dawgmon

dawgmon - 道格走廊巡逻员 摘要 该工具的名称源自《南方公园》第10季第10集，其中卡特曼扮演“道格走廊巡逻员”在学校走廊巡逻。该工具用于帮助监控基于Linux的系统自上次运行以来发生的变化。 一种使用方式是使用诸如提供的示例cronjob定期运行dawgmon，并将结果通过电子邮件发送给系统管理员。这有助于识别正在发生恶意活动的机器，并监控谁在何处安装了什么。请注意，任何严重的内核后门都可以轻松隐藏自己不被该工具检测到，因此它只是工具箱中的额外工具之一，不应完全依赖它来进行Linux机器的全面安全监控。它只是工具箱中的又一个选项。...

usbsnoop

usbsnoop — sniffer de transferencias USB en vivo desde dos hooks fentry Una fuente en tiempo real y coloreada del tráfico USB en todo el sistema — construida sobre los dos puntos de estrangulamiento universales de URB por los que pasa todo driver de controlador de host, por lo que funciona en...

CVE-2019-11932

CVE-2019-11932 La dirección de system y el gadget deben ser reemplazadas por la dirección real encontrada mediante una vulnerabilidad de divulgación de información. Después de reemplazar la dirección de system y del gadget, ejecuta el código para generar el archivo GIF corrupto: root@kitploit:...

CVE-2024-3094-info

CVE-2024-3094-info Exploración de PoC CVE-2024-3094 https://github.com/amlweems/xzbot https://github.com/lockness-Ko/xz-vulnerable-honeypot https://tukaani.org/xz-backdoor/ - Respuesta de Lasse Collin https://gist.github.com/thesamesam/223949d5a074ebc3dce9ee78baad9e27...

DECAF

DECAF DECAF（Dynamic Executable Code Analysis Framework 的缩写）是一个基于 QEMU 的二进制分析平台。 DECAF++ DECAF++ 是 DECAF 的新版本，污点分析速度提高约 2 倍，据我们所知，它是最快的全系统动态污点分析框架。这使得可用性大大提高，当不存在可疑（被污染）输入时，仅产生 4% 的开销（SPEC CPU2006）。即使在重污点分析工作负载下，DECAF++ 的性能也更好，由于它的弹性，在 nbench 上大约快 25%。DECAF++...

porterminal

Hand a computer to an agent, full control, and watch it. One command, one URL. Also a slick terminal for your own phone. 1. uvx ptn 2. Hand the URL to an AI agent, or scan the QR yourself 3. Watch it work in any browser, and take over anytime...

CVE-2025-59287

En este estudio, examinaremos una vulnerabilidad crítica CVE-2025-59287 descubierta en el entorno de Microsoft Windows Server Update Services WSUS. Esta vulnerabilidad surge de la deserialización insegura de objetos AuthorizationCookie enviados al endpoint GetCookie, donde los datos cifrados de l...

CVE-2024-24919

CVE-2024-24919 Exploit Overview This repository contains a proof-of-concept PoC exploit for CVE-2024-24919, a critical vulnerability discovered in Check Point SVN. The vulnerability allows for reading system files. CVE ID : CVE-2024-24919 Severity : Critical Table of Contents Vulnerability-detail...

CVE-2022-40347_Intern-Record-System-phone-V1.0-SQL-Injection-Vulnerability-Unauthenticated

CVE-2022-40347: Intern Record System - Inyección SQL sin autenticación en 'phone', 'email', 'deptType' y 'name' Título del exploit: Intern Record System - Inyección SQL sin autenticación en 'phone', 'email', 'deptType' y 'name' Fecha: 2022-06-09 Autor del exploit: Hamdi Sevben Página del proveedo...

owasp-threat-dragon-desktop

OWASP Threat Dragon Threat Dragon is a free, open-source, cross-platform threat modeling application including system diagramming and a rule engine to auto-generate threats/mitigations. It is an OWASP Incubator Project. The focus of the project is on great UX, a powerful rule engine and integrati...

snoopy-ng

SensePost presenta: root@kitploit: /$$$$$$ /$$ $$ | $$ / /$$$$$$$ /$$$$$$ /$$$$$$ /$$$$$$ /$$ /$$ | $$$$$$ | $$ $$ /$$ $$ /$$ $$ /$$ $$| $$ | $$ \ $$| $$ \ $$| $$ \ $$| $$ \ $$| $$ \ $$| $$ | $$ /$$ \ $$| $$ | $$| $$ | $$| $$ | $$| $$ | $$| $$ | $$ | $$$$$$/| $$ | $$| $$$$$$/| $$$$$$/| $$$$$$$/|...

