65 matches found
pentest-tools
渗透测试工具集 一套满足快速需求的自定义安全工具集合。 重要说明 ‼ 2022年11月进行了一次大清理 ‼ 一些无用/无法使用的脚本已被归档，另一些则已移至各自独立的仓库以获得更多关注，欢迎查看： apk-analyzer cloudflare-origin-ip csp-analyzer detectify-cves extract-endpoints favicon-hashtrick google-search graphql-introspection-analyzer keyhacks.sh related-domains 安装 root@kitploit: git clone...
turbo-intruder
Turbo Intruder Turbo Intruder 是一个 Burp Suite 扩展，用于发送大量 HTTP 请求并分析结果。它旨在通过处理需要异常速度、持续时间或复杂性的攻击来补充 Burp Intruder。以下特点使其脱颖而出： 快速 - Turbo Intruder 使用从头开始手写的 HTTP 栈，注重速度。因此，在许多目标上，它可以严重超越甚至时尚的异步 Go 脚本。 可扩展 - Turbo Intruder 可以实现平坦的内存使用，从而实现可靠的多天攻击。它还可以通过命令行在无头环境中运行。 灵活 - 使用 Python...
patchkit
patchkit 使用一个或多个简单 Python 脚本对 ELF 二进制文件进行补丁。 使用方法： root@kitploit: patch 补丁目录|文件... patchdir 包含一个或多个 Python 补丁文件，这些文件将按字母顺序对二进制文件执行。 补丁示例 对地址进行 NOP 填充、注入汇编函数以及挂钩入口点： root@kitploit: def simplepatchpt: 在入口点处 NOP 填充一个跳转指令 pt.patchpt.entry, hex='90' 5 将汇编代码注入到二进制文件中并返回地址 addr = pt.injectasm='mov eax, ...
plasma
PLASMA 旧项目名称为 Reverse 。 PLASMA 是一个交互式反汇编器。它可以生成更易读的汇编代码（伪代码）并带有彩色语法。你可以使用可用的 Python API 编写脚本（见下方示例）。该项目仍在大力开发中。 wiki : TODO 列表和一些文档。 它支持： 架构：x8664、ARM、MIPS64（ARM 和 MIPS 部分支持） 格式：ELF、PE、RAW 警告 ：在结构和类型定义实现之前，数据库兼容性可能被破坏。 依赖项 python = 3.4 capstone，测试版本 4.0-alpha5 python-pyelftools pefile +...
dionaea
dionaea - atrapa bugs Dionaea pretende ser un sucesor de nepenthes, incorporando Python como lenguaje de scripting, usando libemu para detectar shellcodes y con soporte para ipv6 y tls. Protocolos blackhole epmap ftp http memcache mirror mqtt mssql mysql pptp sip smb tftp upnp Registro fail2ban...
pyrebox
================ 已归档项目 此项目已被归档，其问题追踪已锁定。该项目将仅作为参考用途保留。 .. image:: docs/media/pyreboxlogolightbg.png .. QEMU: http://qemu.org/ .. DECAF: https://github.com/sycurelab/DECAF .. S2E: https://github.com/dslab-epfl/s2e .. AVATAR: https://github.com/avatartwo .. PANDA: https://github.com/panda-re/panda...
asadbg
asadbg Nota preliminar: recomendamos utilizarlo como parte de asatools, aunque también puede usarse de forma independiente. asadbg es un framework de herramientas para ayudar a automatizar la depuración en vivo de dispositivos Cisco ASA, así como automatizar la interacción con la CLI de Cisco...
idahunt
Descripción general Requisitos Características Scripting Uso Simular sin ejecutar Análisis inicial Ejecutar script de IDA Python Diffing de binarios Requisitos Análisis inicial Diffing de archivos Diffing de una función Filtros Detección de arquitectura Específico del objetivo Proyectos conocidos...
offensive-security-labs
Offensive Security Labs A collection of hands-on offensive cy...
CVE-2026-33229
XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Prior to 17.4.8 and 17.10.1, an improperly protected scripting API allows any user with script right to bypass the sandboxing of the Velocity scripting API and execute, e.g., arbitrary Python...
CVE-2025-13911
The vulnerability affects Ignition SCADA applications where Python scripting is utilized for automation purposes. The vulnerability arises from the absence of proper security controls that restrict which Python libraries can be imported and executed within the scripting environment. The core issu...
CVE-2025-13911
Ignition by Inductive Automation, when installed with default OS service account settings, may expose the host system to an elevated code execution risk via the gateway backup restore functionality. An authenticated user with Gateway Administrator privileges can import a malicious gateway backup...
CVE-2025-13911
CVE-2025-13911 affects Inductive Automation Ignition SCADA, where Python scripting is used for automation. The root cause is insufficient controls on which Python libraries can be imported/executed within the scripting environment, paired with an Ignition service account that has system-level Win...
CVE-2025-13911 Inductive Automation Ignition Execution with Unnecessary Privileges
Ignition by Inductive Automation, when installed with default OS service account settings, may expose the host system to an elevated code execution risk via the gateway backup restore functionality. An authenticated user with Gateway Administrator privileges can import a malicious gateway backup...
CVE-2025-13911 Inductive Automation Ignition Execution with Unnecessary Privileges
Ignition by Inductive Automation, when installed with default OS service account settings, may expose the host system to an elevated code execution risk via the gateway backup restore functionality. An authenticated user with Gateway Administrator privileges can import a malicious gateway backup...
PT-2025-52333
Name of the Vulnerable Software and Affected Versions Ignition SCADA applications affected versions not specified Description The issue concerns Ignition SCADA applications utilizing Python scripting for automation. A lack of security controls regarding Python library imports and execution allows...
EUVD-2017-3874
Malware in sbrugna...