CVE-2026-50751-Mitigation-Scripts

CVE-2026-50751-Mitigation-Scripts There are multiple mitigation techniques you can use from the sk; https://support.checkpoint.com/results/sk/sk185033 1. Disable legacy client support. 2. Configure Remote Access to only use ike v2 There are scripts for both of those changes; Please...

zap-scripts

zap-scripts Zed Attack Proxy Scripts for finding CVEs and Secrets. Building This project uses Gradle to build the ZAP add-on, simply run: root@kitploit: ./gradlew build in the main directory of the project, the add-on will be placed in the directory build/zapAddOn/bin/. Usage The easiest way to u...

stego-toolkit

Steganography Toolkit This project is a Docker image useful for solving Steganography challenges as those you can find at CTF platforms like hackthebox.eu. The image comes pre-installed with many popular tools see list below and several screening scripts you can use check simple things for...

Citadel

Introduction Citadel is a collection of various scripts for pentest-related tasks. List of scripts included vars.zsh msfresourcescripts dnsdump.py fileinfo.zsh fileserver.py opcodes.zsh stackpush.zsh sslconvert.zsh gitdownload.zsh cardmon.zsh powershellcmdstager.py sfparser.py xmltojson.py...

lscript

The lazy script has not been updated for a while due to me being very busy with my life. I will try my best to upload an update when I find the time Welcome to the LAZY script v2.1.4 A video Hackersploit made : https://www.youtube.com/watch?v=oBpo5sElrMY A video sstec made:...

htrace.sh

Description htrace.sh is a shell script for http/https troubleshooting and profiling. It's also a simple wrapper around several open source security tools. For a more detailed understanding of htrace.sh, its parameters, functions and how it all works, run htrace.sh --examples or see the Wiki...

awesome-oneliner-bugbounty

Awesome One-liner Bug Bounty A collection of awesome one-liner scripts especially for bug bounty. This repository stores and houses various one-liner for bug bounty tips provided by me as well as contributed by the community. Your contributions and suggestions are heartily♥ welcome. Definitions...

wildPwn

wildPwn - WildFly Exploitation Tool It is a tool for WildFly. Tool can be used to brute force or shell deploy. wildPwn.war contains modified Laudanum Shell. userList.txt contains common usernames and passList.txt contains common passwords. Usage Bruteforce root@kitploit: python wildPwn.py -m brut...

kali-packer

Kali-Packer Este solía ser el hogar de los scripts de compilación de Kali-Vagrant. Desde Kali 2025.2, el equipo de Kali ha dejado de usar Packer para generar máquinas virtuales de Vagrant y ahora usa DebOS. Este es el mismo método utilizado para generar nuestras otras VMs estándar. Como este...

reternal-quickstart

RE:TERNAL Note: Still under development, only use for testing and do not expose interfaces! Current compose doesn't work yet, only try when you know what you're doing RE:TERNAL is a centralised purple team orchestration service to manage third-party C2 frameworks. Agents are installed on endpoint...

Bheem

Project Bheem Project Bheem is a simple collection of small bash-scripts which runs iteratively to carry out various tools and recon process & store output in an organized way. This project was created initially for automation of Recon for personal usage and was never meant to be public as there ...

dump

Dump This repository contains dead/unfinished projects, small scripts or stuff that doesn't deserve a repository of its own. Contents git-gat : post-exploitation script for finding private git repos Infinity dead : find phone number of any Facebook user. json2paths : converts JSON keys to paths f...

bad_ducky

Bad Ducky 概述 Bad Ducky 是另一个 Rubber Ducky 克隆。它基于 CJMCU BadUsb（ATMEGA32u4 - Arduino Leonardo 克隆）板，带有板载读卡器，你可以在 eBay 或 aliexpress 上购买。我的目标是创建一个与 Rubber Ducky 脚本兼容，同时能够轻松选择要执行的脚本而无需修改硬件（无需添加 DIP 开关）的东西。 这个有什么特别之处？ 完全兼容 Rubber Ducky 脚本（支持所有命令） 脚本无需编译/编码 有效载荷大小无限制（唯一限制是 SD 卡大小） 它有两种操作模式（连续交付和一次性交付）...

advisories

Avisos de Seguridad de Enable Security Este repositorio contiene código de reproducción, scripts de prueba de concepto y archivos de soporte para avisos de seguridad publicados por Enable Security. Avisos completos: https://www.enablesecurity.com/advisories/ El contenido completo de los avisos...

Creds

Creds Algunos scripts y ejecutables útiles para Pentest y Forense La mayoría de los scripts/ejecutables son específicos de Windows / Dominio. Descargo de responsabilidad legal: El uso de estos scripts/ejecutables para atacar objetivos sin consentimiento mutuo previo es ilegal. Es responsabilidad...

r2frida

r2frida Radare2 and Frida better together Description Self-contained plugin for radare2 that ships frida and allows to instrument local or remote processes using r2 commands instead but not limited to Frida scripts. The radare project provides a complete toolchain for reverse engineering, it's...

msidump

msidump MSI Dump - a tool that analyzes malicious MSI installation packages, extracts files, streams, binary data and incorporates YARA scanner. On Macro-enabled Office documents we can quickly use oletools mraptor to determine whether document is malicious. If we want to dissect it further, we...

ghostrings

Ghostrings Scripts para recuperar definiciones de cadenas en binarios de Go con análisis P-Code. Probado con x86, x86-64, ARM y ARM64. Scripts Golang Estos se pueden encontrar en la categoría Golang del Script Manager. GoDynamicStrings.java Analiza P-Code para encontrar estructuras de cadenas...

Redpoint

Redpoint Herramientas de enumeración de ICS de Digital Bond Redpoint es un proyecto de investigación de Digital Bond para enumerar aplicaciones y dispositivos ICS. Usamos nuestras herramientas Redpoint en evaluaciones para descubrir dispositivos ICS y obtener información que sería útil en pruebas...

idacode

IDACode IDACode makes it easy to execute and debug Python scripts in your IDA environment without leaving Visual Studio Code. The VS Code extension can be found on the marketplace. IDACode is still in a very early state and bugs are to be expected. Please open a new issue if you encounter any...