log4j-detect

log4j-detect Simple Python 3 script to detect the "Log4j" Java library vulnerability CVE-2021-44228 for a list of URL with multithreading The script "log4j-detect.py" developed in Python 3 is responsible for detecting whether a list of URLs are vulnerable to CVE-2021-44228. To do so, it sends a G...

nexmon

What is nexmon? Nexmon is our C-based firmware patching framework for Broadcom/Cypress WiFi chips that enables you to write your own firmware patches, for example, to enable monitor mode with radiotap headers and frame injection. Below, you find an overview what is possible with nexmon. This...

Cisco-Smart-Exploit

Cisco-Smart-Exploit Cisco SmartInstall 漏洞利用 CVE-2018-0171 灵感来自 C. Papathanasiou 的 PoC 此 Python 3 脚本使用 Cisco 设备上运行 SmartInstall 的 4786 端口来利用 CVE-2018-0171 。借助此漏洞利用，攻击者可以制作有效载荷，将其发送到 Cisco 设备，然后提取 running-config 文件的内容。 Cisco Smart Exploit 脚本可以： 提取 running-config 文件 解析 并 解密 类型 7 加密哈希 解析 明文密码 解析 所有的...

cve-collector

CVE-Collector Simple Latest CVE Collector Written in Python There are various methods for collecting the latest CVE Common Vulnerabilities and Exposures information. This code was created to provide guidance on how to collect, what information to include, and how to code when creating a CVE...

difuze

difuze: Fuzzer for Linux Kernel Drivers This repo contains all the sources including setup scripts, you need to get difuze up and running. Tested on Ubuntu = 14.04.5 LTS 0. Running difuze from Docker Refer the readme As explained in our paper, There are two main components of difuze: Interface...

avml

AVML Acquire Volatile Memory for Linux Summary A portable volatile memory acquisition tool for Linux. AVML is an X8664 userland volatile memory acquisition tool written in Rust, intended to be deployed as a static binary. AVML can be used to acquire memory without knowing the target OS distributi...

snmpvlan

snmpvlan CVE ID: CVE-2014-3341. Cisco Bug ID: CSCup85616. NexusTaco 是一个 SNMP 扫描器，可用于内网测试和外网测试，用于评估 Cisco Nexus 交换机（5000 和 6000 系列）。 市面上已有许多 SNMP 扫描器和暴力破解工具，本工具仅作为补充。它具有以下功能： 专门识别 Nexus 交换机，因为它们似乎会对假 community 字符串进行回应 无需 community 即可暴力破解 VLAN ID，可用于 VLAN 跳跃/双标签攻击（如果第三条不成功，此功能在内部测试中很有用） 暴力破解 SNMP...

web_exploit_detector

Web Exploit Detector Introduction The Web Exploit Detector is a Node.js application and NPM module used to detect possible infections, malicious code and suspicious files in web hosting environments. This application is intended to be run on web servers hosting one or more websites. Running the...

toothpicker

ToothPicker ToothPicker is an in-process, coverage-guided fuzzer for iOS. It was developed to specifically targets iOS's Bluetooth daemon bluetoothd and to analyze various Bluetooth protocols on iOS. As it is built using FRIDA, it can be adapted to target any platform that runs FRIDA. This...

gdb-frontend

GDBFrontend is an easy, flexible and extensionable gui debugger. Installing Requirements GDB = 8.2 with python3 python3 = 3.6 tmux PIP Package Python Wheel Recommended You can install GDBFrontend with pip. root@kitploit: sudo python3 -m pip install gdbfrontend if it is already installed and you a...

mal_unpack

malunpack Dynamic unpacker based on PE-sieve 📖 Read more . It deploys a packed malware, waits for it to unpack the payload, dumps the payload, and kills the original process. !CAUTION This unpacker deploys the original malware. Use it only on a VirtualMachine. ⚙ Usage Basic usage: root@kitploit:...

CVE-2021-31761

CVE-2021-31761 描述： 通过 Webmin 的运行进程功能，利用反射型跨站脚本（XSS）攻击实现远程命令执行（RCE） 测试版本： Webmin 1.973（GitHub 最新版本 2021年3月7日） 攻击类型： 远程 影响： 远程命令执行 漏洞利用 POC 代码： YouTube POC： https://youtu.be/23VvUMu-28c 产品供应商： https://www.webmin.com 附加信息： "Webmin 是一款基于 Web 的 Unix 类服务器和服务系统管理工具，全球安装量超过 100...

RogueAssemblyHunter

. . \ / \ | | | .. | // \ / | | / \ / / \ \ / // // \ / | | | // | /\ / / | \ \ \ /| Y Y \ \ \ | | || // /|/ | / || / // | / // / / / / / / / / / | \ / | / \ | / \ / \ Y / | / | \ | \ /| | / | /|/|| /| | / / / Rogue Assembly Hunter Rogue Assembly Hunter 是一个用于发现正在运行的进程中“有趣”的 .NET CLR 模块的实用工具。 作者:...

fileintel

fileintel This is a tool used to collect various intelligence sources for a given file. Fileintel is written in a modular fashion so new intelligence sources can be easily added. Files are identified by file hash MD5, SHA1, SHA256. The output is in CSV format and sent to STDOUT so the data can be...

CVE-2021-31760

..| CVE-2021-31760 |.. Description : 利用跨站请求伪造CSRF攻击，通过Webmin的运行进程功能获取远程命令执行RCE。 Tested Version : Webmin 1.973 GitHub最新版本 07/03/2021 Attack Type: 远程 Impact : 远程命令执行 利用代码POC : YouTube POC : https://youtu.be/D45FN8QrzDo 产品厂商 : https://www.webmin.com 附加信息 :...

sandfly-entropyscan

What is sandfly-entropyscan? sandfly-entropyscan is a utility to quickly scan files or running processes and report on their entropy measure of randomness and if they are a Linux/Unix ELF type executable. Some malware for Linux is packed or encrypted and shows very high entropy. This tool can...

CVE-2021-31761

..| CVE-2021-31761 |.. 描述： 利用反射型跨站脚本（XSS）攻击，通过Webmin的运行进程功能获取远程命令执行（RCE） 测试版本： Webmin 1.973（GitHub最新版本 2021年03月07日） 攻击类型： 远程 影响： 远程命令执行 漏洞利用代码 POC： YouTube 演示： https://youtu.be/23VvUMu-28c 产品供应商： https://www.webmin.com 附加信息： "Webmin...

CVE-2021-31760

..| CVE-2021-31760 |.. Descripción : Explotando un ataque de falsificación de solicitudes entre sitios CSRF para obtener una ejecución remota de comandos RCE a través de la función de procesos en ejecución de Webmin Versión probada : Webmin 1.973 última versión de GitHub 07/03/2021 Tipo de ataque...

CVE-2026-89692 nfsd: clear CALLBACK_RUNNING on failed delegation recall queue

In the Linux kernel, the following vulnerability has been resolved: nfsd: clear CALLBACKRUNNING on failed delegation recall queue nfsdbreakonedeleg sets NFSD4CALLBACKRUNNING via testandsetbit at entry to serialize recall work, then calls nfsd4runcb to queue the recall. When the queue attempt fail...

EUVD-2026-76604

In the Linux kernel, the following vulnerability has been resolved: nfsd: clear CALLBACKRUNNING on failed delegation recall queue nfsdbreakonedeleg sets NFSD4CALLBACKRUNNING via testandsetbit at entry to serialize recall work, then calls nfsd4runcb to queue the recall. When the queue attempt fail...