22851 matches found
domainim
DOMAINIM Features ā¢ Usage ā¢ Installation ā¢ Usage ā¢ Contributing ā¢ Additional Notes Domainim is a fast domain reconnaissance tool for organizational network scanning. The tool aims to provide a brief overview of an organization's structure using techniques like OSINT, bruteforcing, DNS resolving...
Windows-CVE-2024-38063
Windows CVE-2024-38063 CVE ID: CVE-2024-38063 CVSS 3.1 Score: 9.8 Critical EPSS Score: Low - 0.088% https://www.cvedetails.com/epss/CVE-2024-38063/epss-score-history.html Impact: Remote Code Execution Affected Components: Windows TCP/IP stack Attack Vector: Network Remote Vulnerability Details...
adidnsdump
Active Directory Integrated DNS dump tool By default any user in Active Directory can enumerate all DNS records in the Domain or Forest DNS zones, similar to a zone transfer. This tool enables enumeration and exporting of all DNS records in the zone for recon purposes of internal networks. For mo...
slipstream
NAT Slipstreaming NAT Slipstreaming allows an attacker to remotely access any TCP/UDP service bound to any system behind a victim's NAT, bypassing the victim's NAT/firewall remote arbitrary firewall pinhole control, just by the victim visiting a website. v1 developed by : @SamyKamkar //...
masscan
MASSCAN: Mass IP port scanner This is an Internet-scale port scanner. It can scan the entire Internet in under 5 minutes, transmitting 10 million packets per second, from a single machine. Its usage parameters, output is similar to nmap, the most famous port scanner. When in doubt, try one of tho...
viproy-voipkit
Discontinued Viproy was a PoC VoIP security assessment tool which had several modules and exploits to maintain. However, it was developed as a modules set to Metasploit Framework. As Metasploit Framework had significant updates, Viproy's current modules won't be able to work unless you use legacy...
ligolo
Ligolo : Reverse Tunneling made easy for pentesters, by pentesters Table of Contents Introduction Use case Quick Demo Performance Usage Setup / Compiling How to use? TL;DR Options Features To Do Licensing Credits Introduction Ligolo is a simple and lightweight tool for establishing SOCKS5 or...
zmap
ZMap: The Internet Scanner ZMap is a fast stateless single packet network scanner designed for Internet-wide network surveys. On a typical desktop computer with a gigabit Ethernet connection, ZMap is capable of scanning the entire public IPv4 address space on a single port in under 45 minutes. Fo...
hyenae-ng
Hyenae NG Hyenae NG Next Generation is a re-write of the original Hyenae tool which was originally published back in the year 2010. Besides switching from C to C++, using modern design concepts, Hyenae NG was just like the original Hyenae written with maximum portability in mind. Since the origin...
port-scan-automation
LazyMap - Auto NMAP Scanning Script Automate NMAP scans and custom Nessus polices. Developed by Daniel Compton https://github.com/commonexploits/port-scan-automation.git Released under AGPL see LICENSE for more information Installing root@kitploit: git clone...
sqlmap
sqlmap sqlmap is an open source penetration testing tool that automates the process of detecting and exploiting SQL injection flaws and taking over of database servers. It comes with a powerful detection engine, many niche features for the ultimate penetration tester, and a broad range of switche...
Aquatronica Controller System <= 5.1.6 - Information Disclosure
Aquatronica Controller System firmware 5.1.6 and earlier and web interface 2.0 and earlier contain an information disclosure vulnerability caused by unauthenticated access to tcp.php endpoint, letting remote attackers retrieve sensitive configuration data including plaintext credentials, exploit...
D-Link Central WifiManager - Server-Side Request Forgery
D-Link Central WifiManager is susceptible to server-side request forgery. The MailConnect feature on D-Link Central WiFiManager CWM-100 1.03 r0098 devices is intended to check a connection to an SMTP server but actually allows outbound TCP to any port on any IP address, as demonstrated by an...
CHIYU TCP/IP Converter - Carriage Return Line Feed Injection
CHIYU TCP/IP Converter BF-430, BF-431, and BF-450 are susceptible to carriage return line feed injection. The redirect= parameter, available on multiple CGI components, is not properly validated, thus enabling an attacker to obtain sensitive information, modify data, and/or execute unauthorized...
chisel
Chisel Chisel is a fast TCP/UDP tunnel, transported over HTTP, secured via SSH. Single executable including both client and server. Written in Go golang. Chisel is mainly useful for passing through firewalls, though it can also be used to provide a secure endpoint into your network. Table of...
EsFileExplorer-CVE-2019-6447
EsFileExplorer-CVE-2019-6447 Exploiting Android Vulnerability in ES File Explorer Vulnerability The ES file explorer was created by ES worldwide, which is a part of DO Global and is based in China. This ES file explorer is only available for use on mobile devices that run the Android operating...
creak
creak Performs some of the most famous MITM attack on target addresses located in a local network. Among these, deny navigation and download capabilities of a target host in the local network performing an ARP poison attack and sending reset TCP packets to every request made to the router. Born a...
ligolo-ng
Ligolo-ng : Tunneling like a VPN An advanced, yet simple, tunneling tool that uses TUN interfaces. š Ligolo-ng Documentation Setup/Quickstart !TIP Ligolo-ng 0.8 added a lot of new features, including: š API and a beautiful Web Interface thanks to L'ami du Raisin, allowing multiplayer! āļø Simple...
Cve-2024-38063
CVE-2024-38063 Description This repository contains details and potential exploit code for CVE-2024-38063, a critical Windows TCP/IP Remote Code Execution RCE vulnerability. The vulnerability allows an unauthenticated attacker to execute arbitrary code on the target system through specially craft...
Disable-IPv6-CVE-2024-38063-Fix
Disable IPv6 to Mitigate CVE-2024-38063 Without Installing KB Update Overview This script is designed to mitigate the effects of the critical vulnerability CVE-2024-38063, a remote code execution RCE vulnerability in the Windows TCP/IP stack related to IPv6. By disabling IPv6 on the system, this...