rauc-1.5-integration

Integración de RAUC 1.5 Este repositorio contiene ejemplos para simplificar la integración de la actualización RAUC en proyectos existentes. Puede suscribirse a https://github.com/rauc/rauc-1.5-integration/issues/1 para recibir notificaciones de actualizaciones importantes de este repositorio y d...

modsecurity-cve-2018-6389

modsecurity-cve-2018-6389 A ModSecurity ruleset for detecting potential attacks using CVE-2018-6389. For more information, see https://www.rastating.com/protecting-wordpress-against-cve-2018-6389/...

CVE-2020-8515-PoC

CVE-2020-8515-PoC CVE-2020-8515-PoC...

LetMeFuckIt-Scanner

LetMeFuckIt Scanner AutoPWNED Scanner and Exploit Magento The Scanner explores the SQLi Vulnerability 1.9.1.0 CE of Magento. The vulnerability was fixed in Patch SUPEE-5344 , however, the scanner is used to locate and test systems that did not apply the security patch. LetMeFuckIt was written in...

CVE-2021-40444

EXP Ladon CVE-2021-40444 Office Vulnerability Exploitation Vulnerability Overview On September 8th Beijing time, NSFOCUS CERT monitored that Microsoft released a security advisory disclosing the Microsoft MSHTML remote code execution vulnerability. Attackers can craft malicious ActiveX controls f...

webtech

WebTech Identify technologies used on websites. More info on the release's blogpost. CLI Installation WebTech is available on pip: root@kitploit: pip install webtech It can be also installed via setup.py: root@kitploit: python setup.py install --user Burp Integration Download Jython 2.7.0...

EXOCET-AV-Evasion

EXOCET - AV-evading, undetectable, payload delivery tool Chang Tan AWS Certified Cloud Practitioner and Solutions Architect Associate [email protected] Updated EXOCET Usage Make sure you pack your payloads to avoid any leaks of the crypter's key and further frustrate malware analysts. A...

fuxi

Fuxi 2.1 - developing Fuxi is cross-platform compatible and works in any Python 3.x environment including Linux, Mac OSX and Windows. Getting Started Docker root@kitploit: docker pull jeffzh3ng/fuxi docker run -itd --name fuxidocker -p 5000:50020 jeffzh3ng/fuxi:latest Wait about 15 seconds for th...

Modlishka

..Modlishka.. Modlishka is an open-source penetration testing tool that acts as a man-in-the-middle proxy. It introduced a new technical approach to handling browser-based HTTP traffic flow, which allows it to transparently proxy multi-domain destination traffic, both TLS and non-TLS, over a sing...

snyk-js-jquery-565129

Este repositorio contiene los parches para CVE-2020-11022 y CVE-2020-11023 que afectan a todas las versiones de jQuery anteriores a la 3.5.0, incluyendo los parches de DanielRuf/snyk-js-jquery-174006. Estos parches se generaron con diff -u original patched patchfile. Aplicar los parches Puede...

DependencyCheck

Dependency-Check Dependency-Check es una herramienta de Análisis de Composición de Software SCA que intenta detectar vulnerabilidades divulgadas públicamente contenidas en las dependencias de un proyecto. Lo hace determinando si existe un identificador de Common Platform Enumeration CPE para una...

PowerShell-Log4J-Scanner

PowerShell-Log4J-Scanner puede encontrar, analizar y parchear archivos Log4J debido a CVE-2021-44228, CVE-2021-45046 sitio oficial de Apache: https://logging.apache.org/log4j/2.x/download.html El script es para Powershell, debería funcionar en Win10 o Win11...

CVE-2024-39700-PoC

CVE-2024-39700 概念验证 使用此模板并启用测试选项创建的仓库会包含 update-integration-tests.yml workflow，该 workflow 存在 RCE 漏洞。 PoC PR: https://github.com/LOURC0D3/CVE-2024-39700-PoC/pull/2 提交 操作结果: https://github.com/LOURC0D3/CVE-2024-39700-PoC/actions/runs/10157571828/job/28087926847 结果 这不是我的漏洞，我只是为它制作了一个PoC。 参考...

scan-log4shell

scan-log4shell Un conjunto de escaneo para encontrar servidores afectados por la vulnerabilidad log4shell CVE-2021-44228 con un ejemplo para probarlo...

killosx

killosx Use Apple CoreText exploit CVE-2012-3716 and launch an AP to affect all vulnerable Apple devices within wifi range. Installation: Run 'make install' in the killosx directory. killosx can now be run from anywhere with 'killosx'. Usage: root@kitploit: killOSX Usage - killosx -i wlan0 Run...

DFIR_Resources_REvil_Kaseya

Resources for DFIR Professionals Responding to the REvil Ransomware Kaseya Supply Chain Attack Yesterday Sophos and Huntress Labs identified that Kaseya, a remote management provider popular with MSPs, was compromised to deploy a supply chain ransomware attack. A large number of organisations wer...

CVE-2022-34918

CVE-2022-34918 LPE POC 尝试结合了一下360提出的USMA利用思路，还不错。 Chinese writeup: CVE-2022-34918 netfilter 分析笔记 基于USMA的内核通用EXP编写思路在 CVE-2022-34918 上的实践 !! For educational / research purposes only. Use at your own risk. !! poc below in under pockeyringnormal folder 参考...

Minesweeper

A Burpsuite plugin BApp to aid in the detection of scripts being loaded from over 23000+ malicious cryptocurrency mining domains cryptojacking. Summary Minesweeper will passively scan in-scope items looking for matches against more than 23000+ known cryptojacking domains within the source of page...

macsurf

The modern web, on a 25-year-old Mac. A native browser for the Carbon era, Mac OS 8.6 through Mac OS X 10.6: real CSS, modern JavaScript, and HTTPS on the Mac itself. No proxy, no second machine. MacSurf 2.0.5 on a Power Mac G3 iMac, renderinghackaday.com at full desktop width over native HTTPS. ...

speakeasy

Speakeasy Speakeasy is a Windows malware emulation framework that executes binaries, drivers, and shellcode in a modeled Windows runtime instead of a full VM. It emulates APIs, process/thread behavior, filesystem, registry, and network activity so samples can keep moving through realistic executi...