318099 matches found
redpill
:octocat: Project Description The redpill project aims to assist reverse tcp shells in post-exploration tasks. Often, on redteam appointments we need to use unconventional ways to access the target system, like reverse tcp shells not metasploit in order to bypass the defenses implemented by the...
POC-S
POC-S: POC-T Strengthen Version POC-T Enhanced Edition Documentation for POC-T wiki is in the doc directory Preface: Currently Legal Disclaimer Using POC-S to attack targets without prior mutual consent is illegal. POC-S is intended for security testing purposes only. Features Compatible with POC...
rtl8812au
RTL8812AU/21AU and RTL8814AU Wireless drivers Only for use with Linux & Android THESE DRIVERS IS DEPRECATED. Use the mac80211 drivers over at https://github.com/lwfinger/rtw88 Important! root@kitploit: Use "ip" and "iw" instead of "ifconfig" and "iwconfig" It's described further down, READ THE...
File-Injector
File Injector If you want to use a previous version 1.0.2 or lower, where you needed the original image to extract the file, you can download it here. Index 1. Description 2. Getting Started Install requirements Run the script Choose input Choose a base image/audio Choose an input file...
netattack
NETATTACK The netattack.py is a python script that allows you to scan your local area for WiFi Networks and perform deauthentification attacks. The effectiveness and power of this script highly depends on your wireless card. NETATTACK 2 RELEASED https://github.com/chrizator/netattack2/ USAGE EASY...
CVE-2022-42098
KLiK-SocialMediaWebsite バージョン v1.0.1 脆弱性の説明: KLiK-SocialMediaWebsite v1.0.1 には、profile.php のパラメータ id に SQL インジェクションの脆弱性があります。 攻撃ベクトル: KLiK-SocialMediaWebsite v1.0.1 では、ユーザーが作成されると、KLiK ユーザーページを通じて他のユーザーを見つけることもできます。profile.php の "id" パラメータは、任意の SQL クエリを注入するために悪用される可能性があります。 影響を受けるもの:...
CVE-2023-50164-PoC
CVE-2023-50164 PoC This repository is a proof of concept PoC of the CVE-2023-50164 vulnerability. 1. About CVE-2023-50164 CVE-2023-50164 is a file path traversal vulnerability that occurs in Apache Struts web application. An attacker could exploit this vulnerability to upload malicious file...
ctftool
CTFTOOL Just want to test the SYSTEM exploit? Click here. An Interactive CTF Exploration Tool This is ctftool, an interactive command line tool to experiment with CTF, a little-known protocol used on Windows to implement Text Services. This might be useful for studying Windows internals, debuggin...
Security update for MozillaFirefox, mozilla-nspr, mozilla-nss, rust-cbindgen
This update for MozillaFirefox, mozilla-nspr, mozilla-nss, rust-cbindgen fixes the following issues: Changes in MozillaFirefox: This update ships Firefox Extended Support Release 153.2.0 ESR Fixed: Various security fixes. MFSA 2026-85 bsc1278001: CVE-2026-75874: Sandbox escape in the Remote...
reproxy
Reproxy is a simple edge HTTPs server / reverse proxy supporting various providers docker, static, file, consul catalog. One or more providers supply information about the requested server, requested URL, destination URL, and health check URL. It is distributed as a single binary or as a docker...
Just-Metadata
Just-Metadata Just-Metadata is a tool that can be used to gather intelligence information passively about a large number of IP addresses, and attempt to extrapolate relationships that might not otherwise be seen. Just-Metadata has "gather" modules which are used to gather metadata about IPs loade...
bbqsql
BBQSQL A Blind SQL Injection Exploitation Tool Table Of Contents What is BBQSQL? Overview of Readme High Level Usage Install BBQSQL Options Query Syntax Overview HTTP Parameters Export Config Import Config Custom Hooks Found a Bug? Can I Help? What's Up with the Name? What is BBQSQL? Blind SQL...
python-paddingoracle
python-paddingoracle: A portable, padding oracle exploit API UPDATED FOR PYTHON 3 python-paddingoracle is an API that provides pentesters a customizable alternative to PadBuster and other padding oracle exploit tools that can't easily without a heavy rewrite be used in unique, per-app scenarios...
Malicious Twitch Browser Extension Leaks OAuth Tokens From Nearly 31,000 Users
A malicious cross-store Twitch browser extension has leaked OAuth tokens associated with nearly 31,000 users to proxy servers operated by a Russian commercial bot service. The extension, named "Twitch Enhanced Viewer | JeetBot," lists HISHIMIRO/jeetbot.cc as its developer and has the following...
CVE-2026-76071
CVE-2026-76071: Unauthenticated Pre-Auth Stack Buffer Overflow via sscanf %^, in skkset.cgi ipFilterList Handler in Netis NC63 Researcher: Özcan Ersan @ozcanpng Disclosure status CVE: CVE-2026-76071 Vendor: Netis Systems Co., Ltd. Product: Netis NC63 AC1200 Wireless Dual Band Gigabit MU-MIMO Rout...
modifyCertTemplate
目的 このツールは、オペレーターがADCS証明書テンプレートを変更し、作成された脆弱な状態を特権昇格に利用できるようにする（その後、テンプレートを以前の状態にリセットする）ことを支援するために設計されています。これは、テンプレートに対するWriteProperty権限が侵害されたが、オペレーターがその権限がどのプロパティに適用されるか不明なシナリオ向けに特別に設計されています。このシナリオでは、テンプレートのACLをクエリし、該当するACE情報をプロパティGUIDと照合することで、変更可能なプロパティを特定できます。 関連するブログ記事（ツールとトピックについて） 使用方法...
sandy
sandy Copyright 2013 Sandy Written by: Laszlo Toth, Ferenc Spala Description Sandy is an open-source Samsung phone encryption assessment framework. Sandy has different modules that allow you to carry out different attack scenarios against encrypted Samsung phones. For the details check our Derbyc...
EDRSandblast
EDRSandBlast EDRSandBlast は、C で書かれたツールであり、脆弱性のある署名済みドライバを悪用して、EDR の検出（Notify Routine コールバック、Object Callbacks、ETW TI プロバイダー）や LSASS の保護をバイパスします。また、ユーザーランド監視を回避するための複数のユーザーランドアンフック技術も実装されています。 リリース時点では、ユーザーランド（--usermode）とカーネルランド（--kernelmode）の技術を組み合わせて、EDR の監視下で LSASS...
linux-smart-enumeration
First, a couple of useful oneliners ; root@kitploit: wget "https://github.com/diego-treitos/linux-smart-enumeration/releases/latest/download/lse.sh" -O lse.sh;chmod 700 lse.sh root@kitploit: curl "https://github.com/diego-treitos/linux-smart-enumeration/releases/latest/download/lse.sh" -Lo...