scannerl

Scannerl Scannerl is a modular distributed fingerprinting engine implemented by Kudelski Security. Scannerl can fingerprint thousands of targets on a single host, but can just as easily be distributed across multiple hosts. Scannerl is to fingerprinting what zmap is to port scanning. Scannerl wor...

imagick_secure_puppet

basta includere la classe e se imagick esiste... sovrascriverà policy.xml con una versione base di ubuntu 14.04 leggermente modificata con policy aggiuntive attive Esecuzione tramite puppet apply: root@kitploit: $ git clone https://github.com/jackdpeterson/imagicksecurepuppet.git $ mv...

DIY-CVE-2026-42945-POC

Ubuntu 22.04 + nginx 1.30.0 डॉकर रनटाइम यह वातावरण स्थानीय HTTP परीक्षण के लिए Ubuntu 22.04 पर nginx 1.30.0 को स्रोत से बनाता है। PHP-FPM को सीधे Dockerfile में कॉन्फ़िगर किया गया है क्योंकि nginx.conf PHP अनुरोधों को /tmp/php-cgi-80.sock पर अग्रेषित करता है। चलाएँ root@kitploit: docker compose u...

nxlog-ubuntu-githubactions

nxlog-ubuntu-githubactions nxlog ubuntu...

rita

RITA Real Intelligence Threat Analytics If you get value out of RITA and would like to go a step further with hunting automation, futuristic visualizations, and data enrichment, then take a look at AC-Hunter. Brought to you by Active Countermeasures. Sponsored by BHIS. RITA is an open source...

lava

LAVA: Large Scale Automated Vulnerability Addition Evaluating and improving bug-finding tools is currently difficult due to a shortage of ground truth corpora i.e., software that has known bugs with triggering inputs. LAVA attempts to solve this problem by automatically injecting bugs into...

CVE-2007-4559

PoC o Exploit per CVE-2007-4559 Un archivio TAR malevolo può includere percorsi di file come ../../../../etc/passwd, che tentano di "salire" fuori dalla cartella di estrazione prevista. Se uno script Python usa tarfile.extract o extractall senza controllare i percorsi dei file, decomprimerà i fil...

hosting

Informazioni Generali: Questa è una configurazione per un server di hosting condiviso basato su Tor. Viene fornita così com'è e, prima di metterla in produzione, dovresti apportare modifiche in base alle tue esigenze. È un lavoro in corso e dovresti controllare attentamente la cronologia dei comm...

hontel

HonTel HonTel is a Honeypot for Telnet service. Basically, it is a Python v2.x application emulating the service inside the chroot environment. Originally it has been designed to be run inside the Ubuntu/Debian environment, though it could be easily adapted to run inside any Linux environment...

Linux_LPE_eBPF_CVE-2021-3490

LinuxLPEeBPFCVE-2021-3490 Exploit LPE per CVE-2021-3490. Testato su Ubuntu 20.04.02 e 20.10 Groovy Gorilla kernel 5.8.0-25.26 fino a 5.8.0-52.58. e Ubuntu 21.04 Hirsute Hippo 5.11.0-16.17. La vulnerabilità è stata scoperta da Manfred Paul @manfp e corretta in questo commit. autore: @chompie1337...

spraykatz

Spraykatz Spray love around the world Index...

pyrdp

PyRDP PyRDP is a Python Remote Desktop Protocol RDP Monster-in-the-Middle MITM tool and library. It features a few tools: RDP Monster-in-the-Middle Logs plaintext credentials or NetNTLM hashes used when connecting Steals data copied to the clipboard Saves a copy of the files transferred over the...

rehex

Reverse Engineers' Hex Editor A cross-platform Windows, Linux, macOS, BSD hex editor for reverse engineering, and everything else. An online copy of the manual can be accessed here: solemnwarning.net/rehex/manual/. Features Large 1TB+ file support Decoding of integer/floating point value types...

ProcDump-for-Linux

ProcDump ProcDump is a Linux and Mac reimagining of the classic ProcDump tool from the Sysinternals suite of tools for Windows. ProcDump provides a convenient way for Linux and Mac developers to create core dumps of their application based on performance triggers. ProcDump for Linux and Mac is pa...

difuze

difuze: Fuzzer for Linux Kernel Drivers This repo contains all the sources including setup scripts, you need to get difuze up and running. Tested on Ubuntu = 14.04.5 LTS 0. Running difuze from Docker Refer the readme As explained in our paper, There are two main components of difuze: Interface...

red-kube

Red Team K8S Adversary Emulation Based on kubectl Red Kube is a collection of kubectl commands written to evaluate the security posture of Kubernetes clusters from the attacker's perspective. The commands are either passive for data collection and information disclosure or active for performing...

ncrack

ncrack Ncrack is a high-speed network authentication cracking tool. It was built to help companies secure their networks by proactively testing all their hosts and networking devices for poor passwords. Security professionals also rely on Ncrack when auditing their clients. Ncrack was designed...

instantbox

En | 简 | 繁 instantbox Get a clean, ready-to-go Linux box in seconds. Introduction What is instantbox? It's a project that spins up temporary Linux systems with instant webshell access from any browser. What can an instantbox do?...

OpenSSLUpgrade1.1.1q-Ubuntu

Questo repository non contiene un README...

PwnKit-Local-Privilege-Escalation-Vulnerability-Discovered-in-polkit-s-pkexec-CVE-2021-4034

PwnKit-Locale-Privilegi-Elevazione-Vulnerabilità-Scoperta-in-polkit-s-pkexec-CVE-2021-4034- Progetto universitario su vulnerabilità software e mitigazione, per mostrare lo sfruttamento e la riparazione causati da questa vulnerabilità. Per questo esperimento abbiamo utilizzato Ubunto versione 16.0...