1087594 matches found
ntlm_relay_gat
NTLM Relay Gat Description NTLM Relay Gat is a powerful tool designed to automate the exploitation of NTLM relays using ntlmrelayx.py from the Impacket tool suite. By leveraging the capabilities of ntlmrelayx.py, NTLM Relay Gat streamlines the process of exploiting NTLM relay vulnerabilities,...
kerberoast
๐ฉ Sponsors If you like this project, consider sponsoring it on GitHub! Sponsors kerberoast Kerberos attack toolkit -pure python- Install pip3 install kerberoast Prereqirements Python 3.6 See requirements.txt For the impatient IMPORTANT: the accepted target url formats for LDAP and Kerberos are th...
woody-woodpacker
Woody-Woodpacker A 42 school project that implements a binary packer for 64-bit ELF executables. The packer encrypts the executable's code sections and injects a decryption routine that executes at runtime. ๐ฏ About Woody-Woodpacker is a program that takes a 64-bit ELF binary as input and creates ...
vm-filesystem
vm-filesystem A Firebeam bytecode to perform Filesystem interacting while also monkey-patch the python function for the Havoc Interface File Browser interaction, allowing to interact with the remote filesystem without needing to have the filesystem embedded. This repository also is a representati...
smtp-tunnel-proxy
๐ง SMTP Tunnel Proxy A high-speed covert tunnel that disguises TCP traffic as SMTP email communication to bypass Deep Packet Inspection DPI firewalls. root@kitploit: โโโโโโโโโโโโโโโ โโโโโโโโโโโโโโโ โโโโโโโโโโโโโโโ โโโโโโโโโโโโโโโโ โ Application โโโโโโโถโ Client โโโโโโโถโ Server โโโโโโโถโ Internet โ โ...
GitHacker
GitHacker A multi-threaded .git folder exploitation tool. Reconstructs the target repository in full โ source code, commit history, branches, stashes, remotes, tags โ even when DirectoryListings is disabled, by brute-forcing well-known refs. The accompanying research site at...
CVE-2026-15889 Aruba HiSpeed Cache <= 3.0.14 - Authenticated (Contributor+) Stored Cross-Site Scripting via Post Content
The Aruba HiSpeed Cache plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Post Content in all versions up to, and including, 3.0.14 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access...
CVE-2026-15889
The Aruba HiSpeed Cache WordPress plugin is affected by a Stored Cross-Site Scripting (XSS) vulnerability in all versions up to and including 3.0.14 , caused by insufficient input sanitization and output escaping in the Post Content field. An authenticated attacker with Contributor-level access o...
EUVD-2026-75366
The Aruba HiSpeed Cache plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Post Content in all versions up to, and including, 3.0.14 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access...
EUVD-2026-75365
The Redux Framework plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Slider field in User Profile settings in versions up to and including 4.5.13.1. This is due to insufficient input sanitization in the usermetasave function which only sanitizes array values, not scalar...
CVE-2026-5399 Redux Framework <= 4.5.13.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Slider Field Value
The Redux Framework plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Slider field in User Profile settings in versions up to and including 4.5.13.1. This is due to insufficient input sanitization in the usermetasave function which only sanitizes array values, not scalar...
CVE-2026-5399 Redux Framework <= 4.5.13.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Slider Field Value
The Redux Framework plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Slider field in User Profile settings in versions up to and including 4.5.13.1. This is due to insufficient input sanitization in the usermetasave function which only sanitizes array values, not scalar...
CVE-2026-5399
The Redux Framework WordPress plugin is vulnerable to Stored Cross-Site Scripting (XSS) via the Slider field in User Profile settings in versions up to and including 4.5.13.1 . The root cause involves three factors: insufficient input sanitization in the user_meta_save() function (which only sani...
MESH
DOCS | BARGHEST MESH is a networking tool, to support remote logical forensics acquision on mobile devices MESH gives analysts a direct, encrypted path to mobile devices for wireless debugging, network monitoring and forensic acquisition, even when those devices sit behind NAT, firewalls, or...
requests-ip-rotator
Proudly sponsored by Swiftproxy High-performance residential proxies with an 80M+ IP pool across 195+ countries โ improve request success rates and reduce IP blocks during large-scale data collection and browser automation. Perfect for use with requests-ip-rotator, Playwright, Selenium, and other...
bucket-stream
๐จ Bucket Stream is no longer maintained. If you need support or consultation for your red teaming endeavours, drop me an e-mail [email protected] ๐จ Bucket Stream Find interesting Amazon S3 Buckets by watching certificate transparency logs. This tool simply listens to various certificate...
KingOfBugBountyTips
KingOfBugBountyTips The Ultimate Bug Bounty Reconnaissance Arsenal "In the shadows we hunt, in the code we trust" Telegram | Twitter | YouTube | LinkedIn DoD VDP Scope DoD Vulnerability Disclosure Program | KingRecon DOD Full DoD Scope - 19 Domains root@kitploit: BBRF Scope - All DoD Domains bbrf...
agent-sweep
AgentSweep Find and redact secrets in your AI coding agent's local history. Fully offline. Prevention: Don't paste API keys into cloud-backed AI agents at all โ the key transits the provider's servers before it ever hits your disk. If you already did: agentsweep removes the remaining local attack...
Triton
Triton is a dynamic binary analysis library. It provides internal components that allow you to build your program analysis tools, automate reverse engineering, perform software verification or just emulate code. Dynamic symbolic execution Dynamic taint analysis AST representation of the x86 ,...
