zap-scripts

zap-scripts Scripts de Zed Attack Proxy para encontrar CVEs y Secretos. Construcción Este proyecto usa Gradle para construir el add-on de ZAP, simplemente ejecute: root@kitploit: ./gradlew build en el directorio principal del proyecto, el add-on se colocará en el directorio build/zapAddOn/bin/. U...

lxancephisher

A beginners friendly, Automated phishing tool with 30+ templates. Disclaimer Any actions and or activities related tolxancephisher is solely your responsibility. The misuse of this toolkit can result in criminal charges brought against the persons in question. The contributors will not be held...

nuclei-wordfence-cve

Nuclei + Wordfence = ♥ 77,636 Nuclei Templates for WordPress Security Scanning 🥳 ¡Lleva tu juego de seguridad de WordPress al siguiente nivel! Este proyecto tiene un verdadero tesoro de plantillas Nuclei actualizadas para WordPress. Escanea en busca de debilidades en el núcleo, los plugins y los...

n8n-vulnerability-detection

n8n Vulnerability Detection Automated Nuclei templates for detecting n8n vulnerabilities. Created by@rxerium Overview Automated CVE detection templates for n8n Workflow Automation, with daily monitoring and template generation from GitHub Advisories, ProjectDiscovery, and NVD. Statistics : 3 CVEs...

rehex

Editor Hexadecimal para Ingenieros Inversos Un editor hexadecimal multiplataforma Windows, Linux, macOS, BSD para ingeniería inversa y todo lo demás. Se puede acceder a una copia en línea del manual aquí: solemnwarning.net/rehex/manual/. Características Soporte para archivos grandes 1TB+...

authz0

Authz0 es una herramienta automatizada de pruebas de autorización. Se puede identificar el acceso no autorizado basándose en URLs y Roles y Credenciales. Las URLs y Roles se gestionan como plantillas basadas en YAML, que se pueden crear y añadir automáticamente mediante authz0. También puede...

evil-ssdp

Overview This tool responds to SSDP multicast discover requests, posing as a generic UPNP device. Your spoofed device will magically appear in Windows Explorer on machines in your local network. Users who are tempted to open the device are shown a configurable phishing page. This page can load a...

nuclei-templates-ai

AI-Generated Nuclei Templates 👾 This project is an implementation of our vision detailed in From CVE to Template: The Future of Automating Nuclei Templates with AI This repository demonstrates the power of AI in automating security template generation for vulnerability detection. Using...

Mongo-Express - Remote Code Execution

Mongo-Express before 1.0.0 is susceptible to remote code execution because it uses safer-eval to validate user supplied javascript. Unfortunately safer-eval sandboxing capabilities are easily bypassed leading to remote code execution in the context of the node server. id: CVE-2020-24391 info: nam...

kwetza

Introduction By Chris Le Roy @brompwnie [email protected] Kwetza is a tool that allows you to infect an existing Android application with a Meterpreter payload. What does it do? Kwetza infects an existing Android application with either custom or default payload templates to avoid detection ...

CVE-2023-22621-POC

CVE-2023-22621-POC CVE-2023-22621: SSTI to RCE by Exploiting Email Templates affecting Strapi Versions return strapi.config.get'plugin.email'; ; const send = async options = return strapi.plugin'email'.provider.sendoptions; ; / fill subject, text and html using lodash template @param object...

Nuclei-TemplatesNuclei-Templates-CVE-2017-17736

Nuclei-TemplatesNuclei-Templates-CVE-2017-17736...

CVE-2024-25641-CACTI-RCE-1.2.26

CVE-2024-25641 - Cacti 1.2.26 - Escritura arbitraria de archivos a RCE 🌵 RCE autenticado Cacti versión v1.2.26 Resumen Una vulnerabilidad de escritura arbitraria de archivos, explotable a través de la función "Importación de Paquetes", permite a usuarios autenticados que tengan el permiso "Import...

SocialEngineering-Templates

SocialEngineering-Templates a SET framework templates...

PSPKIAudit

PSPKIAudit PowerShell toolkit for auditing Active Directory Certificate Services AD CS. It is built on top of PKISolution's PSPKI toolkit Microsoft Public License. This repo contains a newer version of PSPKI than what's available in the PSGallery see the PSPKI directory. Vadims Podans the creator...

logparser

Logparser Logparser provides a machine learning toolkit and benchmarks for automated log parsing, which is a crucial step for structured log analytics. By applying logparser, users can automatically extract event templates from unstructured logs and convert raw log messages into a sequence of...

Mailphish

Mailphish Coded By Pro MCracker Mailphish Will Help You To Create Professional Phishing Emails Fast And Easy Visit Our Websites For Learn Hacking Methods https://crackcodes.xyz And https://crackcodes.in If You Copy The Code And Make Your Own, Don't forget To Give Me Some Credit Kid! You Don't Get...

fortra-goanywhere-mft-vulnerability-detection

Fortra GoAnywhere MFT Vulnerability Detection Nuclei templates for detecting Fortra GoAnywhere MFT vulnerabilities. Created by@rxerium Overview CVE detection templates for Fortra GoAnywhere Managed File Transfer MFT, including multiple CISA KEV vulnerabilities exploited by ransomware groups...

My-Presentation-Slides

My-Presentation-Slides Collections of Dhiyaneshwaran public presentation slides. You can find me at: Blog: https://dhiyaneshgeek.github.io Twitter: @DhiyaneshDk Hackerone: Geek Freak LinkedIn: Dhiyaneshwaran Balasubramaniam 2026 Hands-On Supply Chain Recon & Vendor Risk Mapping Recon Village @ DE...

cfn_nag

Background The cfn-nag tool looks for patterns in CloudFormation templates that may indicate insecure infrastructure. Roughly speaking, it will look for: IAM rules that are too permissive wildcards Security group rules that are too permissive wildcards Access logs that aren't enabled Encryption...