sitrep

SitRep Extensible, configurable host triage. Purpose SitRep is intended to provide a lightweight, extensible host triage alternative. Checks are loaded dynamically at runtime from stand-alone files. This allows operators to quickly modify existing checks, or add new checks as required. Checks are...

IntruderPayloads

IntruderPayloads A collection of Burpsuite Intruder payloads, BurpBounty payloads https://github.com/wagiro/BurpBounty, fuzz lists and pentesting methodologies. To pull down all 3rd party repos, run install.sh in the same directory of the IntruderPayloads folder. Author: [email protected] -...

spraykatz

Spraykatz 在世界各地喷洒爱 目录 关于 Spraykatz 是一个谦逊的工具，能够获取 Windows 机器和大型 Active Directory 环境中的凭据 。 它简单地尝试对机器执行 procdump 并远程解析转储文件 ，以尽可能避免 被杀毒软件检测到。 安装 本工具适用于 python3 到 python3.6 。请勿在生产环境中使用！ Ubuntu 在全新更新的 Ubuntu 上。 root@kitploit: apt update apt install -y python3.6 python3-pip git nmap git clone...

JCEzploit-CVE-2026-48907

JCEzploit Marco de pruebas de seguridad de Joomla JCE Una utilidad profesional de línea de comandos para pruebas de penetración autorizadas, investigación controlada de vulnerabilidades y validación defensiva. Solo uso autorizado. Ejecute este proyecto exclusivamente contra sistemas de su propied...

CyberRange

Overview: This CyberRange project represents the first open-source Cyber Range blueprint in the world. This project provides a bootstrap framework for a complete offensive, defensive, reverse engineering, & security intelligence tooling in a private research lab using the AWS Cloud. This project...

herpaderping

Process Herpaderping Process Herpaderping is a method of obscuring the intentions of a process by modifying the content on disk after the image has been mapped. This results in curious behavior by security products and the OS itself. Summary Generally, a security product takes action on process...

python-hacklib

hacklib Toolkit for hacking enthusiasts using Python. hacklib is a Python module for hacking enthusiasts interested in network security. It is no longer in active development. Installation To get hacklib, simply run in command line: root@kitploit: pip install hacklib hacklib also has a user...

CVE-2023-49438

CVE-2023-49438 Proof of Concept Description An open redirect vulnerability in the python package Flask-Security-Too =version 5.3.2 allows attackers to redirect unsuspecting users to malicious sites via a crafted URL by abusing the ?next parameter on the /login and /register routes. Background...

cve-2022-27666-exploits

cve-2022-27666-exploits There are 2 exploitation methods that exploit CVE-2022-27666. For more info on how to use these code bases please check my blog here...

CVE-2010-3971-hotpatch

CVE-2010-3971-hotpatch Do you own security hotfix with Deviare. Original article: using Deviare to create a temporary zero day patch...

CVE-2021-3156

This repository does not have a README...

witcher

witcher 大规模实施和监控应用安全控制。 系统要求 NodeJS 20.13 已测试平台 Mac Ubuntu 安装方法 root@kitploit: $ git clone [email protected]:mf-labs/witcher.git $ cd witcher $ npm i 构建Docker镜像 root@kitploit: $ git clone [email protected]:mf-labs/witcher.git $ cd witcher $ docker build -t witcher . 运行Docker镜像 $ docker...

witcher

witcher Implement and monitor Appsec control at scale. Requirements NodeJS 20.13 Tested on Mac Ubuntu How to install root@kitploit: $ git clone [email protected]:mf-labs/witcher.git $ cd witcher $ npm i Build a Docker image root@kitploit: $ git clone [email protected]:mf-labs/witcher.gi...

airgorah

Airgorah Un software de auditoría de seguridad WiFi basado principalmente en el conjunto de herramientas aircrack-ng Instalación | Uso | Créditos Airgorah es un software de auditoría de seguridad WiFi que puede capturar tráfico WiFi cercano, descubrir clientes conectados a puntos de acceso,...

CVE-2026-65182

A flaw was found in Apache Tomcat. This improper access control and incorrect authorization vulnerability allows an attacker to bypass security constraints. This occurs when a security constraint for a longer path is specified before a more restrictive constraint for a shorter sub-path, potential...

packages_apps_Settings_AOSP10_r33_CVE-2020-0219_CVE-2020-0188_old-one

This repository does not have a README...

Lazymux

Lazymux Lazymux is a tool that helps you to install and use multiple penetration testing and hacking tools on Android system with ease. It allows users to easily install and use a variety of popular tools such as Nmap, SQLMap, and Metasploit. The tool is simple to use, as you only need to type a...

CLSA-2026-1788195644 TuxCare security update for axios (5 CVEs)

TuxCare rebuilt axios to address 5 CVEs. Fixed in 1.7.9-tuxcare.4...

cloud-sniper

Cloud Sniper : Detection-as-code platform Cloud Sniper is a comprehensive platform meticulously designed to streamline Cloud Security Operations. It swiftly responds to security incidents by analyzing and correlating cloud artifacts, ensuring a holistic view of the company's cloud security postur...

cloud-sniper

Cloud Sniper：检测即代码平台 Cloud Sniper 是一个全面设计的平台，旨在简化云安全运营。它通过分析和关联云工件，迅速响应安全事件，确保护航公司云安全态势的全局视图。 作为集中式事件响应枢纽，我们的平台利用云原生工件和开源技术执行自动化操作。这种方法赋能社区以多样化的安全用例丰富项目。 Cloud Sniper 高效处理安全信息流，自主保护云基础设施。其分析模块关联入侵指标（IOC），揭示攻击者的战术、技术与程序（TTP），为分析师提供增强的安全发现。 用户通过 Cloud Sniper...