scorecard

OpenSSF Scorecard...

reversemap

reversemap Analyse SQL injection attempts in web server logs The program can either be run in batch mode or interactive mode. In batch mode the program will accept Apache web server logs and will deobfuscate requested URLs from the logs. In interactive mode the program will prompt for user input...

layne

Layne Layne es una GitHub App autoalojada que centraliza el escaneo de seguridad en todos nuestros repositorios. Como no utilizamos herramientas comerciales de escaneo SAST/de secretos, ni tenemos acceso a GitHub Enterprise, puede resultar difícil mantener distintos archivos de workflow de GitHub...

CVE-2024-23653

root@kitploit: syntax=docker.io/zdfa/evilerfile FROM alpine RUN grep Cap /proc/self/status root@kitploit: sudo bin/buildctl build \ --frontend=dockerfile.v0 \ --local context=. \ --local dockerfile=. root@kitploit: ➜ cp sudo bin/buildctl build \ --frontend=dockerfile.v0 \ --local context=. ...

templates

Report Templates Directory Structure notes: Script generate-directories.py grabs the current latest version of the VRT structure from GitHub and creates any missing directories. Does not remove or rename directories based on items removed from VRT. Script follows standard entry names and keeps...

zap-scripts

zap-scripts Zed Attack Proxy Scripts for finding CVEs and Secrets. Building This project uses Gradle to build the ZAP add-on, simply run: root@kitploit: ./gradlew build in the main directory of the project, the add-on will be placed in the directory build/zapAddOn/bin/. Usage The easiest way to u...

www-community

OWASP Community Pages OWASP Community Pages is a repository for community contributions for security-related content. The documents here create the website at https://owasp.org/www-community/. Contributing We welcome contributions for new content and updates to current pages. This repository uses...

ninjasworkout

Damn Vulnerable NodeJS Application Quick Start root@kitploit: Download the Repo = run npm i Afer Installing all dependency just run the application root@kitploit: node app.js or nodemon app.js ADDED BUGS Prototype Pollution ✅1 No SQL Injection ✅2 Cross site Scripting ✅3 Broken Access Control ✅4...

nuvola

nuvola nuvola with the lowercase n is a tool to dump and perform automatic and manual security analysis on AWS environments configurations and services using predefined, extensible and custom rules created using a simple Yaml syntax. The general idea behind this project is to create an abstracted...

CVE-2026-5817-PoC

CVE-2026-5817: Docker Model Runner container-to-host RCE / Escape Any container on a Docker Desktop 4.40.0 to 4.67.x host can run code on the host with two HTTP requests. No socket mount, no --privileged, no caps. How Every container can reach Model Runner at model-runner.docker.internal with no...

x64dbg

x64dbg...

beef

=============================================================================== root@kitploit: Copyright c 2006-2026 Wade Alcorn - [email protected] Browser Exploitation Framework BeEF - https://beefproject.com See the file 'doc/COPYING' for copying permission...

scan-cve-2018-8115

root@kitploit: /\ / | | / \ | | | / /\ \ / | | | |/ | \ \ / / | | | | '| | | | | | / \ | | || | | | | / | || | | | | || || | // \, |,|,| |/ ||,|| |||, | | | / | || |/ Herramienta CLI de verificación de imágenes Docker CVE-2018-8115 Para ayudar a la comunidad a mantenerse segura, en Aqua...

payloads

payloads Git All the Payloads! A collection of web attack payloads. Pull requests are welcome! Usage run ./get.sh to download external payloads and unzip any payload files that are compressed. Payload Credits fuzzdb - https://github.com/fuzzdb-project/fuzzdb SecLists -...

clusterfuzzlite

ClusterFuzzLite ClusterFuzzLite 是一种持续模糊测试解决方案，它作为持续集成（CI）工作流的一部分运行，以前所未有的速度发现漏洞。 只需几行代码，GitHub 用户就可以将 ClusterFuzzLite 集成到他们的工作流程中，并对拉取请求进行模糊测试，以在提交之前捕获错误。 ClusterFuzzLite 基于 ClusterFuzz。 功能 快速的代码变更（拉取请求）模糊测试，在代码合并前发现错误 崩溃测试用例的下载 持续较长时间的模糊测试（批量模糊测试），以异步发现代码变更模糊测试中遗漏的更深层次错误，并构建语料库用于代码变更模糊测试...

CVE-2022-20128

CVE-2022-20128 Android Debug Bridge adb era vulnerable a ataques de directory traversal que podrían ser montados por daemons adb maliciosos o comprometidos durante una operación adb pull. El dispositivo malicioso: root@kitploit: ./adbdirtrav.py -lp 5111 --content "hello world" --destination-path...

Linux Distros Unpatched Vulnerability : CVE-2026-89530

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - svcrdma: Reject inline replies that overflow the pull-up buffer An RPC-over-RDMA client can request a reply, such as an NFS READ payload, without providing a...

boatcrash

boatcrash Exploit para CVE-2019-19030 que afecta a versiones de Harbor Usa este script en instancias de Harbor que ejecuten versiones inferiores a 1.10.3 o 2.0.1 para enumerar todos los proyectos presentes en la plataforma. También se puede usar para enumerar proyectos en versiones superiores, pe...

DEBIAN-CVE-2026-89530

In the Linux kernel, the following vulnerability has been resolved: svcrdma: Reject inline replies that overflow the pull-up buffer An RPC-over-RDMA client can request a reply, such as an NFS READ payload, without providing a Write list or a Reply chunk to carry it. When such a reply needs more...

AZL-100851 CVE-2026-89530 affecting package kernel 6.6.150.1-1

In the Linux kernel, the following vulnerability has been resolved: svcrdma: Reject inline replies that overflow the pull-up buffer An RPC-over-RDMA client can request a reply, such as an NFS READ payload, without providing a Write list or a Reply chunk to carry it. When such a reply needs more...