watermarks-remover

root@kitploit: | | | || | | |/ |/| || |/ |/ |/ | |/| | | | | | |/ ||| | | | | | \ | | | | | \ | \ | \ | | | || / | | \ watermarks-remover Agent skill + stdlib Python service to strip multi-vendor AI provenance marks from text and files — for privacy and hygiene on content you own. The skill is a...

striptls

striptls - auditing proxy poc implementation of STARTTLS stripping attacks A generic tcp proxy implementation and audit tool to perform protocol independent ssl/tls interception and STARTTLS stripping attacks on SMTP, POP3, IMAP, FTP, NNTP, XMPP, ACAP and IRC...

striptls

striptls - proxy di auditing implementazione proof-of-concept di attacchi di rimozione STARTTLS Un'implementazione generica di proxy TCP e strumento di audit per eseguire intercettazioni ssl/tls indipendenti dal protocollo e attacchi di rimozione STARTTLS su SMTP, POP3, IMAP, FTP, NNTP, XMPP, e...

KsDumper

🔴 Questo repository è obsoleto a causa del driver Capcom corretto 🔴 Grazie a mastercodeon314 ora esiste una porta funzionante su Windows 11. Buon divertimento! https://github.com/mastercodeon314/KsDumper-11 KsDumper Ho sempre avuto un interesse per il reverse engineering. Qualche giorno fa volevo...

CVE-2019-13498

CVE-2019-13498 Titolo dell'exploit: MITM - HSTS mancante che causa furto di credenziali e manipolazione dei contenuti Data: 07/10/2019 Autore dell'exploit: Furqan Khan Homepage del fornitore: https://www.oneidentity.com/ Link del software: https://www.oneidentity.com/products/cloud-access-manager...

xepor

Xepor Xepor pronounced /ˈzɛfə/ , zephyr is a web routing framework for reverse engineers and security researchers. It provides a Flask-like API for hackers to intercept and modify HTTP requests and/or HTTP responses in a human-friendly coding style. This project is meant to be used with mitmproxy...

aegis

Aegis Driver di protezione dei processi in modalità kernel che utilizza ObRegisterCallbacks per rimuovere i permessi di accesso alla memoria dagli handle. Implementazione di base che intercetta la creazione degli handle e rimuove PROCESSVMREAD/WRITE/OPERATION dai tentativi di accesso non...

redact

redact Rimuovi contenuti simili a credenziali da stringhe libere prima che raggiungano log, telemetria o qualsiasi superficie di terze parti Parte delphpboyscout Go toolkit — moduli Go piccoli e senza framework estratti da go-tool-base. Documentazione: redact.go.phpboyscout.uk...

FRAGNESIA-Charan-cve-2026-46300

Charantej Architecture: Hardened Container Staging & Syscall Telemetry Lab Ein unternehmensgerechtes, mehrschichtiges Framework zur Container-Eindämmung und Laufzeitsicherheits-Telemetrie. Entworfen aus der Perspektive eines Cisco Lead Cybersecurity Architects, isoliert die Charantej-Architektur...

mysslstrip

mysslstrip mysslstrip è un proof of concept basato su Python che mostra come intercettare il traffico MySQL e rimuovere SSL/TLS, come da CVE-2015-3152. Utilizzo mysslstrip.py -h -p LISTENPORT -i LISTENINTERFACE dest Esempio di output root@kitploit: root@duo1 python2.7 mysslstrip.py -p 3307...

phantom-frida

phantom-frida phantom-frida costruisce Android Frida Server e Gadget dal codice sorgente modificando un insieme mirato di identificatori runtime osservabili. È un builder e un harness di verifica, non una garanzia che ogni metodo di rilevamento specifico dell'applicazione venga sconfitto...

refresh

Refresh Questo container emula la funzionalità vulnerabile di CVE-2022-1388 in un router F5 che consente RCE. CVE-202201388 deriva da una relazione complicata tra diversi meccanismi di autenticazione e un proxy che rimuoveva le intestazioni, consentendo un accesso improprio agli endpoint di...

CVE-2026-79782

rclone before 1.74.4 fails to strip the X-Amz-Security-Token header when an S3 redirect changes scheme from HTTPS to HTTP on the same host. Attackers can intercept plaintext HTTP traffic to capture AWS STS session tokens sent in request headers...

CVE-2026-44092 Missing input validation / stripping of CRLF characters in SystemConfigManager

An unauthenticated remote attacker can inject malicious input into the ModbusServer application because it does not validate the input it fetches from MQTT. This may lead to integrity and availability loss...

CVE-2026-56586

HCL IEM was affected with X-Content-Type-Options Header Missing. It may enable attackers to perform SSL stripping or man-in-the-middle attacks and intercept sensitive data...

CVE-2026-56587

HCL IEM was affected with Strict transport security not enforced. It may enable attackers to perform SSL stripping or man-in-the-middle attacks and compromise secure communications...

CVE-2026-56587

HCL IEM was affected with Strict transport security not enforced. It may enable attackers to perform SSL stripping or man-in-the-middle attacks and compromise secure communications...

CVE-2026-56587

CVE-2026-56587 (HCL IEM) : The issue arises from HTTPS Strict-Transport-Security not being enforced, potentially enabling SSL stripping or man-in-the-middle attacks and compromising secure communications. Documented impact: confidentiality at LOW, with no integrity/availability impact. CVSSv3.1 m...

CVE-2026-63886 scsi: target: iscsi: Validate CHAP_R length before base64 decode

In the Linux kernel, the following vulnerability has been resolved: scsi: target: iscsi: Validate CHAPR length before base64 decode chapservercomputehash allocates clientdigest as kzallocchap-digestsize and then, for BASE64-encoded responses, passes chapr directly to chapbase64decode without...

CVE-2026-54171

Excon is usable, fast, simple HTTP 1.1 for Ruby. Prior to 1.5.0, Excon's RedirectFollower middleware failed to strip additional sensitive headers when following redirects and did not provide a custom list of headers to strip. This could cause inadvertent leakage of sensitive data when the initial...