moltis

Moltis — A secure persistent personal agent server in Rust One binary — sandboxed, secure, yours. Installation • Comparison • Architecture • Security • Features • How It Works • Contributing Moltis recently hit the front page of Hacker News. Please open an issue for any friction at all. I'm focus...

Ropper

Ropper يمكنك استخدام ropper لعرض معلومات حول ملفات ثنائية بتنسيقات ملفات مختلفة، ويمكنك البحث عن أدوات gadgets لبناء سلاسل ROP لبنى مختلفة x86/X8664، ARM/ARM64، MIPS/MIPS64، PowerPC/PowerPC64، SPARC64. لفك التجميع يستخدم ropper إطار العمل الرائع Capstone Framework. تثبيت قم بتثبيت Capstone باستخد...

how2heap

Educational Heap Exploitation This repo is for learning various heap exploitation techniques. We use Ubuntu's Libc releases as the gold-standard. Each technique is verified to work on corresponding Ubuntu releases. You can run apt source libc6 to download the source code of the Libc you are using...

CVE-2021-41091

CVE-2021-41091 This exploit offers an in-depth look at the CVE-2021-41091 security vulnerability and provides a step-by-step guide on how to utilize the exploit script to achieve privilege escalation on a host. Vulnerability Summary CVE-2021-41091 is a flaw in Moby Docker Engine that allows...

SharpWSUS

SharpWSUS SharpWSUS is a CSharp tool for lateral movement through WSUS. There is a corresponding blog https://labs.nettitude.com/blog/introducing-sharpwsus/ which has more detailed information about the tooling, use case and detection. Credits Massive credit to the below resources that really did...

patching

Patching - Interactive Binary Patching for IDA Pro Overview Patching assembly code to change the behavior of an existing program is not uncommon in malware analysis, software reverse engineering, and broader domains of security research. This project extends the popular IDA Pro disassembler to...

patching

التصحيح - التصحيح الثنائي التفاعلي لـ IDA Pro نظرة عامة ليس من غير المألوف تعديل كود التجميع لتغيير سلوك برنامج قائم في تحليل البرمجيات الضارة وهندسة البرمجيات العكسية ومجالات أوسع من أبحاث الأمان. يمتد هذا المشروع من برنامج التفكيك الشهير IDA Pro لإنشاء سير عمل تفاعلي أكثر متانة للتصحيح الثنائي...

Limelighter

LimeLighter A tool which creates a spoof code signing certificates and sign binaries and DLL files to help evade EDR products and avoid MSS and sock scruitney. LimeLighter can also use valid code signing certificates to sign files. Limelighter can use a fully qualified domain name such as acme.co...

CVE-2025-6019

CVE-2025-6019 Proof of Concept PoC This repository contains a Proof of Concept PoC script for CVE-2025-6019 , a Local Privilege Escalation LPE vulnerability in libblockdev and udisks. The script creates an XFS filesystem image with an SUID bash binary and exploits the vulnerability to mount it...

YaraVM

YaraVM Yara is a tool for matching patterns in files, commonly used for malware analysis. Yara rules can be compiled into a binary format that can later be loaded and executed. This repository contains a processor module and a loader for IDA Pro, enabling you to load and analyze compiled Yara...

Log4j-CVE-Detect

Log4J-CVE-Detect This repository contains a set of YARA rules for detecting versions of log4j which are vulnerable to CVE-2021-44228, CVE-2021-45046, and / or CVE-2021-45105 by looking for a number of features which appear in affected versions. This tool works recursively on binary files such as...

serval

A Netcat style backdoor for pentesting and pentest challenges Serval is a lightweight, easy-to-use, binary for spawning reverse and bind shells for pentests or pentesting exercises. Serval is cross platform and can be compiled for both Windows 32 & 64-bit and Linux 32 and 64-bit. Note: Due to the...

scorecard

OpenSSF Scorecard...

nginx-1.4.0

nginx-1.4.0 لتحليل CVE-2013-2028 استغلال: exp-nginx.rb ملف ثنائي لبناء ROP: nginx...

angr

angr angr هو إطار عمل لتحليل الثنائيات مستقل عن المنصة. تم تطويره بواسطة مختبر أمان الحاسوب في جامعة كاليفورنيا سانتا باربرا، و SEFCOM في جامعة ولاية أريزونا، وفريق CTF المرتبط بهم، Shellphish، ومجتمع المصادر المفتوحة، و @rhelmot. روابط المشروع الصفحة الرئيسية: https://angr.io مستودع المشروع:...

doctrack

Doctrack Tool to manipulate and weaponize Office Open XML documents. Features Create Office Open XML documents Word, Excel Insert tracking pixels and UNC paths Remote Template injection Insert CustomXML parts Inspect external target URLs, metadata and Custom XML parts Installation You will need t...

nautilus

Nautilus 2.0 Nautilus is a coverage guided, grammar based fuzzer. You can use it to improve your test coverage and find more bugs. By specifying the grammar of semi valid inputs, Nautilus is able to perform complex mutation and to uncover more interesting test cases. Many of the ideas behind this...

nautilus

Nautilus 2.0 Nautilus هو مولد اختبارات fuzzer يعتمد على التغطية والقواعد النحوية. يمكنك استخدامه لتحسين تغطية اختباراتك واكتشاف المزيد من الأخطاء. من خلال تحديد قواعد نحوية للمدخلات شبه الصالحة، يستطيع Nautilus إجراء طفرات معقدة واكتشاف حالات اختبار أكثر إثارة للاهتمام. تم توثيق العديد من الأفكار...

DefenderCheck

DefenderCheck Quick tool to help make evasion work a little bit easier. Warning: As of the 1.337.157.0 Defender signature update, DefenderCheck is classified as VirTool:MSIL/BytzChk.C!MTB. As a workaround while I work to get around this, please disable Real-time Protection in Defender before...

zeno

Zeno Framework Installation root@kitploit: cd git clone https://github.com/Traxes/zeno --recursive sudo pip3 install termcolor tqdm git clone https://github.com/Z3Prover/z3 --recursive cd z3 python3 scripts/mkmake.py --python cd build make sudo make install cd /zeno Usage root@kitploit: /zeno$...