Manalyze

Manalyze Introduction Manalyze is a static analysis tool for PE files that you can use to conduct primary assessment on an executable or set of executables. It collects weak signals that could indicate malicious behavior and displays information that can help a subsequent manual analysis. If you...

vet

Quick Start • Documentation • Community !NOTE vet supports special mode for Agent Skills. Run to scan an Agent Skill hosted in a GitHub repository...

excelpeek

ExcelPeek v0.2 ExcelPeek is a tool designed to help investigate potentially malicious Microsoft Excel files. Documentation Use the Installation Guide to get started. Go to the User's Guide for additional information...

SkillsGuard

Support Development If SkillsGuard protects your pipeline, consider supporting ongoing research and new detection rules. ETH Donation Wallet 0x11282eE5726B3370c8B480e321b3B2aA13686582 Scan the QR code or copy the wallet address above. Static security scanner for AI agent skill packages. Detects...

godofwar

GodOfWar - Malicious Java WAR builder A command-line tool to generate war payloads for penetration testing / red teaming purposes, written in ruby. root@kitploit: . hhh hhhhhhh hhhhhhhh hhhhhhhh+ hhhhhhhh' hhhhhhhh. hhhhhhhhh ..-- hhhhhhhhh -sh/.. +. hhhhhhhhh: /+/:-/+ss- hhhhhhhhhh: /MMMss:...

SkillSpector

SkillSpector Security scanner for AI agent skills. Detect vulnerabilities, malicious patterns, and security risks before installing agent skills. Overview AI agent skills used by Claude Code, Codex CLI, Gemini CLI, etc. execute with implicit trust and minimal vetting. Research shows that 26.1% of...

ci-supplychain-guard

CI Supply Chain Guard A static analysis tool for detecting malicious dependencies in CI/CD pipelines before they're merged into your codebase. Author: Otsmane Ahmed Status: Research Prototype v1.0 Quick Start root@kitploit: 1. Clone and install git clone...

LOLDrivers

LOLDrivers - Living Off The Land Drivers 🚗💨 Welcome to LOLDrivers Living Off The Land Drivers, an exciting open-source project that brings together vulnerable, malicious, and known malicious Windows drivers in one comprehensive repository. Our mission is to empower organizations of all sizes with...

androguard

Androguard Do you think your phone has been pwned ? please check IsMyPhonePwned New tool: Goauld Dynamic injection tool for Linux/Android See the new version of Androguard: https://github.com/androguard/androguard/tree/ng Installation Quick installation: root@kitploit: pip install androguard...

ore-mal-pkg-inspector

OreWatch Multi-Ecosystem Malicious Package Detection and Supply Chain Security Scanner A production-grade security tool for detecting malicious packages and supply chain threats across npm, PyPI, Maven, RubyGems, Go, and Cargo ecosystems. Leverages automated threat intelligence collection from...

ore-mal-pkg-inspector

OreWatch Détection de paquets malveillants multi-écosystèmes et scanner de sécurité de la chaîne d'approvisionnement Un outil de sécurité de niveau production pour détecter les paquets malveillants et les menaces de la chaîne d'approvisionnement dans les écosystèmes npm, PyPI, Maven, RubyGems, Go...

2017-11-17-Maldoc-Using-CVE-2017-0199

В этом репозитории нет README...

openclaw-security-monitor

OpenClaw Security Monitor Surveillance de sécurité proactive, analyse des menaces et visibilité en temps réel pour les déploiements d'OpenClaw. Détecte les menaces de la campagne ClawHavoc 824+ compétences malveillantes, du voleur AMOS , de l'infostealer Vidar , du malware proxy GhostSocks , du...

CVE-2026-34621

CVE-2026-34621 : Adobe Acrobat 2026 Prototype Pollution & JS Injection Chain — Recherche PoC Présentation Ce dépôt contient du matériel de recherche et un code de preuve de concept développé lors de l'analyse de la chaîne d'exploitation in-the-wild d'Adobe Acrobat Reader 2026 impliquant : Polluti...

CVE-2022-3168-adb-unexpected-reverse-forwards

Функция обратного туннелирования в Android Debug Bridge adb была уязвимой, так как позволяла вредоносным демонам adb открывать соединения с произвольными хостами/портами и доменными сокетами Unix на хосте. Окно атакующего где запущен подставной демон: root@kitploit: $ ./adbroguedaemon.py Окно...

CVE-2026-26331

Произвольное выполнение команд через --netrc-cmd в yt-dlp Серьёзность: Высокая CVSS 8.8 Затронутое ПО: yt-dlp = 2023.06.21, Исправлено в версии: 2026.02.21 Консультация: GHSA-g3gw-q23r-pgqm CVE: CVE-2026-26331 Краткое описание Параметр командной строки --netrc-cmd или параметр Python API netrccmd...

web_exploit_detector

Web Exploit Detector Introduction The Web Exploit Detector is a Node.js application and NPM module used to detect possible infections, malicious code and suspicious files in web hosting environments. This application is intended to be run on web servers hosting one or more websites. Running the...

CVE-2026-3462

CVE-2026-3462 Acrobat Reader | Неправильно контролируемая модификация атрибутов прототипа объекта «Загрязнение прототипа» CWE-1321 CVE-2026-34621 — Расширенный кроссплатформенный генератор эксплойтов =========================================================== Генерирует вредоносный PDF-файл,...

associated-threat-analyzer

Associated-Threat-Analyzer NOTE : What do privacy laws say about sharing malicious domains and IPs ? Please See; USAGEPOLICY.md LICENSE Description Associated-Threat-Analyzer detects malicious IPv4 addresses and domain names associated with your web application using local malicious domain and IP...

CVE-2026-3502---TrueConf-Client-Update-Hijacking-PoC

🔓 CVE-2026-3502 - Эксплойт перехвата обновления TrueConf Client ⚠️ ПРЕДУПРЕЖДЕНИЕ Этот инструмент предназначен только для образовательных целей и авторизованного тестирования. Не используйте его в системах без явного разрешения. 📋 Описание Эксплойт для CVE-2026-3502 — уязвимость обновления без...