xed

Intel® X86 Encoder Decoder Intel® XED Doxygen API manual and source build manual: https://intelxed.github.io Bugs: https://github.com/intelxed/xed/issues/new Abbreviated GITHUB building instructions: root@kitploit: git clone https://github.com/intelxed/xed.git xed git clone...

sgn

SGN is a polymorphic binary encoder for offensive security purposes such as generating statically undetecable binary payloads. It uses a additive feedback loop to encode given binary instructions similar to LFSR. This project is the reimplementation of the original Shikata ga nai in golang with...

Zetsu

A personal offline RAG system for offensive security knowledge. Ingest your writeups, lab solutions, bug bounty reports, and security blogs, then query them in natural language during engagements. No cloud, no SaaS, your knowledge stays yours. What it does ZETSU turns your accumulated knowledge...

The-Axer

The axer will replace the manual procedure of creating your payloads with msfvenom , making it easier and a lot quicker Contact The Owner THE AXER WILL LET YOU CHOOSE THE PLATFOR , FORMAT , ENCODER , Bind with another file and alot of other features...

dalfox

Dalfox is a powerful open-source tool that focuses on automation, making it ideal for quickly scanning for XSS flaws and analyzing parameters. Its advanced testing engine and niche features are designed to streamline the process of detecting and verifying vulnerabilities. Key features Subcommands...

pyrmax

pyrmax Decoder and encoder for Ubiquiti AirMAX wire-protocol frames, covering both the AC WA firmware and M XW/XM firmware series. Decode of the cleartext outer headers is driven by Kaitai Struct schemas under ksy/. The AC payload version-gated, switched on msgtype, with the deauth XOR-unmask is...

owasp-java-encoder

OWASP Java Encoder Project Contextual Output Encoding is a computer programming technique necessary to stop Cross-Site Scripting. This project is a Java 1.8+ simple-to-use drop-in high-performance encoder class with little baggage. For more detailed documentation on the OWASP Java Encoder please...

NOW

NØW — Word-Based Shellcode Encoder Encode shellcode as natural-looking English prose. Decode it back with the right sentence + password. What is NØW? NØW Natural Output Words is a C tool that converts raw shellcode bytes into human-readable English text — either a plain list of codewords or fluen...

YouPHPTube Encoder 2.3 - Remote Command Injection

YouPHPTube Encoder 2.3 is susceptible to a command injection vulnerability which could allow an attacker to compromise the server. These exploitable unauthenticated command injections exist via the parameter base64Url in /objects/getImage.php. id: CVE-2019-5127 info: name: YouPHPTube Encoder 2.3 ...

YouPHPTube Encoder - Arbitrary File Write

Exploitable unauthenticated command injections exist in YouPHPTube Encoder 2.3 a plugin for providing encoder functionality in YouPHPTube.The parameter base64Url in /objects/getImageMP4.php is vulnerable to a command injection attack. id: CVE-2019-5128 info: name: YouPHPTube Encoder - Arbitrary...

YouPHPTube Encoder 2.3 - Command Injection

Exploitable unauthenticated command injections exist in YouPHPTube Encoder 2.3 a plugin for providing encoder functionality in YouPHPTube.The parameter base64Url in /objects/getImageMP4.php is vulnerable to a command injection attack. id: CVE-2019-5129 info: name: YouPHPTube Encoder 2.3 - Command...

Ascii-And-Sub-Encoder

ASCII And/Sub Encoder This tool has been created while i was preparing for the offensive security CTP course leading to legacy OSCE certification. The tool generates nasm friendly assembly instructions of a customized Ascii Subtraction Encoder. The development of this tool is based on the...

Slink

Slink is an alphanumeric shellcode x86 encoder that use simple math operations to reformat characters beyond 7f. The tool creation was inspired by the following sploit EDB-ID: 44455. Here's the list of current features: Encode using 01-7f characters set. Exclude common bad characters such as...

Brosec

Overview tl;dr Brosec is a terminal based reference utility designed to help us infosec bros and broettes with useful yet sometimes complex payloads and commands that are often used during work as infosec practitioners. An example of one of Brosec's most popular use cases is the ability to genera...

pyrmax

pyrmax 用于 Ubiquiti AirMAX 线协议帧的解码器和编码器，涵盖 AC（WA 固件）和 M（XW/XM 固件）系列。 解码 ：明文外部头由 ksy/ 下的 Kaitai Struct 模式驱动。AC 载荷 （按版本门控，依据 msgtype 切换，带 deauth XOR 去掩码）由 ac.py 手写实现——该逻辑不适合纯解析式 Kaitai。 编码 ：手写实现，与解码路径逐字段对应。 Status Variant| Decode| Encode| pcap iteration ---|---|---|--- AC| ✅ 全部 5 种 msg 类型（beacon、ass...

flask-session-cookie-manager

Flaskセッションクッキーデコーダ/エンコーダ 原作者 : Wilson Sumanang 修正・改良者 : Alexandre ZANNI saruberoz.github.io からのインポート 依存関係 Python 2 または Python 3 itsdangerous Flask インストール パッケージ BlackArch Linux root@kitploit: pacman -S flask-session-cookie-manager3,2 Git ArchLinux Python3 と Python2 の両方: root@kitploit: git clone...

CVE-2026-42530

CVE-2026-42530 Scanner for CVE-2026-42530, a use-after-free in nginx's HTTP/3 module. Affected: nginx 1.31.0, 1.31.1 Fixed: nginx 1.31.2 Usage root@kitploit: pip install aioquic python3 scannerCVE-2026-42530.py port python3 scannerCVE-2026-42530.py --file hosts.txt How it works Opens two QPACK...

CVE-2026-42530

🛡️ CVE-2026-42530 - NGINX HTTP/3 QUIC Use-After-Free Vulnerability High-Severity Use-After-Free in NGINX HTTP/3 QUIC ⚠️ QPACK Encoder Stream Vulnerability 🔍 Overview CVE-2026-42530 is a use-after-free vulnerability in NGINX's ngxhttpv3module. A remote unauthenticated attacker can trigger it by...

CVE-2026-52296

A flaw was found in FFmpeg. An out-of-bounds read can occur when a specially crafted file is encoded into the WMA Windows Media Audio format due to a missing required padding in extradata allocation. This issue can lead to an application crash, resulting in a denial of service. Mitigation Do not...

Astra Linux – Vulnerability in openjpeg2

There is a flaw in OpenJPEG’s T2 encoder in versions prior to 2.4.0. An attacker who can provide crafted input for OpenJPEG to process may cause a null pointer dereferencing. The most significant impact of this flaw is the availability of the application...