pythem

pythem - Penetration Testing Framework pythem is a multi-purpose pentest framework written in Python. It has been developed to be used by security researchers and security professionals. The tool intended to be used only for acts within the law. I am not liable for any undue and unlawful act...

backdoorppt

backdoorppt - 'Office spoof extensions tool' root@kitploit: Version release: v1.7-Stable Author: pedro ubuntu r00t-3xp10it Distros Supported: Linux Kali, Ubuntu, Mint Suspicious-Shell-Activity© SSA RedTeam develop @2017 Transform your payload.exe into one fake word doc .ppt root@kitploit: Simple...

arp-validator

arp-validator Security Tool to detect arp poisoning attacks Features Uses a faster approach in detection of arp poisoning attacks compared to passive approaches Detects not only presence of ARP Poisoning but also valid IP-MAC mapping when LAN hosts are using non-customized network stack Stores...

dns-spoof

このリポジトリには README がありません。...

arp-dns-spoof

インストールDebianベースのLinuxディストリビューション Scapy をインストール root@kitploit: % sudo apt-get install tcpdump graphviz imagemagick python-gnuplot python-crypto python-pyx % pip install scapy python-NetfilterQueue をインストール root@kitploit: % sudo apt-get install build-essential python-dev libnetfilter-queue-dev % git...

CVE-2026-79173

A flaw was found in chromium-browser. A remote attacker could exploit this vulnerability by crafting a malicious HTML page, leading to user interface UI misrepresentation. This misrepresentation allows the attacker to spoof UI elements, potentially deceiving users...

imposter

IMPOSTER 不正ネットワーク上のWindowsクライアントを攻撃するためのペンテストツール。 現在のバージョン 機能 LDAP認証をNTLM認証にダウングレード ネットワークロケーション認識を欺くためにドメインコントローラの初期ステップを偽装 サーバー DNS, CLDAP, LDAP セットアップ 現在のバージョンはKali Linuxでテストされていますが、他のオペレーティングシステムでも動作するはずです。 依存関係 pyasn1 dnspython Kali Linuxでのクイックセットアップ Kali...

overload

오버로드 인가된 보안 테스트를 위한 Layer 2, Layer 4, Layer 7 공격 방법을 갖춘 Python 기반 네트워크 부하 테스트 도구입니다. !WARNING 이 프로젝트는 보관 처리되었으며 더 이상 적극적으로 유지 관리되지 않습니다. 소스 코드는 계속 사용 가능하지만, 새로운 기능, 버그 수정 또는 업데이트는 계획되어 있지 않습니다. 이 프로젝트는 더 이상 개발 배후의 현재 목표와 관심사를 반영하지 않으므로 향후 개발은 중단되었습니다. 기능 Layer 7 공격: HTTP, HTTP 프록시, Slowloris,...

ssh-mitm

SSH MITM v2.3-dev Author: Joe Testa @therealjoetesta Overview This penetration testing tool allows an auditor to intercept SSH connections. A patch applied to the OpenSSH v7.5p1 source code causes it to act as a proxy between the victim and their intended SSH server; all plaintext passwords and...

ARP-Spoof-Detector

root@kitploit: /\ | | \ / | / | | \ | | | | / \ | | | | | | | | | | | | | | | | / /\ \ | /| / \ | ' \ / \ / | | | | | |/ \ / / | / | '| / | | \ | | | | | | | | | || | / || / | || | | // \| \| |/| ./ / /|| |/ |\||\/|| | | || 설명 컴퓨터에 대한 ARP 스푸핑 공격을 탐지하는 ARP Spoof Detector 스크립트입니다. ➡️...

Linux Distros Unpatched Vulnerability : CVE-2026-91713

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Missing authorization in Browser in Google Chrome prior to 153.0.8010.47 allowed a remote attacker who had compromised the renderer process to spoof UI elements...

Linux Distros Unpatched Vulnerability : CVE-2026-91739

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Missing authorization in Transactions Platform in Google Chrome prior to 153.0.8010.47 allowed a remote attacker who had compromised the renderer process to spo...

Linux Distros Unpatched Vulnerability : CVE-2026-91723

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Race condition in WebAppInstalls in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to spoof UI elements via a crafted HTML page. Chromium securi...

wildfly-messaging-activemq-subsystem: artemis-server: jgroups: artemis cluster password leak via jgroups spoof

Artemis and JGroups lack of access controls in certain situations can allow an attacker to spoof a password request in JGroups and subsequently gain access to the cluster. This allows the attacker manage-level authority for provided messaging and queue operations...

wildfly-messaging-activemq-subsystem: artemis-server: jgroups: artemis cluster password leak via jgroups spoof

Artemis and JGroups lack of access controls in certain situations can allow an attacker to spoof a password request in JGroups and subsequently gain access to the cluster. This allows the attacker manage-level authority for provided messaging and queue operations...

jwt-spoof-tool

jwt-spoof-tool Tool Description : このツールは、学習目的と、burpsuite に依存せずに jwt トークンハイジャックを自動化するために作成しました。 コードは十分にドキュメント化されており、理解しやすい内容になっています。 CVE-2018-0114 に基づいています。 この脆弱性は、バックエンドでサーバーが jwt ヘッダー内に埋め込まれた jwk オブジェクトをチェックするために発生します。jwk オブジェクトには、公開鍵を形成するために使用される 2 つのパラメータである n と e が含まれています。 How to exploit : 1...

CVE-2026-93386

UI misrepresentation in WebAppInstalls in Google Chrome prior to 153.0.8010.52 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted HTML page. Chromium security severity: Low...

CVE-2026-93386

UI misrepresentation in WebAppInstalls in Google Chrome prior to 153.0.8010.52 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted HTML page. Chromium security severity: Low...

CVE-2026-91723: Concurrent Execution using Shared Resource with Improper Synchronization

Race condition in WebAppInstalls in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to spoof UI elements via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-91986: Improper Neutralization of Special Elements in Output Used by a Downstream Component

gitoxide gix-transport before 0.59.2 fails to filter control characters in git-daemon connect requests, allowing attackers to inject NUL/CR/LF bytes via crafted git URLs. Attackers can inject extra NUL-delimited protocol fields to spoof virtual hosts or inject newlines into daemon requests and lo...