220849 matches found
no-gdid
no-gdid Read, understand, and silence the Windows Global Device Identifier GDID β the hidden per-account device ID that helped the FBI locate a suspect who was using a VPN. β οΈ Honest disclaimer up front: this tool does not erase your GDID and does not make you anonymous. The GDID lives on...
Lazymux
Lazymux Lazymux is a tool that helps you to install and use multiple penetration testing and hacking tools on Android system with ease. It allows users to easily install and use a variety of popular tools such as Nmap, SQLMap, and Metasploit. The tool is simple to use, as you only need to type a...
KingOfBugBountyTips
KingOfBugBountyTips The Ultimate Bug Bounty Reconnaissance Arsenal "In the shadows we hunt, in the code we trust" Telegram | Twitter | YouTube | LinkedIn DoD VDP Scope DoD Vulnerability Disclosure Program | KingRecon DOD Full DoD Scope - 19 Domains root@kitploit: BBRF Scope - All DoD Domains bbrf...
CVE-2024-41570
CVE-2024-41570 | Havoc C2 SSRF with RCE | Automated Reverse Shell Exploit via WebSocket This project provides a Python-based proof-of-concept PoC script to exploit a vulnerable WebSocket-based service. The script automates agent registration, WebSocket payload delivery, and remote command executi...
Judge-Jury-and-Executable
Judge Jury and Executable A Threat Hunting Forensics Tool Features: Scan a mounted filesystem for threats right away Or gather a system baseline before an incident, for extra threat hunting ability Can be used before, during or after an incident For one to many workstations Scans the MFT, bypassi...
smbmap
SMBMap SMBMap allows users to enumerate samba share drives across an entire domain. List share drives, drive permissions, share contents, upload/download functionality, file name auto-download pattern matching, and even execute remote commands. This tool was designed with pen testing in mind, and...
zerobox
Zerobox Python SDK Python SDK for zerobox. Sandbox any command with file, network, and credential controls. root@kitploit: pip install zerobox Installing the wheel drops the zerobox CLI into your environment's bin/ and exposes a Python SDK. For CLI usage, secrets concepts, the full flag reference...
winfsp
WinFsp Β· Windows File System Proxy WinFsp enables developers to write their own file systems i.e. "Windows drives" as user mode programs and without any knowledge of Windows kernel programming. It is similar to FUSE Filesystem in Userspace for Linux and other UNIX-like computers. winfsp.dev...
Remote-BOF-Runner
Remote BOF Runner A Havoc extension framework for remote execution of Beacon Object Files BOFs using a PIC loader made with Crystal Palace. Overview Remote BOF Runner enables secure execution of BOFs in arbitrary processes by leveraging the Crystal Palace PIC loader. This framework implements a...
ColdFusion_EXp
CVE-2023-29298/CVE-2023-26360 Vulnerability Exploitation Reverse Shell Tool Introduction The vulnerability principle is that when we construct CFML data, the client's request data is saved to the server's coldfusion-out.log. This directory records error information from requests. The...
ToolsFx
ToolsFx English|δΈζ Visitors :eyes: Function Encoding wiki base64 urlBase64 base16/32/36/45/58/62/85/91/92/100 base58check UrlEncode Unicode js hex\x61/js octal\140 binary/octal/decimal/hex custom base serial dict puny code quote printable uuEncode xxEncode escape/escapeAll auto decodecrack String...
WinObjEx64
WinObjEx64 Windows Object Explorer 64-bit WinObjEx64 is an advanced utility that lets you explore the Windows Object Manager namespace. For certain object types, you can double-click on it or use the "Properties..." toolbar button to get more information, such as description, attributes, resource...
proxychains
ProxyChains ver. 4.3.0 README ProxyChains is a UNIX program, that hooks network-related libc functions in dynamically linked programs via a preloaded DLL and redirects the connections through SOCKS4a/5 or HTTP proxies. WARNING: this program works only on dynamically linked programs. also both...
CVE-2024-24919
Mass Auto Scanner for CVE-2024-24919 This script is designed to scan a list of URLs for the CVE-2024-24919 vulnerability on remote Check Point firewalls. It attempts to exploit the vulnerability by sending a malicious POST request to extract specified files from the target servers. Running the...
CVE-2026-53694-NoMachine-LPE
CVE-2026-53694: NoMachine Local Privilege Escalation via Argument Injection Overview This repository contains the write-up and Proof of Concept PoC for CVE-2026-53694, a Local Privilege Escalation LPE vulnerability in NoMachine for Linux. Due to improper neutralization of argument delimiters in t...
SUDO_KILLER
β Star us on GitHub β to show your support! π‘ Best Viewed in Dark Mode : The project SUDOKILLER made it to the final for the SANS Difference Award 2023 in the category open-source tool. Contributing Stargazers over time Support Credits Disclaimer License Introduction SUDOKILLER is a tool geared...
evtx
EVTX A cross-platform parser for the Windows XML EventLog format Features π Implemented using 100% safe rust - and works on all platforms supported by rust that have stdlib. β‘ Fast - see benchmarks below. It's faster than any other implementation by orders of magnitude! π Multi-threaded. β¨ Suppor...
external_tcpdump_CVE-2018-14880
tcpdump To report a security issue please send an e-mail to [email protected]. To report bugs and other problems, contribute patches, request a feature, provide generic feedback etc please see the file CONTRIBUTING in the tcpdump source tree root. TCPDUMP 4.x.y Now maintained by "The Tcpdump...
omnibus
OSINT Omnibus Developed & maintained by InQuest Table of Contents OSINT Omnibus Omnibus Documentation Vocabulary Running Omnibus API Keys Interactive Console Artifacts Overview Creating & Managing Artifacts Sessions Modules Machines Reporting Monitoring Modules OSINT Omnibus Developed & maintaine...
CVE-2024-34470
HSC MailInspector - CVE-2024-34470 A critical vulnerability has been found in HSC Mailinspector up to version 5.2.18. This vulnerability affects an unknown functionality of the file /public/loader.php. Manipulating the 'path' argument with an unknown input leads to a path traversal vulnerability...