wpgarlic

wpgarlic A proof-of-concept WordPress plugin fuzzer that led to the discovery of more than 300 vulnerabilities in WordPress plugins installed on almost 30 million sites. The used technique is described in https://kazet.cc/2022/02/03/fuzzing-wordpress-plugins.html If you want to continue the...

presentations

Mis presentaciones Se pueden encontrar más cosas en mi sitio personal: https://sites.google.com/site/zhiniangpeng Explotando vulnerabilidades de RCE de preautenticación y escape de sandbox en EXSi, Typhooncon 2023 Los objetos OLE siguen siendo peligrosos hoy en día — Explotando Microsoft Office,...

kubesploit

Kubesploit Kubesploit is a cross-platform post-exploitation HTTP/2 Command & Control server and agent dedicated for containerized environments written in Golang and built on top of Merlin project by Russel Van Tuyl @Ne0nd0g. Our Motivation While researching Docker and Kubernetes, we noticed that...

nimbostratus

Nimbostratus Tools for fingerprinting and exploiting Amazon cloud infrastructures. These tools are a PoC which I developed for my "Pivoting in Amazon clouds" talk, developed using the great boto library for accessing Amazon's API. For more information visit the project page Feel free to report...

kernel-exploits

Linux kernel exploits Date| Link| Description| Vector| Impact ---|---|---|---|--- 02.2016| CVE-2016-2384| Double-free in USB MIDI driver| USB + Local| LPE 03.2016| prefetch-side-channel| KASLR bypass via prefetch| Local| Info-leak 12.2016| CVE-2016-9793| Signedness issue with socket buffers| Loca...

attifyos

AttifyOS v3.0 AttifyOS is a distro intended to help you perform security assessment and penetration testing of Internet of Things IoT devices. It saves you a lot of time by providing a pre-configured environment with all the necessary tools loaded. The new version is based on Ubuntu 18.04 64-Bit ...

WebGoat.NET

Webgoat.NET Código fuente: https://github.com/jerryhoff/WebGoat.NET Descargar zip: https://github.com/jerryhoff/WebGoat.NET/zipball/master Esta aplicación web es una plataforma de aprendizaje que intenta enseñar sobre fallos comunes de seguridad web. Contiene fallos de seguridad genéricos que...

functrace

functrace - A function tracer functrace is a tool that helps to analyze a binary file with dynamic instrumentation using DynamoRIO http://dynamorio.org/. These are some implemented features based on DynamoRIO: disassemble all the executed code disassemble a specific function dump if these are...

not-going-anywhere

Resumen Not Go-ing Anywhere es un conjunto de programas Golang vulnerables pensados para mostrar vulnerabilidades comunes y proporcionar un banco de pruebas para que los usuarios encuentren, corrijan y remedien vulnerabilidades de Golang. Está modelado a partir de nuestro repositorio not so smart...

traitor

Traitor Automatically exploit low-hanging fruit to pop a root shell. Linux privilege escalation made easy! Traitor packages up a bunch of methods to exploit local misconfigurations and vulnerabilities in order to pop a root shell: Nearly all of GTFOBins Writeable docker.sock CVE-2022-0847 Dirty...

airborn-IOS-CVE-2025-24252

iOS "Airborne" 漏洞 - 日志人工产物提取器 该脚本旨在通过查询来自 .logarchive 包的 iOS 系统日志，帮助识别 "Airborne" 漏洞集（主要影响 Apple 的 AirPlay 协议）的潜在痕迹。它自动执行多个定制的 log show 命令，以发现可能与此类漏洞相关的异常。 免责声明： 本工具仅供信息调查目的。存在匹配这些查询的日志条目并不明确确认已被入侵。日志条目应结合上下文分析。未发现结果并不保证设备安全。请始终确保您的设备已更新到最新的操作系统版本。 关于作者与项目 该脚本由 Anton Shustikov...

lazyrecon

root@kitploit: | | | |/ | /| | | | / / |/ | \ | | | / / | | | | | | / | | | ||\ |/ \ || ||/|| |v2 |/ Lazyrecon v2 is a subdomain discovery tool that finds and resolves valid subdomains then performs SSRF/LFI/SQLi fuzzing, brute-force and port scanning. It has a simple modular architecture and...

ispy

ispy ispy : Eternalbluems17-010/BluekeepCVE-2019-0708 扫描与利用工具 Metasploit 自动化 安装方法： git clone https://github.com/Cyb0r9/ispy.git cd ispy chmod +x setup.sh ./setup.sh 截图： 测试环境： Parrot OS Kali linux YouTube 频道 Cyborg https://youtube.com/c/CyborgTN 教程 如何使用 ispy...

nf-tables-lpe

nf-tables-lpe Exploits of Team Orca from Sea Security and Qrious Secure for multiple vulnerabilities in Netfilter's nftable module...

DVSA

una aplicación serverless deliberadamente vulnerable Damn Vulnerable Serverless Application DVSA es una aplicación deliberadamente vulnerable que pretende ser una ayuda para que los profesionales de la seguridad pongan a prueba sus habilidades y herramientas en un entorno legal, ayudar a los...

FreePBX-CVE-2025-57819-RCE

FreePBX 16 — 未授权 SQL 注入到远程代码执行 概念验证漏洞利用，通过链式利用两个 FreePBX 漏洞，从 零访问 到 FreePBX 16 上的 远程代码执行 。 CVE| 组件| 影响 ---|---|--- CVE-2025-57819| 端点模块加载器（brand 参数）| 未授权堆叠式 SQL 注入 CVE-2025-61678| 端点管理器固件上传器（fwbrand 参数）| 已认证任意文件上传（路径遍历） 工作原理 1. 创建管理员（CVE-2025-57819） — 通过命名空间端点加载器，无需认证即可利用堆叠式 SQL 注入，直接向 ampusers 表...

dotdotslash

dotdotslash An tool to help you search for Directory Traversal Vulnerabilities Benchmarks Platforms that I tested to validate tool efficiency: DVWA low/medium/high bWAPP low/medium/high Screenshots Instalation You can download the last version cloning this repository git clone...

mimicry

Mimicry Mimicry Mimicry is a security tool developed by Chaitin Technology for active deception in exploitation and post-exploitation. Active deception can live migrate the attacker to the honeypot without awareness. We can achieve a higher security level at a lower cost with Active deception...

karonte

Karonte Karonte is a static analysis tool to detect multi-binary vulnerabilities in embedded firmware. The master branch provides the latest version of Karonte, ported to python3. For the original implementation and experiments presented in our paper, please checkout the IEEE-SP-20 branch and hav...

noia

Noia Noia is a web-based tool whose main aim is to ease the process of browsing mobile applications sandbox and directly previewing SQLite databases, images, and more. Powered by frida.re. Please note that I'm not a programmer, but I'm probably above the median in code-savyness. Try it out, open ...