hydra

Chat · Debates · Boletín · Documentación · Prueba Ory Network · Empleo Ory Hydra es un servidor OAuth 2.0 reforzado y certificado OpenID, así como un proveedor de OpenID Connect, optimizado para baja latencia, alto rendimiento y bajo consumo de recursos. Se conecta a su proveedor de identidad...

pytmipe

PYTMIPE & TMIPE PYTMIPE PYthon library for Token Manipulation and Impersonation for Privilege Escalation is a Python 3 library for manipulating Windows tokens and managing impersonations in order to gain more privileges on Windows. TMIPE is the python 3 client which uses the pytmipe library...

pytmipe

PYTMIPE & TMIPE PYTMIPE （用于令牌操作和模拟以实现权限提升的 Python 库）是一个 Python 3 库，用于操作 Windows 令牌和管理模拟，以便在 Windows 上获得更多权限。TMIPE 是使用 pytmipe 库的 Python 3 客户端。 内容 一个 Python 客户端 ： tmipe python3 tmipe.py 一个 Python 库 ： pytmipe 。可用于将此项目集成到其他项目中 pytinstaller 示例 ，用于生成 独立 exe 文件 文档 幻灯片 "Windows Token Manipulation,...

RottenPotato

This code is no longer maintained - for a newer implementation see https://github.com/breenmachine/RottenPotatoNG RottenPotato Local Privilege Escalation from Windows Service Accounts to SYSTEM For a technical overview of this exploit see our blog post at...

Koh

Koh Koh is a C and Beacon Object File BOF toolset that allows for the capture of user credential material via purposeful token/logon session leakage. Some code was inspired by Elad Shamir's Internal-Monologue project no license, as well as KB180548. For why this is possible and Koh's approeach, s...

shhgit

🚨 shhgit is no longer maintained. If you need support or consultation for your secret scanning endeavours, drop me an e-mail [email protected] 🚨 shhgit helps secure forward-thinking development, operations, and security teams by finding secrets across their code before it leads to a security...

CVE-2022-3172

CVE-2022-3172 demo Run poc.sh create resources root@kitploit: chmod +x poc.sh ./poc.sh Use Curl root@kitploit: curl https://kubernetes.default.svc/apis/metrics.k8s.io/v2beta1/ -k -H "Authorization: Bearer token"...

milvus-auth-audit

milvus-auth-audit Script de detección de seguridad de autenticación de Milvus. Detecta tres vulnerabilidades de autenticación: Vulnerabilidad| CVE| Versiones afectadas| Método de detección ---|---|---|--- Bypass de autenticación mediante backdoor sourceid| CVE-2025-64513| --port 19530 --mgmt-port...

WordPress Support Genix plugin <= 1.4.52 - Authenticated (Subscriber+) Authentication Bypass to Administrator Account Takeover via 'p' Parameter Forged Guest Token vulnerability

Authenticated Subscriber+ Authentication Bypass to Administrator Account Takeover via 'p' Parameter Forged Guest Token vulnerability discovered by Supakiad S. m3ez - E-CQURITY Thailand in WordPress Plugin Support Genix versions = 1.4.52...

CVE-2525-25748-Cross-Site-Request-Forgery-CSRF-Vulnerability-in-HotelDruid-3.0.7

CVE-2025-25748-Cross-Site-Request-Forgery-CSRF-Vulnerability-in-HotelDruid-3.0.7 Description A Cross Site Request Forgery CSRF vulnerability in the gestioneutenti.php endpoint of HotelDruid 3.0.7 allows attackers to perform unauthorized actions e.g., modifying user passwords on behalf of...

CVE-2024-42327

CVE-2024-42327: Zabbix Privilege Escalation - RCE Description This Proof-of-Concept POC can be used to exploit CVE-2024-42327 to leak the admin API authentication token and create an item to achieve a reverse shell on a Zabbix server 6.0.32rc1, 6.4.17rc1, 7.0.1rc1 A non-admin user account on the...

RottenPotatoNG

RottenPotatoNG New version of RottenPotato as a C++ DLL and standalone C++ binary - no need for meterpreter or other tools. RottenPotatoDLL This project generates a DLL and EXE file. The DLL contains all the code necessary to perform the RottenPotato attack and get a handle to a privileged token...

ssrf-sheriff

SSRF Sheriff Este es un sheriff de pruebas SSRF escrito en Go. Fue creado originalmente para el Uber H1-4420 2019 London Live Hacking Event, pero ahora se está publicando como código abierto para que otras organizaciones lo implementen y contribuyan. Características Responde a cualquier método HT...

ssrf-sheriff

SSRF Sheriff This is an SSRF testing sheriff written in Go. It was originally created for the Uber H1-4420 2019 London Live Hacking Event, but it is now being open-sourced for other organizations to implement and contribute back to. Features Respond to any HTTP method GET, POST, PUT, DELETE, etc...

github-search

github-search 一套用于在 GitHub 上执行搜索的工具集合。 安装 root@kitploit: git clone https://github.com/gwen001/github-search cd github-search pip3 install -r requirements.txt 大多数情况下，GitHub 需要一个令牌来执行搜索。 你可以在克隆的仓库目录下创建一个 .tokens 文件，每行一个令牌 或者 你可以像这样配置一个环境变量（推荐）：GITHUBTOKEN=token1,token2,... 文档...

D-Scan

Cuando el contexto muerde: Detección de envenenamiento de RAG mediante el colapso de atención a nivel de documento D-SCAN es un marco de análisis para detectar ataques de envenenamiento de documentos en sistemas RAG Retrieval-Augmented Generation. Recopila los estados internos del LLM durante la...

awswaf

Solucionador de AWS WAF Amazon Web Services Web Application Firewall Resumen Este proyecto proporciona un solucionador basado en Golang y Python para el desafío de AWS WAF. Soporta tanto el tipo "token" / "Invisible" como el tipo "Captcha" usando gemini ⭐️ Muestra tu apoyo Por favor, da estrella a...

RemoteRecon

RemoteRecon Remote Recon and Collection RemoteRecon provides the ability to execute post-exploitation capabilities against a remote host, without having to expose your complete toolkit/agent. Often times as operator's we need to compromise a host, just so we can keylog or screenshot or some other...

git-all-secrets

git-all-secrets About git-all-secrets is a tool that can: Clone multiple public/private github repositories of an organization and scan them, Clone multiple public/private github repositories of a user that belongs to an organization and scan them, Clone a single public/private repository of an...

gh-dork

gh-dork Supply a list of dorks and, optionally, one of the following: a user -u a file with a list of users -uf an organization -org a file with a list of organizations -of a repo -r You can also pass: an output directory to store results -o a filename to store valid items, if your users or org...