44497 matches found
AegisJava
AegisJava A specialized tool to detect and mitigate CVE-2025-30749 , a critical Remote Code Execution RCE vulnerability in Oracle Java SE. Vulnerability Details CVE : CVE-2025-30749 Severity : High CVSS 8.1 Affected Components : Java 2D Impact : Unauthenticated Remote Code Execution Usage 1. Run...
viper
Viper Frank4DD, @ Mayo 2000 Viper es un cracker de contraseñas de estilo UNIX por fuerza bruta para contraseñas encriptadas con crypt. Ha sido desarrollado a partir del programa Perl viper 1.4 de Hale. Si bien existen otros programas de crack más potentes, este trata sobre el estudio de la...
viper
Viper Frank4DD, @ May 2000 Viper is a prute force UNIX-style password cracker for passwords encrypt with crypt. It has been developed from Hale's viper 1.4 Perl program. While there are other more powerful crack programs out, this one is about studying the safety of passwords while hardware speed...
egression
Descripción EGRESSION es una herramienta que proporciona una vista instantánea de lo fácil que es subir datos sensibles desde cualquier red. Comienza con un archivo sensible con estos contenidos, que se almacena localmente en texto plano. Este archivo se utiliza para probar los controles de...
spring4shell-scan
spring4shell-scan A fully automated, reliable, and accurate scanner for finding Spring4Shell and Spring Cloud RCE vulnerabilities Features Support for lists of URLs. Fuzzing for more than 10 new Spring4Shell payloads previously seen tools uses only 1-2 variants. Fuzzing for HTTP GET and POST...
ofrak
OFRAK OFRAK Open Firmware Reverse Analysis Konsole is a binary analysis and modification platform. OFRAK combines the ability to: Identify and Unpack many binary formats Analyze unpacked binaries with field-tested reverse engineering tools Modify and Repack binaries with powerful patching...
ofrak
OFRAK OFRAK Consola de Análisis Inverso de Firmware Abierto es una plataforma de análisis y modificación binaria. OFRAK combina la capacidad de: Identificar y desempaquetar muchos formatos binarios Analizar binarios desempaquetados con herramientas de ingeniería inversa probadas en campo Modifica...
CVE-2022-43117
Descripción sugerida La aplicación de almacenamiento de contraseñas de Sourcecodester en PHP/OOP y MySQL 1.0 se descubrió que contenía múltiples vulnerabilidades de cross-site scripting XSS a través de los parámetros Name, Username, Description y Site Feature. Información adicional Prueba de...
apache-flink-directory-traversal.nse
Este repositorio no tiene un README...
CVE-2026-54900
CVE-2026-54900, CVE-2026-54902 Donate Support the maintenance of this project with PayPal or by scanning the QR code below. ⚡ Simple Usage Use this project only in safe and authorized environments such as: Local virtual machines Docker containers Isolated lab setups Authorized penetration testing...
Eris
Eris Eris es una estación de trabajo PGP de escritorio escrita en Go con Fyne. Almacena las claves en una bóveda cifrada y t...
cve-2018-8120
CVE-2018-8120 win7 x64 Reference https://github.com/unamer/CVE-2018-8120 https://github.com/FuzzySecurity/PSKernel-Primitives...
CVE-2013-2730
CVE-2013-2730...
OsirisJailbreak12
OsirisJailbreak12 iOS 12.0 - 12.1.2 Incomplete Jailbreak with CVE-2019-6225 An incomplete iOS 12 Jailbreak. For now it only runs the exploit, gets tfp0, gets ROOT, escapes the SandBox, writes a test file to prove the sandbox was escaped then resprings. Feel free to build on top of it as long as y...
mssqlbof
mssqlbof Un conjunto de Beacon Object Files para Microsoft SQL Server que habla directamente TDS 7.4 en el cable, en C. Sin msodbcsql.dll, sin sqloledb.dll, sin .NET CLR, sin PowerShell. Un COFF por arquitectura, se carga en cada beacon que respeta la API Beacon canónica. Por qué SQL Server apare...
CVE-2026-3300
CVE-2026-3300 - Everest Forms Pro Unauthenticated Stored Cross-Site Scripting Quick Usage root@kitploit: python3 exploit.py -t "C:\Path\To\Target" -o demo.zip --data-file payload.exe Exploitation Notes Severity: CRITICAL CVSS: 9.8 Impact: Confidentiality, Integrity, Availability Published:...