PhantomFS

假文件。真安全。 为Windows打造的虚拟蜜罐文件系统——引诱攻击者进入看似真实的目录，然后当场捕获他们。 什么是 PhantomFS？ PhantomFS 利用 Windows 投影文件系统（ProjFS） 呈现一个充满逼真假文件的虚拟目录——这些文件（财务报表、SSH 密钥、API 凭据、HR 电子表格、保密协议等）仅存在于内存中。在攻击者（或内部威胁）打开文件之前，不会有任何数据写入磁盘。 一旦文件被触碰，PhantomFS 将： 写入一条 Windows 事件日志 条目（应用程序日志，源为 PhantomFS） 向当前桌面会话发送一条 Toast 通知...

systempi

systempi Real-time Raspberry Pi system monitoring dashboard for Linux terminals with live telemetry, hardware health analysis, and low-flicker rendering. FEATURES Real-time CPU, RAM, swap, disk, and network monitoring Raspberry Pi hardware telemetry through vcgencmd Power, throttling, undervoltag...

fsmon

fsmon 适用于 Linux、Android、iOS 和 macOS 的底层文件系统监控工具。 作者 ：pancake @ nowsecure 许可证 ：MIT 设计目标用户： 系统管理员和事件响应人员 安全研究人员和取证分析师 调试 I/O 密集型应用的开发人员 对观察文件系统访问行为感兴趣的逆向工程师 安装 在 macOS 上，现在可以通过 brew 安装，命令如下： root@kitploit: brew tap nowsecure/fsmon https://github.com/nowsecure/fsmon brew install nowsecure/fsmon/fsmo...

kernel: libceph: refresh auth->authorizer_buf{,_len} after authorizer update

A flaw was found in the libceph component of the Linux kernel. During an authorizer update, if the authorizer is rebuilt, a stale pointer to a freed memory region can be retained. A remote attacker could exploit this by triggering a specific network reconnection, leading to a use-after-free...

kernel: Linux kernel: libceph null pointer dereference leads to denial of service

A flaw was found in libceph, a component of the Linux kernel. When processing a malformed CRUSH map, if a parent bucket's name exists but its type is missing, a null pointer dereference can occur. This issue can lead to a system crash, resulting in a Denial of Service DoS...

ncrack

ncrack Ncrack is a high-speed network authentication cracking tool. It was built to help companies secure their networks by proactively testing all their hosts and networking devices for poor passwords. Security professionals also rely on Ncrack when auditing their clients. Ncrack was designed...

CVE-2026-49176_BOF

BOF de CVE-2026-49176 para Cobalt Strike Beacon Object File BOF de Cobalt Strike para escalada de privilegios local a través del WalletService de Windows CVE-2026-49176 , corregido en julio de 2026. Desde un Beacon de integridad media usuario estándar, esta herramienta prepara una base de datos E...

CVE-2022-38766

CVE-2022-38766 PoC para la vulnerabilidad en el sistema sin llave del Renault ZOE CVE-2022-38766 Introducción Companylogo AUTOCRYPT MalHyuk Resumen Esta vulnerabilidad planteó la cuestión de si los vehículos eléctricos ZOE están seguros frente a la piratería por RF. Por esta razón, el vehículo ZO...

automation-controller: automation-controller: SystemJob extra_vars.days argument injection into uncontainerized control-plane awx-manage process

An argument-injection flaw was found in the Ansible Automation Platform automation-controller system-job subsystem. The system-job template launch endpoint stores a user-supplied "days" variable without running the integer validation defined elsewhere for that field, and the dispatcher flattens t...