CVE-2023-34830---Reflected-XSS-found-in-I-doit-Open-v24-and-below

CVE-2023-34830 - XSS Réfléchi trouvé dans i-doit Open v24 et versions antérieures i-doit Open v24 et versions antérieures sont vulnérables à une vulnérabilité de XSS réfléchi. Ces vulnérabilités pourraient permettre à des attaquants authentifiés à distance d'injecter des scripts web ou du HTML...

Q-DDOS-GUI

Q-DDOS-GUI DDOS НАПИСАН НА C TCP/HTTP/HTTPS ddos написан на C. Атака на протоколы TCP, HTTP и HTTPS. Атака с ddos с выбором случайного TIMEOUT в диапазоне секунд или с заданным таймаутом. Выберите количество потоков, которые вы хотите использовать. Отметьте флажок «остановить все», чтобы останови...

subfinder

Fast passive subdomain enumeration tool. Features • Install • Usage • API Setup • Library • Join Discord subfinder is a subdomain discovery tool that returns valid subdomains for websites, using passive online sources. It has a simple, modular architecture and is optimized for speed. subfinder is...

EUVD-2026-37012

gRPC Erlang package has unbounded request body accumulation in readfullbody/3...

snmpwn

SNMPwn is an SNMPv3 user enumerator and attack tool. It is a legitimate security tool designed to be used by security professionals and penetration testers against hosts you have permission to test. It takes advantage of the fact that SNMPv3 systems will respond with "Unknown user name" when an...

CVE-2020-27223

CVE-2020-27223 Использование root@kitploit: $ mvn spring-boot:run 9.4.36.v20210114 root@kitploit: $ ./poc/cve-2020-27223-poc1.sh "timens":"58,557","acceptlanguage":"aab" real 0m0.093s 🐇 user 0m0.006s sys 0m0.007s "timens":"18,461,763,438","acceptlanguage":"ahn" real 0m35.339s 🐢 user 0m0.006s sys...

shocker

Shocker A tool to find and exploit servers vulnerable to Shellshock Ref: https://en.wikipedia.org/wiki/Shellshocksoftwarebug Released as open source by NCC Group Plc - https://www.nccgroup.trust/ Developed By: Tom Watson, tom dot watson at nccgroup dot trust https://github.com/nccgroup/shocker...

changeme

changeme A default credential scanner. About changeme picks up where commercial scanners leave off. It focuses on detecting default and backdoor credentials and not necessarily common credentials. It's default mode is to scan HTTP default credentials, but has support for other credentials. change...

katana

A next-generation crawling and spidering framework Features • Installation • Usage • Scope • Config • Filters • Join Discord Features Fast And fully configurable web crawling Standard and Headless mode JavaScript parsing / crawling Customizable automatic form filling Scope control - Preconfigured...

web-brutator

Web Brutator Fast Modular Web Interfaces Bruteforcer 📥 Install root@kitploit: python3 -m pip install -r requirements.txt ⏩ Usage root@kitploit: $ python3 web-brutator.py -h . / \ / \ \ | \ \ / | / | \ // // | \ | | /\ \ | \ \ \ \ / \ \ \ /\ /| \ \ // | | \ | | / | /| | / | | | / /\ / \ / |...

CVE-2024-21733

CVE-2024-21733-POC Remarques : 1. Environnement anglais pour Tomcat 2. Code backend spécifiquement construit, comme indiqué dans ROOT/vulnerable.jsp 3. Si nécessaire, modifier l'adresse du serveur et le port dans le script. Par défaut 127.0.0.1:8080 4. Délai d'expiration, par défaut 20 secondes,...

CVE-2024-6387-Mitigation

Titre du document - Guide d'atténuation pour CVE-2024-6387 dans OpenSSH Introduction Ce document décrit les étapes pour atténuer CVE-2024-6387, une vulnérabilité de sécurité affectant les versions d'OpenSSH de 8.5p1 à 9.8p1. La vulnérabilité peut être atténuée de deux manières : 1. Ajuster le...

keepass_poc

CVE-2022-0725 POC pour KeePass CVE-2022-0725 Étapes pour reproduire : Étape 1 : Exécutez "journalctl -f" dans une fenêtre de terminal. Étape 2 : Double-cliquez sur un mot de passe dans KeePass. Étape 3 : Attendez que le délai d'effacement se déclenche. Résultats réels : Voyez votre mot de passe e...

crowbar

Crowbar - Brute forcing tool What is Crowbar? Crowbar formally known as Levye is a brute forcing tool that can be used during penetration tests. It was developed to brute force some protocols in a different manner according to other popular brute forcing tools. As an example, while most brute...

klar

Klar Integration of Clair and Docker Registry supports both Clair API v1 and v3 Klar is a simple tool to analyze images stored in a private or public Docker registry for security vulnerabilities using Clair https://github.com/coreos/clair. Klar is designed to be used as an integration tool so it...

netattack

NETATTACK The netattack.py is a python script that allows you to scan your local area for WiFi Networks and perform deauthentification attacks. The effectiveness and power of this script highly depends on your wireless card. NETATTACK 2 RELEASED https://github.com/chrizator/netattack2/ USAGE EASY...

cypheroth

Cypheroth Automated, extensible toolset that runs cypher queries against Bloodhound's Neo4j backend and saves output to spreadsheets. Description This is a bash script that automates running cypher queries against Bloodhound data stored in a Neo4j database. I found myself re-running the same...

fprobe

FProbe FProbe - Fast HTTP Probe Installation root@kitploit: GO111MODULE=on go get -u github.com/theblackturtle/fprobe Features Take a list of domains/subdomains and probe for working http/https server. Optimize RAM and CPU in runtime. Support special ports for each domain Verbose in JSON format...

httpdoom

HttpDoom - HTTP Attack surface analyser Validate large HTTP-based attack surfaces in a very fast and reliable way. Inspired by Aquatone. Installing You must have dotnet SDK at version 6+: root@kitploit: $ dotnet pack -c Release -o nupkg $ dotnet tool install --global --add-source .\nupkg...

smuggler

root@kitploit: / | | | | \ | | | | |/ |/ | || |/ | | | || | | | || | | /||||/ \ |\ || | @defparam Smuggler An HTTP Request Smuggling / Desync testing tool written in Python 3 Acknowledgements A special thanks to James Kettle for his research and methods into HTTP desyncs And a special thanks to...