pi-hole

Network-wide ad blocking via your own Linux hardware The Pi-hole® is a DNS sinkhole that protects your devices from unwanted content without installing any client-side software. Easy-to-install : our dialogs walk you through the simple installation process in less than ten minutes Resolute :...

cve-2024-23113-test-env

CVE-2024-23113 Entorno de Prueba para FortiOS Un entorno de prueba basado en Docker para validar plantillas Nuclei de CVE-2024-23113 contra instancias simuladas vulnerables de FortiOS. 🔍 Descripción general Este entorno simula interfaces HTTP vulnerables de FortiOS para probar las capacidades de...

CVE-2024-32002

Poc para CVE-2024-32002, el script creado a partir del caso de prueba del desarrollador: https://github.com/git/git/commit/97065761333fd62db1912d81b489db938d8c991ddiff-2ba261bbd9de8e881d700e696eebab0df581473ba50b671b2cbe4bbee5ca87b0 Este software ha sido creado puramente con fines de investigació...

Magisk

This is not an officially supported Google product Introduction Magisk is a suite of open source software for customizing Android, supporting devices higher than Android 6.0. Some highlight features: MagiskSU : Provide root access for applications Magisk Modules : Modify read-only partitions by...

CVE-2025-32462_32463-Lab

CVE-2025-32462 y CVE-2025-32463 – Laboratorio PoC Este es un laboratorio basado en contenedores y PoC para las siguientes vulnerabilidades en sudo: CVE-2025-32462 – bypass de la lógica de coincidencia de host sudo -h CVE-2025-32463 – escape de la biblioteca NSS de chroot sudo -R 🔒 Solo con fines...

cloudmapper

CloudMapper 注意 ：网络可视化功能（命令 prepare）已不再维护。 CloudMapper 可帮助您分析您的亚马逊云服务（AWS）环境。最初目的是生成网络图并在浏览器中显示（该功能已不再维护）。现在它包含更多功能，包括安全问题的审计。 网络映射演示 报告演示 介绍文章 展示如何发现网络错误配置的文章 关于持续审计的文章 命令 audit：检查潜在的错误配置。 collect：收集有关账户的元数据。更多详情见此处。 findadmins：查看IAM策略以识别管理员用户和角色，或具有特定权限的主体。更多详情见此处。...

howdy

Howdy provides Windows Hello™ style authentication for Linux. Use your built-in IR emitters and camera in combination with facial recognition to prove who you are. Using the central authentication system PAM, this works everywhere you would otherwise need your password: Login, lock screen, sudo,...

evilact

evilact Escáner rápido de vulnerabilidades para CVE-2025-55182 y CVE-2025-66478 en aplicaciones Next.js que usan React Server Components. Compatible con escaneo masivo, confirmación de RCE y verificaciones concurrentes de alto rendimiento. Instalación root@kitploit: git clone...

git-crypt

git-crypt - transparent file encryption in git git-crypt enables transparent encryption and decryption of files in a git repository. Files which you choose to protect are encrypted when committed, and decrypted when checked out. git-crypt lets you freely share a repository containing a mix of...

MHDDoS

MHDDoS DDoS Testing Toolkit · 57 Methods · Python 3 For authorized testing and educational use only. Do not attack systems, websites, or networks without the owner's explicit permission. Download · Features · Installation · Docker · Documentation · Community · Hosting ⚠️ Important Notice !CAUTION...

PoC-CVE-2025-55182

El script explota la CVE-2025-55182, un RCE que afecta a los React Server Components utilizados en React.js y Next.js. Versiones de React afectadas: 19.0.0 19.1.0 y 19.1.1 19.2.0 Next.js: Next.js 15.x todas las versiones anteriores a las correcciones Next.js 16.0.0 versiones alpha/beta/RC inicial...

masscan

MASSCAN: 大规模IP端口扫描器 这是一个互联网规模的端口扫描器。它可以在5分钟内扫描整个互联网，从单台机器以每秒1000万个数据包的速率进行传输。 其用法（参数、输出）与最著名的端口扫描器 nmap 类似。如有疑问，可以尝试其中的某些功能——它支持对大量机器进行广泛扫描，但不支持对单台机器进行深度扫描。 内部采用异步传输方式，类似于 scanrand、unicornscan 和 ZMap 等端口扫描器。它更加灵活，允许任意端口和地址范围。 注意：masscan 使用自己的临时 TCP/IP 协议栈 。任何超出简单端口扫描的操作都可能与本地 TCP/IP...

web-check

Web-Check Inteligencia de código abierto integral y bajo demanda para cualquier sitio web 🌐web-check.xyz Con el amable apoyo de: Terminal Trove El $HOME de todo lo relacionado con la terminal | Warp Diseñado para programar con múltiples agentes de IA ---|--- Contenido Acerca de Captura de pantall...

Malicious code in cache-swipper (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50cb98e5f107fe5bd1cd9434505219880014742674def9c64a8ce8552e04a626 cache-swipper advertises itself as a safe cache and build-artifact cleanup utility, but the exported runOperation function performs an unbounded...

MAL-2026-17166 Malicious code in cache-swipper (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50cb98e5f107fe5bd1cd9434505219880014742674def9c64a8ce8552e04a626 cache-swipper advertises itself as a safe cache and build-artifact cleanup utility, but the exported runOperation function performs an unbounded...

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP5 RT kernel was updated to fix various security issues: The following security issues were fixed: CVE-2024-57841,CVE-2026-53260: net: fix memory leak in tcpconnrequest bsc1235944 bsc1269731. CVE-2026-23451: bonding: prevent potential infinite loop in bondheaderparse...

CVE-2026-6544

IBM Concert versions 1.0.0 through 3.0.0 are vulnerable to a flaw that allows recursive copying of directories without proper controls. This lack of restriction can result in the unintentional inclusion of sensitive or unnecessary files and an increased attack surface . The documents do not provi...

CVE-2026-6544 Multiple Vulnerabilities in IBM Concert Software

IBM Concert 1.0.0 through 3.0.0 allows recursive copying of directories without proper controls which can lead to unintentional inclusion of sensitive or unnecessary files and increased attack surface...

EUVD-2026-86009

IBM Concert 1.0.0 through 3.0.0 allows recursive copying of directories without proper controls which can lead to unintentional inclusion of sensitive or unnecessary files and increased attack surface...

InfluxDB-Exploit-CVE-2019-20933

Exploit de InfluxDB CVE-2019-20933 Exploit para la vulnerabilidad CVE-2019-20933 de InfluxDB, InfluxDB anterior a 1.7.6 tiene una vulnerabilidad de omisión de autenticación en la función authenticate en services/httpd/handler.go porque un token JWT puede tener un SharedSecret vacío también conoci...