PrintNightmare

PrintNightmare Implementación en Python para PrintNightmare CVE-2021-1675 / CVE-2021-34527 usando Impacket estándar. Instalación root@kitploit: $ pip3 install impacket Uso root@kitploit: Impacket v0.9.23 - Copyright 2021 SecureAuth Corporation usage: printnightmare.py -h -debug -port destination...

katana

下一代爬取与爬虫框架 特性 • 安装 • 用法 • 范围 • 配置 • 过滤器 • 加入Discord 特性 快速且完全可配置的网页爬取 标准 和无头 模式 JavaScript 解析/爬取 可自定义的自动表单填写 范围控制 - 预配置字段/正则 知识库 - 机器学习页面类型/表单分类（自动下载模型） 可自定义的输出 - 预配置字段 输入 - STDIN 、URL 和LIST 输出 - STDOUT 、FILE 和JSON 安装 katana需要Go...

katana

A next-generation crawling and spidering framework Features • Installation • Usage • Scope • Config • Filters • Join Discord Features Fast And fully configurable web crawling Standard and Headless mode JavaScript parsing / crawling Customizable automatic form filling Scope control - Preconfigured...

CVE-2024-38475_SonicBoom_Apache_URL_Traversal_PoC

CVE-2024-38475SonicBoomApacheURLTraversalPoC Autor: abrewer251 Una herramienta de prueba de concepto para probar la vulnerabilidad de traversal de URL de Apache CVE-2024-38475 "SonicBoom". Este script automatiza la negociación TLS, el escaneo de directorios, la verificación de traversal y el...

CVE-2026-39875-macOS-CUPS-LPE

CVE-2026-39875-macOS-CUPS-LPE Usuario sin privilegios a root mediante una vulnerabilidad en CUPS que afecta a macOS Tahoe, Sequoia y Sonoma anteriores a macOS 26.6 / 15.7.8 / 14.8.8. Demostraciones de Prueba de Concepto macOS Tahoe 26.4.1 macOS Sequoia 15.7.5 macOS Sonoma 14.8.5 Causa raíz La...

intel-me-research

Ingeniería inversa del firmware de Intel ME — Análisis en vivo de CSME 16.x "Tu ordenador tiene un segundo ordenador secreto en su interior. Lo encontramos, lo mapeamos y documentamos lo que se esconde ahí dentro." 🔥 PRUÉBALO TÚ MISMO — HECI SPY 🔥 Un script de Python. Cero dependencias. Habla...

CVE-2026-0740

CVE-2026-0740 🧩 Descripción general CVE-2026-0740 es una vulnerabilidad de subida arbitraria de archivos sin autenticación que afecta a: Ninja Forms File Uploads ≤ 3.3.26 plugin de WordPress Esta falla permite a los atacantes subir archivos arbitrarios al servidor sin autenticación, lo que...

device_renesas_kernel_AOSP10_r33_CVE-2022-0492

Linux kernel There are several guides for kernel developers and users. These guides can be rendered in a number of formats, like HTML and PDF. Please read Documentation/admin-guide/README.rst first. In order to build the documentation, use make htmldocs or make pdfdocs. The formatted documentatio...

CVE-2018-14847

CVE-2018-14847 This is a proof of concept of the critical WinBox vulnerability CVE-2018-14847 which allows for arbitrary file read of plain text passwords. The vulnerability has long since been fixed, so this project has ended and will not be supported or updated anymore. You can fork it and upda...

watchTowr-vs-SmarterMail-CVE-2025-52691

CVE-2025-52691 SmarterMail 사전 인증 RCE SmarterMail 사전 인증 RCE 1day 탐지 아티팩트 생성 도구 탐지 실행 탐지 아티팩트 생성기는 .aspx 파일을 C:\Program Files x86\SmarterTools\SmarterMail\Service\AppData 디렉토리빌드 94xx 또는 C:\Program Files x86\SmarterTools\SmarterMail\MRS\AppData 디렉토리빌드 16에 쓰려고 시도합니다. 이는 원격 코드 실행으로 이어지지 않으며, 단지 익스플로잇...

