eternal_scanner

ETERNAL SCANNER 2.4 Eternal scanner is an network scanner for Eternal Blue exploit CVE-2017-0144 & Eternal Romance named pipe CVE-2017-0145 . Screenshots 2.2 Version New Implementations Eternal Romance Vulnerability check escan -er Escan Database Splited Results escan -l Video...

ChromeKatz

ChromeKatz ChromeKatz is a solution for dumping sensitive information from memory of Chromium based browsers. As for now, ChromeKatz consists of three projects: 1. CookieKatz - The cookie dumper 2. CredentialKatz - Deprecated.. for now 3. ElevationKatz - Get the decryption key from the elevation...

CVE-2024-50379

CVE-2024-50379 CVE-2024-50379 Exploit CVE-2024-50379.py and upload.txt are in the same directory The upload content is the webshell Here, the upload content generates a 2.jsp file You can use 2.jsp to create a new 4.jsp, the original Behinder webshell...

ShellEvil

ShellEvil Jonatas Fil Dkr Julio Della Flora Thiago Sena THX Struts 2 DefaultActionMapper Interactive Shell Exploit for CVE-2013-225 S2-016 The Struts 2 DefaultActionMapper supports a method for short-circuit navigation state changes by prefixing parameters with "action:" or "redirect:", followed ...

CVE-2024-50379-exp

CVE-2024-50379-exp -t 条件竞争时间 -u 域名 -f 写入木马 测试发现第一次条件竞争时有很大几率会写入失败需要重新再进行一次条件竞争才会写入木马，所以脚本第一次会进行固定6秒条件竞争检测是否写入，没有会再进行用户自定义或者默认的10秒检测，生成的木马为随机md5.jsp root@kitploit: python .\CVE-2024-50379.py -u http://192.168.31.33:8888/ -f '123456' -t 10 image...

CVE-2019-5418

CVE-2019-5418 1. Descripción de la vulnerabilidad Ruby on Rails es un framework de aplicaciones web, relativamente nuevo, construido sobre el lenguaje Ruby. Esta vulnerabilidad se debe principalmente a que Ruby on Rails utiliza el parámetro render file para renderizar vistas fuera de la...

CVE-2023-23397

CVE-2023-23397 - Microsoft Outlook Vulnerability For educational purposes only!...

Shoggoth

Shoggoth Presentado en BlackHat Europe 2022 Arsenal - Grabación de la presentación Introducción Descripción Shoggoth es un proyecto de código abierto basado en C++ y la biblioteca asmjit utilizado para cifrar shellcode, archivos PE y COFF de forma polimórfica. Shoggoth generará un archivo de...

goaccess

GoAccess ¿Qué es? GoAccess es un analizador de registros web y visor interactivo de código abierto y en tiempo real que se ejecuta en una terminal en sistemas nix o directamente en su navegador. Diseñado pensando en administradores de sistemas, ingenieros DevOps y profesionales de seguridad, ofre...

CVE-2019-8451

Este repositorio no tiene un README...

cve-2025-32462

cve-2025-32462 sudo/NEWS at SUDO188 · sudo-project/sudo · GitHub The sudo -h --host documentation states that -h can only be used with -l. In later updates, sudo -h was allowed to be used with -e, -i, etc. sudo --host-h -l--list /etc/sudoer.d is used to check what permissions a user has on a...

teatime

Teatime - Un Framework de Ataque RPC para Blockchain .. image:: https://img.shields.io/pypi/v/teatime.svg :target: https://pypi.python.org/pypi/teatime .. image:: https://img.shields.io/travis/dmuhs/teatime.svg :target: https://travis-ci.com/dmuhs/teatime .. image::...

teatime

=========================================== Teatime - A Blockchain RPC Attack Framework .. image:: https://img.shields.io/pypi/v/teatime.svg :target: https://pypi.python.org/pypi/teatime .. image:: https://img.shields.io/travis/dmuhs/teatime.svg :target: https://travis-ci.com/dmuhs/teatime...

bloodyAD

⚠️ autobloody se ha movido a su propio repositorio bloodyAD bloodyAD es una navaja suiza de escalada de privilegios de Active Directory Descripción Esta herramienta puede realizar llamadas LDAP específicas a un controlador de dominio para llevar a cabo la privesc de AD. bloodyAD admite...

stratus-red-team

Stratus Red Team Stratus Red Team es "Atomic Red Team™" para la nube, que proporciona una emulación granular y autónoma de técnicas de ataque ofensivas...

CVE-2024-4956

CVE-2024-4956 : Nexus Repository Manager 3 Dork: Shodan:http.html:"Nexus Repository" Hunter:product.name="Nexus Repository" FOFA:app="Nexus-Repository-Manager" Poc : root@kitploit: GET /%2F%2F%2F%2F%2F%2F%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd HTTP/1.1 Host: localhost:8081...

CTF-s-Tools

Repository to index interesting Capture The Flag tools and other stuff. Table of Contents Platforms to practice Cryptography Main Secondary Hashes Esoteric Languages Steganography OSINT Threat Hunting Forensics Reversing Exploiting Pentesting Recon Web Exploit Database Docker Credentials CVE...

sast-rules

Reglas de Semgrep Este es el repositorio central de reglas de Semgrep que alberga las reglas de Semgrep para el analizador Semgrep de GitLab. El repositorio está estructurado de la siguiente manera: root@kitploit: . ├── mappings │ ├── findsecbugs.yml │ ├── eslint.yml │ └── ... ├── rules │ ├──...

ICMPExfil

ICMP Exfil ICMP Exfil allows you to transmit data via valid ICMP packets. You use the client script to pass in data you wish to exfiltrate, then on the device you're transmitting to you run the server. Anyone watching-- human or security system-- will just see valid ICMP packets, there's nothing...

fuzztruction

Fuzztruction Fuzztruction is an academic prototype of a fuzzer that does not directly mutate inputs as most fuzzers do but instead uses a so-called generator application to produce an input for our fuzzing target. As programs generating data usually produce the correct representation, our fuzzer...