tsunami-security-scanner

Tsunami Tsunami is a general purpose network security scanner with an extensible plugin system for detecting high severity vulnerabilities with high confidence. To learn more about Tsunami, visit our documentation. Tsunami relies heavily on its plugin system to provide basic scanning capabilities...

pythem

pythem - Penetration Testing Framework pythem is a multi-purpose pentest framework written in Python. It has been developed to be used by security researchers and security professionals. The tool intended to be used only for acts within the law. I am not liable for any undue and unlawful act...

my-cve-2021-4034-poc

my-cve-2021-4034-poc 내 PoC 빠르고 대충 만든 코드, 대학 때문에 바빠서 그랬음, 내 우분투 서버에서 작동함...

subdomain3

Subdomain3 README.md inChinese 中文 Description Subdomain3 is a new generation of tool , It helps penetration testers to discover more information in a shorter time than other tools.The information includes subdomains, IP, CDN, and so on. Please enjoy it. Screenshot medium pattern for speed Feature...

intercept

!zreadhttps://img.shields.io/badge/AskZread-.svg?style=plastic&color=00b0aa&labelColor=000000&logo=data:image/svg+xml;base64,PHN2ZyB3aWR0aD0iMTYiIGhlaWdodD0iMTYiIHZpZXdCb3g9IjAgMCAxNiAxNiIgZmlsbD0ibm9uZSIgeG1sbnM9Imh0dHA6Ly93d3cudzMub3JnLzIwMDAvc3ZnIj4KPHBhdGggZD0iTTQuOTYxNTYgMS42MDAxSDIuMjQxNTZD...

zap-hud

ZAP Heads Up Display The HUD is no longer under active development Unfortunately the HUD is no longer under active development due to the fact no one is focusing on it. The HUD is a unique and innovative interface that we know some people love. But it also needs a non trivial amount of maintenanc...

prowler

Prowler is the Open Cloud Security Platform trusted by thousands to automate security and compliance in any cloud environment. With thousands of ready-to-use checks and compliance frameworks, Prowler delivers real-time, customizable monitoring and seamless integrations, making cloud security...

beef

=============================================================================== root@kitploit: Copyright c 2006-2026 Wade Alcorn - [email protected] Browser Exploitation Framework BeEF - https://beefproject.com See the file 'doc/COPYING' for copying permission...

jok3r

.. raw:: html Jok3r v3 beta...

sx

sx is the command-line network scanner designed to follow the UNIX philosophy. The goal of this project is to create the fastest network scanner with clean and simple code. 📖 Table of Contents Features Install Build from source Quick Start References Contributing Credits License ✨ Features ⚡ 30x...

notionterm

notionterm Embed reverse shell inNotion pages. Hack while taking notes FOR ➕: Hiding attacker IP in reverse shell No direct interaction between attacker and target machine. Notion is used as a proxy hosting the reverse shell Demo/Quick proof insertion within report High available and shareable...

dive

dive A tool for exploring a Docker image, layer contents, and discovering ways to shrink the size of your Docker/OCI image. To analyze a Docker image simply run dive with an image tag/id/digest: root@kitploit: dive or you can dive with Docker directly: root@kitploit: alias dive="docker run -ti --...

cloudquery

CloudOps, without the chaos CloudQuery is a cloud asset inventory built for platform teams. Sync your cloud infrastructure metadata into your data warehouse, powering insights and automation. Unify data and provide context across AWS, Azure, GCP, and 70+ cloud and SaaS sources such as Wiz, Finout...

jackhammer

Jackhammer: One Security vulnerability assessment/management tool to solve all the security team problems. What is Jackhammer? Jackhammer is a collaboration tool built with an aim of bridging the gap between Security team vs dev team, QA team and being a facilitator for TPM to understand and trac...

CVE-2023-43342-Quick-CMS-Stored-XSS---Languages-Frontend

Quick CMS Хранимая XSS v6.7 Автор: Sergio Описание: Уязвимость межсайтового скриптинга XSS в Quick CMS v6.7 позволяет локальному злоумышленнику выполнить произвольный код с помощью поддельного скрипта в настройках Front and back end - Pages в меню Languages. Векторы атаки: Скриптинг. Уязвимость в...

CVE-2023-43346-Quick-CMS-Stored-XSS---Languages-Backend

Quick CMS 保存型XSS v6.7 著者: Sergio 説明: Quick CMS v6.7 のクロスサイトスクリプティング XSS 脆弱性により、ローカル攻撃者が Languages メニューのバックエンド - ダッシュボードに巧妙に細工されたスクリプトを介して任意のコードを実行できます。 攻撃ベクター: スクリプティング 「Languages- Backend」のバックエンドにおける入力サニタイズの脆弱性により、ユーザーがウェブページにアクセスしたときに実行される JavaScript コードを注入できます。 POC: パネルにログインすると、General...

CVE-2023-43343-Quick-CMS-Stored-XSS---Pages-Files

Хранимый XSS в Quick CMS v6.7 Автор: Sergio Описание: Множественные уязвимости межсайтового скриптинга XSS в Quick CMS v6.7 позволяют локальному злоумышленнику выполнить произвольный код с помощью специально созданного скрипта в разделе Files - Description в меню Pages. Векторы атаки: Скриптинг...

CVE-2023-43344-Quick-CMS-Stored-XSS---SEO-Meta-description

Quick CMS Stored XSS v6.7 Автор: Sergio Описание: Уязвимость межсайтового скриптинга XSS в Quick CMS v6.7 позволяет локальному злоумышленнику выполнить произвольный код с помощью специально созданного скрипта в поле SEO — Meta description в меню Pages. Векторы атаки: Внедрение сценариев. Уязвимос...

CVE-2026-73477

Incorrect Authorization vulnerability in Drupal Quick Tabs allows Forceful Browsing. This issue affects Quick Tabs versions: from 0.0.0 to 4.3.1...

CVE-2023-43345-Quick-CMS-Stored-XSS---Pages-Content

Quick CMS Хранимая XSS v6.7 Автор: Sergio Описание: Уязвимость межсайтового скриптинга XSS в Quick CMS v6.7 позволяет локальному злоумышленнику выполнить произвольный код через специально созданный скрипт в поле «Content - Name» в меню Pages. Векторы атаки: Уязвимость в санитизации ввода в поле...