag-ui SSE Client client.go resource consumption

A security vulnerability has been detected in ag-ui-protocol ag-ui 1.0. This affects an unknown function of the file sdks/community/go/pkg/client/sse/client.go of the component SSE Client. Such manipulation leads to resource consumption. The attack can be executed remotely. The pull request to fi...

CVE-2026-92361

A remote resource consumption vulnerability affects the SSE Client component of ag-ui-protocol ag-ui 1.0 , specifically in the file sdks/community/go/pkg/client/sse/client.go. An attacker with low privileges can trigger excessive resource consumption over the network without user interaction, res...

EUVD-2026-80725

A security vulnerability has been detected in ag-ui-protocol ag-ui 1.0. This affects an unknown function of the file sdks/community/go/pkg/client/sse/client.go of the component SSE Client. Such manipulation leads to resource consumption. The attack can be executed remotely. The pull request to fi...

SharpHound

SharpHound Obtener SharpHound La última compilación de SharpHound siempre se encontrará aquí. Para determinar la versión de SharpHound compatible con una instancia de BloodHound CE desplegada, inicia sesión en la interfaz web de BloodHound CE y haz clic en ⚙️ Configuración → Descargar colectores...

CVE-2017-0199

Exploit toolkit CVE-2017-0199 - v4.0 Exploit toolkit CVE-2017-0199 - v4.0 is a handy python script which provides pentesters and security researchers a quick and effective way to test Microsoft Office RCE. It could generate a malicious RTF/PPSX file and deliver metasploit / meterpreter / other...

cryptohackapp

cryptohackapp Primeros pasos Para que te sea más fácil comenzar con GitLab, aquí tienes una lista de pasos siguientes recomendados. ¿Ya eres un profesional? Solo edita este README.md y hazlo tuyo. ¿Quieres hacerlo fácil? Usa la plantilla al final! Añade tus archivos Crea o sube archivos Añade...

WebKit-CVE-2016-4622

Análisis de WebKit CVE-2016-4622: Inmersión Profunda en la Vulnerabilidad del Slice ValueOf Fastpath Análisis completo y explotación de la vulnerabilidad del núcleo JavaScript de WebKit que permite la divulgación de memoria mediante la manipulación de Array.slice Tabla de Contenidos Resumen...

CosmicRakp

CosmicRakp Tabla de contenidos Introducción CVE-2013-4786 Instalación Uso Créditos Licencia Introducción CosmicRakp es una herramienta poderosa escrita en Go que permite a equipos de red team y pentesters volcar hashes de IPMI. Este proyecto busca ser eficiente, rápido y fácil de usar...

Sinister

Sinister root@kitploit: This small python script can do really awesome work. Sinister is Keylogger Generator for Windows/Linux, which sends key-logs & screenshot via email with other juicy target info written in Python 3. Disclaimer :computer: This project was created only for good purposes and...

CVE-1999-0524-POC

ICMP Timestamp Scanner — CVE-1999-0524 root@kitploit: ╔══════════════════════════════════════════════════════════════════╗ ║ ██╗ ██████╗███╗ ███╗██████╗ ████████╗███████╗ ║ ║ ██║██╔════╝████╗ ████║██╔══██╗ ██╔══╝██╔════╝ ║ ║ ██║██║ ██╔████╔██║██████╔╝ ██║ ███████╗ ║ ║ ██║██║ ██║╚██╔╝██║██╔═══╝ ██...

alterx

AlterX Características • Instalación • Uso • Ejecutando AlterX • Únete a Discord root@kitploit: Generador de listas de palabras de subdominios rápido y personalizable usando DSL. Características Rápido y personalizable Enriquecimiento automático de palabras Variables predefinidas Patrones...

alterx

AlterX Features • Installation • Usage • Running AlterX • Join Discord root@kitploit: Fast and customizable subdomain wordlist generator using DSL. Features Fast and Customizable Automatic word enrichment Pre-defined variables Configurable Patterns Pattern Mining - Automatically discover subdomai...

mtr

WHAT IS MTR? mtr combines the functionality of the 'traceroute' and 'ping' programs in a single network diagnostic tool. As mtr starts, it investigates the network connection between the host mtr runs on and a user-specified destination host. It sends probes to the destination with successively...

intel-me-research

Ingeniería inversa del firmware de Intel ME — Análisis en vivo de CSME 16.x "Tu ordenador tiene un segundo ordenador secreto en su interior. Lo encontramos, lo mapeamos y documentamos lo que se esconde ahí dentro." 🔥 PRUÉBALO TÚ MISMO — HECI SPY 🔥 Un script de Python. Cero dependencias. Habla...

CTF_CVE_DSP_1

🚩 Vuln Gallery CTF Welcome to Vuln Gallery , an intermediate-level Linux-based CTF Capture The Flag. This challenge will guide you from the initial exploitation of a modern web application to privilege escalation on a misconfigured Linux system. Your mission is to exploit the vulnerabilities, mov...

ksubdomain

KSubdomain: Ultra-Fast Stateless Subdomain Enumeration Tool 中文文档 | English KSubdomain is a stateless subdomain enumeration tool delivering unprecedented scanning speed with extremely low memory consumption. By directly operating network adapters via raw sockets — bypassing the OS kernel stack —...

DonPAPI

DonPAPI DonPAPI automatiza el volcado de secretos de forma remota en múltiples equipos Windows, teniendo en cuenta la evasión de defensas. Credenciales recopiladas: Credenciales, Cookies y Token de Actualización de Chrome del navegador Chromium Certificados de Windows Administrador de credenciale...

CVE-2026-34160

CVE-2026-34160 — Unauthenticated SSRF in Chamilo LMS via PENS plugin pens.php Severity : High CVSS 8.6 CWE : CWE-918 Server-Side Request Forgery Affected : chamilo/chamilo-lms 2.0-RC.2 Fixed in : 2.0-RC.3 Advisory : GHSA-g2xj-4cch-j276 NVD : https://nvd.nist.gov/vuln/detail/CVE-2026-34160 Credit ...

chiasmodon

Chiasmodon Chiasmodon is an OSINT tool that allows users to gather information from various sources and conduct targeted searches based on domains, Google Play applications, email addresses, IP addresses, organizations, URLs, and more. It provides comprehensive scanning capabilities, customizable...