hontel

HonTel HonTel is a Honeypot for Telnet service. Basically, it is a Python v2.x application emulating the service inside the chroot environment. Originally it has been designed to be run inside the Ubuntu/Debian environment, though it could be easily adapted to run inside any Linux environment...

rita

RITA Real Intelligence Threat Analytics If you get value out of RITA and would like to go a step further with hunting automation, futuristic visualizations, and data enrichment, then take a look at AC-Hunter. Brought to you by Active Countermeasures. Sponsored by BHIS. RITA is an open source...

tachyon

Tachyon تاتشيون هي أداة استطلاع أمان سريعة لتطبيقات الويب. وهي مصممة خصيصًا لزحف تطبيقات الويب والبحث عن الملفات المتبقية أو غير المفهرسة، بالإضافة إلى الإبلاغ عن الصفحات أو البرامج النصية التي تسرب البيانات الداخلية. متطلبات المستخدم Linux Python 3.6+ تثبيت المستخدم تثبيت: root@kitploit: $ mkdir...

metame

metame metame is a simple metamorphic code engine for arbitrary executables. From Wikipedia: Metamorphic code is code that when run outputs a logically equivalent version of its own code under some interpretation. This is used by computer viruses to avoid the pattern recognition of anti-virus...

kippo

NOTE: For more recent development, check out Michel Oosterhof's fork Kippo Kippo is a medium interaction SSH honeypot designed to log brute force attacks and, most importantly, the entire shell interaction performed by the attacker. Kippo is inspired, but not based on Kojoney. Demo Some interesti...

reko

reko - a general purpose decompiler. Reko Swedish: "decent, obliging" is a decompiler for machine code binaries. This project is freely available under the GNU General Public License. The project consists of front ends, core decompiler engine, and back ends to help it achieve its goals. A...

rifiuti2

Introduction Rifiuti2 is a for analyzing Windows Recycle Bin INFO2 file. Analysis of Windows Recycle Bin is usually carried out during Windows computer forensics. Rifiuti2 can extract file deletion time, original path and size of deleted files and whether the trashed files have been permanently...

idb

Idb idb is a tool to simplify some common tasks for iOS pentesting and research. Originally there was a command line version of the tool, but it is no longer under development so you should get the GUI version. idb has a new homepage athttp://www.idbtool.com All documentation and news are posted...

peda

peda PEDA - Python Exploit Development Assistance for GDB Key Features: Enhance the display of gdb: colorize and display disassembly codes, registers, memory information during debugging. Add commands to support debugging and exploit development for a full list of commands use peda help: aslr --...

azazel

Azazel V 0.1 The whole earth has been corrupted through the works that were taught by Azazel: to him ascribe all sin. -- 1 Enoch 2:8 Azazel is a userland rootkit based off of the original LDPRELOAD technique from Jynx rootkit. It is more robust and has additional features, and focuses heavily...

xcat

XCat XCat is a command line tool to exploit and investigate blind XPath injection vulnerabilities. For a complete reference read the documentation here: https://xcat.readthedocs.io/en/latest/ It supports an large number of features: Auto-selects injections run xcat injections for a list Detects t...

credmap

credmap: The Credential Mapper Credmap is an open source tool that was created to bring awareness to the dangers of credential reuse. It is capable of testing supplied user credentials on several known websites to test if the password has been reused on any of these. An official introductionary...

gps-sdr-sim

GPS-SDR-SIM GPS-SDR-SIM generates GPS baseband signal data streams, which can be converted to RF using software-defined radio SDR platforms, such as ADALM-Pluto, bladeRF, HackRF, and USRP. Windows build instructions 1. Start Visual Studio. 2. Create an empty project for a console application. 3. ...

penelope

Penelope is a modern shell handler for penetration testers and CTF players. It provides a more capable alternative to basic netcat listeners, adding automatic PTY upgrades, session management, logging, file transfers and helper modules. Table of Contents 📥 Installation ⚙️ Features 🖥️ Session...

truehunter

Truehunter The goal of Truehunter is to detect encrypted containers using a fast and memory efficient approach without any external dependencies for ease of portability. It was designed to detect Truecrypt and Veracrypt containers, however it may detect any encrypted file with a 'header' not...

POC-CVE-2026-19681

CVE-2026-19681 — फ़ाइल अपलोड प्रोसेसिंग में कमांड इंजेक्शन प्रमाणित स्थिति: पुष्टिकृत 6.7.2-14.el9 लैब पर 2026-08-20। स्टेज्ड फ़ाइलनाम p;sleep$IFS20;-EvvfJk POST /rest/file/upload के माध्यम से context प्रीफ़िक्स में मेटाकैरेक्टर होते हैं, फिर POST /rest/auditFile type=scapLinux, version=1.2 ठीक...

CVE-2025-6440

CVE-2025-6440 WooCommerce Designer Pro = 1.9.26 - अप्रमाणित मनमाना फ़ाइल अपलोड Description WooCommerce Designer Pro WordPress प्लगइन, जो Pricom - Printing Company & Design Services WordPress थीम द्वारा उपयोग किया जाता है, में 'wcdpsavecanvasdesignajax' फ़ंक्शन में फ़ाइल प्रकार सत्यापन की कमी के...

climber

Climber Automated auditing tool to check UNIX/Linux systems misconfigurations which may allow local privilege escalation. Dependencies python = 2.7 python-crypto python-mako python-paramiko Note Climber needs Exscript, a Python module and a template processor for automating network connections ov...

cve-2016-10924-POC

CVE-2016-10924-POC इस रिपॉज़िटरी में Directory Traversal भेद्यता CVE-2016-10924 के लिए एक प्रूफ-ऑफ-कॉन्सेप्ट PoC एक्सप्लॉइट स्क्रिप्ट है, जो WordPress प्लगइन ebook-download संस्करण नोट: यह PoC केवल शैक्षिक और अधिकृत परीक्षण उद्देश्यों के लिए है। इस जानकारी का दुरुपयोग कानूनी परिणामों का कारण बन...

FUSE

FUSE FUSE é um sistema de teste de penetração projetado para identificar vulnerabilidades de Upload de Arquivo Executável Irrestrito UEFU. Os detalhes da estratégia de teste estão em nosso artigo, "FUSE: Finding File Upload Bugs via Penetration Testing", que foi apresentado no NDSS 2020. Para ver...