xtrace-sdk

Зашифрованная векторная база данных. Ваши данные никогда не покидают вашу машину в открытом виде. Документация | X | LinkedIn Управляйте памятью ИИ → mem.xtrace.ai Что такое XTrace? Каждая векторная база данных на рынке требует, чтобы вы передавали свои данные третьей стороне в открытом виде...

cwe-sdk-javascript

cwe-sdk MITRE / CAPEC와 호환되는 공통 취약점 열거Common Weakness Enumeration, CWE Node.js SDK입니다...

drift-node-sdk

Node.js Tusk Drift SDK позволяет быстро и детерминированно тестировать API, перехватывая и воспроизводя вызовы API, совершаемые к вашему сервису и от него. Автоматически записывайте реальные вызовы API, а затем воспроизводите их в качестве тестов с помощью Tusk CLI для поиска регрессий. Во время...

CVE-2022-30190

CVE-2022-30190 Follina CVE-2022-30190Follina에 대한 개념 증명PoC입니다. 요구 사항 피해자 Windows 10 21H1동급 또는 이전 버전 보안 업데이트 KB5016616 미설치 공격자 Microsoft .NET SDK Python 3.9 이상 구성 공격자 서버의 호스트 이름과 포트 번호를 수정하려면 config.xml을 편집하세요. root@kitploit: hostname port 사용법 트로이 목마 다음 Python 스크립트는 trojan.docx 파일을 생성하고 공격자의 서버를...

doctrack

Doctrack Tool to manipulate and weaponize Office Open XML documents. Features Create Office Open XML documents Word, Excel Insert tracking pixels and UNC paths Remote Template injection Insert CustomXML parts Inspect external target URLs, metadata and Custom XML parts Installation You will need t...

sgxray

SGXRay: Автоматизация обнаружения уязвимостей для приложений SGX Intel SGX защищает изолированную логику приложения и конфиденциальные данные внутри анклава с помощью аппаратного шифрования памяти. Использование такого механизма аппаратной безопасности требует строгой модели программирования при...

sgxray

SGXRay: Automating Vulnerability Detection for SGX Apps Intel SGX protects isolated application logic and sensitive data inside an enclave with hardware-based memory encryption. To use such hardware-based security mechanism requires a strict programming model on memory usage， with complex APIs in...

metashield-clean-up-sdk-python

Metashield-clean-up-sdk-python 설치 metashieldcleanup 패키지를 pip로 설치합니다:: root@kitploit: pip install metashieldcleanup 사용법 파일을 정리하는 예제입니다. .. code-block:: python root@kitploit: import time import base64 from metashieldcleanup.api import MetashieldCleanUp api = MetashieldCleanUp"REPLACEAPPIDHERE",...

Video Conferencing with Zoom API < 4.6.6 - Unauthenticated SDK Signature Generation

Zoom WordPress plugin 4.6.6 contains a broken authentication caused by disabled nonce verification in an AJAX handler, letting unauthenticated attackers generate valid Zoom SDK signatures and retrieve the Zoom SDK key. id: CVE-2026-1368 info: name: Video Conferencing with Zoom API 4.6.6 -...

TOTOLINK/Realtek Routers - Information Disclosure

A certain router administration interface using Realtek APMIB e.g., on TOTOLINK models allows unauthenticated remote attackers to disclose the entire router configuration, including sensitive credentials, via accessing the "config.dat" file. Affected devices include TOTOLINK A3002RU through 2.0.0...

cve-2022-27255

CVE-2022-27255 - Переполнение буфера SIP ALG в Realtek eCos SDK Этот репозиторий содержит материалы доклада "Исследование скрытой поверхности атак OEM IoT-устройств: взлом тысяч маршрутизаторов через уязвимость в SDK Realtek для ОС eCos", который был представлен на DEFCON30. Содержимое этого...

aws_public_ips

awspublicips...

CVE-2026-45056

matrix-sdk-crypto (Rust crate, part of the Matrix Rust SDK) versions from 0.12.0 up to the fix are vulnerable to sender spoofing in end-to-end encrypted to-device messages. The root cause is a missing validation of the sender's user ID when decrypting an Olm-encrypted event that contains the send...

CVE-2026-45057

CVE-2026-45057 affects the matrix-sdk-ui Rust crate (part of matrix-rust-sdk) prior to version 0.16.1 . The message edit validation logic is missing a check: when replacing an encrypted event, the replacement event is not required to be encrypted itself. This allows a malicious homeserver adminis...

CVE-2026-89090

An unrecovered panic in the event stream header decoder in Amazon AWS SDK for Go v2 before release-2026-03-23 might allow an unauthenticated remote actor to terminate the consuming application process via a crafted event stream response frame containing a header value type outside the valid range...

httpdoom

HttpDoom - HTTP Attack surface analyser Validate large HTTP-based attack surfaces in a very fast and reliable way. Inspired by Aquatone. Installing You must have dotnet SDK at version 6+: root@kitploit: $ dotnet pack -c Release -o nupkg $ dotnet tool install --global --add-source .\nupkg...

apkinspector

AndroidAnalysisGUI Это руководство по получению альфа-версии Android Analysis GUI. Протестировано только на Linux. 1. Установите Qt SDK. 1 Скачайте QtSDK файл QtSDKLin32offlinev111en.run с "http://qt.nokia.com/downloads/sdk-linux-x11-32bit-cpp-offline" и установите его с правами root. 2 Настройте...

EUVD-2026-76157

An unrecovered panic in the event stream header decoder in Amazon AWS SDK for Go v2 before release-2026-03-23 might allow an unauthenticated remote actor to terminate the consuming application process via a crafted event stream response frame containing a header value type outside the valid range...

CVE-2026-89090

CVE-2026-89090 affects the event stream header decoder in the AWS SDK for Go v2 (versions before release-2026-03-23). An unrecovered panic occurs when a crafted event stream response frame contains a header value type outside the valid range, allowing an unauthenticated remote actor to terminate ...

CVE-2026-89090 Denial of service in the event stream header decoder in AWS SDK for Go v2

An unrecovered panic in the event stream header decoder in Amazon AWS SDK for Go v2 before release-2026-03-23 might allow an unauthenticated remote actor to terminate the consuming application process via a crafted event stream response frame containing a header value type outside the valid range...