python-ecdsa

ECDSA y ECDH en Python puro Esta es una implementación fácil de usar de ECC Criptografía de Curva Elíptica con soporte para ECDSA Algoritmo de Firma Digital de Curva Elíptica, EdDSA Algoritmo de Firma Digital de Curva Edwards y ECDH Diffie-Hellman de Curva Elíptica, implementada puramente en...

CVE-2022-25257

CVE-2022-25257 SAS Logon 9.4 permite la inyección de mensajes de advertencia. Descubierto: 15 de febrero de 2022 Versiones afectadas: 9.4 Exploit de PoC: SASLogon/csrf tiene un parámetro llamado "target" Este parámetro afecta el mensaje de advertencia de la URL que el usuario estaba a punto de...

CVE-2026-33936

CVE-2026-33936 Vulnerabilidad de denegación de servicio en ecdsa PyPI Introducción Identifiqué y divulgué de forma responsable una vulnerabilidad de severidad Moderada en python-ecdsa , una biblioteca de criptografía de Python ampliamente utilizada con 47,8 millones de descargas en el último mes...

gmailc2

gmailc2 root@kitploit: A Fully Undetectable C2 Server That Communicates Via Google SMTP to evade Antivirus Protections and Network Traffic Restrictions Note: root@kitploit: This RAT communicates Via Gmail SMTP or u can use any other smtps as well but Gmail SMTP is valid because most of the...

CVE-2025-0994

CVE-2025-0994 ¿Cómo funciona este método de detección? Esta plantilla de Nuclei extrae la versión almacenada en el cuerpo del HTML y, en función de la versión, podemos determinar si la instancia es vulnerable a CVE-2025-0994 o no. Versión parcheada: 15.8.9 ¿Cómo ejecuto este script? 1. Descarga...

yj_nearbyglasses

yjnearbyglasses 尝试检测附近的智能眼镜并提醒你。 ⚠ 警告！⚠ nearby-glasses-alert.pages.dev 与我的项目无关。Play Store 和 App Store 中有许多应用看起来甚至名称都与 Nearby Glasses 非常相似。它们似乎是在盗用这个名字，试图借此快速牟利。它们不遵守 AGPL 许可证，也完全不提供任何东西。我不认可它们。 ⚠ 警告！⚠ 仅仅因为你认为某人佩戴了隐蔽监控设备就对其进行骚扰，可能构成刑事犯罪。这可能比使用此类设备本身更为严重。请就此事咨询当地法律的专业意见。 ⚠ 请勿骚扰任何人 ⚠ Nearby Glasses...

HoneyWire

HoneyWire 📋 Tabla de Contenidos Resumen Demostración El Estándar Universal de Eventos Características Arquitectura Guía de Inicio Rápido Notas de Seguridad Stack Tecnológico Hoja de Ruta y Desarrollo Versionado y Referencia de API Resumen HoneyWire es un constructor de Sistemas de Alerta Temprana...

lazyrecon

root@kitploit: / \ / / \ /// / // Y / \ /| | | | / | / / \ / | /|| \ | / | / || |\ || | |/| |-||/ / / / | /| / | | /|| | || // |/// /\\|// | Usage ./lazyrecon.sh -d domain.com To exclude particular subdomains: ./lazyrecon.sh -d domain.com -e...

interactsh

An OOB interaction gathering server and client library Features • Usage • • • •...

manuka

Manuka 描述 Manuka 是一个开源情报（OSINT）蜜罐，用于监控威胁行为体的侦察尝试，并为蓝队生成可操作的情报。它创建一个包含模拟 OSINT 源（如社交媒体资料和泄露凭证）的仿真环境，并追踪对手兴趣的迹象，紧密对齐 MITRE 的 PRE-ATT&CK 框架。Manuka 让蓝队在攻击前侦察阶段获得额外可见性，并为防御者生成早期预警信号。 虽然传统蜜罐在规模和复杂度上有所不同，但大多数专注于网络层面。这些蜜罐在网络杀伤链的第2阶段（武器化）到第7阶段（达成目标）揭露攻击者，其假设是攻击者已经正在探测网络。 Manuka 在网络杀伤链的第1阶段（侦察）执行 OSINT...

enhanced-iframe-protection

Protección Mejorada de iFrame - Extensión de Navegador La Protección Mejorada de iFrame EIP es una extensión ligera que detecta automáticamente y proporciona advertencias detalladas para elementos iframe incrustados, con el fin de proteger contra ataques de Navegador-Dentro-Del-Navegador BITB...

nextjs-react2shell-detect

Chrome extension that runs next.version locally and injects a warning popover if the site runs a next version vulnerable to react2shell This is a Plasmo extension project bootstrapped with plasmo init. Getting Started First, run the development server: root@kitploit: bun dev Open your browser and...

AZL-99503 CVE-2026-80788 affecting package kernel 6.6.150.1-1

In the Linux kernel, the following vulnerability has been resolved: nvmet-tcp: Do not WARN on remotely-controlled oversized SGL allocations When fuzzing the nvme target code, I tripped a kernel warning in nvmettcpmapdata because the length passed into the allocator is controlled by the remote...

CVE-2026-80788

CVE-2026-80788 affects the Linux kernel NVMe-over-TCP target subsystem (nvmet-tcp ). A remote NVMe initiator can send a command with an oversized SGL (Scatter Gather List) field, causing nvmet_tcp_map_data() to allocate over one million scatterlist/iovec entries. This exceeds MAX_PAGE_ORDER , tri...

CVE-2026-80788 nvmet-tcp: Do not WARN on remotely-controlled oversized SGL allocations

In the Linux kernel, the following vulnerability has been resolved: nvmet-tcp: Do not WARN on remotely-controlled oversized SGL allocations When fuzzing the nvme target code, I tripped a kernel warning in nvmettcpmapdata because the length passed into the allocator is controlled by the remote...

EUVD-2026-71431

In the Linux kernel, the following vulnerability has been resolved: nvmet-tcp: Do not WARN on remotely-controlled oversized SGL allocations When fuzzing the nvme target code, I tripped a kernel warning in nvmettcpmapdata because the length passed into the allocator is controlled by the remote...

CVE-2026-80788 nvmet-tcp: Do not WARN on remotely-controlled oversized SGL allocations

In the Linux kernel, the following vulnerability has been resolved: nvmet-tcp: Do not WARN on remotely-controlled oversized SGL allocations When fuzzing the nvme target code, I tripped a kernel warning in nvmettcpmapdata because the length passed into the allocator is controlled by the remote...

ssh-mitm

SSH MITM v2.3-dev Author: Joe Testa @therealjoetesta Overview This penetration testing tool allows an auditor to intercept SSH connections. A patch applied to the OpenSSH v7.5p1 source code causes it to act as a proxy between the victim and their intended SSH server; all plaintext passwords and...

CVE-2026-80727

In the Linux kernel, the following vulnerability has been resolved: x86/mce: Set up the polling timer before CMCI discovery I hit the following on one of my machines: mce: CPU0 BANK15 CMCI inherited storm ------------ cut here ------------ ODEBUG: assertinit not available active state 0 object:...

UBUNTU-CVE-2026-80727

In the Linux kernel, the following vulnerability has been resolved: x86/mce: Set up the polling timer before CMCI discovery I hit the following on one of my machines: mce: CPU0 BANK15 CMCI inherited storm ------------ cut here ------------ ODEBUG: assertinit not available active state 0 object:...