goscan

GoScan is an interactive network scanner client, featuring auto-completion, which provides abstraction and automation over nmap. Although it started as a small side-project I developed in order to learn @golang, GoScan can now be used to perform host discovery, port scanning, and service...

pupy

Pupy Simple Installation root@kitploit: pip3 install pipx pipx ensurepath pipx install git+https://github.com/n1nj4sec/pupy@nextgen pupysh If you want more detailed informationRefer to the wiki Development Install root@kitploit: git clone https://github.com/n1nj4sec/pupy cd pupy git checkout...

ShellEvil

ShellEvil Jonatas Fil Dkr Julio Della Flora Thiago Sena THX CVE-2013-225 S2-016 के लिए Struts 2 DefaultActionMapper इंटरैक्टिव शेल शोषण Struts 2 DefaultActionMapper पैरामीटरों को "action:" या "redirect:" के साथ उपसर्ग करके शॉर्ट-सर्किट नेविगेशन स्थिति परिवर्तनों का समर्थन करता है, जिसके बाद एक...

ivre-wizard

root@kitploit: IVRE . \ ,/ \ |\ / | | //\ | \ /\ | | / | '/ | / /\oo/\ | |/ / | | | | | | /\ // |/,|| ,| Von BitBurner ivre-wizard Ein interaktiver Wizard-Frontend für IVRE, um das Erstellen von Scans in der Datenbank zu vereinfachen. Warum? Ich habe dieses Skript erstellt, um Scans mit IVRE...

CVE-2025-55182-RCE-shell

CVE-2025-55182-RCE-shell Burp Suite/antsword - Shell interattiva dirottamento HTTP + POST + AES-256-CBC/BASE64 Rilevamento -dnslog Rilevamento senza output DNSLog Nuclei -poc Rilevamento Echo di vulnerabilità Sfruttamento -exp Shell interattiva echo base64 -exp2 Shell interattiva dirottamento HTT...

CVE-2026-39987.py

CVE-2026-39987.py Este script Python explora o endpoint vulnerável marimo /terminal/ws e retorna um shell interativo. COMO USAR : A única alteração que precisa ser feita é mudar a variável HOST no script. Após alterar a variável HOST, execute o script no seu Terminal como no exemplo abaixo: EXEMP...

CVE-2024-30088__Windows-TOCTOU-exploit

CVE-2024-30088 – PoC adattato per WinRM 📌 Riepilogo Questa è una versione modificata dell'exploit originale CVE-2024-30088, adattata per funzionare in ambienti non interattivi WinRM. Il PoC originale avvia una cmd.exe interattiva, che non funziona tramite WinRM. Questa versione si concentra...

solrradar

...

FOFA-API-Threaded-Searcher

Ricercatore Multi-thread per API FOFA Un potente strumento Python multi-thread per interrogare l'API FOFA Fofa.so, estrarre campi selezionati e salvare risultati unici con formattazione intelligente. ✨ Caratteristiche Multi-thread – Recupera più pagine contemporaneamente thread configurabili Camp...

FShell

FShell Descrição FShell é a minha implementação de um Forward Shell. Foi projetado para obter um tty interativo usando execução remota de código através de um protocolo sem estado ex: HTTP. Por que devo usar um forward shell? O servidor remoto não consegue acessar a internet, sem possibilidade de...

training-security-awareness

Formazione gratuita sulla sicurezza informatica per i dipendenti — Libreria SCORM interattiva open source Oltre 130 esercizi gratuiti e open source di formazione sulla sicurezza informatica per i dipendenti — moduli SCORM pratici e interattivi che coprono formazione sulla consapevolezza del...

Exploit for Improper Access Control in Widgetfactorylimited Jce

JCEzploit-CVE-2026-48907 JCEzploit is a powerful, fully-aut...

kamerka

NON PIÙ SUPPORTATO O SVILUPPATO PER FAVORE USA LA VERSIONE GUI https://github.com/woj-ciech/Kamerka-GUI ꓘamerka 2.0 aka FIST Flickr, Instagram, Shodan, Twitter Crea una mappa interattiva di telecamere, stampanti, tweet e foto. Lo script crea una mappa di telecamere, stampanti, tweet e foto basata...

kamerka

NOT SUPPORTED OR DEVELOPED ANYMORE PLEASE USE GUI VERSION https://github.com/woj-ciech/Kamerka-GUI ꓘamerka 2.0 aka FIST Flickr, Instagram, Shodan, Twitter Build interactive map of cameras, printers, tweets and photos. The script creates a map of cameras, printers, tweets and photos based on your...

novahot

novahot novahot is a webshell framework for penetration testers. It implements a JSON-based API that can communicate with trojans written in any language. By default, it ships with trojans written in PHP, ruby, and python. Beyond executing system commands, novahot is able to emulate interactive...

isip

isip Interactive sip toolkit for packet manipulations, sniffing, man in the middle attacks, fuzzing, simulating of dos attacks. Video https://asciinema.org/a/11128 Setup root@kitploit: git clone https://github.com/halitalptekin/isip.git cd isip pip install -r requirements.txt Usage Packet...

isip

isip Kit interativo de ferramentas SIP para manipulação de pacotes, sniffing, ataques de intermediário MITM, fuzzing, simulação de ataques DoS. Vídeo https://asciinema.org/a/11128 Configuração root@kitploit: git clone https://github.com/halitalptekin/isip.git cd isip pip install -r requirements.t...

PT-2026-79075

broot renders each file and directory name in its interactive tree view exactly as read from the filesystem. Names are converted with a plain to string lossy call in src/tree build/builder.rs and in TreeLine::unprune in src/tree/tree line.rs, and no control-character filtering exists anywhere in...

CVE-2026-75857

CodeWhale versions = 0.8.41 and 0.8.64 contain a vulnerability in the execshellinteract alias execinteract tool, whose approvalrequirement returns ApprovalRequirement::Auto. This overrides the default Required approval for code-executing tools, so LLM-controlled stdin is written into an...

EUVD-2026-60964

CodeWhale versions = 0.8.41 and 0.8.64 contain a vulnerability in the execshellinteract alias execinteract tool, whose approvalrequirement returns ApprovalRequirement::Auto. This overrides the default Required approval for code-executing tools, so LLM-controlled stdin is written into an...