PR-DNSd

PR-DNSd Daemon DNS récursif passif. Qu'est-ce que cela fait Démarrage rapide root@kitploit: go get github.com/korc/PR-DNSd sudo setcap capnetbindservice,capsyschroot=ep go/bin/PR-DNSd go/bin/PR-DNSd -upstream 9.9.9.9:53 -listen 127.0.0.1:53 echo nameserver 127.0.0.1 | sudo tee /etc/resolv.conf di...

httpdoom

HttpDoom - HTTP Attack surface analyser Validate large HTTP-based attack surfaces in a very fast and reliable way. Inspired by Aquatone. Installing You must have dotnet SDK at version 6+: root@kitploit: $ dotnet pack -c Release -o nupkg $ dotnet tool install --global --add-source .\nupkg...

massdns

MassDNS A high-performance DNS stub resolver MassDNS is a simple high-performance DNS stub resolver targeting those who seek to resolve a massive amount of domain names in the order of millions or even billions. Without special configuration, MassDNS is capable of resolving over 350,000 names per...

massdns

MassDNS Un résolveur DNS à haute performance MassDNS est un résolveur DNS simple et haute performance conçu pour ceux qui cherchent à résoudre un nombre massif de noms de domaine, de l'ordre de millions voire de milliards. Sans configuration spéciale, MassDNS est capable de résoudre plus de 350 0...

CVE-2019-6467

CVE-2019-6467 BIND nxdomain-redirect Uniquement à des fins éducatives Exécution root@kitploit: $ docker run --rm --name cve-2019-6467 -it -p 53:53/udp knqyf263/cve-2019-6467 Exploitation Requête normale root@kitploit: $ dig @127.0.0.1 nxdomain.example.com nxdomain peut être remplacé par tout nom ...

AzSubEnum

AzSubEnum - Énumération de sous-domaines Azure Services AzSubEnum est un outil spécialisé d'énumération de sous-domaines conçu pour les services Azure. Cet outil est destiné à rechercher et identifier méticuleusement les sous-domaines associés à divers services Azure. Grâce à une combinaison de...

krbrelayx

Krbrelayx - Kerberos relaying and unconstrained delegation abuse toolkit Toolkit for abusing Kerberos. Requires impacket, ldap3 and dnspython to function. It is recommended to install impacket from git directly to have the latest version available. More info about this toolkit available in my blo...

NimGetSyscallStub

NimGetSyscallStub Obtenez des Syscalls fraîches à partir d'une copie fraîche de ntdll.dll. Ce code peut être utilisé comme alternative aux excellents outils déjà publiés NimlineWhispers et NimlineWhispers2 par @ajpc500 ou ParallelNimcalls. L'avantage de récupérer les Syscalls dynamiquement est qu...

Uchihash

Uchihash Uchihash è un piccolo strumento che può far risparmiare tempo agli analisti malware nella gestione di valori hash incorporati utilizzati per varie cose come: Importare dinamicamente API specialmente in shellcode Verificare i processi in esecuzione utilizzati dagli analisti Anti-Analisi...

fernmelder

fernmelder risolutore DNS asincrono di massa...

altdns

Altdns - Subdomain discovery through alterations and permutations Altdns is a DNS recon tool that allows for the discovery of subdomains that conform to patterns. Altdns takes in words that could be present in subdomains under a domain such as test, dev, staging as well as takes in a list of...

CVE-2024-23653

root@kitploit: syntax=docker.io/zdfa/evilerfile FROM alpine RUN grep Cap /proc/self/status root@kitploit: sudo bin/buildctl build \ --frontend=dockerfile.v0 \ --local context=. \ --local dockerfile=. root@kitploit: ➜ cp sudo bin/buildctl build \ --frontend=dockerfile.v0 \ --local context=. ...

CVE-2026-82466

Rodauth versions before 2.46.0 contain an authentication bypass in the webauthn_login route. The root cause is improper account resolution logic that falls back to session account identifiers instead of validating the credential binding, allowing a logged-in user to authenticate as any other acco...

decode-spam-headers

decode-spam-headers.py Che tu stia cercando di capire perché una specifica e-mail è finita in SPAM/Junk per le tue attività amministrative quotidiane o per i tuoi scopi di simulazione di Phishing Red-Team, questo script è qui per aiutarti! L'idea è nata durante la consegna di esercizi commerciali...

cve-2024-32019-PoC

CVE-2024-32019 — ndsudo di Netdata: Escalation dei Privilegi Locali Riepilogo L’helper ndsudo di Netdata installato con setuid root limita i comandi che può eseguire, ma risolve questi comandi usando ilPATH del chiamante. Nelle versioni vulnerabili, un utente locale può posizionare un binario...

CVE-2026-82455

RubyGems versions before 4.0.13 are vulnerable to a path traversal issue during gem extraction. The root cause is a failure to re-validate path containment after filesystem symlink resolution : if a pre-existing symlink inside the destination directory points outside the extraction root, extracte...

EUVD-2026-68102

RubyGems fails to re-validate path containment after filesystem symlink resolution during gem extraction. When a pre-existing symlink inside the destination directory points outside the extraction root, extracted files that appear to be written under the destination directory can instead be writt...

Citrix-NetScaler-Memory-Leak-CVE-2025-5777

CVE-2025-5777 – Citrix NetScaler Perdita di memoria PoC aggiornato Questo repository contiene un Proof-of-Concept PoC aggiornato per sfruttare CVE-2025-5777 – una vulnerabilità di perdita di memoria che colpisce Citrix NetScaler. Il PoC originale di 0xgh057r3c0n funziona perfettamente, ma alcuni...

CVE-2021-3572

CVE-2021-3572 Questo repository è progettato per testare CVE-2021-3572 in pypa/pip. Per maggiori informazioni, vedi queste risorse: Pagina CVE: https://vulners.com/cve/CVE-2021-3572 PR in cui è stata corretta la vulnerabilità: https://github.com/pypa/pip/pull/9827 Issue con ulteriore discussione:...

CVE-2021-43616

Repository che dimostra CVE-2021-43616 / https://github.com/npm/cli/issues/2701 Rimuovi la cartella nodemodules ed esegui npx npm@8 ci, potrai vedere come npm installa la versione 2.2.x 2.2.16 al momento di questo commit anche se package-lock.json richiede la 2.0.0 root@kitploit: cat...