spyre

Spyre ...a simple, self-contained modular host-based IOC scanner Spyre is a simple host-based IOC scanner built around the YARA pattern matching engine and other scan modules. The main goal of this project is easy operationalization of YARA rules and other indicators of compromise. Users need to...

mitm-proxy

Go MITM Proxy 一个轻量级、开发者友好的中间人（MITM）HTTP/HTTPS 代理，使用 Go 编写。它支持 HTTP/1.1 和 HTTP/2、CONNECT 隧道、WebSocket 隧道（ws/wss）、带有灵活过滤器的磁盘响应缓存以及实时配置重载。 徽章 管理面板预览 概述 Go MITM Proxy 是一个拦截代理，用于调试、测试、学习和受控拦截 HTTPS 流量。当启用 MITM 时，它会动态生成由本地 CA 签名的每主机叶子证书，从而允许代理解密和检查 HTTPS 流量。当 MITM 禁用或针对排除的域名/端口时，它也可以作为透明 TCP 隧道工作。...

CVE-2026-93352

Laravel-Mediable versions 7.0.0 before 7.0.2 are vulnerable to remote code execution due to an incomplete patch for CVE-2026-49972. The forbidden_extensions blocklist in config/mediable.php includes phpt but omits .pht. On Debian and Ubuntu systems, Apache may execute .pht files as PHP via the de...

how2heap

Educational Heap Exploitation This repo is for learning various heap exploitation techniques. We use Ubuntu's Libc releases as the gold-standard. Each technique is verified to work on corresponding Ubuntu releases. You can run apt source libc6 to download the source code of the Libc you are using...

github-dorks

Github Dorks Github Search is a quite powerful and useful feature that can be used to search for sensitive data on repositories. Collection of Github dorks can reveal sensitive personal and/or organizational information such as private keys, credentials, authentication tokens, etc. This list is...

CAPE-parsers

CAPE-parsers CAPE core and community parsers Configs structure root@kitploit: CNCs: campaign: str botnet: str dgaseed: hex str version: str mutex: str useragent: str build: str cryptokey: str cryptokeytype: str algorithm. Ex: RC4, RSA public key. salsa20, xchacha20 raw: any other data goes here A...

bluez

BlueZ - Pila de protocolos Bluetooth para Linux Copyright C 2000-2001 Qualcomm Incorporated Copyright C 2002-2003 Maxim Krasnyansky [email protected] Copyright C 2002-2010 Marcel Holtmann [email protected] Compilación e instalación Para compilar las utilidades de Bluetooth necesitas los...

HikvisionExploiter

HikvisionExploiter HikvisionExploiter is a powerful and automated exploitation toolkit targeting unauthenticated endpoints on Hikvision IP cameras , particularly those running firmware version 3.1.3.150324. It performs: Snapshot access verification Config file retrieval and decryption User...

CVE-2021-43811

CVE-2021-43811 awslabs/sockeye Inyección de código mediante carga insegura de YAML CVE-2021-43811 Descripción de NVD Sockeye es un framework de secuencia a secuencia de código abierto para la traducción automática neuronal, construido sobre PyTorch. Sockeye utiliza YAML para almacenar las...

terraform-aws-secure-baseline

terraform-aws-secure-baseline Terraform Module Registry A terraform module to set up your AWS account with the reasonably secure configuration baseline. Most configurations are based on CIS Amazon Web Services Foundations v1.4.0 and AWS Foundational Security Best Practices v1.0.0. See Benchmark...

aws-security-assessment-solution

Self-Service Security Assessment Solutions v2.0 Cybersecurity remains a very important topic and point of concern for many CIOs, CISOs, and their customers. To meet these important concerns, AWS has developed a primary set of services customers should use to aid in protecting their accounts. Amaz...

