MikrotikExploit

Mikrotik Exploit 扫描并导出RouterOS密码 允许你循环扫描不同端口的IPv4子网。 安装 安装python3 Ubuntu/Debian: root@kitploit: $ apt-get install python3 安装python3包管理器 Ubuntu/Debian: root@kitploit: $ apt-get install python3-pip Mac root@kitploit: $ ruby -e "$curl -fsSL...

metasploitable3

Metasploitable3 Metasploitable3 is a VM that is built from the ground up with a large amount of security vulnerabilities. It is intended to be used as a target for testing exploits with metasploit. Metasploitable3 is released under a BSD-style license. See COPYING for more details. Quick-start To...

CVE-2022-23046

CVE-2022-23046 PhpIPAM v1.4.4 permite a un usuario administrador autenticado inyectar sentencias SQL en el parámetro "subnet" al buscar una subred a través de app/admin/routing/edit-bgp-mapping-search.php. Instalación 1. Construir root@kitploit: git clone...

changeme

changeme A default credential scanner. About changeme picks up where commercial scanners leave off. It focuses on detecting default and backdoor credentials and not necessarily common credentials. It's default mode is to scan HTTP default credentials, but has support for other credentials. change...

CVE-2022-23046

CVE-2022-23046 El descubrimiento original y el PoC manual provienen de Fluidattacks: PhpIPAM v1.4.4 permite a un usuario administrador autenticado inyectar sentencias SQL en el parámetro "subnet" al buscar una subred a través de app/admin/routing/edit-bgp-mapping-search.php. Este PoC ejecuta SQLi...

phpipam_1.4.4

CVE-2022-23046 phpIPAM 1.4.4 - Inyección SQL phpIPAM v1.4.4 permite a un usuario administrador autenticado inyectar sentencias SQL en el parámetro subnet mientras busca una subred a través de app/admin/routing/edit-bgp-mapping-search.php. Este proyecto actualmente imprime información de la base d...

Hwacha

Hwacha https://www.n00py.io/2017/12/raining-shells-on-linux-environments-with-hwacha/ Hwacha是一个用于在Nix系统中快速执行载荷的工具。轻松收集工件或在已获取凭据的整个子网系统上执行Shellcode。 root@kitploit: $python hwacha.py &&&& && && && &&&&&&&&&&&& && && && Created by Esteban Rodriguez /\ &&&&&& && &&&&&&&&&& && Web: https://www.n00py.i...

ecs_checker

Herramienta de Detección Remota de EDNS Client Subnet ECS - CVE-2025-40766 Esta herramienta comprueba si un resolver DNS remoto soporta EDNS Client Subnet ECS — una extensión de DNS que puede exponer sistemas a vulnerabilidades de envenenamiento de caché o fuga de información como CVE-2025-40766....

webrtc-ips

STUN IP Address requests for WebRTC Demo: https://diafygi.github.io/webrtc-ips/ What this does Firefox and Chrome have implemented WebRTC that allow requests to STUN servers be made that will return the local and public IP addresses for the user. These request results are available to javascript,...

CVE-2024-37032-scanner

Scanner CVE-2024-37032 Scannez un sous-réseau entier pour détecter les versions vulnérables d'Ollama. Si un seul hôte, utilisez X.X.X.X/32...

nibble

Nibble è uno strumento CLI per la scansione di rete locale che si concentra su velocità e facilità d'uso. Seleziona un'interfaccia di rete e scansiona la tua sottorete locale. Elenca gli host, il produttore hardware, le porte aperte e i relativi servizi. ⚡ Veloce come un fulmine, scansiona...

dnsglobe

dnsglobe Ein globaler DNS-Propagationsprüfer für dein Terminal — eine Rust-TUI, die 34 öffentliche DNS-Resolver weltweit parallel abfragt, ihre Antworten vergleicht und die Propagation deines Records auf einer Weltkarte anzeigt. Denk an dnschecker.org / whatsmydns.net, aber in deinem Terminal, mi...

mapcidr

Un programma di utilità per eseguire multiple operazioni su una data sottorete/intervallo CIDR. Caratteristiche • Installazione • Utilizzo • Libreria • Unisciti a Discord mapCIDR è stato sviluppato per facilitare la distribuzione del carico nelle operazioni di scansione di massa; può essere...

mapcidr

A utility program to perform multiple operations for a given subnet/CIDR range. Features • Install • Usage • Library • Join Discord mapCIDR is developed to ease load distribution for mass scanning operations; it can be used both as a library and as an independent CLI tool. Features CIDR expansion...

fortios-ldap-mitm-poc-CVE-2019-5591

CVE-2019-5591 Questo Proof of Concept PoC dimostra un attacco MITM Man-In-The-Middle: impersonificazione di un server LDAP sulla sottorete locale di un dispositivo FortiGate che esegue una versione vulnerabile di FortiOS. Versioni interessate Queste versioni sono vulnerabili:...

Astra Linux – Vulnerability in cups

OpenPrinting CUPS is an open-source printing system for Linux and other Unix-like operating systems. In versions 2.4.12 and earlier, an unsafe deserialization attack and improper validation of printer attributes could lead to a null dereference in the libcups library. This is a remote DoS...

CVE-2026-66785

A flaw was found in Submariner. This vulnerability allows a malicious cluster spoke to redirect network traffic from other connected clusters peer clusters by publishing a specially crafted network endpoint. The system fails to properly validate the network subnets provided by the malicious...

CVE-2026-66785

Submariner is affected by a critical traffic-hijacking flaw (CVSS 9.9 ). A malicious connected cluster (spoke) can publish a specially crafted network endpoint whose unvalidated endpoint.spec.subnets are propagated into WireGuard allowedips or IPSec configurations on peer clusters. This allows th...

EUVD-2026-63572

A flaw was found in Submariner. This vulnerability allows a malicious cluster spoke to redirect network traffic from other connected clusters peer clusters by publishing a specially crafted network endpoint. The system fails to properly validate the network subnets provided by the malicious...

CVE-2026-66785 Submariner: submariner: unvalidated endpoint.spec.subnets propagated into wireguard allowedips / ipsec enables traffic hijack

A flaw was found in Submariner. This vulnerability allows a malicious cluster spoke to redirect network traffic from other connected clusters peer clusters by publishing a specially crafted network endpoint. The system fails to properly validate the network subnets provided by the malicious...