micr0_shell

micr0 shell Micr0shell 是一个轻量高效的 Python 脚本，用于动态生成 Windows X64 位置无关代码 PIC 免空字节反向 Shell shellcode。根据所选选项，生成的 shellcode 可比 msfvenom 生成的同类 shellcode 小 27 字节，同时避免包含 0x00 字节。此外，由于 MSF 的 shellcode 被广泛使用，更容易被基于签名的检测方法标记，因此 micr0shell 生成的 shellcode 提供了额外的规避能力。 root@kitploit: └─ msfvenom -p...

netlas-cookbook

Netlas CookBook The goal of this guide is to teach anyone interested in cybersecurity, regardless of their knowledge level, how to make the most of Netlas Search Tools. This is a long read. We have collected as many simple use cases as possible and demonstrated how to automate them. ⭐️ Give us a...

udp2raw

Udp2raw-tunnel udp2raw tunnel，通过raw socket给UDP包加上TCP或ICMP header，进而绕过UDP屏蔽或QoS，或在UDP不稳定的环境下提升稳定性。可以有效防止在使用kcptun或者finalspeed的情况下udp端口被运营商限速。 支持心跳保活、自动重连，重连后会恢复上次连接，在底层掉线的情况下可以保持上层不掉线。同时有加密、防重放攻击、信道复用的功能。 English udp2raw+kcptun stepbystep教程 udp2raw+finalspeed stepbystep教程 udp2raw wiki 提示：...

Hack Tools

Hack Tools（黑客工具） 本仓库包含 200 多种 工具 和资源 ，可用于 红队活动 。 其中一些工具是专门为红队设计的，而另一些则是通用工具，可适用于红队场景。 警告 本仓库中的材料仅供参考和教育目的。不应用于任何非法活动。 注意 使用箭头隐藏工具列表标题。 点击 🔙 返回列表。 克隆命令bash git submodule update --init --recursive root@kitploit: 添加新项目bash git submodule add https://github.com/example.git docs:...

pywhisker

pyWhisker pyWhisker 是原始 Whisker 的 Python 等效版本，由 Elad Shamir 创建，原版使用 C 编写。该工具允许用户操作目标用户/计算机的 msDS-KeyCredentialLink 属性，从而获得对该对象的完全控制权。 它基于 Impacket 和一个名为 PyDSInternals 的 Python 等效版本，后者是 Michael Grafnetter's DSInternals 的衍生品，由 podalirius 开发。 此工具与 Dirk-jan's PKINITtools 一起，允许在仅基于 UNIX 的系统上实现完整的原始利用。...

ghidrecomp

Ghidrecomp - Command Line Ghidra Decompiler About This Python command line tool decompiles all functions of a binary and writes them to a directory in separate C files: root@kitploit: flowchart LR afilename -- bghidrecomp a2Symbol Server -- b b -- eGhidra Project Files b -- output subgraph output...

ghidrecomp

Ghidrecomp - Descompilador Ghidra de línea de comandos Acerca de Esta herramienta de línea de comandos en Python descompila todas las funciones de un binario y las escribe en un directorio en archivos C separados:mermaid flowchart LR afilename -- bghidrecomp a2Symbol Server -- b b -- eGhidra...

CVE-2023-49971

CVE-2023-49971 Customer Support System 1.0 - Cross-Site Scripting XSS Vulnerability in "firstname" field/parameter on "customerlist" Page Description : Customer Support System 1.0 is vulnerable to stored XSS. A XSS vulnerability exists in version 1 of the Customer Support System. A malicious acto...

CVE-2023-37756-CWE-521-lead-to-malicious-plugin-upload-in-the-i-doit-Pro-25-and-below

CVE-2023-37756 – Weak Password Requirement in admin-center lead to malicious plugin upload in the i-doit Pro 25 and below i-doit Pro 25 and below are vulnerable to weak password requirement vulnerability in admin-center + malicious plugin upload lead to RCE vulnerability. These vulnerabilities...

CVE-2024-10355

Source code Petrol pump management software free download | SourceCodester Description SQL Injection vulnerability in sourcecodester Petrol pump management software v1.0, A vulnerability has been found that is rated as high risk, affecting some unknown functionality of the admin\invoice.php file,...

JShunter

JSHunter Professional JavaScript Security Analysis Tool Complete endpoint discovery, sensitive data detection, and advanced code analysis for security professionals About JSHunter is a comprehensive command-line tool for JavaScript security analysis and endpoint discovery. Built for security...

WordPress Pochipp plugin <= 1.20.2 - Reflected Cross-Site Scripting via 'keyword' Parameter vulnerability

Reflected Cross-Site Scripting via 'keyword' Parameter vulnerability discovered by Dmitrii Ignatyev - CleanTalk Inc in WordPress Plugin Pochipp versions = 1.20.2...

CVE-2023-31705

CVE-2023-31705 description A Reflected Cross-site scripting XSS vulnerability in Sourcecodester Task Reminder System 1.0 allows an authenticated user to inject malicious javascript into the page parameter. Vulnerability Type Cross Site Scripting XSS Vendor of Product Sourcecodster Affected Produc...

DSXS

Damn Small XSS Scanner Damn Small XSS Scanner （DSXS）是一款功能完整的跨站脚本漏洞扫描器（支持 GET 和 POST 参数），代码行数不到 100 行。 在可选设置方面，它支持 HTTP 代理以及 HTTP 头部字段 User-Agent、Referer 和 Cookie。 示例运行 root@kitploit: $ python3 dsxs.py -h Damn Small XSS Scanner DSXS 100 LoC Lines of Code v0.3a by: Miroslav Stampar @stamparm Usage:...

sigma-cli

Sigma Command Line Interface This is the Sigma command line interface using the pySigma library to manage, list and convert Sigma rules into query languages. Getting Started Installation The easiest way to install the Sigma CLI is via pipx or pip. For this purpose run one of the following:...

kodex

Kodex Community Edition - CE is an open-source toolkit for privacy and security engineering. It helps you to automate data security and data protection measures in your data engineering workflows. It offers the following functionality: Read data items from a variety of sources such as files,...

warcannon

WARCannon - Catastrophically powerful parallel WARC processing WARCannon was built to simplify and cheapify the process of 'grepping the internet'. With WARCannon, you can: Build and test regex patterns against real Common Crawl data Easily load Common Crawl datasets for parallel processing Scale...

vulnrepro-benchmark

VulnRepro A benchmark that checks if an AI model can actually review vulnerable code, or if it just sounds confident. Most security benchmarks ask one question: can the model find the bug? That is only half the job. The other half, the part that actually wears you down in real review work, is not...

burpgpt

!IMPORTANT 宣布推出 BurpGPT Pro，该版本专为满足专业人士和网络安全精品店的需求而定制。探索一系列强大的功能和用户友好的界面，增强你的能力并确保最佳用户体验。要享受这些优势，请访问我们的网站并阅读文档以获取更多信息。 !WARNING 请注意，社区版已不再维护且无法正常运行。要继续接收更新、新功能、错误修复和改进，请考虑升级到专业版。为社区版提交Issues 已不再有用。 burpgpt burpgpt 利用 AI 的力量来检测传统扫描器可能遗漏的安全漏洞。它将网络流量发送给用户指定的 OpenAI 模型，从而在被动扫描器中实现复杂的分析。该扩展提供可定制的...

http-mcp-bridge

HTTP MCP Bridge This project implements an HTTP server that acts as a bridge between HTTP/1.1 requests and a remote MCP server, using the mcp python library GitHub. The main purpose of this initiative is to be able to use HTTP security tools to test remote MCP servers using the remote transport...