CVE-2026-71460

/api/v2/config/ is protected only by IsAuthenticated. licenseinfo accountnumber, subscriptionid, poolid, sku, supportlevel, instance counts returned to any authenticated user. The superuser/auditor gate only covers projectbasedir/projectlocalpaths/customvirtualenvs, not licenseinfo. Enables socia...

apk-mitm

apk-mitm 一款自动为 Android APK 文件准备 HTTPS 检测的 CLI 应用程序 使用代理检查移动应用的 HTTPS 流量，可能是了解其工作原理的最简单方法。然而，随着 Android 7 引入的网络安全配置以及应用开发者试图通过证书固定来防止中间人攻击，让应用与 HTTPS 代理协同工作变得相当繁琐。 apk-mitm 实现了整个流程的自动化。你只需提供一个 APK 文件，apk-mitm 就会： 使用 Apktool 解码 APK 文件 替换应用的网络安全配置，以允许用户添加的证书 修改源代码以禁用各种证书固定实现 使用 Apktool 重新编码修改后的 APK ...

agentic-ioc-scanner

agentic-ioc-scanner 针对自主AI编码工具的IOC扫描器——检测 Mini Shai-Hulud、Gemini CLI RCE、Cursor CVE-2026-26268 以及 DPRK PromptMink。 一个检测工具包，用于检测自主AI编码助手（Claude Code、Gemini CLI、Cursor）及其拉入仓库的依赖项是否受到危害。共十一个检查项，涵盖钩子注入、RCE配置、恶意依赖、Git钩子后门以及CI工作流篡改。IOC列表外部化——添加新指标无需修改代码。 配套博客文章：When the Tool Fights Back。 包含内容 1. IOC扫描器...

gixy

GIXY 概述 Gixy 是一款用于分析 Nginx 配置的工具。 Gixy 的主要目标是防止安全配置错误并实现缺陷检测的自动化。 目前支持的 Python 版本为 2.7、3.5、3.6 和 3.7。 免责声明：Gixy 仅在 GNU/Linux 上经过充分测试，其他操作系统可能存在一些问题。 它能做什么 目前 Gixy 可以检测： ssrf 服务端请求伪造 httpsplitting HTTP 分割 origins referrer/origin 验证问题 addheaderredefinition "addheader" 指令覆盖响应头 hostspoofing 请求的 Host...

CVE-2023-24055_PoC

CVE-2023-24055 概念验证 KeePass 2.5x 正在讨论和分析中... https://sourceforge.net/p/keepass/discussion/329220/thread/a146e5cf6b/ https://sourceforge.net/p/keepass/feature-requests/2773/ 攻击者如果拥有对 KeePass 配置文件的写入权限，可以修改该文件并注入恶意触发器，例如通过添加导出触发器来获取明文密码。 https://nvd.nist.gov/vuln/detail/CVE-2023-24055...

CVE-2023-24055

CVE-2023-24055 CVE-2023-24055 的 POC 和扫描器 使用风险自负！ configscanner.py 一个简单的解析器，用于运行在 Windows 下的 KeePass 配置文件。 该工具将打开目录 %APPDATA%\Roaming\KeePass\KeePass.config.xml 并输出所有触发器。这些触发器 执行命令行/URL 将活动数据库与文件/URL同步 导出活动数据库 被标记为危险。这是我个人的看法，我相信你也可以通过其他一些操作执行恶意行为！ 提示：如果你不认识某些触发器，请仔细检查它们！ poc.py CVE-2023-24055...

Medusa

Medusa Medusa 是一个跨平台代理，兼容 Python 3.8 和 Python 2.7。 安装 要安装 Medusa，你需要在远程计算机上安装 Mythic v3。你可以在 Mythic 项目页面 找到 Mythic 的安装说明。 在 Mythic 安装根目录下，运行以下命令： ./mythic-cli install github https://github.com/MythicAgents/Medusa.git 安装完成后，重启 Mythic 以构建新代理。 RabbitMQ 配置说明 文件 PayloadType/medusa/rabbitmqconfig.json...

CVE-2023-23752

CVE-2023-23752 Escáner masivo + obtener configuración de CVE-2023-23752 Captura de pantalla Instalaciones clona este repositorio instala los requisitos root@kitploit: pip3 install -r requirements.txt...

malduck

🦆 Malduck Installation ⚙️ | Docs 📚 Malduck is your ducky companion in malware analysis journeys. It is mostly based on Roach project, which derives many concepts from mlib library created by Maciej Kotowicz. The purpose of fork was to make Roach independent from Cuckoo Sandbox project, but still...