Joomla-3.4.6---configuration.php-Remote-Code-Execution
Joomla-3.4.6---configuration.php-Remote-Code-Execution Affected versions: 3.0.0-3.4.6 1. Vulnerability verification python3 Joomla-3.4.6-RCE.py -t http://172.20.10.4 If "Vulnerable" is displayed, the vulnerability exists. python3 test.py -t http://127.0.0.1:8080/ --exploit --lhost 192.168.31.126...
F5-Big-IP-CVE-2020-5902-mass-exploiter
F5-Big-IP-CVE-2020-5902-mass-exploiter F5 Big-IP CVE-2020-5902 explotador/fuzzer masivo. uso: CVE-2020-5902-mass-exploiter.py -l list.txt -w workers...
OWASP-Learning-Gateway
The OWASP Learning Gateway Project...
SuperDiagnosticTool
SuperDiagnosticTool AI-Powered Windows Diagnostic & Self-Healing Tool SuperDiagnosticTool is an intelligent system diagnostic utility that combines real-time hardware telemetry with Google Gemini AI to analyze, diagnose, and automatically remediate Windows system issues. Built with a safety-first...
Auto_EAP
AutoEAP Introduction Published Sepetember 15, 2016 AutoEAP.py is a script designed to perform automated brute-force authentication attacks against various types of EAP networks. These types of wireless networks provide an interface to facilitate password guessing of domain credentials as radius...
Shell3er
Shell3er Shell3er PowerShell Reverse Shell The Shell3er Reverse Features Get-RandomProcessName Function The Get-RandomProcessName function generates a random process name by concatenating "PS" with a new GUID. This is used to create unique and seemingly random process names, making it harder to...
UnderlayCopy
UnderlayCopy UnderlayCopy is a PowerShell utility for low-level NTFS acquisition and dumping protected, locked system artifacts for example: SAM , SYSTEM , NTDS.dit , registry hives , and other files that are normally inaccessible while Windows is running. It supports two complementary modes to...
Cisco-CVE-2025-20281-illdeed
CVE-2025-20281 — Cisco ISE ERS API Unauthenticated RCE Exploit This repository contains a Python 3 proof-of-concept exploit for CVE-2025-20281 , a critical vulnerability in Cisco Identity Services Engine ISE that allows unauthenticated remote code execution RCE as root via the ERS API. 🩻...
compromised-packages
Este repositorio no tiene un README...
sony-vp-extract
Sony WH-1000XM4 Extractor de Paquetes de Voz Descifra y extrae las indicaciones MP3 de guía de voz de los archivos de firmware cifrados de los Sony WH-1000XM4. La clave AES-128-CBC se ob...
rover
rover Proof of Concept code for CVE-2016-5696 Rover is a small python program to discover abitrary client source ports as shown in CVE-2016-569. Once the source port is known, the 4 tuple of information needed to confirm that two host are communicating can be completed. When run, rover establishe...
CVE-2020-16898
CVE-2020-16898: “Bad Neighbor” CVSS Score: 8.8 CVSS Vector: CVSS3.0/AV:A/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H/E:P/RL:O/RC:C Overview On October 13, Microsoft announced an exceptionally critical vulnerability in the Windows IPv6 stack, which allows an attacker to send maliciously crafted packets to...
CANToolz
CANToolz alias YACHT Otra Herramienta de Hacking de Automóviles CANToolz es un framework para analizar redes y dispositivos CAN. Proporciona múltiples módulos que pueden encadenarse usando el sistema pipe de CANToolz y ser utilizados por investigadores de seguridad, probadores de seguridad...
SecureCodingDojo
About the Secure Coding Dojo The Secure Coding Dojo is a platform for delivering secure coding training. While it comes with its own vulnerable training application the Insecure.Inc website the training portal can be used in conjunction with other training applications. The strength of the platfo...
subfinder
Fast passive subdomain enumeration tool. Features • Install • Usage • API Setup • Library • Join Discord subfinder is a subdomain discovery tool that returns valid subdomains for websites, using passive online sources. It has a simple, modular architecture and is optimized for speed. subfinder is...
test
test CVE-2018-17456 Reproduction...
CVE-2025-0108-Authentication-Bypass-checker
This tool tests whether a target PAN-OS device is vulnerable to the CVE-2025-0108 authentication bypass vulnerability . It sends a crafted HTTP request to the target and analyzes the response to determine if the device is exploitable. Usage single ip root@kitploit: python authbypasscve20250108.py...
