snmpvlan

snmpvlan ID CVE: CVE-2014-3341. ID Bug Cisco: CSCup85616. NexusTaco est un scanner SNMP qui peut être utilisé à la fois pour des tests internes et externes afin d'évaluer les commutateurs Cisco Nexus famille 5000 et 6000. Il existe de nombreux scanners SNMP et outils de brute force, celui-ci a ét...

CVE-2021-31761

CVE-2021-31761 Описание : Использование отраженной межсайтовой XSS-атаки для получения удаленного выполнения команд RCE через функцию запущенных процессов Webmin Протестированная версия : Webmin 1.973 последняя версия GitHub от 07/03/2021 Тип атаки: Удаленная Воздействие : Удаленное выполнение...

avml

AVML Acquire Volatile Memory for Linux Summary A portable volatile memory acquisition tool for Linux. AVML is an X8664 userland volatile memory acquisition tool written in Rust, intended to be deployed as a static binary. AVML can be used to acquire memory without knowing the target OS distributi...

difuze

difuze: Fuzzer for Linux Kernel Drivers This repo contains all the sources including setup scripts, you need to get difuze up and running. Tested on Ubuntu = 14.04.5 LTS 0. Running difuze from Docker Refer the readme As explained in our paper, There are two main components of difuze: Interface...

cve-collector

CVE-Collector Simple Latest CVE Collector Written in Python There are various methods for collecting the latest CVE Common Vulnerabilities and Exposures information. This code was created to provide guidance on how to collect, what information to include, and how to code when creating a CVE...

gdb-frontend

GDBFrontend is an easy, flexible and extensionable gui debugger. Installing Requirements GDB = 8.2 with python3 python3 = 3.6 tmux PIP Package Python Wheel Recommended You can install GDBFrontend with pip. root@kitploit: sudo python3 -m pip install gdbfrontend if it is already installed and you a...

CVE-2021-31760

..| CVE-2021-31760 |.. Description : Exploitation d'une attaque de type Cross-site request forgery CSRF pour obtenir une exécution de commande à distance RCE via la fonctionnalité de processus en cours d'exécution de Webmin Version testée : Webmin 1.973 dernière version GitHub au 07/03/2021 Type...

web_exploit_detector

Web Exploit Detector Introduction The Web Exploit Detector is a Node.js application and NPM module used to detect possible infections, malicious code and suspicious files in web hosting environments. This application is intended to be run on web servers hosting one or more websites. Running the...

RogueAssemblyHunter

. . \ / \ | | | .. | // \ / | | / \ / / \ \ / // // \ / | | | // | /\ / / | \ \ \ /| Y Y \ \ \ | | || // /|/ | / || / // | / // / / / / / / / / / | \ / | / \ | / \ / \ Y / | / | \ | \ /| | / | /|/|| /| | / / / صائد التجمعات المارقة صائد التجمعات المارقة هو أداة لاكتشاف وحدات CLR .NET 'المثيرة...

fileintel

fileintel This is a tool used to collect various intelligence sources for a given file. Fileintel is written in a modular fashion so new intelligence sources can be easily added. Files are identified by file hash MD5, SHA1, SHA256. The output is in CSV format and sent to STDOUT so the data can be...

toothpicker

ToothPicker ToothPicker is an in-process, coverage-guided fuzzer for iOS. It was developed to specifically targets iOS's Bluetooth daemon bluetoothd and to analyze various Bluetooth protocols on iOS. As it is built using FRIDA, it can be adapted to target any platform that runs FRIDA. This...

sandfly-entropyscan

What is sandfly-entropyscan? sandfly-entropyscan is a utility to quickly scan files or running processes and report on their entropy measure of randomness and if they are a Linux/Unix ELF type executable. Some malware for Linux is packed or encrypted and shows very high entropy. This tool can...

log4j-detect

log4j-detect Simple Python 3 script to detect the "Log4j" Java library vulnerability CVE-2021-44228 for a list of URL with multithreading The script "log4j-detect.py" developed in Python 3 is responsible for detecting whether a list of URLs are vulnerable to CVE-2021-44228. To do so, it sends a G...

threat-finder

OffSeq Threat Finder threat-finder identifie les logiciels vulnérables réellement en cours d'exécution sur un hôte — et non ce qu'un manifeste prétend — et vous indique quels résultats sont accessibles depuis le réseau. Il convertit chaque service en cours d'exécution et, avec --scope all, chaque...

CVE-2021-31762

..| CVE-2021-31762 |.. Description : Exploitation d'une attaque de falsification de requête intersite CSRF pour créer un utilisateur privilégié via la fonctionnalité d'ajout d'utilisateurs de Webmin, puis obtention d'un shell inverse via la fonctionnalité de processus en cours d'exécution de Webm...

CVE-2021-31761

..| CVE-2021-31761 |.. Description : Exploiter une attaque de Cross-Site Scripting XSS réfléchi pour obtenir une exécution de commande à distance RCE via la fonctionnalité des processus en cours d'exécution de Webmin Version testée : Webmin 1.973 dernière version de GitHub au 07/03/2021 Type...

CVE-2021-31760

..| CVE-2021-31760 |.. Description : Exploiter une attaque de falsification de requête intersite CSRF pour obtenir une exécution de commande à distance RCE via la fonctionnalité de processus en cours d'exécution de Webmin Version testée : Webmin 1.973 dernière version de GitHub 07/03/2021 Type...

Cisco-Smart-Exploit

Cisco-Smart-Exploit Эксплойт Cisco SmartInstall CVE-2018-0171 Вдохновлено C. Papathanasiou PoC Этот скрипт на Python 3 использует порт 4786 на устройстве Cisco, работающем под SmartInstall, для эксплуатации CVE-2018-0171. С помощью этого эксплойта злоумышленник может создать полезную нагрузку,...

nexmon

What is nexmon? Nexmon is our C-based firmware patching framework for Broadcom/Cypress WiFi chips that enables you to write your own firmware patches, for example, to enable monitor mode with radiotap headers and frame injection. Below, you find an overview what is possible with nexmon. This...

mal_unpack

malunpack Dynamic unpacker based on PE-sieve 📖 Read more . It deploys a packed malware, waits for it to unpack the payload, dumps the payload, and kills the original process. !CAUTION This unpacker deploys the original malware. Use it only on a VirtualMachine. ⚙ Usage Basic usage: root@kitploit:...