bread

🍞 BREAD BREAD BIOS Reverse Engineering & Advanced Debugger es un depurador x86 en modo real 'inyectable' que puede depurar código arbitrario en modo real en hardware real desde otro PC mediante un cable serie. Introducción BREAD surgió de muchos intentos fallidos de realizar ingeniería inversa a...

ghidra

Ghidra Dockerizado Construcción Desde el directorio raíz de tu versión de Ghidra, ejecuta el siguiente comando. root@kitploit: ./docker/build-docker-image.sh Esto construirá la imagen docker de Ghidra con una etiqueta correspondiente a la versión de Ghidra. La variable de entorno MODE El Contened...

EDR-Freeze

EDR-Freeze This is a tool that exploits the software vulnerability of WerFaultSecure to suspend the processes of EDRs and antimalware without needing to use the BYOVD Bring Your Own Vulnerable Driver attack method. EDR-Freeze operates in user mode, so you don't need to install any additional...

netattack

NETATTACK The netattack.py is a python script that allows you to scan your local area for WiFi Networks and perform deauthentification attacks. The effectiveness and power of this script highly depends on your wireless card. NETATTACK 2 RELEASED https://github.com/chrizator/netattack2/ USAGE EASY...

festin

FestIN the powered S3 bucket finder and content discover What is FestIn Why Festin Install Using Python Using Docker Full options Usage Configure search domains Concurrency HTTP Crawling configuration Manage results Proxy usage DNS Options Full Text Support Running as a service or watching mode...

python-codext

CodExt Codificar/decodificar cualquier cosa. CodExt es una biblioteca compatible con Python 2 y 3 que extiende la biblioteca nativa codecs especialmente para agregar nuevas codificaciones y mapeos de caracteres personalizados y proporciona más de 120 nuevos códecs , de ahí su nombre que combina...

VectorKernel

VectorKernel PoCs para investigación o educación en técnicas de rootkits en modo kernel. Actualmente enfocado en el sistema operativo Windows. Todos los módulos son compatibles solo con sistemas operativos de 64 bits de la familia x64. Entorno Todos los módulos se prueban en Windows 11 x64. Para...

idasql

IDASQL Give any AI agent the ability to understand compiled binaries. IDASQL is a SQL interface for IDA Pro databases, created by Elias Bachaalany. It exposes 30+ virtual tables covering functions, cross-references, strings, types, imports, disassembly, and decompilation. Use /idasql skills from...

katana

Un framework de rastreo y spidering de nueva generación Características • • • • • • \n\n\n", "technologies": "Azure", "Amazon ECS", "Amazon Web Services", "Docker", "Azure CDN" , "raw": "HTTP/1.1 200 OK\r\nContent-Length: 1256\r\nAccept-Ranges: bytes\r\nAge: 331239\r\nCache-Control:...

solarflare

solarflare Credential Dumping Tool for SolarWinds Orion Blog post: https://malicious.link/post/2020/solarflare-release-password-dumper-for-solarwinds-orion/ Credit to @asolino, @gentilkiwi, and @skelsec for helping me figuring out DPAPI. root@kitploit: ============================================...

hostapd-mana

hostapd-mana Overview A featureful rogue access point first presented at Defcon 22 by Dominic White @singe & Ian de Villiers @ sensepost [email protected] Documentation Check the wiki for information of getting and using hostapd-mana. Features KARMA/MANA Mode - respond to any device looking...

simplewall

simplewall Definitely for advanced users. Description: Simple tool to configure Windows Filtering Platform WFP which can configure network activity on your computer. The lightweight application is less than a megabyte, and it is compatible with Windows 7 SP1 and higher operating systems. You can...

dump1090

Dump1090 README Dump 1090 is a Mode S decoder specifically designed for RTLSDR devices. The main features are: Robust decoding of weak messages, with Dump1090 many users observed improved range compared to other popular decoders. Network support: TCP30003 stream MSG5..., Raw packets, HTTP. Embedd...

CVE-2026-18414

The ADI MAX32 ADC driver contains an out-of-bounds write vulnerability due to incorrect buffer size validation in drivers/adc/adc_max32.c. The start_read() function fails to account for sizeof(uint16_t) when comparing the buffer size against the sample count, allowing buffers that are half the re...

CVE-2026-18413

The NXP MCUX LPADC ADC driver is vulnerable to an out-of-bounds write due to a missing buffer size validation in mcux_lpadc_start_read(). The driver fails to verify that the destination buffer is large enough for the requested sampling sequence. In builds with CONFIG_USERSPACE , an unprivileged u...

r00kie-kr00kie

r00kie-kr00kie Descargo de responsabilidad Este es un exploit PoC para la vulnerabilidad kr00k CVE-2019-15126. Este proyecto tiene únicamente fines educativos y no puede ser utilizado para violar la ley ni para beneficio personal. El autor de este proyecto no se responsabiliza por cualquier daño...

r00kie-kr00kie

r00kie-kr00kie Disclaimer This is a PoC exploit for the CVE-2019-15126 kr00k vulnerability. This project is intended for educational purposes only and cannot be used for law violation or personal gain. The author of this project is not responsible for any possible harm caused by the materials...

usbsas

usbsas is a free and open source GPLv3 tool and framework for securely reading untrusted USB mass storage devices. Overview Following the concept of defense in depth and the principle of least privilege, usbsas's goal is to reduce the attack surface of the USB stack. To achieve this, most of the...

MeshTNC

MeshTNC MeshTNC is a tool for piping LoRa data to and from consumer grade radios. Code - github.com/datapartyjs/MeshTNC Releases - github.com/datapartyjs/MeshTNC/releases Support - ko-fi/dataparty Features Simple serial cli built into the firmware Transmit raw bytes hex over LoRA using serial CLI...

CVE-2021-3129

CVE-2021-3129 Laravel debug mode - Remote Code Execution RCE https://vulners.com/cve/CVE-2021-3129 https://www.ambionics.io/blog/laravel-debug-rce https://github.com/ambionics/phpggc Example root@kitploit: python3 exploit.py http://127.0.0.1:8080 root@kitploit: python3 exploit.py...