OAUTHScan

OAUTHScan Description OAUTHScan est une extension Burp Suite écrite en Java qui vise à fournir des contrôles de sécurité automatiques, lesquels peuvent être utiles lors de tests d'intrusion sur des applications implémentant les normes OAUTHv2 et OpenID. Le plugin recherche diverses vulnérabilités...

GyoiThon

GyoiThon : Ferramenta de teste de penetração de próxima geração Página em japonês está aqui. Apresentação 25 de janeiro de 2018:JANOG41 23 de março de 2018:Black Hat ASIA 2018 Arsenal 12 de agosto de 2018:DEFCON26 DemoLabs 24 de outubro de 2018:OWS no CSS2018 3 de novembro de 2018:AV TOKYO 2018...

RsWindowsThingies

RsWindowsThingies Coisas do Windows... mas em Rust Ferramentas listenmft Observar a alteração dos valores de uma entrada. root@kitploit: listenmft 0.2.0 Matthew Seyer See the differences in MFT attirbues. USAGE: listenmft.exe OPTIONS FLAGS: -h, --help Prints help information -V, --version Prints...

rewind

README Rewind هو مشوِّش fuzzer موجّه بالتغطية coverage-guided ويعتمد على اللقطات snapshots ويستهدف مكونات نواة ويندوز. الفكرة هي البدء من لقطة لنظام يعمل مباشرةً. تتكون هذه اللقطة من صفحات الذاكرة الفعلية بالإضافة إلى حالة المعالج cpu. تُستخدم هذه الحالة لإعداد الحالة الأولية لمعالج افتراضي. ومن...

CVE-2026-81342

The MasterStudy LMS WordPress plugin, versions prior to 3.7.43 , contains an open redirect vulnerability. The root cause is a missing validation of a redirect parameter supplied during user registration, which allows unauthenticated attackers to redirect users to arbitrary external URLs. The CVE ...

EUVD-2026-68064

The MasterStudy LMS WordPress Plugin WordPress plugin before 3.7.43 does not validate a redirect parameter supplied during user registration before using it, allowing unauthenticated attackers to redirect users to arbitrary external URLs...

CVE-2026-81342 MasterStudy LMS < 3.7.43 - Unauthenticated Open Redirect

The MasterStudy LMS WordPress Plugin WordPress plugin before 3.7.43 does not validate a redirect parameter supplied during user registration before using it, allowing unauthenticated attackers to redirect users to arbitrary external URLs...

CVE-2026-17522 Newsletters < 4.17 - Arbitrary Plugin Option Update via CSRF

The Newsletters WordPress plugin before 4.17 does not perform any nonce or capability check when saving one of its settings screens, and writes every submitted parameter into its own options, allowing attackers to make a logged in administrator overwrite arbitrary Newsletters WordPress plugin...

EUVD-2026-68046

The Newsletters WordPress plugin before 4.17 does not perform any nonce or capability check when saving one of its settings screens, and writes every submitted parameter into its own options, allowing attackers to make a logged in administrator overwrite arbitrary Newsletters WordPress plugin...

CVE-2026-17522

Newsletters is a WordPress plugin that, in versions before 4.17 , fails to perform any nonce or capability check when saving one of its settings screens. Because it writes every submitted parameter into its own options, an attacker can use a Cross-Site Request Forgery (CSRF) attack to trick a log...

orpheus

Orpheus Orpheus, Impacket के GetUserSPNs.py और kerberosv5.py के एक संशोधित संस्करण के लिए एक रैपर है, जो Kerberoasting के लिए KDC Options Ticket Options और Encryption Type को बदलता है। पार्श्व नोट: Orpheus का नाम यूनानी देवता के नाम पर रखा गया है जो Hades में प्रवेश करने के लिए Cerberus तीन सिर...

WebKit-CVE-2016-4622

वेबकिट CVE-2016-4622 विश्लेषण: स्लाइस वैल्यूऑफ़ फास्टपाथ भेद्यता पर गहन अध्ययन वेबकिट जावास्क्रिप्ट कोर भेद्यता का व्यापक विश्लेषण और शोषण जो Array.slice हेरफेर के माध्यम से मेमोरी रिसाव को सक्षम बनाता है विषय-सूची कार्यकारी सारांश भेद्यता अवलोकन शोध वातावरण सेटअप तकनीकी विश्लेषण शोषण वॉकथ्रू...

CVE-2023-30256

Webkul Qloapps 1.5.2 - क्रॉस-साइट स्क्रिप्टिंग XSS Webkul QloApps 1.5.2: दो पैरामीटर emailcreate और back पर XSS के लिए संवेदनशील शोषण - प्रूफ ऑफ कॉन्सेप्ट POC XXS: 'back' पैरामीटर root@kitploit: Payload Parameter back – Plain text: xss onfocus=alert1 autofocus= xss Payload Parameter back – URL...

CVE-2024-9796

CVE-2024-9796 वर्डप्रेस WP-Advanced-Search = 5.0.12 time-based blind IF - comment Payload: t=wpautosuggest&f=ifnow=sysdate,SLEEP9,0-- wXyW&l=5&type=0&e=utf-8&q=c&limit=5&timestamp=13672261755853'...

CVE-2020-26217-XStream-RCE-POC

CVE-2020-26217-XStream-RCE-POC Exemplo root@kitploit: package org.example; import com.thoughtworks.xstream.XStream; import java.io.IOException; public class CVE202026217 public static void mainString args throws IOException XStream xStream = new XStream; String payload = "\n" + " \n" + " \n" + "...

vault

Vault Please note : We take Vault's security and our users' trust very seriously. If you believe you have found a security issue in Vault, please responsibly disclose by contacting us at [email protected]. Website: developer.hashicorp.com/vault Announcement list: Google Groups Discussion...

creepy-plugins

creepy-plugins الوصف إضافات Plugins لـ cree.py تسمح بنية cree.py بتعريف مصادر متعددة يحددها المستخدم لمعلومات تحديد الموقع الجغرافي. تُعرَّف هذه المصادر كإضافات plugins ويمكن تثبيتها في creepy عن طريق نسخها إلى مجلد plugins داخل دليل التثبيت. إضافات جديدة أنشئ طلب سحب pull request لإضافة جديدة إذ...

thc-hydra

H Y D R A root@kitploit: c 2001-2023 by van Hauser / THC https://github.com/vanhauser-thc/thc-hydra Many modules were written by David dot Maciejak @ gmail dot com BFG code by Jan Dlabal Licensed under AGPLv3 see LICENSE file Please do not use in military or secret service organizations, or for...

hideNsneak

Bem-vindo ao hideNsneak. Este aplicativo auxilia no gerenciamento de infraestrutura de ataque para testadores de penetração, fornecendo uma interface para implantar, gerenciar e desativar rapidamente vários serviços em nuvem. Estes incluem VMs, fronting de domínio, servidores Cobalt Strike,...

CVE-2024-9932

CVE-2024-9932 Wux Blog Editor = 3.0.0 - अप्रमाणित मनमानी फ़ाइल अपलोड विवरण: WordPress के लिए Wux Blog Editor प्लगइन, संस्करण 3.0.0 तक और इसमें शामिल, 'wuxbtinsertImageNew' फ़ंक्शन में अपर्याप्त फ़ाइल प्रकार सत्यापन के कारण मनमानी फ़ाइल अपलोड के लिए असुरक्षित है। इससे अप्रमाणित हमलावरों के लिए...