928527 matches found
sandfly-entropyscan
What is sandfly-entropyscan? sandfly-entropyscan is a utility to quickly scan files or running processes and report on their entropy measure of randomness and if they are a Linux/Unix ELF type executable. Some malware for Linux is packed or encrypted and shows very high entropy. This tool can...
sandfly-entropyscan
¿Qué es sandfly-entropyscan? sandfly-entropyscan es una utilidad para escanear rápidamente archivos o procesos en ejecución e informar sobre su entropía medida de aleatoriedad y si son un ejecutable de tipo ELF de Linux/Unix. Algunos malware para Linux están empaquetados o cifrados y muestran una...
KITT
KITT 2.0 Framework de Pruebas de Penetración El Framework de Pruebas de Penetración KITT fue desarrollado como una solución de código abierto para que pentesters y programadores por igual compilen las herramientas que utilizan con lo que saben en un proyecto de código abierto. Con KITT, los...
Noriben
Noriben Sandbox de Análisis de Malware root@kitploit: Información de contacto: @bbaskin en Twitter brian at thebaskins dot com Noriben es un script basado en Python que funciona en conjunto con Procmon de Sysinternals para recolectar, analizar y reportar automáticamente indicadores de ejecución d...
CVE-2024-24919
EN Is a Proof of Concept PoC script to check for vulnerability CVE-2024-24919. The script is designed to send HTTP POST requests to specified URLs and analyze the responses for possible security issues, like unauthorized access or sensitive data leaks. The script provides a simple yet powerful wa...
logira
logira Auditoría en tiempo de ejecución a nivel de SO para automatización impredecible. logira es una CLI de Linux de solo observación que registra eventos de exec, file y net en tiempo de ejecución mediante eBPF. Te ayuda a ver lo que realmente sucedió durante las ejecuciones de agentes de IA y...
CVE-2019-2618-
CVE-2019-2618 Vulnerability Detection Tool Enter the server URL, username, and password sequentially as prompted. For example: python3 CVE-2019-2618test.py http://127.0.0.1 root root123 The code will return the response body content. You can use the URL provided in the body to check whether the...
PenScope
root@kitploit: ██████╗ ███████╗███╗ ██╗███████╗ ██████╗ ██████╗ ██████╗ ███████╗ ██╔══██╗██╔════╝████╗ ██║██╔════╝██╔════╝██╔═══██╗██╔══██╗██╔════╝ ██████╔╝█████╗ ██╔██╗ ██║███████╗██║ ██║ ██║██████╔╝█████╗ ██╔═══╝ ██╔══╝ ██║╚██╗██║╚════██║██║ ██║ ██║██╔═══╝ ██╔══╝ ██║ ███████╗██║...
RDWAtool
Una herramienta todo-en-uno en Python para extraer información, realizar spraying y fuerza bruta de contraseñas en una aplicación Microsoft Remote Desktop Web Access RDWA. Esta herramienta Python permite extraer diversa información de una aplicación Microsoft Remote Desktop Web Access RDWA, como ...
CVE-2023-46604-ActiveMQ-RCE-pseudoshell
CVE-2023-46604 RCE Pseudoshell This script leverages CVE-2023046604 Apache ActiveMQ to generate a pseudo shell. The vulnerability allows for remote code execution due to unsafe deserialization within the OpenWire protocol. Description CVE-2023-46604 is a deserialization vulnerability that exists ...
RE11S_1.11-formAccept-CommandInjection
RE11S1.11-formAccept-CommandInjection During my internship at Qi An Xin Tiangong Lab, I discovered a command injection vulnerability in the RE11S1.11 router. By analyzing the webs file in the bin directory, I found that the function formAccept contains a command injection vulnerability. The...
CVE-2022-40684
CVE-2022-40684 by 1vere$k For now it's a POC copy for CVE-2022-40684 affecting Fortinet FortiOS, FortiProxy, and FortiSwitchManager appliances. Coppied from https://github.com/horizon3ai/CVE-2022-40684 Analysis The exploit uses the simple payload: root@kitploit: PUT /api/v2/cmdb/system/admin/admi...
OnionBrowser
Onion Browser Official Site | Support | Release History | Donate © 2012-2024, Tigas Ventures, LLC Mike Tigas This is the Onion Browser3.X branch. The older versions of Onion Browser can be found here and here. Onion Browser is a free web browser for iPhone and iPad that encrypts and tunnels web...
log4j-patched
Log4J Patched Dependency for Log4Shell This repository aims to provide a patched version of the Log4J library for legacy system that can not be updated right away. The patch consist in a modified version of the log4j-core.x.x.x.jar file following the official recommandation of the Apache...
teams-cookies-bof
teams-cookies-bof Steal cookies for Teams, while running within the ms-teams.exe process. Related post: https://tierzerosecurity.co.nz/2025/11/03/teams-cookies-bof.html Based on: https://blog.randorisec.fr/ms-teams-access-tokens/. This tool is heavily based on the Cookie-Monster-BOF. The BOF will...
armory
root@kitploit: dM. ,MMb d'YM. ,P Mb MM 6MM MM 6MMb 6MMb 6MMMMMb MM 6MM MM M' d' YM. MM69 " MM69 MM69 Mb 6M' Mb MM69 " Mb d' ,PMbMMMMMMMMMMMMMMYM.,P d' YM. MM MM MM MM MM MM MM MM M \ ,MMMMMMMMbMMMMMMMMMMMMMMMbd'\ d' YM. MM MM MM MM YM. ,M9 MM YMP dM dMMMM MM MM MM YMMMMM9 MM M d' 8,P YMM...
Prestashop-CVE-2024-34716
Exploit Script for CSRF and Reverse Shell Attack This script automates a CSRF Cross-Site Request Forgery exploit to upload a PHP reverse shell on a target's web server and execute it. The reverse shell is delivered as a ZIP file via a crafted CSRF payload, which is triggered when a privileged use...
pcileech
PCILeech Summary: PCILeech uses PCIe hardware devices to read and write target system memory. This is achieved by using DMA over PCIe. No drivers are needed on the target system. PCILeech also works without hardware together with a wide range of software memory acqusition methods supported by the...
pcileech
Resumen de PCILeech: PCILeech utiliza dispositivos hardware PCIe para leer y escribir la memoria del sistema objetivo. Esto se logra usando DMA a través de PCIe. No se necesitan controladores en el sistema objetivo. PCILeech también funciona sin hardware junto con una amplia gama de métodos de...