Reverse_HTTPS_Bot

ReverseHTTPSBot 0.8 Description: A python based https remote access trojan for penetration testing. Server is currently NodeJS based Bot Requires: pip install requests pip install pyscreenshot Server Requires: sh setup.sh to generate self signed certificate and key for testing sudo npm install...

HiddenNetworks-Python

HiddenNetworks-Python v0.9 2020年5月 Hidden Networks 是一个新概念验证（基于同名论文），使用Python 3.4编写。它简化了分析本地和远程机器（在域内，使用WMI）以搜索USB设备连接痕迹的任务。通过收集到的信息，该概念验证绘制了一个网络，显示这些USB设备与所连接计算机之间的路径或跳转。由此描绘出一个替代网络。同一个应用程序会生成网络（每个设备一个），所有收集的信息将存储在两个文件（.CSV和.JSON）中，以便后续分析和导出。 功能...

DATA

DATA: Análisis y Automatización de Credenciales Phish Diapositivas de presentación en CircleCityCon 2017 Probado en Headless Ubuntu Server 16.04 BUCKLEGRIPPER py Dada una URL de phishing sospechosa o un archivo de URLs separadas por líneas, visitar, capturar pantalla y extraer archivos...

pyREtic

README de pyREtic 0.5.1 Rich Smith - [email protected] La última versión de pyREtic se encuentra en: https://github.com/MyNameIsMeerkat/pyREtic ¿Qué es? pyREtic es un marco extensible diseñado para ayudar en la realización de diversas tareas de ingeniería inversa para proyectos en el lenguaj...

CVE-2025-5840

CVE-2025-5840 Exploit de CVE-2025-5840 en Python por hax / haxerr9 Cómo Usar: Asegúrate de que Python3 esté instalado en el sistema. Ejecuta "python3 CVE-2025-5840.py URL -c COMMAND". No olvides pasarle los parámetros antes de ejecutar el script. Ejemplo de Uso: NO PROBADO Este exploit no ha sido...

CVE-2022-0265

CVE-2022-0265 Put ysoserial.jar in the same directory. example python CVE-2022-0265.py 127.0.0.1 URLDNS "http://xxx.log."...

CVE-2023-3450

CVE-2023-3450 fofa：iconhash="-399311436" Caso: http://123.54.231.201:6060 Usage: python3 CVE-2023-3450.py -h, --help python3 CVE-2023-3450.py -u URL, --url URL python3 CVE-2023-3450.py -f FILE, --file FILE...

cve-2022-22947

CVE-2022-22947 PoC para CVE-2022-22947 DnsLog Cuando escribía el PoC para xray, reverse no podía recibir las solicitudes de Dns; después de depurar durante mucho tiempo, decidí escribir una versión del PoC en Python…… root@kitploit: python3 poc-cve-2022-22947.py...

MalScan

MalScan MalScan 是一个用 Python 编写的简单 PE 文件启发式扫描器，你可以用它快速分析 PE 文件并查看是否存在可疑内容。这是一个简单的工具，因此没有提供太多花哨的功能。你可以自由扩展它，或者用它做任何你想做的事情。 支持的功能 文件信息，如 MD5、SHA1、时间戳 PEiD 签名检查 自定义 Yara 规则集成 节区、导入、导出、资源和 TLS 回调概览 提供一些自定义启发式规则 :- 安装 你需要在机器上安装 Python 2.7。额外需要 yara-python。 root@kitploit: git clone...

wpscvn

wpscvn is a tool for pentesters, website owner to test if their websites had some vulnerable plugins or themes The author does not hold any responsibility for the bad use of this tool, remember that attacking targets without prior consent is illegal and punished by law. requires : Python 3 usage ...

Autobahn Python permessage-deflate bypasses maxMessagePayloadSize after inflation

Summary Autobahn Python enforces maxMessagePayloadSize against the compressed WebSocket frame length before permessage-deflate inflation, then delivers the inflated message to application callbacks without a second size check. A client frame that is only 22 compressed bytes can inflate to 4096...

GHSA-HXP9-W8X3-P566 Autobahn Python permessage-deflate bypasses maxMessagePayloadSize after inflation

Summary Autobahn Python enforces maxMessagePayloadSize against the compressed WebSocket frame length before permessage-deflate inflation, then delivers the inflated message to application callbacks without a second size check. A client frame that is only 22 compressed bytes can inflate to 4096...

EUVD-2026-83415

Autobahn Python permessage-deflate bypasses maxMessagePayloadSize after inflation...

mcp-atlassian has an incomplete SSRF remediation

Summary The UserTokenMiddleware extracts URLs from X-Atlassian-Jira-Url and X-Atlassian-Confluence-Url HTTP headers and passes them directly to API client constructors without any SSRF validation. Affected Package - Ecosystem: PyPI - Package: mcp-atlassian - Affected versions: all versions before...

hashboy-tool

hashboy-tool Hashboy 在hash-buster 基础上重新开发 作者：Leiothrix 安装方法 root@kitploit: $git clone https://github.com/sf197/hashboy-tool $cd hashboy-tool $python3 hashboy.py 使用方法 root@kitploit: $ python3 hashboy.py / / / / / / / / / / / / / / / / / / / / // / / / // / // / // / // //,/// //.//, / //...

zeno

Zeno 框架 安装 root@kitploit: cd git clone https://github.com/Traxes/zeno --recursive sudo pip3 install termcolor tqdm git clone https://github.com/Z3Prover/z3 --recursive cd z3 python3 scripts/mkmake.py --python cd build make sudo make install cd /zeno 用法 root@kitploit: /zeno$...

CVE-2025-32429-Checker

Comprobador de Vulnerabilidades CVE-2025-32429 Un escáner de vulnerabilidades basado en Python para detectar la vulnerabilidad de inyección SQL CVE-2025-32429 en plataformas XWiki. Características Escaneo de un solo objetivo : Comprueba objetivos individuales con la opción -t Escaneo masivo :...

DEBIAN-CVE-2026-59991

psd-tools is a Python package for working with Adobe Photoshop PSD files. Prior to 1.17.4, PSDImage.composite and PSDImage.numpy allocated output buffers from attacker-controlled PSD header geometry, including width, height, channels, depth, and per-layer rectangles, before validating those value...

CVE-2026-59991

psd-tools is a Python package for working with Adobe Photoshop PSD files. Prior to 1.17.4, PSDImage.composite and PSDImage.numpy allocated output buffers from attacker-controlled PSD header geometry, including width, height, channels, depth, and per-layer rectangles, before validating those value...

CVE-2026-59991

psd-tools is a Python package for working with Adobe Photoshop PSD files. Prior to 1.17.4, PSDImage.composite and PSDImage.numpy allocated output buffers from attacker-controlled PSD header geometry, including width, height, channels, depth, and per-layer rectangles, before validating those value...