2762 matches found
CVE-2026-27771
CVE-2026-27771 捐赠 帮助维护此项目 如果您觉得此项目有用,请考虑通过 PayPal 或 ABA Mobile 支持其持续维护。 ❤️ ១០% នៃការបរិច្ចាគរបស់អ្នក នឹងត្រូវបានបរិច្ចាគជូនមន្ទីរពេទ្យគន្ធបុប្ផា។ ❤️ 每笔捐赠的百分之十将捐献给金边坤塔宝花儿童医院。 | 选择支付方式 使用 ABA Mobile 扫描 · 点击放大 ---|--- ⚡ 简单用法 请仅在安全且经过授权的环境中使用此项目,例如: 本地虚拟机 Docker 容器 隔离的实验室环境 经授权的渗透测试环境 示例用法:...
CVE-2026-44613
CVE-2026-44613 捐赠 通过 PayPal 或扫描下方二维码来支持本项目的维护。 ⚡ 简单用法 请仅在安全且获得授权的环境中使用本项目,例如: 本地虚拟机 Docker 容器 隔离的实验环境 经授权的渗透测试环境 示例环境搭建: root@kitploit: git clone cd Project use python follow below Create a virtual environment python -m venv venv Activate the virtual environment macOS / Linux source...
Penetration-Test
渗透测试 针对 IP(Ubuntu 虚拟机)的完整渗透测试报告。攻击链:目录枚举 → 备份文件发现 → 密码破解 → CMS 文件上传 → 反弹 Shell → 内核权限提升(Dirty Pipe,CVE-2022-0847)。 仓库结构 /report – 最终渗透测试报告(PDF) /exploits – 自定义 payload 与漏洞利用源代码 /enumeration – 字典、哈希值与枚举输出 /logs – Metasploit 控制台日志、nmap 扫描结果(如有) 使用的工具 Nmap、Gobuster、John the...
awesome-ios-security
Awesome iOS 安全 一份精选的 iOS 应用程序安全资源列表。 收录了关于 iOS 应用程序安全与渗透测试的优秀工具、书籍、课程、博客文章以及其他精彩内容。 目录 工具 逆向工程工具 静态分析工具 动态分析工具 插件 逆向工程插件 越狱检测绕过插件 SSL 证书固定绕过插件 Frida 脚本...
SecureForce
SecureForce - 침투 테스트 프레임워크 승인된 보안 테스트 및 경쟁 분석을 위해 구축된 단순하지만 강력한 침투 테스트 프레임워크입니다. SecureForce는 익스플로잇 관리, 페이로드 생성 및 통제된 공격 실행을 위한 직관적인 인터페이스를 제공합니다. 기능 익스플로잇 라이브러리 : 다양한 취약점에 대한 체계적인 익스플로잇 모듈 페이로드 생성 : 다중 형식 페이로드 생성 셸코드, 리버스 셸 등 대화형 콘솔 : 공격 오케스트레이션을 위한 명령 기반 인터페이스 모듈형 아키텍처 : 사용자 정의 익스플로잇 및 페이로드로 쉽게...
Parrot-Security-Penetration-Testing-Lab
🔴 Parrot Security Penetration Testing Lab Overview This p...
Empire v7.0.2
Empire Empire is a post-exploitation and adversary emulation framework that is used to aid Red Teams and Penetration Testers. The Empire server is written in Python 3 and is modular to allow operator flexibility. Empire comes built-in with a client that can be used remotely to access the server...
xalgorix v4.6.72
Xalgorix — Open-source AI pentester that proves vulnerabilities Most scanners detect. Xalgorix proves. An autonomous LLM agent works a full pentest methodology, then an independent verifier re-exploits every finding before it's reported — so you get proof, not a pile of maybes to triage...
pentest-metasploitable2-lab
Análise de Exploração e Resposta a Incidente — Laboratório Met...
CICD-Goat-Vapt-Writeup — Updated!
CICD-Goat VAPT Writeup A full vulnerability assessment & penetration test against OWASP CICD-Goat — a deliberately vulnerable CI/CD environment Jenkins, Gitea, GitLab, CTFd — mapped end-to-end against the OWASP Top 10 CI/CD Security Risks. 🧭 How This Fits With My Other Repos Repository| What's in...
violin v3.2.1
Violin ☤ — Supervised Agentic Hermes Pentest Profile 35 playbooks · 19 references · 14 templates · required execution guard · Hermes-native Violin is a Hermes-native agentic pentest profile for supervised, authorised penetration tests — from reconnaissance through safe exploit validation to...
Hacking-Tools — Updated!
Hacking Tools A curated list of penetration testing and ethical hacking tools, organized by category. This collection includes Kali Linux tools and other notable utilities. Supporters .png?raw=true .png?raw=true Table of Contents 🔍 Information Gathering 🔎 Vulnerability Analysis 💥 Exploitation Too...
vamp-forticheck
vamp-forticheck VampSecure Labs — Security Research Division Scanner di vulnerabilità critiche nei dispositivi FortiOS/FortiGate. Descrizione Strumento di audit di sicurezza per valutare l'esposizione dei dispositivi Fortinet rispetto a quattro vulnerabilità critiche pubblicamente documentate...
xss-tools
xss-tools Authorized penetration testing / security researc...
CVE-2026-77767
Reconmap's API applies a fallback authorization policy in apps/api/app/Program.cs that requires an authenticated user holding the administrator role, so controllers without their own attribute reject anonymous callers. The report preview action in apps/api/app/Controllers/ReportsController.cs...
CVE-2026-21584
This High severity Improper Authorization vulnerability was introduced in versions 10.0.0, 10.1.0, 10.2.0, 11.0.0, 12.0.0, and 12.1.0 of Bamboo Data Center. This Improper Authorization vulnerability, with a CVSS Score of 7.6, allows an authenticated attacker to gain unintended access and can lead...
internal-privesc-poc
Internal Privilege Escalation POC Library This library provid...
MAL-2026-13666 Malicious code in cubesat-upstream-driver (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f5f2cf32e29ec0daedda5112ca2c560e69b4c4cd77850d6dc52d7a448e343a2 The package is advertised as an 'Upstream driver interface for cubesat orbital command bus' but ships no driver, protocol, or telemetry code. Its sol...