gattacker

A Node.js package for BLE Bluetooth Low Energy Man-in-the-Middle & more. Prerequisites see: https://github.com/sandeepmistry/noble https://github.com/sandeepmistry/bleno Install root@kitploit: npm install gattacker Usage Configure Running both components Set up variables in config.env:...

cve-2020-35498-flag

cve-2020-35498-flag Flag the cve-2020-35498 attack Build Requires gcc and go. root@kitploit: make Filter The filter was built with bpfasm and placed in filter.c. Catch the vulnerability with root@kitploit: sudo ./target/catch Trigger with Trigger the vulnerability through interface wlan0 with...

creak

creak Performs some of the most famous MITM attack on target addresses located in a local network. Among these, deny navigation and download capabilities of a target host in the local network performing an ARP poison attack and sending reset TCP packets to every request made to the router. Born a...

IOCScraper

IOC Scraper IOC Scraper utilises IOCPARSER service to fetch IOCs from different vendor Blogs, PDFs, and CSV files. Parsing IOCs is time-consuming process, using current script one can automatically extract and aggregate IOCs easily. Features Defanged IOCs : Supports extracting and defanging IOCs...

Blackash-CVE-2025-20343

🔒 CVE-2025-20343: Cisco ISE RADIUS Suppression DoS Vulnerability 🌐 ⚠️ Overview 🚨 High-severity denial-of-service DoS flaw in Cisco Identity Services Engine ISE! 💥 An unauthenticated remote attacker can crash the device with crafted RADIUS packets. 📅 Disclosed : November 5, 2025 ✅ No known...

CVE-2024-57366

CVE-2024-57366 Exploit A robust exploit for CVE-2024-57366 that allows remote code execution on vulnerable routers through MAC address validation bypass and command injection. This is a post-authorization exploit that requires the router "Remote Control" feature to be on, and the administrative...

MacMaster

MacMaster: Advanced Network Interface Management and Monitoring MacMaster is a comprehensive command-line tool crafted for network professionals and enthusiasts alike. It stands out as a powerful utility for manipulating the MAC addresses of network interfaces on various systems. Designed with bo...

CVE-2018-13341

CVE-2018-13341 This Tool Aims to Exploit the CVE-2018-13341, By Using the MAC address of the targeted device, you can recover the password of the "crengsuperuser" hidden account which has elevated privileges and allow you to run SUDO commands. The Crestron Toolbox Protocol CTP can be connected to...

NetProbe

NetProbe: Network Probe NetProbe is a tool you can use to scan for devices on your network. The program sends ARP requests to any IP address on your network and lists the IP addresses, MAC addresses, manufacturers, and device models of the responding devices. Features Scan for devices on a...

n0Mac

n0Mac Yet Another Mac Changer!!! This script changes the MAC address of the network interface to a randomly generated address on system startup using crontab. It then uses the macchanger command to generate a list of MAC address vendors and selects one at random and then combines that vendor pref...

crestron_getsudopwd

crestrongetsudopwd Based on Ricky Lawshae discovery on Crestron TSW-X60 and MC3 devices, this tool aims to exploit the CVE-2018-13341. Using the MAC address of the targeted device, you can recover the password of the "crengsuperuser" hidden account which has elevated privileges and allow you to r...

CVE-2017-9476

CVE-2017-9476 Hidden AP with Deterministic Credentials. Compiling root@kitploit: cc xhscmmac2psk.c -o xhscmmac2psk Usage root@kitploit: ./xhscmmac2psk The algorithm has been also added to PSKracker. References CVE-2017-9476 Bastille-18.home-security-wifi-network.txt DEFCON 25 whitepaper DEFCON 25...

pwnfb50

pwnfb50 Transfer ownership of any FB50 smart lock to yourself CVE-2019-13143 PoC Video Usage root@kitploit: $ python3 pwnfb50.py id mac Where id is your user ID, and the mac is your lock's MAC address...

CVE-2012-1803

CVE-2012-1803 Critical vulnerability in Siemens RuggedCom ROS devices allowing attackers to derive a hidden factory account password from the device MAC address and gain unauthorized administrative access via TELNET, rsh, or serial interfaces. Affects ROS 3.10.x and earlier...

Astra Linux – Vulnerability found in Linux 6.1, Linux 5.10, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: i40e: Fixed potential invalid access when the MAC list is empty. listfirstentry never returns NULL—if the list is empty, it still returns a pointer to an invalid object, leading to potential invalid memory access when dereferenci...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: net: usb: aqc111: fix error handling of usbnet read calls Syzkaller, with the help of syzbot, identified an error in the aqc111 driver. This error was caused by incomplete sanitization of the results of usbnet read calls. This...

shadowhammer

批量模式 Shadowhammer MAC 地址检查工具 卡巴斯基近期发现并分析了“Shadowhammer”攻击（https://securelist.com/operation-shadowhammer/89992）。他们做了出色的分析，并发布了一款供系统管理员使用的工具，以判断其系统是否成为攻击目标。然而，已发布的工具不太容易脚本化，因此我们创建了这个小型 Python 脚本来解决这一问题。我们采用了卡巴斯基自家工具中的哈希值，并将其封装在一个简洁的命令行 Python 界面中（该工具也可离线使用，以解决潜在的隐私问题）。 使用方法...

macchanger

GNU MAC Changer GNU MAC Changer は、ネットワークインターフェースの MAC アドレスの操作を 簡単にするユーティリティです。 Web サイト: http://www.gnu.org/software/macchanger リポジトリ: http://github.com/alobbs/macchanger それでは、よろしくお願いします。 Alvaro Lopez Ortega [email protected]...

CVE-2025-15474

BLEスマートロックDoS脆弱性 認証を必要としないBluetooth Low Energy BLE接続フラッドにより、キーパッド入力を妨害し、繰り返しロックアウト状態を強制することで、正当なユーザーがデバイスのロックを解除するのを確実に防ぐことができます。 📌 概要 このリポジトリは、市販のBLEスマートパドロックに影響を与えるサービス拒否DoS脆弱性を文書化しています Amazon製品。 このデバイスは静的BLE MACアドレスRPAなしを公開し、認証されていない接続試行を受け入れます。...

CVE-2018-13797

node-macaddress Linux、OS X、Windows で MAC アドレスを取得します。 MAC アドレスに関するよくある誤解は、すべての ホスト が 1 つ の MAC アドレスを持っているというものですが、実際にはホストが 複数の MAC アドレスを持つ可能性があります。なぜなら、 すべてのネットワークインターフェース が独自の MAC アドレスを持つ可能性があるからです。 このライブラリは、ネットワークインターフェースごとに MAC アドレスを検出し、ホストシステムを識別する 1 つ の MAC アドレスだけが必要な場合に適切なインターフェースを選択します（以下の...