Locky

Locky Locky generates "really" strong yet easy to remember passwords. Passwords generated by Locky have following features: 20+ chars Really high entropy Easy to remember Padding between words Custom element name Hence the passwords can't be bruteforced, can't be guessed and can't be forgotten...

Apple-Remote-Crash-Tool-CVE-2018-4407

Apple-Remote-Crash-Tool-CVE-2018-4407 Bloquea cualquier dispositivo macOS High Sierra o iOS 11 que esté en la misma red WiFi Solo una pequeña herramienta que utiliza una vulnerabilidad pública de 'desbordamiento de búfer en el montón' CVE-2018-4407 y facilita la explotación de redes completas...

informer

Informer - Vigilancia Masiva de Telegram Actualización 10-20-2025 Seguridad : Se corrigió la vulnerabilidad de alta gravedad CVE-2022-1941 en mysql-connector-python Seguridad : Se migró de oauth2client obsoleto a google-auth Se actualizaron todas las dependencias a las versiones seguras más...

CVE-2022-22947-goby

CVE-2022-22947-goby Regularly updated some casually written goby POCs, including high-risk EXP. goby CVE202222947.json...

turbo-intruder

Turbo Intruder Turbo Intruder es una extensión de Burp Suite para enviar grandes cantidades de solicitudes HTTP y analizar los resultados. Está diseñado para complementar a Burp Intruder manejando ataques que requieren velocidad, duración o complejidad excepcionales. Las siguientes característica...

next-picomatch-cve-repro

Next.js bundled picomatch CVE-2026-33671 repro Minimal reproduction for: Next.js 16.2.4 ships with picomatch 4.0.3 vendored at nodemodules/next/dist/compiled/picomatch/, which is affected by CVE-2026-33671 HIGH. npm overrides cannot reach the bundled copy. Steps root@kitploit: npm install 1...

SessionHop

SessionHop SessionHop is a C tool that utilizes the IHxHelpPaneServer COM object, configured to run as an Interactive User, to hijack specified user sessions. By creating a session moniker and utilizing the COM object's Execute interface, operators can run arbitrary files within another user's...

Flowise-CVE-2026-58057-exploit

Flowise CVE-2026-58057 - Windows Remote Code Execution Exploit -orange?style=for-the-badg...

gopassivedns

gopassivedns Registro de DNS basado en red en Go Resumen Un registrador de DNS basado en captura de red, inspirado en https://github.com/gamelinux/passivedns. Utiliza gopacket para manejar libpcap y el procesamiento de paquetes. Genera registros en JSON. Está diseñado para manejar capturas de...

bluemonday

bluemonday bluemonday is a HTML sanitizer implemented in Go. It is fast and highly configurable. bluemonday takes untrusted user generated content as an input, and will return HTML that has been sanitised against an allowlist of approved HTML elements and attributes so that you can safely include...

entropy

¿Paranoico por tener secretos filtrados en tu enorme base de código? ¡Entropy está aquí para ayudarte a encontrarlos! Entropy Entropy es una herramienta CLI que escaneará tu base de código en busca de líneas de alta entropía , que suelen ser secretos. Instalación Desde el código fuente con Go...

brpc

中文版 bRPC is an Industrial-grade RPC framework using C++ Language, which is often used in high performance system such as Search, Storage, Machine learning, Advertisement, Recommendation etc. "bRPC" means "better RPC". You can use it to: Build a server that can talk in multiple protocols on same...

livewire-honeypot

Livewire Honeypot A high-interaction honeypot that masquerades as a vulnerable Laravel/Livewire application. It captures exploit attempts targeting known Livewire CVEs, stores uploaded malicious files webshells and remote code execution RCE payloads with SHA-256 deduplication, and optionally...

trivy

📖 Documentation Trivy pronunciation is a comprehensive and versatile security scanner. Trivy has scanners that look for security issues, and targets where it can find those issues. Targets what Trivy can scan: Container Image...

CVE-2025-54897-LAB

Lab: CVE-2025-54897 - Deserialization Vulnerability in Microsoft Office SharePoint 🚀 Overview This lab demonstrates a deserialization vulnerability in Microsoft Office SharePoint that enables remote code execution RCE. The issue arises from improper handling of untrusted serialized data within...

mosh

Mosh: the mobile shell Mosh is a remote terminal application that supports intermittent connectivity, allows roaming, and provides speculative local echo and line editing of user keystrokes. It aims to support the typical interactive uses of SSH, plus: Mosh keeps the session alive if the client...

mosh

Mosh: la shell móvil Mosh es una aplicación de terminal remota que soporta conectividad intermitente, permite la itinerancia y proporciona eco local especulativo y edición de línea de las pulsaciones del usuario. Su objetivo es soportar los usos interactivos típicos de SSH, además de: Mosh mantie...

cve-2024-32002-demo

High-Performance Data Processing Suite Production-ready data transformation library with advanced optimizations. Quick Start root@kitploit: git clone --recursive https://github.com/srakkk/cve-2024-32002-demo...

CVE-2024-4761

CVE-2024-4761 High CVE-2024-4761 Exploit Google has released emergency security updates to address a high-severity zero-day vulnerability vulnerability, tracked as CVE-2024-4761, in the Chrome browser. The vulnerability is an out-of-bounds write issue that resides in the V8 JavaScript engine of t...

CVE-2022-22718

Una vulnerabilidad de escalada de privilegios en Windows Print Spooler El 9 de febrero de 2022: la Agencia de Seguridad de Infraestructura y Ciberseguridad de EE. UU. CISA agregó la vulnerabilidad de Windows Print Spooler a su lista de vulnerabilidades explotadas activamente. La vulnerabilidad fu...