cryptomator

Supporting Cryptomator Cryptomator is provided free of charge as an open-source project despite the high development effort and is therefore dependent on donations. If you are also interested in further development, we offer you the opportunity to support us: One-time or recurring donation via...

Credential-Hunting

CredsHunter credshunter es un buscador de credenciales de solo lectura para post-explotación autorizada. Recorre un host una vez y expone los secretos que realmente puedes reutilizar —contraseñas, claves, hashes y archivos de credenciales— mientras ignora los tokens de cloud/SaaS que solo añaden...

sub.Monitor

sub.Monitor root@kitploit: Herramienta de monitoreo de subdominios rápida y fácil de usar para la gestión continua de la superficie de ataque. ¿Por qué? ¿Por qué optar por sub.Monitor? Este programa ofrece una configuración sencilla gracias a su uso de SQLite para almacenar todos los dominios...

getaltname

GSAN - Get Subject Alternative Names GSAN is a tool that can extract Subject Alternative Names SAN found in SSL Certificates directly from https servers which can provide you with DNS names subdomains or virtual servers. It doesn't rely on Certificate Transparency logs, it connects directly to th...

mtr

WHAT IS MTR? mtr combines the functionality of the 'traceroute' and 'ping' programs in a single network diagnostic tool. As mtr starts, it investigates the network connection between the host mtr runs on and a user-specified destination host. It sends probes to the destination with successively...

sentrysearch

SentrySearch Búsqueda semántica en material de video. Escribe lo que buscas y obtén un clip recortado. !IMPORTANT Fuente oficial: github.com/ssrajadh/sentrysearch es el único hogar oficial de SentrySearch. Otros sitios que vuelvan a publicar o reflejen este proyecto no están afiliados ni cuentan...

CVE-2024-56067

CVE-2024-56067 WP SuperBackup = 2.3.3 - Missing Authorization to Unauthenticated Back-Up File Download Description The Super Backup & Clone - Migrate for WordPress plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on a function in all versions up to, and...

CVE-2023-49052

CVE-2023-49052 - Microweber CMS v2.0.4 - Subida de Archivos Maliciosos Descripción En la versión 2.0.4 de Microweber CMS, cuando la opción de subida de archivos está activa en los formularios creados, es posible enviar archivos HTML maliciosos, incluso cuando se aplican ciertos tipos de...

forticrack_v8

Forticrack v8.0.0 Descifra y extrae imágenes de firmware de FortiOS 8.0.0. Este script extiende Forticrack de Bishop Fox para soportar imágenes de firmware 8.0.0. Además, el artículo de RandoriSec sobre el cifrado de firmware de FortiGate 7.4.7 fue muy útil para revertir el cifrado de FortiOS...

HashTag

Name: HashTag: Parse and Identify Password Hashes Version: 0.41 Date: 11/05/2013 Author: Smeege Contact: [email protected] Description: HashTag.py is a python script written to parse and identify password hashes. It has three main arguments which consist of identifying a single hash type -sh...

CVE-2022-31691

CVE-2022-31691 A write-up of my so far inconclusive look into CVE-2022-31691. Background I'm a frequent user of the Spring Tool Suite STS for Eclipse, and tend to rely on it to initialise new Spring Boot projects. This vulnerability see https://tanzu.vmware.com/security/cve-2022-31691 is an RCE...

CVE-2024-52806-PoC

POC for CVE-2024-52596 / CVE-2024-52806 - SimpleSAMLphp pre-auth XXE file read...

CVE-2026-49160-CVE-2026-47291-HTTP.sys

CVE-2026-49160 & CVE-2026-47291 HTTP.sys PoC HTTP.sys Denial of Service Vulnerability HTTP.sys Remote Code Execution Vulnerability Due to GitHub's file size restrictions, demonstration videos for this PoC CVE-2026-49160 are hosted as attachments in the Releases. CVE-2026-47291 Vulnerable code:...

github-endpoints

github-endpoints Encuentra endpoints en GitHub. Descripción Esta herramienta Go realiza búsquedas en GitHub y analiza los resultados para encontrar endpoints de un dominio determinado. Instalación root@kitploit: go install github.com/gwen001/github-endpoints@latest o root@kitploit: git clone...

ridrelay

RidRelay Quick and easy way to get domain usernames while on an internal network. Hit me up: @skorov8 How it works RidRelay combines the NTLM Relay attack, common lsarpc based queries and RID cycling to get a list of domain usernames. It takes these steps: 1. Spins up an SMB and HTTP servers and...

wpprobe

"Because why scan blind when WordPress exposes itself?" WPProbe A fast WordPress plugin and theme scanner that detects installed plugins via REST API enumeration and themes from HTML discovery, then maps them to known vulnerabilities. Over 5000 plugins detectable without brute-force, thousands mo...

dump1090

Dump1090 README Dump 1090 is a Mode S decoder specifically designed for RTLSDR devices. The main features are: Robust decoding of weak messages, with Dump1090 many users observed improved range compared to other popular decoders. Network support: TCP30003 stream MSG5..., Raw packets, HTTP. Embedd...

PowerShellProfiler

PowerShellProfiler This project code is from https://github.com/pan-unit42/publictools/tree/master/powershellprofiler Introductation PowerShellProfiler.py is a script for statically analyzing PowerShell scripts by de-obfuscating and normalizing the content which is then profiled for behavioral...

cobol-shield

cobol-shield Security auditing toolkit for COBOL legacy systems Part of VTR Research Methodology | DOI: 10.5281/zenodo.22063208 Status: Reproducible | License: MIT | Track: Critical Infrastructure What it does Detects compilation context divergences, invisible Unicode attacks, and unsafe COBOL...

Android-Projector-C2-Malware

Infraestructura C2 Preinstalada y Payload RAT en Proyectores Android Informe de Análisis Técnico — Investigación de Seguridad Dispositivos Afectados: Múltiples proyectores Android de marcas como Nonete p. ej., modelo HY260Pro probablemente también varios proyectores de Magcubic, Hotack, Huyukang ...