py-amsi

py-amsi py-amsi 是一个使用 Windows 反恶意软件扫描接口 AMSI API 扫描字符串或文件以查找恶意软件的库。AMSI 是 Windows 原生接口，允许应用程序请求系统上安装的防病毒软件分析文件/字符串。AMSI 不依赖于 Windows Defender。防病毒供应商实现 AMSI 接口以接收来自应用程序的调用。此库利用该 API 在 Python 中执行防病毒扫描。了解更多关于 Windows AMSI API 的信息，请点击此处。 安装 通过 pip root@kitploit: pip install pyamsi 克隆仓库 root@kitploit:...

CVE-2026-20251

CVE-2026-20251 — Splunk Secure Gateway: десериализация jsonpickle RCE Исследователь: Fady Oueslati · ReactiveZero Security Research Ссылка: 2026FO-SPLUNK-20251 CVSS: 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Статус: Открыто — исправление доступно Краткое описание Аутентифицированный...

py

Si encuentras algún error, repórtalo en los issues de usuarios de Github Aún en desarrollo Soporta win7 a win11（último）...

vt-py-scanner

Escáner de VirusTotal Script de Python para analizar TODOS los archivos con la API de VirusTotal, escaneando carpetas y subcarpetas de forma recursiva. Optimizado para Windows. Características Escanea TODOS los archivos de una carpeta y sus subcarpetas Configuración mediante archivo .env - Guarda...

CVE-2021-21978

CVE-2021-21978 CVE-2021-21978 RCE exp Затронутые версии VMware View Planner Harness 4.X По аналогии с CVE-2021-21978, данная уязвимость позволяет загрузить произвольный файл без авторизации и добиться удаленного выполнения кода путем модификации встроенного Python-скрипта. Стоит отметить, что...

CVE-2017-0199-PY-KIT

CVE-2017-0199-PY-KIT...

py-network-scanner

root@kitploit: ███╗ ██╗███████╗████████╗██╗ ██╗ ██████╗ ██████╗ ██╗ ██╗ ██████╗ ██████╗ ███████╗██████╗ ████╗ ██║██╔════╝╚══██╔══╝██║ ██║██╔═══██╗██╔══██╗██║ ██╔╝ ██╔══██╗██╔══██╗██╔════╝██╔══██╗ ██╔██╗ ██║█████╗ ██║ ██║ █╗ ██║██║ ██║██████╔╝█████╔╝ ██████╔╝██████╔╝█████╗ ██║ ██║ ██║╚██╗██║██╔══╝...

github-dorks

Github Dorks Github Search is a quite powerful and useful feature that can be used to search for sensitive data on repositories. Collection of Github dorks can reveal sensitive personal and/or organizational information such as private keys, credentials, authentication tokens, etc. This list is...

JSRat-Py

JSRat-Py Questa è la mia implementazione di JSRat.ps1 in Python, così ora puoi eseguire il server di attacco da qualsiasi sistema operativo invece di essere limitato a un sistema operativo Windows con PowerShell abilitato. Aggiunto supporto per gestire l'invocazione del client tramite i metodi...

PY-Log4j-RCE-Scanner

Log4j RCE Scanner Utilizzando questo strumento, puoi scansionare più indirizzi alla ricerca della vulnerabilità di esecuzione remota dei comandi CVE-2021-44228 in Apache Log4j. Caratteristiche: Può eseguire la scansione in base alla lista di URL che fornisci. Può scansionarli tutti individuando i...

Mesop AI Sandbox <= 1.2.2 - Remote Code Execution

Mesop = 1.2.2 contains an unrestricted remote code execution caused by unauthenticated ingestion and execution of base64-encoded Python code in the /exec-py endpoint of ai/testing module, letting attackers execute arbitrary commands on the host, exploit requires HTTP access to the server. id:...

py-log4shellscanner

PY-Log4ShellScanner Un semplice server DNSLog in un singolo file con endpoint HTTP per il recupero dei log Crediti Basato su Log4jScanner di fullhunt.io, modificato con multithreading e server DNS Callback personalizzato Caratteristiche Supporto per elenchi di URL Fuzzing su oltre 60 header di...

46635.py

Dieses Repository hat keine README-Datei...

KeePass-dump-py

KeePass-dump-py Mein Versuch, den ursprünglichen KeePass 2.X Master Password Dumper CVE-2023-32784 POC in Python neu zu schreiben. Bitte besuchen Sie den ursprünglichen POC für weitere Details zur Sicherheitslücke und zum Ausnutzungsprozess. Was dieses Skript macht: 1. Prüft, ob der KeePass-Proze...

Py-RDP-Patcher

Py-RDP-Patcher Py-RDP-Patcher è uno strumento realizzato in Python per effettuare il patching del file termsrv e consentire sessioni RDP simultanee. Guida all'installazione: Questo script richiede solo la libreria art, che viene installata eseguendo: root@kitploit: pip install art Requisiti:...

cve-2026-40072-ssrf-lab

CVE-2026-40072 SSRF-Labor Praktisches lokales Labor zur Demonstration von CVE-2026-40072 in web3.py, zur Darstellung der SSRF-Auswirkungen in Burp Suite und zur Überprüfung des offiziellen Fixes. Überblick Dieses Repository enthält einen sicheren, rein lokalen Proof of Concept für CVE-2026-40072,...

vt-py

vt-py Questa è la libreria client Python ufficiale per VirusTotal. Con questa libreria puoi interagire con la VirusTotal REST API v3 e automatizzare il tuo workflow in modo rapido ed efficiente. Cose che puoi fare con vt-py Scansiona file e URL Ottieni informazioni su file, URL, domini, ecc. Eseg...

ROOT-APP-PYPI-CVE-2025-69224 CVE-2025-69224 in aiohttp - Patched by Root

Root has patched CVE-2025-69224 in the aiohttp package for Root:PyPI. Multiple fixed versions available...

py-web-vuln-scanner

No d...

CVE-2026-19984 jkawamoto mcp-florence2 __init__.py get_images server-side request forgery

A flaw has been found in jkawamoto mcp-florence2 up to 0.3.13. Affected by this issue is the function getimages of the file src/mcpflorence2/init.py. This manipulation of the argument src causes server-side request forgery. The attack may be initiated remotely. The exploit has been published and...