DLLHSC

DLLHSC DLL Hijack SCanner - A tool to generate leads and automate the discovery of candidates for DLL Search Order Hijacking Index of this page Contents of this repository Modes of operation Compile and Run Guidance Help menu Example Runs Feedback Contents of this repository This repository hosts...

agartha

Agartha Payload Injection LFI, RCE, SQLi, with optional BCheck, Auth Issues Access Matrix, HTTP 403, Copy as JavaScript, and Bambdas Agartha, specializes in advance payload generation and access control assessment. It adeptly identifies vulnerabilities related to injection attacks, and...

zkar

ZKar ZKar is a Java serialization protocol analysis tool implement in Go. This tool is still work in progress , so no complete API document and contribution guide. ZKar provides: A Java serialization payloads parser and viewer in pure Go, no CGO or JDK is required From the Java serialization...

unicorn

unicorn Written by: Dave Kennedy @HackingDave Website: https://www.trustedsec.com Magic Unicorn is a simple tool for using a PowerShell downgrade attack and inject shellcode straight into memory. Based on Matthew Graeber's powershell attacks and the powershell bypass technique presented by David...

CVE-2022-30190

CVE-2022-30190 The script is from https://github.com/JohnHammond/msdt-follina, just make it simple for me to use it and this script aim at generating the payload for more information refer the johnn hammond link...

CVE-2022-44877-white-box

Docs Paper : https://docs.google.com/document/d/1rQ7e9i2AFzHbASfRu3nkgjIswbrS2AB2i7V9OK3dJLs/edit?usp=sharing Libprochider : https://github.com/gianlucaborello/libprocesshider /var/www/html YouTube Demo : https://www.youtube.com/watch?v=V0HgzE8IElA&t=343s tested machine box CentOS 7 - CentOS Web...

JSONBee

JSONBee A ready to use JSONP endpoints to help bypass content security policy of different websites. The tool was presented during HackIT 2018 in Kiev. The presentation can be found here not sure why format of the slides is screwed :D:...

libenom

libenom What is Libenom ?? Libenom is a tool created for make more easy and fast the creation of payloads with MSFvenom and get all the data generated ordered. Requirements A linux distribution for pentesting or Ubuntu, Debian, Mint Recommended Kali Linux 2.0 sana or 2016.1 rolling, Parrot OS,...

macphish

macphish Office for Mac Macro Payload Generator Attack vectors There are 4 attack vectors available: beacon creds meterpreter meterpreter-grant For the 'creds' method, macphish can generate the Applescript script directly, in case you need to run it from a shell. beacon On execution, this payload...

MacroShop

MacroShop Collection of scripts to aid in delivering payloads via Office Macros. Most are python. See http://khr0x40sh.wordpress.com for details. 1. macrosafe.py Generates safe for VB inclusion into an excel spreadsheet. Requires a batch file generated by Veil-Evasion powershell payloads. To...

dorkX

dorkX Pipe different tools with google dork Scanner Version 1.0 Install zoid@MSI /dorkX git clone https://github.com/ethicalhackingplayground/dorkX zoid@MSI /dorkX cd dorkX zoid@MSI /dorkX go build dorkx.go zoid@MSI /dorkX go build corsx.go zoid@MSI /dorkX go build csrfx.go zoid@MSI /dorkX go bui...

CVE-2022-29056

CVE-2022-29056 Exploit Automation For Educational Purposes 🚨 📌 Description This is a Python script with a graphical interface Tkinter that allows the user to test automated request submissions to a login endpoint. The goal is to simulate how servers respond to different payload sizes and analyze...

win-rat

win-rat Note: root@kitploit: This repo is currently under testing.......soon will upload a fresh one. Virustotal Result: https://www.virustotal.com/gui/file/9fe32a10054b824b10cc24eb6ac1c96b5b8d4b3e730e4120c2a9891bc3d29a38/detection Contact: root@kitploit: Telegram:- https://t.me/machine1337...

masta-cve-2026-48907

MASTA CVE-2026-48907 Scanner Single-file, self-contained scanner for Joomla! JCE Editor Author: Hussein Mohamed masta ghimau !CAUTION 🚨 DISCLAIMER — READ BEFORE USE THIS IS AN INTRUSIVE SECURITY TESTING TOOL. root@kitploit: THIS TOOL IS FOR AUTHORIZED SECURITY ASSESSMENTS ONLY. Scanning systems y...

waf-checker

WAF Checker This project helps you check how well your Web Application Firewall WAF protects your product against common web attacks. It can be run as a Cloudflare Worker with a built-in interactive Web UI or as a standalone Node.js CLI tool. Features Core Testing Enter a target URL, pick HTTP...

CVE-2018-15982_EXP_IE

CVE-2018-15982EXP Usage root@kitploit: msfvenom -p windows/exec cmd=calc.exe -f raw 86.bin msfvenom -p windows/x64/exec cmd=calc.exe -f raw 64.bin python CVE201815982.py -i 86.bin -I 64.bin output exp.swf and index.html。 Demo https://twitter.com/Evi1cg/status/1071284773169950721...

sdc

root@kitploit: +------------------------------------------------------------------------------+ SDC - Self Decrypting Binary Generator Copyright C 2006 Claes M Nyberg +------------------------------------------------------------------------------+ -= What is this root@kitploit: The SDC program...

macOSTools

macOSTools macOS Offensive Tools AUnit Example XCode project for Audio Unit Plugins MigrationToolPayload Migration tool plugin SpecialDelivery Installer plugin authplugin Authentication Plugin dylibinjection Source code for dylib injection. Based off of code from Jonathan Levin...

CVE-2015-7501

Lab for Java Deserialization Vulnerabilities This content is related to the paper written for the 12th edition of H2HC magazine. See full paper in: https://www.h2hc.com.br/revista/ Slides and video of the talk will be available soon. Um overview sobre as bases das falhas de desserialização nativa...

wfuzz

Wfuzz - The Web Fuzzer Wfuzz has been created to facilitate the task in web applications assessments and it is based on a simple concept: it replaces any reference to the FUZZ keyword by the value of a given payload. A payload in Wfuzz is a source of data. This simple concept allows any input to ...