352750 matches found
cookie-monster
Cookie-Monster-BOF 通过 BOF 窃取 Edge、Chrome 和 Firefox 的浏览器 Cookie！ Cookie Monster BOF 会提取 Edge 和 Chrome 的 WebKit Master Key 和 App Bound Encryption Key，找到持有 Cookies 和 Login Data 文件句柄的浏览器进程，复制其句柄，然后无文件形式下载目标文件。 下载 Cookies/Login Data 文件后，可以使用 Python 解密脚本提取这些秘密！Firefox 模块会解析 profiles.ini，定位 logins.json ...
CVE-2025-24201-WebKit-Vulnerability-Detector-PoC-
CVE-2025-24201 Detector de Vulnerabilidad WebKit PoC Esta prueba de concepto detecta si un navegador basado en WebKit es vulnerable a CVE‑2025‑24201 , una vulnerabilidad de escritura fuera de los límites de alta gravedad causada por una validación incorrecta de capacidades en la implementación de...
Awesome-WAF
Awesome WAF Everything about web application firewalls WAFs from a security perspective. 🔥 Foreword: This was originally my own collection on WAFs. I am open-sourcing it in the hope that it will be useful for pentesters and researchers out there.As the saying goes, "the community just learns from...
uaf-2023-28205
CVE-2023-28205: Vulnerabilidad de Use-After-Free en Apple WebKit Esta vulnerabilidad puede explotarse mediante contenido web manipulado maliciosamente, lo que permite a los atacantes ejecutar código arbitrario. Descripción El código desencadena una vulnerabilidad de use-after-free UAF al retrasar...
vet v1.19.0
Quick Start • Documentation • Community !NOTE vet supports special mode for Agent Skills. Run vet scan --agent-skill to scan an Agent Skill hosted in a GitHub repository. Why vet? 70-90% of modern software is open source code — how do you know it's safe? Traditional SCA tools drown you in CVE...
box-js
box.js A utility to analyze malicious JavaScript. Installation Simply install box-js from npm: root@kitploit: npm install box-js --global box-js is also available: as a Cuckoo module see the integrations directory and Nwinternights/CuckooBoxjs; as a Dockerfile see integrations/README.md; as a...
bmcweb
OpenBMC webserver This component attempts to be a "do everything" embedded webserver for OpenBMC. Features The webserver implements a few distinct interfaces: DBus event websocket. Allows registering for changes to specific dbus paths, properties, and will send an event from the websocket if thos...
Security Bulletin: Multiple security vulnerabilities are addressed with IBM Cloud Pak for Business Automation iFixes for August 2026.
Summary In addition to many updates of operating system level packages, the following security vulnerabilities are addressed with IBM Cloud Pak for Business Automation released in August 2026. Vulnerability Details CVEID:CVE-2026-12590 DESCRIPTION: Impact: In body-parser versions prior to 1.20.6...
chisel
Chisel Chisel 是一个快速的 TCP/UDP 隧道，通过 HTTP 传输，并经由 SSH 加密。单个可执行文件同时包含客户端和服务器端。使用 Go golang 编写。Chisel 主要用于穿透防火墙，但也可以用来为你的网络提供安全端点。 目录 功能特性 安装 演示 使用方法 贡献 更新日志 许可证 功能特性 易于使用 高性能 加密连接，使用 SSH 协议（通过 crypto/ssh） 认证连接；通过用户配置文件对客户端连接进行认证，通过指纹匹配对服务器连接进行认证。 客户端自动重连，采用指数退避策略（可通过 --min/max-retry-interval 调整）；心跳...
Elasticsearch 8.19.20, 9.4.5, 9.5.1 Security Update (ESA-2026-114)
Deserialization of Untrusted Data in Elasticsearch Leading to Remote Code Execution Deserialization of Untrusted Data CWE-502 in the Elasticsearch machine learning component can lead to remote code execution via Object Injection CAPEC-586. A specially crafted trained model artifact could cause...
CVE-2026-31282
CVE-2026-31282 Description Totara LMS is vulnerable to Incorrect Access Control. The login page code can be manipulated to reveal the login form and bypass Octa login. An attacker can chain that with missing rate-limit on the login form to launch a brute force attack to obtain a user credentials...
Security Bulletin: Multiple secuirty vulnerabilies addressed with IBM Business Automation Workflow August 2026
Summary In addition to updating many operating system level packages, the following security vulnerabilities are addressed with IBM Business Automation Workflow released in August 2026.. Vulnerability Details CVEID:CVE-2026-11541 DESCRIPTION: IBM CICS Transaction Gateway for Multiplatforms 9.1,...
Claude-Skills-Governance-Risk-and-Compliance
Claude Skills for Governance, Risk & Compliance GRC Expert-level compliance guidance for ISO 27001, SOC 2, FedRAMP, GDPR, HIPAA, NIST CSF, PCI DSS, TSA Cybersecurity, ISO 42001 AI Management System, ISO 27701 Privacy Information Management, DORA Digital Operational Resilience, India's Digital...
turbinia
Turbinia Summary Note: Turbinia will not develop new features anymore and is in maintenance mode. Users should have a look atOpenRelik. Turbinia is an open-source framework for deploying, managing, and running distributed forensic workloads. It is intended to automate running of common forensic...
misp-galaxy
misp-galaxy MISP galaxy es un método sencillo para expresar un objeto grande llamado cluster que puede adjuntarse a eventos o atributos de MISP. Un cluster puede estar compuesto por uno o más elementos. Los elementos se expresan como pares clave-valor. Existe una base de conocimiento predetermina...
fwknop
fwknop - Single Packet Authorization Introduction fwknop implements an authorization scheme known as Single Packet Authorization SPA for strong service concealment. SPA requires only a single packet which is encrypted, non-replayable, and authenticated via an HMAC in order to communicate desired...
hate_crack
root@kitploit: / | \ / | \ \ | | / \ \ / \ / \ /\ \ \ / | |/ / \ Y // | | \ / \ | | // \ | \ /|| /\ | \ / / // / / / / Installation Installing from source is the only supported path. hatecrack is not distributed on PyPI: pip install hate-crack resolves to a 0.0.0 placeholder that...
hate_crack
root@kitploit: / | \ / | \ \ | | / \ \ / \ / \ /\ \ \ / | |/ / \ Y // | | \ / \ | | // \ | \ /|| /\ | \ / / // / / / / Installation Installing from source is the only supported path. hatecrack is not distributed on PyPI: pip install hate-crack resolves to a 0.0.0 placeholder that...
insmod_block
insmodblock Linux: - - - - - - - By nu11secur1ty: https://github.com/nu11secur1ty/linux-nu11secur1ty Linux: - - - - - - - By nu11secur1ty: https://gitlab.com/nu11secur1ty/linux-nu11secur1ty root@kitploit: Linux Kernel security modules by nu11secur1ty GNU GENERAL PUBLIC LICENSE Version 3, 29 June...
