MagicArch

MagicArch：适用于渗透测试的自动化 Arch Linux 配置 作者：MagicBytes MagicArch 是一个基于 Ansible 构建的全面性安装后脚本，旨在将基础的 Arch Linux 安装转变为完全装备的、专为渗透测试和性能定制的渗透测试发行版。MagicArch 专注于安全评估、定制化和性能优化，简化了设置流程，并确保为渗透测试任务提供量身定制的环境。 特点 Ansible 驱动的自动化 ：借助 Ansible 的强大功能，MagicArch 简化了设置过程，自动配置了必要的工具和设置。 渗透测试工具集成 ：MagicArch...

CVE-2024-23897

uso root@kitploit: python3 exp.py...

CVE-2019-14287

CVE-2019-14287 Un script para verificar la omisión de seguridad de sudo CVE-2019-14287. Este script verifica una versión vulnerable de sudo e intenta explotarla. Puede ejecutarse solo o integrarse en un escáner de enumeración como LinEnum.sh...

CVE-2020-13942

CVE-2020-13942 Ejecute httpx o httprob en los objetivos antes de usar el script. USO ./CVE-2020-13942.sh target.txt Crédito Este script fue creado a partir del repositorio de Rohit Gautam...

fb-phisher-python

Facebook钓鱼 原作者 ：Arslan Mughal 提供者 ：arjunindia 原始仓库 ：https://github.com/arslanmughal5566/facebookphishing 关于脚本： 通过该脚本，你可以利用一些社会工程学技巧窃取Facebook登录凭据。 要求： 1：Python3.x 2：Flask 安装Flask：打开终端并输入以下命令： user@repo pip3 install flask 确保在安装flask之前已经安装了python 3，如果你使用的是Windows或macOS，请先下载并安装python3 使用方法：...

CVE-2020-5902

CVE-2020-5902 Script de Python para explotar F5 Big-IP CVE-2020-5902 Ejemplos Explotación de lectura de archivo local: python3 CVE-2020-5902.py -t example.com -x lfr -f /etc/passwd Explotación RCE: python3 CVE-2020-5902.py -t example.com -x rce -a list+auth+user+admin...

BARK

BARK BARK significa BloodHound Attack Research Kit. Es un script de PowerShell diseñado para ayudar al equipo de BloodHound Enterprise a investigar y validar continuamente primitivas de abuso. BARK actualmente se enfoca en el conjunto de productos y servicios de Microsoft Azure. BARK no requiere...

Steghide-Brute-Force-Tool

Herramienta de Fuerza Bruta para Steghide Ejecuta un ataque de fuerza bruta con Steghide sobre un archivo que contiene información oculta y tiene una contraseña establecida. Cómo funciona Clona este repositorio en tu computadora y escribe en tu terminal: git clone...

flan

Flan Scan is a lightweight network vulnerability scanner. With Flan Scan you can easily find open ports on your network, identify services and their version, and get a list of relevant CVEs affecting your network. Flan Scan is a wrapper over Nmap and the vulners script which turns Nmap into a...

CVE-2017-10271

CVE-2017-10271 WebLogic wls-wsat component deserialization vulnerability CVE-2017-10271 detection script Usage root@kitploit: $ python CVE-2017-10271 url You also need to register an account on ceye.io, and fill in the Identifier and API Token provided by it in the following part of the code:...

ReQlogic v11.3 - Cross Site Scripting

ReQlogic v11.3 allow attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the POBatch and WaitDuration parameters. id: CVE-2022-41441 info: name: ReQlogic v11.3 - Cross Site Scripting author: r3Y3r53 severity: medium description: | ReQlogic v11.3 allow attackers ...

CandidATS 3.0.0 - Cross-Site Scripting

CandidATS 3.0.0 contains a cross-site scripting vulnerability via the page parameter of the ajax.php resource. An attacker can inject arbitrary script in the browser of an unsuspecting user in the context of the affected site. This can allow the attacker to steal cookie-based authentication...

Moodle LTI module Reflected - Cross-Site Scripting

A reflected XSS issue was identified in the LTI module of Moodle. The vulnerability exists due to insufficient sanitization of user-supplied data in the LTI module. A remote attacker can trick the victim to follow a specially crafted link and execute arbitrary HTML and script code in user's brows...

Parallels H-Sphere 3.6.1713 - Cross-Site Scripting

Parallels H-Sphere 3.6.1713 contains a cross-site scripting vulnerability via the indexen.php 'from' parameter. id: CVE-2022-30777 info: name: Parallels H-Sphere 3.6.1713 - Cross-Site Scripting author: 3th1cyuk1 severity: medium description: | Parallels H-Sphere 3.6.1713 contains a cross-site...

WordPress Plugin Flexible Custom Post Type < 0.1.7 - Cross-Site Scripting

A cross-site scripting vulnerability in edit-post.php in the Flexible Custom Post Type plugin before 0.1.7 for WordPress allows remote attackers to inject arbitrary web script or HTML via the id parameter. id: CVE-2011-5106 info: name: WordPress Plugin Flexible Custom Post Type 0.1.7 - Cross-Site...

PHPJabbers Fundraising Script v1.0 - Cross-Site Scripting

PHPJabbers Fundraising Script v1.0 is vulnerable to Cross Site Scripting XSS via the "action" parameter of index.php. id: CVE-2023-40751 info: name: PHPJabbers Fundraising Script v1.0 - Cross-Site Scripting author: ritikchaddha severity: medium description: | PHPJabbers Fundraising Script v1.0 is...

osTicket < 1.10.2 - Cross-Site Scripting

Cross-site scripting XSS vulnerability in /scp/index.php in Enhancesoft osTicket before 1.10.2 allows remote attackers to inject arbitrary web script or HTML via the "sort" parameter. id: CVE-2018-7196 info: name: osTicket 1.10.2 - Cross-Site Scripting author: ritikchaddha severity: medium...

Apache ActiveMQ <=5.15.5 - Cross-Site Scripting

Apache ActiveMQ versions 5.0.0 to 5.15.5 are vulnerable to cross-site scripting via the web based administration console on the queue.jsp page. The root cause of this issue is improper data filtering of the QueueFilter parameter. id: CVE-2018-8006 info: name: Apache ActiveMQ =5.15.5 - Cross-Site...

DedeCMS - Open Redirect via download.php

Dedecms 5.71sp1 and earlier contain a URL redirect caused by a logic error that does not properly validate GET request input, letting attackers redirect users to arbitrary URLs, exploit requires sending crafted GET requests. id: CVE-2024-57241 info: name: DedeCMS - Open Redirect via download.php...

NextGEN Gallery <= 4.2.3 - Reflected Cross-Site Scripting

NextGEN Gallery through 4.2.3 reflects a URL-decoded nggtag route value into the generated tag page without the context-specific escaping added in 4.2.4. An unauthenticated attacker can break out of the tag context and inject an auto-executing script. This template injects an svg onload payload...