xCrack Python Tools For Hackers

TG Download Link: https://t.me/+0z9FapS4mBgyZjhl xCrack 面向黑客和垃圾邮件发送者的 Python 黑客工具 要求： Python 3.x 测试环境： Python 3.10.4 ► cPanel 部分 ◄ 批量 cPanel 活跃检测器 批量 cPanel 至 Shell 上传器 批量 cPanel 至 SMTP 破解器 批量 cPanel 至 Webmail 破解器 批量 cPanel 至 WHM 破解器（代理商） 批量 cPanel 至 WHM 破解器（Root） ► Shell 部分 ◄ 批量 Shell 至任意文件上传器 批...

ARP-Spoof-Detector

root@kitploit: /\ | | \ / | / | | \ | | | | / \ | | | | | | | | | | | | | | | | / /\ \ | /| / \ | ' \ / \ / | | | | | |/ \ / / | / | '| / | | \ | | | | | | | | | || | / || / | || | | // \| \| |/| ./ / /|| |/ |\||\/|| | | || 说明 检测计算机上ARP欺骗攻击的ARP欺骗检测脚本。 ➡️...

CVE-2019-11395

CVE-2019-11395 Descripción general Esta prueba de concepto PoC demuestra una vulnerabilidad de desbordamiento de búfer en MailCarrier 2.51, que permite a atacantes remotos ejecutar código arbitrario mediante una cadena larga. La vulnerabilidad puede explotarse utilizando los siguientes procesos:...

CVE-2023-51764-POC

基于 https://github.com/duy-31/CVE-2023-51764 以及 https://events.ccc.de/congress/2023/hub/en/event/smtpsmugglingspoofinge-mailsworldwide/?trk=publicpostcomment-text 这只是一个移植到Python 3.x的PoC。...

smtpshell

smtpshell 一种简单反向Shell，可通过Gmail SMTP或任何其他SMTP通信以绕过网络限制 注意： root@kitploit: 该反向Shell通过Gmail SMTP通信（你也可以使用其他任何SMTP） 但Gmail SMTP有效，因为大多数公司会阻止未知流量， 而Gmail流量是合法且在任何地方都允许的。 警告： root@kitploit: 1. 不要将任何Payload上传到VirusTotal.com，因为此工具会随时间失效。 2. Virustotal会与杀毒软件公司共享签名。 3. 再次强调，别犯傻！ 如何设置 root@kitploit: 1...

mailenable-cve-2022-36934

MailEnable CVE-2022-36934 Exploit Module Metasploit module for MailEnable's authentication bypass vulnerability CVE-2022-36934, leading to remote code execution. 📌 Features Exploits MailEnable's improper input sanitization in SMTP/POP3 Supports both x86 and x64 Windows targets No user interaction...

CVE-2020-7247-POC

Foreword Key facts about the exploit Installing the vulnerable server Configuration Environment disclaimers Exploit Manual Exploitation Scripted Exploitation Foreword This repository should serve as a base to set up and exploit CVE-2020-7247 in a controlled and private environment. All of the...

capa

Website | Download | Web Interface capa detects capabilities in executable files. You run it against a PE, ELF, .NET module, shellcode file, or a sandbox report and it tells you what it thinks the program can do. For example, it might suggest that the file is a backdoor, is capable of installing...

gmailc2

gmailc2 root@kitploit: 一个完全不可检测的C2服务器，通过Google SMTP通信，以绕过防病毒保护和网络流量限制 注意： root@kitploit: 此RAT通过Gmail SMTP进行通信（你也可以使用其他SMTP），但Gmail SMTP有效， 因为大多数公司会阻止未知流量，而Gmail流量是有效的，且在任何地方都允许。 警告： root@kitploit: 1. 不要将任何载荷上传到VirusTotal.com，因为此工具将无法 随时间正常工作。 2. VirusTotal会与防病毒公司共享签名。 3. 再次强调，不要犯傻！ 如何设置...

gmailc2

gmailc2 root@kitploit: A Fully Undetectable C2 Server That Communicates Via Google SMTP to evade Antivirus Protections and Network Traffic Restrictions Note: root@kitploit: This RAT communicates Via Gmail SMTP or u can use any other smtps as well but Gmail SMTP is valid because most of the...

Easy WP SMTP <= 1.3.9 - Missing Authorization to Arbitrary Options Update

The Easy WP SMTP plugin for WordPress is vulnerable to authorization bypass in versions up to, and including, 1.3.9. This is due to missing capability checks on the admininit function, in addition to insufficient input validation. This makes it possible for unauthenticated attackers to modify the...

SMTP by BestWebSoft < 1.1.0 - Cross-Site Scripting

The bws-smtp plugin before 1.1.0 for WordPress has multiple XSS issues. id: CVE-2017-18518 info: name: SMTP by BestWebSoft 1.1.0 - Cross-Site Scripting author: luisfelipe146 severity: medium description: | The bws-smtp plugin before 1.1.0 for WordPress has multiple XSS issues. impact: |...

SMTP WP Plugin Directory Listing

The WordPress Easy WP SMTP Plugin has its log folder remotely accessible and its content available for access. id: CVE-2020-35234 info: name: SMTP WP Plugin Directory Listing author: PR3R00T severity: high description: The WordPress Easy WP SMTP Plugin has its log folder remotely accessible and i...

SonarQube - Authentication Bypass

SonarQube 8.4.2.36762 allows remote attackers to discover cleartext SMTP, SVN, and GitLab credentials via the api/settings/values URI. id: CVE-2020-27986 info: name: SonarQube - Authentication Bypass author: pikpikcu severity: high description: | SonarQube 8.4.2.36762 allows remote attackers to...

D-Link Central WifiManager - Server-Side Request Forgery

D-Link Central WifiManager is susceptible to server-side request forgery. The MailConnect feature on D-Link Central WiFiManager CWM-100 1.03 r0098 devices is intended to check a connection to an SMTP server but actually allows outbound TCP to any port on any IP address, as demonstrated by an...

legba

legba Join the project community on our server! Legba is a multiprotocol credentials bruteforcer / password sprayer and enumerator built with Rust and the Tokio asynchronous runtime in order to achieve better performances and stability while consuming less resources than similar tools. Key Featur...

CVE-2023-7028-Docker

CVE-2023-7028 con Docker 🎯 ¿Quieres practicar con la nueva CVE de Gitlab? Sigue las instrucciones Construye el laboratorio 1. Instala Docker : https://docs.docker.com/get-docker/ 2. Clona el proyecto : git clone https://github.com/Trackflaw/CVE-2023-7028-Docker.git. 3. Ve al proyecto : cd...

interactsh

An OOB interaction gathering server and client library Features • Usage • • • •...

smtp-tunnel-proxy

📧 Proxy de Túnel SMTP Un túnel encubierto de alta velocidad que disfraza el tráfico TCP como comunicación de correo electrónico SMTP para evadir firewalls de inspección profunda de paquetes DPI. root@kitploit: ┌─────────────┐ ┌─────────────┐ ┌─────────────┐ ┌──────────────┐ │ Application │─────▶│...

eximrce-CVE-2019-10149

eximrce Conexión simple de socket Python para probar si exim es vulnerable a CVE-2019-10149. El payload simplemente toca un archivo en /root/lweximtest. La salida será lenta dependiendo de la respuesta del servidor y de no saber cómo usar correctamente el módulo socket de Python. Me encantaría un...