metasploit-framework

Metasploit Framework Metasploit Framework 是一款基于 BSD 风格许可证发布的开源工具。有关详细的许可信息，请参阅 COPYING 文件。 最新版本 从 Nightly Installers 页面获取 Metasploit 的最新版本。 文档 包括使用指南在内的全面文档，可在 Metasploit Docs 找到。 开发环境 要搭建开发环境，请访问 Development Setup Guide。 错误与功能请求 通过 GitHub Issues 跟踪器提交错误和功能请求。新提交可通过 MSF-BUGv1 表单 进行。 API 文档...

brakeman

Brakeman Brakeman is a static analysis tool which checks Ruby on Rails applications for security vulnerabilities. Installation Using RubyGems: root@kitploit: gem install brakeman Using Bundler: root@kitploit: group :development do gem 'brakeman', require: false end Using Docker: root@kitploit:...

brave-browser

Brave Browser Este repositorio no es necesario para compilar el navegador y solo contiene issues, lanzamientos y la wiki. El código fuente y las contribuciones están en https://github.com/brave/brave-core. Puedes visitar nuestro sitio web para obtener la última versión estable. Recursos Issues:...

SWE-agent

!warning 我们目前的开发重点已转移至 mini-swe-agent， 它已取代 SWE-agent。其性能与 SWE-agent 相当，但更简单。 关于二者差异的更多详情，请参见 FAQ。 我们通常建议用户改用 mini-SWE-agent 而非 SWE-agent。 SWE-agent 使您选择的语言模型（例如 GPT-4o 或 Claude Sonnet 4）能够自主使用工具， 修复真实 GitHub 仓库中的问题、 发现网络安全漏洞，或 执行任何自定义任务。 ✅ 开源项目在 SWE-bench 上的领先水平 ✅ 自由流动且通用 ：赋予语言模型最大的自主权 ✅ 可配置且文档齐...

The vulnerability of the Directum Web Agent component of the Directum RX system, which arises due to insufficient validation of input data, allows a perpetrator to execute arbitrary code.

The vulnerability of the Directum Web Agent component of the Directum RX system exists due to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code using a specially crafted file...

truegaze

truegaze A static analysis tool for Android and iOS applications focusing on security issues outside the source code such as resource strings, third party libraries and configuration files. Requirements Python 3 is required and you can find all required modules in the requirements.txt file. Only...

chalumeau

Chalumeau Chalumeau is automated,extendable and customizable credential dumping tool based on powershell and python. Main Features Write your own Payloads In-Memory execution Extract Password List Dashboard reporting / Web Interface Parsing Mimikatz Dumping Tickets Screenshots Known Issues Parsin...

climber

Climber Automated auditing tool to check UNIX/Linux systems misconfigurations which may allow local privilege escalation. Dependencies python = 2.7 python-crypto python-mako python-paramiko Note Climber needs Exscript, a Python module and a template processor for automating network connections ov...

applepie

applepie, a hypervisor implementation for Bochs Hello! Welcome to applepie! This is a tool designed for fuzzing, introspection, and finding bugs! This is a hypervisor using the Windows Hypervisor Platform API present in recent versions of Windows specifically this was developed and tested on...

frida

Frida Dynamic instrumentation toolkit for developers, reverse-engineers, and security researchers. Learn more at frida.re. Two ways to install 1. Install from prebuilt binaries This is the recommended way to get started. All you need to do is: root@kitploit: pip install frida-tools CLI tools pip...

sessionprobe

SessionProbe 🚀⚡ SessionProbe 是一个多线程渗透测试工具，旨在协助评估 Web 应用程序中的用户权限。它接收用户的会话令牌，并检查一系列 URL 是否可访问，从而突出潜在的授权问题。SessionProbe 会去重 URL 列表，并提供实时日志和进度跟踪。 SessionProbe 旨在与 Burp Suite 的 Target 选项卡中的“复制此主机中的 URL”功能配合使用（该功能在免费的 Community Edition 中可用）。 注意 ：您可能需要在 Burp 的 Target 选项卡中修改 filter 以包含文件或图片。否则，这些...

ninjasworkout

Damn Vulnerable NodeJS Application Quick Start root@kitploit: Download the Repo = run npm i Afer Installing all dependency just run the application root@kitploit: node app.js or nodemon app.js ADDED BUGS Prototype Pollution ✅1 No SQL Injection ✅2 Cross site Scripting ✅3 Broken Access Control ✅4...

xc

XC Netcat like reverse shell for Linux & Windows. Features Windows root@kitploit: Usage: └ Shared Commands: !exit !upload uploads a file to the target !download downloads a file from the target !lfwd local portforwarding like ssh -L !rfwd remote portforwarding like ssh -R !lsfwd lists active...

mysecureshell-issues

This repository does not have a README...

CVE-2025-31702

CVE-2025-31702 — Herramientas de investigación y material DFIR Repositorio con herramientas, exploits y artefactos de investigación relacionados con el análisis y descubrimiento de CVE-2025-31702 y problemas relacionados. Más información y análisis en profundidad:...

engine

Droidefense Engine Advance Android Malware Analysis Framework Latest release Download What Droidefense is Droidefense originally named atom: a nalysis t hrough o bservation m achine is the codename for android apps/malware analysis/reversing tool. It was built focused on security issues and trick...

OPENSUSE-SU-2026:11633-1 php-composer2-2.10.3-1.1 on GA media

These are all security issues fixed in the php-composer2-2.10.3-1.1 package on the GA media of openSUSE Tumbleweed...

metasploit-framework-nu11secur1ty

Metasploit Framework Metasploit Framework — это инструмент с открытым исходным кодом, выпущенный под лицензией BSD. Подробную информацию о лицензировании можно найти в файле COPYING. Последняя версия Загрузите последнюю версию Metasploit со страницы Nightly Installers. Документация Полная...

CVE-issues

Dieses Repository hat keine README-Datei...

yaraQA

yaraQA Analizzatore di regole YARA per migliorare la qualità e le prestazioni delle regole Perché? Le regole YARA possono essere sintatticamente corrette ma ancora disfunzionali. yaraQA cerca di trovare e segnalare questi problemi all'autore o al manutentore di un set di regole YARA. I problemi c...