drinkme

drinkme drinkme 是一个 shellcode 测试工具。它从标准输入读取 shellcode 并执行。这使得渗透测试人员能够在部署前快速测试其有效载荷。 格式 drinkme 可以处理以下格式的 shellcode： "0x" "\x" "x" "" 例如，NOP 可以表示为 "0x90"、"\x90"、"x90" 或 "90" 中的任意一种。 在处理输入时， drinkme 将忽略以下内容： C 和 C++ 风格的注释。 所有空白字符。 集合 ",; 中的任何字符。 示例 writeSTDOUTFILENO, "Hello world!\n", strlen"Hello...

Out-FINcodedCommand

Out-FINcodedCommand v1.0 はじめに Out-FINcodedCommand は、PowerShell v2.0 以降に対応した PowerShell POC スクリプトであり、FIN 脅威アクターが使用するいくつかの難読化手法を強調するために設計されています。このツールで重点的に扱う難読化手法は以下の通りです。 1. cmd.exe の変数文字/文字列置換機能 2. cmd.exe および powershell.exe の標準入力からのコマンド呼び出し機能 3. 「cmd」と「powershell」を難読化するための環境変数部分文字列機能 インストール...

subfinder

Fast passive subdomain enumeration tool. Features • Install • Usage • API Setup • Library • Join Discord subfinder is a subdomain discovery tool that returns valid subdomains for websites, using passive online sources. It has a simple, modular architecture and is optimized for speed. subfinder is...

shuffledns

massDNS wrapper to bruteforce and resolve the subdomains with wildcard handling support Feature • Install • Run • Wildcard • License • Discord shuffleDNS is a wrapper around massdns, written in go, that allows you to enumerate valid subdomains using active bruteforce, as well as resolve subdomain...

katana

A next-generation crawling and spidering framework Features • Installation • Usage • Scope • Config • Filters • Join Discord Features Fast And fully configurable web crawling Standard and Headless mode JavaScript parsing / crawling Customizable automatic form filling Scope control - Preconfigured...

dnsx

A fast and multi-purpose DNS toolkit designed for running DNS queries Features • Installation • Usage • Running dnsx • Wildcard • Notes • Join Discord dnsx is a fast and multi-purpose DNS toolkit designed for running various probes through the retryabledns library. It supports multiple DNS querie...

sqlmap-tamper-api

SQLmap Tamper-API It's an API for SQLmap tamper scripts allows you to use your favorite programming language to write your tamper scripts. This API solves SQLmap limitation of accepting only python to write tamper scripts. How it works taper-api.py script sends the payload and kwargs in a JSON...

autoPwn

Warning Completely re-writing this right now. Focus will be on interactive Linux apps that only take input from stdin for starters. Attempting to use Shellphish's Driller and Fuzzer functionality. autoPwn in it's current state will do this in limited form. Simply run autoPwn ./binary then select...

log4stdin

log4stdin — 针对任何具有stdout的log4shell注入 该仓库包含一个故意对CVE-2021-44228（俗称log4shell）存在漏洞的Java应用程序。 log4stdin实际上只不过是一个stdin读取器，其输入被送入存在漏洞的log4j实例。构建文件log4stdin.jar使用Maven构件log4j-api 2.14.1和log4j-core 2.14.1，并使用了一个省略日志级别和时间戳详情的日志模式。此版本是保证有漏洞的™。 在versions/文件夹中，可以找到使用默认日志模式和log4j 2.0-beta9至2.20.0版本的构建。 如何使用？...

qsreplace

qsreplace 標準入力からURLを受け取り、すべてのクエリ文字列の値を指定された値に置き換え、ホストとパスごとにクエリ文字列パラメータの各組み合わせを一度だけ出力します。 使い方 入力ファイルの例: root@kitploit: ▶ cat urls.txt https://example.com/path?one=1&two=2 https://example.com/path?two=2&one=1 https://example.com/pathtwo?two=2&one=1 https://example.net/a/path?two=2&one=1 クエリ文字列の値を置換...

unfurl

unfurl 提取 stdin 提供的 URL 的各个部分 安装 如果你已经安装并配置好 Go： root@kitploit: ▶ go install github.com/tomnomnom/unfurl@latest 否则，下载适用于你平台的最新二进制文件，解压后将其移动到 $PATH 中的某个位置（例如 /usr/bin/）： root@kitploit: ▶ wget https://github.com/tomnomnom/unfurl/releases/download/v0.0.1/unfurl-linux-amd64-0.0.1.tgz ▶ tar xzf...

anew

anew 将来自stdin的行追加到文件中，但仅当这些行尚未出现在文件中时。 新行也会输出到stdout，因此它有点像tee -a，但会去除重复项。 使用示例 这里，一个名为things.txt的文件包含一个数字列表。newthings.txt包含第二个 数字列表，其中一些出现在things.txt中，另一些则没有。anew被用来 将后者追加到things.txt中。 root@kitploit: ▶ cat things.txt Zero One Two ▶ cat newthings.txt One Two Three Four ▶ cat newthings.txt | anew...

refinery

Binary Refinery root@kitploit: High Octane Triage Analysis || || || || || | / / / \ || ==||=====|| | / |/ \ /==| / \ ===| '======|| | \ | | \ | \ /| | || || /||/ / | | | || =========''====/=========/ /==||=====||======' \ / / The Binary Refinery™ is a collection of Python scripts that...

Xjar_tips

Xjartips Introducción: root@kitploit: Herramienta de ejecución con cifrado seguro para JAR de Spring Boot, compatible también con JAR nativos. Basada en el cifrado de los recursos dentro del paquete JAR y en la extensión de ClassLoader, construye un esquema de arranque cifrado del programa y...

jfscan

!CAUTION ⚠️ Project Deprecated This project has been rewritten in Go for better performance and features. Please use the new version here: nullt3r/massmap Description Killing features Unleash the power of Nmap with Masscan for large-scale scans Scan targets using domain names and other formats...

polkit: Polkit: Denial of Service via unbounded input processing through standard input

A flaw was found in polkit. A local user can exploit this by providing a specially crafted, excessively long input to the polkit-agent-helper-1 setuid binary via standard input stdin. This unbounded input can lead to an out-of-memory OOM condition, resulting in a Denial of Service DoS for the...

Astra Linux – Vulnerability in imagemagick

ImageMagick 7.1.0-49 is vulnerable to Denial of Service attacks. When it parses a PNG image for example, for resizing, the conversion process may cause it to wait for stdin input...

USN-8653-1: PostgreSQL vulnerabilities

It was discovered that PostgreSQL incorrectly handled COPY FROM STDIN when an early failure occurred. An authenticated user could possibly use this issue to execute arbitrary SQL commands. CVE-2026-6464 It was discovered that PostgreSQL incorrectly reset extended statistics ownership during ALTER...

BIT-POSTGRESQL-2026-6464 PostgreSQL psql COPY FROM STDIN early failure processes data lines as psql commands

Untrusted data inclusion in PostgreSQL psql COPY may allow a server administrator to elicit execution of data lines as psql commands, via error injection. If the "COPY FROM STDIN" or "\copy FROM STDIN" command fails before the server indicates that it awaits input rows, psql processes the in-line...

SUSE CVE-2026-6464

Untrusted data inclusion in PostgreSQL psql COPY may allow a server administrator to elicit execution of data lines as psql commands, via error injection. If the "COPY FROM STDIN" or "\copy FROM STDIN" command fails before the server indicates that it awaits input rows, psql processes the in-line...