Nmap-Cheat-Sheet

Nmap-Cheat-Sheet Nmap Target Selection root@kitploit: Scan a single IP nmap 192.168.1.1 Scan a host nmap www.testhostname.com Scan a range of IPs nmap 192.168.1.1-20 Scan a subnet nmap 192.168.1.0/24 Scan targets from a text file nmap -iL list-of-ips.txt Nmap Port Selection root@kitploit: Scan a...

domainhunter

Domain Hunter Authors Joe Vest @joevest & Andrew Chiles @andrewchiles Domain name selection is an important aspect of preparation for penetration tests and especially Red Team engagements. Commonly, domains that were used previously for benign purposes and were properly categorized can be purchas...

DIRT

DIRT: Herramienta de Reconocimiento Inicial de Controladores Estoy escribiendo esta herramienta para aprender C++ y obtener una evaluación inicial de los controladores instalados en un sistema Windows por ejemplo, imágenes maestras desarrolladas por OEMs o empresas. Se supone que ayuda con la...

recipe-blog-encoding

recipe-blog-encoding !WARNING Este proyecto está completamente codificado al estilo "vibe" probablemente parcialmente plagiado de este repositorio y el autor es un tontorrón que solo pensó que la idea era divertida Usa preámbulos de recetas optimizados para SEO como vehículo para codificar mensaj...

nray

nray Overview Nray is a free, platform and architecture independent port and application layer scanner. nray runs in a distributed manner to speed up scans and to perform scans from different vantage points. Event-based results allow to further process information during the scan, e.g. using tool...

catsploit

CATSploit🐈 CATSploit es una herramienta de pruebas de penetración automatizada que utiliza el método de Puntuación de Técnicas de Ataque Cibernético CATS y que puede ser utilizada sin la necesidad de un pentester. Actualmente, los pentesters realizaban implícitamente la selección de técnicas de...

catsploit

CATSploit🐈 CATSploit is an automated penetration testing tool using Cyber Attack Techniques Scoring CATS method that can be used without pentester. Currently, pentesters implicitly made the selection of suitable attack techniques for target systems to be attacked. CATSploit uses system...

hermes-osint

Hermes OSINT v3.0 🏛️🧠 The Agentic OSINT Analyst Conversational AI-driven investigations. Natural language. Expert results. 🤖✨ What's New in v3.0 🎉 Hermes 3.0 represents a complete paradigm shift from pipeline-based tool orchestration to a conversational AI-driven investigation platform. Powered by...

evilTrust

evilTrust Herramienta ideal para el despliegue automatizado de un Rogue AP con capacidad de selección de plantilla + 2FA. Esta herramienta dispone de varias plantillas a utilizar, incluyendo una opción de plantilla personalizada, donde el atacante es capaz de desplegar su propia plantilla...

The-Axer

El axer reemplazará el procedimiento manual de crear tus payloads con msfvenom, haciéndolo más fácil y mucho más rápido Contacta al propietario EL AXER TE PERMITIRÁ ELEGIR LA PLATAFORMA, FORMATO, CODIFICADOR, Vincular con otro archivo y muchas otras características...

prowler

Prowler Prowler is a Network Vulnerability Scanner implemented on a Raspberry Pi Cluster, first developed during Singapore Infosec Community Hackathon - HackSmith v1.0. Capabilities Scan a network a particular subnet or a list of IP addresses for all IP addresses associated with active network...

AOSP-DownloadProviderDbDumperSQLiWhere

AOSP-DownloadProviderDbDumperSQLiWhere PoC Exploiting SQL Injection in Android's Download Provider in Selection Parameter CVE-2019-2198 Security Advisory Android AOSP Download Provider SQL Injection in Query Selection Parameter CVE-2019-2198 Demo...

cve-2026-59891-control-lab

CVE-2026-59891 Regression & Control Lab An isolated hands-on lab and read-only audit project that compares the actual vulnerable and fixed versions of @sigstore/oci with the same input and checks environment-specific exposure conditions. The CVE Reporter for this project is gyubin02...

msfpc

MSFvenom Payload Creator MSFPC A quick way to generate various "basic" Meterpreter payloads via msfvenom part of the Metasploit framework. About MSFvenom Payload Creator MSFPC is a wrapper to generate multiple types of payloads, based on users choice. The idea is to be as simple as possible only...

bing-ip2hosts

Bing-ip2hosts Bing-ip2hosts is a Bing.com web scraper to discover hostnames by IP address. Description Bing-ip2hosts is a Bing.com web scraper that discovers hostnames by IP address. Bing is the flagship Microsoft search engine formerly known as MSN Search and Live Search. It provides a feature...

KsDumper-11

KsDumper-11 https://github.com/mastercodeon314/KsDumper-11/assets/78676320/9452970c-27cf-44df-b091-0d18a07937e5 Whats new v1.3.4 Added new feature Anti Anti Debugging Tools Detection Randomized MainWindow Title, most Control Titles, and the exe file name during runtime The process name is reverte...

CVE-2026-91958

FreeRDP versions before 3.31.0 fail to validate MonitorIds array values when parsing RDP connection files, allowing unbounded array indexing in xfdetectmonitors. Attackers can craft a malicious RDP file with an out-of-range selectedmonitors value to trigger out-of-bounds heap read and write...

DEBIAN-CVE-2026-90949

A flaw was found in GIMP's PSP Paint Shop Pro file loader. When processing a compressed selection channel, a heap-based buffer overflow can occur due to a mismatch between the allocated buffer size and the amount of data decompressed. A remote attacker could exploit this vulnerability by crafting...

CVE-2026-90949

A flaw was found in GIMP's PSP Paint Shop Pro file loader. When processing a compressed selection channel, a heap-based buffer overflow can occur due to a mismatch between the allocated buffer size and the amount of data decompressed. A remote attacker could exploit this vulnerability by crafting...

EUVD-2026-77472

A flaw was found in GIMP's PSP Paint Shop Pro file loader. When processing a compressed selection channel, a heap-based buffer overflow can occur due to a mismatch between the allocated buffer size and the amount of data decompressed. A remote attacker could exploit this vulnerability by crafting...