Compose Aperisite

AperiSite Requisitos Docker; Docker Compose; Menos tiempo para preparar el entorno, más tiempo para componer. Descargar root@kitploit: git clone https://gitlab.com/AperiKube/compose-aperisite aperisite pushd aperisite/ git submodule update --init --recursive git submodule foreach --recursive git...

WebGoat

WebGoat: A deliberately insecure Web Application Introduction...

boko

boko Escáner de Secuestro de Aplicaciones para macOS boko.py es un escáner de aplicaciones para macOS que busca e identifica posibles vulnerabilidades de secuestro de dylib y dylib débiles en ejecutables de aplicaciones, así como scripts que una aplicación pueda usar y que tengan potencial para s...

scenester

Scenester Scenester - a tool to visually snapshot a website by supplying multiple user-agent. Designed to aid in discovery of different entry points into an application. Released as open source by NCC Group Plc - http://www.nccgroup.com/ Developed by Sharique Shaikh, sharique dot shaikh at nccgro...

ipscan

Angry IP Scanner This is the source code of Angry IP Scanner, licensed with GPL v2. Official site The code is written mostly in Java. SWT library from Eclipse project is used for GUI that provides native components for each supported platform. The project runs on Linux, Windows and macOS. Helping...

cve-2019-1108

CVE-2019-1108 Exploitation root@kitploit: CVE-2019-1108 Remote Desktop Protocol Client Information Disclosure Vulnerability Published: 07/09/2019 | Last Updated : 11/19/2019 MITRE CVE-2019-1108 An information disclosure vulnerability exists when the Windows RDP client improperly discloses the...

CVE-2020-28653

CVE-2020-28653 Version: 2016 - 2020 before patch Usage: root@kitploit: python exploit.py http://vuln-web.com...

kraken

Advertencia He estado revisando el código de Kraken-Client y, como fue mi primera aplicación React, es antiguo, torpe y necesita una gran mejora el servidor también necesita algo de trabajo. En las próximas semanas/meses haré todo lo posible por reescribirlo en React actualizado o en otro...

xray

Welcome to xray 👋 A Powerful Security Assessment Tool 🏠 Documentation • ⬇️ Download xray • ⬇️ Download xpoc • ⬇️ Download xapp • 📖 Plugin Repository 中文版 Note: xray is not open source, just download the built binary files directly. The repository mainly contains community-contributed POCs. Each xray...

ipa-scope

IPA-SCOPE v.2 IPA-SCOPE es una herramienta de análisis estático que apunta a aplicaciones iOS y extrae información importante como enlaces, archivos interesantes .json, .cer, .der, .api y es muy útil para mostrar buenos resultados cuando se realiza pentesting en aplicaciones iOS Novedades en esta...

flask_appengine_redirector

flaskappengineredirector Google App Engine Flask C2 redirector A simple Python Flask example application that's ready to run on App Engine. Development Setup Install SDK: https://cloud.google.com/sdk/docs/ Run dev instance: devappserver.py app.yaml Deploy gcloud app create gcloud app deploy Setup...

Veto

Veto An open source VirusTotal client for Android Free and open source. Bring your own VirusTotal API key to scan files, links, and installed applications against over 70 engines, built with a Material 3 interface. No accounts, no tracking, no ads. What is Veto? Veto is an Android client for...

CVE-2026-21015-PHP-Filter-Chain-Arbitrary-File-Read

CVE-2026-21015 – PHP Filter Chain Arbitrary File Read Program Code PHP root@kitploit: // vulnerable.php - Includes file based on user input via filter ?php $file = $GET'page'; // Attempt to sanitize by allowing only .php files, but vulnerable to filter wrapper...

Mass-Assigner

Mass Assigner Mass Assigner is a powerful tool designed to identify and exploit mass assignment vulnerabilities in web applications. It achieves this by first retrieving data from a specified request, such as fetching user profile data. Then, it systematically attempts to apply each parameter...

tarian

Tarian Protect your applications running on Kubernetes from malicious attacks by pre-registering your trusted processes and trusted file signatures. Tarian will detect unknown processes and changes to the registered files, then it will send alerts and take an automated action. Save your K8s...

Upload_Bypass

UploadBypass v3 About Upload Bypass is a simple tool designed to assist penetration testers and bug hunters in testing file upload mechanisms. It leverages various bug bounty techniques to simplify the process of identifying and exploiting vulnerabilities, ensuring thorough assessments of web...

so-crates

SO-CRATES Security Onion Containerized Rapid Analysis of Threats, Evil, and Sus A standalone web application for analyzing pcap files, log files, and binary files. Features include Suricata network analysis, YARA binary scanning, Sigma rule detection for logs, and a single-page UI for browsing...

carina

About Carina Carina is a web application used to store webshell, Virtual Private Server VPS and cPanel data. Carina is made so that we don't need to store webshell, VPS or cPanel data in "strange places". Install Carina 1. $ git clone https://github.com/c0delatte/carina && cd carina 2. Run compos...

CVE-2025-68921

🎮 CVE-2025-68921 - Secure Your Gaming Laptop Today 🚀 Getting Started Welcome to CVE-2025-68921. This application helps protect your gaming laptop from vulnerabilities affecting millions of devices. Follow the steps below to download and run the software. 🔗 Download Now 💾 System Requirements To ru...

opensnitch

Join the project community on our server! OpenSnitch is a GNU/Linux application firewall. •• Key Features • Download • Installation • Usage examples • In the press •• Key features Interactive outbound connections filtering. Block ads, trackers or malware domains system wide. Ability to configure...