CVE-2022-41358
Exploit Title: Garage Management System 1.0 - 'categoriesName' - Stored XSS Exploit Author: Sam Wallace Software Link: https://www.sourcecodester.com/php/15485/garage-management-system-using-phpmysql-source-code.html Version: 1.0 Tested on: Debian ID: CVE-2022-41358 Summary:...
CVE-2023-2516
CVE-2023-2516: Stored XSS Vulnerability in Teampass 3.0.6 - M Nadeem Qazi Hey everyone, I wanted to share with you a vulnerability that I discovered in Teampass, a password management software. I found a stored XSS vulnerability CVE-2023-2516 that allows attackers to inject malicious code into...
CVE-2021-41730
TENDA Authorization Remote Command Execution Exploit Author: SHENGXI [email protected] Vender: TENDA CVE-2021-41730 - /bin/httpd Firmware version: AC15: =USAC15V1.0BRV15.03.05.20multiTDE01.bin AC6: USAC6V1.0BRV15.03.05.16multiTD01.bin ....... Hardware Link:...
bat
Behavioral Adversary Tracer BAT BAT is a realistic, evolving adversary threat model for Linux and Windows. It is not a C2 framework and it is not a rootkit. It is a complete threat simulation platform that integrates C2 communication, kernel-level stealth rootkit modules, userspace evasion,...
silph
SILPH: Recolector de Contraseñas Local Sigiloso en Memoria SILPH es una herramienta de red team de código abierto diseñada para volcar secretos LSA, hashes SAM y credenciales DCC2 completamente en memoria, sin escribir ningún archivo en disco. A diferencia de su proyecto ascendente go-secdump ,...
terrier
Terrier Terrier is a Image and Container analysis tool that can be used to scan OCI images and Containers to identify and verify the presence of specific files according to their hashes. A detailed writeup of Terrier can be found on the Heroku blog,...
terrier
Terrier Terrier es una herramienta de análisis de imágenes y contenedores que se puede utilizar para escanear imágenes OCI y contenedores para identificar y verificar la presencia de archivos específicos según sus hashes. Un artículo detallado sobre Terrier se puede encontrar en el blog de Heroku...
capa
Sitio web | Descargar | Interfaz web capa detecta capacidades en archivos ejecutables. Lo ejecutas contra un PE, ELF, módulo .NET, shellcode o un sandbox report y te dice lo que cree que el programa puede hacer. Por ejemplo, puede sugerir que el archivo es un backdoor, es capaz de instalar...
capa
Website | Download | Web Interface capa detects capabilities in executable files. You run it against a PE, ELF, .NET module, shellcode file, or a sandbox report and it tells you what it thinks the program can do. For example, it might suggest that the file is a backdoor, is capable of installing...
CVE-2021-45010
CVE-2021-45010 Título del Exploit: Tiny File Manager 2.4.6 Autenticado Ejecución Remota de Código Fecha: 04 Mar 2023 Autor del Exploit: Syd Software Enlace: https://github.com/prasathmani/tinyfilemanager Versión: Tiny File Manager = 2.4.3 Probado en: Parrot OS 20.04 CVE : CVE-2021-45010 Referenci...
CVE-2024-24919
EN Is a Proof of Concept PoC script to check for vulnerability CVE-2024-24919. The script is designed to send HTTP POST requests to specified URLs and analyze the responses for possible security issues, like unauthorized access or sensitive data leaks. The script provides a simple yet powerful wa...
Klyda
El proyecto Klyda ha sido creado para ayudar en ataques rápidos basados en credenciales contra aplicaciones web en línea. Klyda soporta el uso desde simples rociados de contraseñas hasta grandes ataques de diccionario multihilo. Klyda es un proyecto nuevo, y estoy buscando contribuciones. Cualqui...
Maestro
Maestro Maestro is a post-exploitation tool designed to interact with Intune/EntraID from a C2 agent on a user's workstation without requiring knowledge of the user's password or Azure authentication flows, token manipulation, and web-based administration console. Maestro makes interacting with...
shocker
Shocker A tool to find and exploit servers vulnerable to Shellshock Ref: https://en.wikipedia.org/wiki/Shellshocksoftwarebug Released as open source by NCC Group Plc - https://www.nccgroup.trust/ Developed By: Tom Watson, tom dot watson at nccgroup dot trust https://github.com/nccgroup/shocker...
santa
Santa Santa is a binary and file access authorization system for macOS. It consists of a system extension that monitors for executions & file access, and makes decisions based on the contents of a local database, a GUI agent that notifies the user in case of a block decision, a background service...