Invoke-LinkSpray

Invoke-LinkSpray Powershell script to create malicious SMB or WebDAV links to steal NTLM authentication. Takes UNC or local folder paths from a file specified by the -ShareList parameter. Optionally, -Depth can be used to specify how many folders to recurse when creating URL files. Also supports ...

ccs

代码凭据扫描器 此脚本旨在扫描大型且多样化的代码库，以查找硬编码凭据或配置文件中的凭据。这些构成严重的安全问题，且极难检测和管理。 本脚本的特定重点是创建一个可直接由开发团队在 CI/CD 流水线中使用的工具，通过当代码中存在凭据时向团队发出警报来管理此问题的修复过程，从而使团队能够立即修复出现的问题。 也可以将该工具用作针对此问题的点扫描器，但由于凭据很可能随时间推移重新出现在代码库中，我们强烈建议将脚本集成到 CI/CD 流程、自动化构建机制或团队定期执行的任何其他定期自动化扫描过程中。 编写此脚本时考虑以下目标： 基于正则表达式且语言无关，无需解析，以便适用于任何代码库...

SharpShares

SharpShares 多线程C .NET程序集，用于枚举域中可访问的网络共享 基于 djhohnstein 的 SharpShares 项目 root@kitploit: .\SharpShares.exe help Usage: SharpShares.exe /threads:50 /ldap:servers /ou:"OU=Special Servers,DC=example,DC=local" /filter:SYSVOL,NETLOGON,IPC$,PRINT$ /verbose /outfile:C:\path\to\file.txt Optional Arguments:...

thief_raccoon

Thief Raccoon - Login Phishing Tool Thief Raccoon is a tool designed for educational purposes to demonstrate how phishing attacks can be conducted on various operating systems. This tool is intended to raise awareness about cybersecurity threats and help users understand the importance of securit...

CVE-2022-22954

CVE-2022-22954 PoC RCE en VMware Workspace ONE Access e Identity Manager mediante SSTI. CVE-2022-22954 - PoC SSTI Uso: root@kitploit: CVE-2022-22954.py -h -m SETMODE -i IP -c CMD optional arguments: -h, --help show this help message and exit -m SETMODE, --mode SETMODE Available modes: shodan | fi...

phone-deck

phone-deck 将闲置的安卓手机（或任何带浏览器的设备）变成你 Linux 工作站的自主托管控制台和远程桌面——通过你的私有 Tailscale 网络，无需第三方应用。 它始于“拿旧手机能做什么？”，最终演变为一个 Hyprland 设备的控制平面：窗口/工作区控制、场景宏、带本地 LLM 助手的按键通话语音路由、上下文感知的应用内控制、双向音频+屏幕流式传输、触控远程桌面、虚拟键盘/鼠标、文件传输+手机到电脑共享，以及实时遥测——所有这些都通过一个已安装的 PWA 提供服务，外观为磷光终端风格。 关于可移植性的说明。 这是为特定配置构建的：基于 Arch 的...

vuln-scanner

vuln-scanner Una plataforma automatizada de evaluación de vulnerabilidades que orquesta 86 herramientas de seguridad de código abierto , agrega y deduplica hallazgos, ejecuta una capa opcional de análisis LLM compatible con OpenAI para triaje, agrupación y remediación, genera scripts de prueba de...

terrier

Terrier Terrier is a Image and Container analysis tool that can be used to scan OCI images and Containers to identify and verify the presence of specific files according to their hashes. A detailed writeup of Terrier can be found on the Heroku blog,...

terrier

Terrier Terrier es una herramienta de análisis de imágenes y contenedores que se puede utilizar para escanear imágenes OCI y contenedores para identificar y verificar la presencia de archivos específicos según sus hashes. Un artículo detallado sobre Terrier se puede encontrar en el blog de Heroku...

CVE-2024-10914-Exploit

SilverX Exploit Tool 📌 Description SilverX Exploit Tool is a penetration testing script designed to detect and exploit vulnerabilities in web applications. It provides a shell-like interface for executing commands remotely on vulnerable systems. ⚠️ Disclaimer This tool is for educational and...