BRIntelcollector

BRIntelcollector Visión General El BRIntelcollector es una herramienta de Cyber Threat Intelligence CTI enfocada en indicadores de amenazas nacionales de Brasil. La herramienta permite buscar y consolidar información sobre amenazas cibernéticas a través de múltiples fuentes de inteligencia,...

darwis-taxii

DARWIS TAXII Un servidor TAXII Trusted Automated eXchange of Indicator Information de alto rendimiento escrito en Rust. Puerto en Rust de EclecticIQ OpenTAXII con compatibilidad total de base de datos. Características TAXII 1.x - Descubrimiento, Consulta, Bandeja de entrada, Gestión de...

CVE-2026-93541

A flaw was found in libXi. An out-of-bounds read vulnerability in the XQueryDeviceState function allows a malicious X server to trigger an application crash. By returning a specially crafted response to a device state query, the server causes the client application to read memory beyond allocated...

CVE-2017-12149

CVE-2017-12149 CVE-2017-12149 JBOSS as 6.X Deserialization Reverse Shell Version Rewritten GUI interface based on the author's command-line mode detail:http://www.cnblogs.com/sevck/p/7874438.html...

POC-CVE-2026-56164-exploit

CVE-2026-56164 — Microsoft SharePoint Server Authentication Bypass Exploit Critical CVSS 9.8 — Unauthenticated Privilege Escalation to Farm Administrator in Microsoft SharePoint Server Table of Contents Overview Vulnerability Details Affected Versions Architecture Diagrams Project Structure...

Redis-RCE

redis-rce Redis 4.x/5.x RCE Usage root@kitploit: usage: redis-rce.py -h -r RHOST -p RPORT -L LHOST -P LPORT -f FILE -a AUTH -v Redis 4.x/5.x RCE with RedisModules optional arguments: -h, --help show this help message and exit -r RHOST, --rhost RHOST target host -p RPORT, --rport RPORT target redi...

st2-048

St2-048 Remote Code Execution Vulnerability Apache Struts 2 possible RCE in the Struts Showcase app in the Struts 1 plugin example in the Struts 2.3.x series http://struts.apache.org/docs/s2-048.html https://cwiki.apache.org/confluence/display/WW/S2-048 Use-Age: root@kitploit: python St2-048.py s...

vxworks_hash

vxworkshash code to reverse vxworks 5.x password hashes This is really old now! : See my blog post for more info: http://cvk.posthaven.com/how-to-crack-vxworks-password-hashes...

CVE-2021-43798

CVE-2021-43798: Grafana Arbitrary File Read Vulnerability Added nuclei template for full-version detection on Windows+Linux List of 52 plugins: root@kitploit: live icon loki text logs news stat mssql mixed mysql tempo graph gauge table debug zipkin jaeger geomap canvas grafana welcome xychart...

pyattck

Welcome to pyattck's Documentation root@kitploit: . ... | \ \ \ / / / \ | | | / || |/ / | | | \ / / / ^ \ ---| |-------| |----| ,----'| ' / | / \ / / /\ \ | | | | | | | Current Version is 7.1.1 pyattck is a light-weight framework for MITRE ATT&CK Frameworks. This package extracts details from the...

arpy

Arpy Arpy is an easy-to-use ARP spoofing MiTM tool for Mac. It provides 3 targeted functions: Packet Sniffing Visited Domains Visited Domains with Gource Each function will be explained below. Tested OS to date Darwin 14.3.0 Darwin Kernel Version 14.3.0 Mac OS X Requirements Python 2.7 Gource Sca...

security_monkey

NOTE: Security Monkey is in maintenance mode and will be end-of-life in 2020. For AWS users, please make use of AWS Config. For GCP users, please make use of Cloud Asset Inventory. Security Monkey Security Monkey monitors your AWS and GCP accounts for policy changes and alerts on insecure...

isf

Industrial Exploitation Framework ISFIndustrial Exploitation Framework is a exploitation framework based on Python, it's similar to metasploit framework. ISF is based on open source project routersploit. Read this in other languages:English, 简体中文, Disclaimer Usage of ISF for attacking targets...

celerystalk

celerystalk celerystalk helps you automate your network scanning/enumeration process with asynchronous jobs aka tasks while retaining full control of which tools you want to run. Interactive Demo: Bug Bounty Mode HackerOne Interactive Demo: Vulnerability Assessment / PenTest Mode Retired...

KisMac2

POR FAVOR, TENGA EN CUENTA QUE ESTE PROYECTO YA NO SE MANTIENE KisMac2 KisMAC es una herramienta gratuita y de código abierto para la exploración y seguridad inalámbrica en Mac OS X. Seguimiento de incidencias: En adelante, utilice el rastreador...

CVE-2026-97731

MinIO through 7aac2a2 does not verify that every x-amz- header present on a request also appears in the client-supplied X-Amz-SignedHeaders list. extractSignedHeaders in cmd/signature-v4-utils.go iterates only the claimed list and never enumerates the headers that actually arrived, and thus a...

CVE-2026-97731

MinIO through 7aac2a2 does not verify that every x-amz- header present on a request also appears in the client-supplied X-Amz-SignedHeaders list. extractSignedHeaders in cmd/signature-v4-utils.go iterates only the claimed list and never enumerates the headers that actually arrived, and thus a...

CVE-2026-97731

MinIO through 7aac2a2 does not verify that every x-amz- header present on a request also appears in the client-supplied X-Amz-SignedHeaders list. extractSignedHeaders in cmd/signature-v4-utils.go iterates only the claimed list and never enumerates the headers that actually arrived, and thus a...

CVE-2026-97731

Versions of MinIO through 7aac2a2 and pgsty/silo before 1233254 are vulnerable to a security flaw where the system fails to verify if all received x-amz-* headers are present in the client-supplied X-Amz-SignedHeaders list. Specifically, the extractSignedHeaders() function in cmd/signature-v4-uti...

osinteye

Esta herramienta no recibirá más actualizaciones. Instagram está obsoleto, así que decidí archivarla. Suite de enumeración y reconocimiento de nombres de usuario Sitios compatibles PyPI Github TestPypi About.me Instagram DockerHub Instalación Clonar el proyecto: root@kitploit: $ git clone...