116 matches found
pycrypt
pycrypt Python Based Crypter That Can Bypass Any Kinds Of Antivirus Products Note: root@kitploit: If the stub being detected then plz use the following obfuscations:- 1. https://github.com/machine1337/fudcrypt 2. https://github.com/machine1337/pyobfuscate Important: root@kitploit: 1. Make Sure yo...
domainhunter
Domain Hunter Authors Joe Vest @joevest & Andrew Chiles @andrewchiles Domain name selection is an important aspect of preparation for penetration tests and especially Red Team engagements. Commonly, domains that were used previously for benign purposes and were properly categorized can be purchas...
bt2
bt2: Blaze Telegram Backdoor Toolkit bt2 is a Python-based backdoor in form of a IM bot that uses the infrastructure and the feature-rich bot API provided by Telegram, slightly repurposing its communication platform to act as a C&C. Dependencies Telepot requests Installation root@kitploit: $ sudo...
avet
AntiVirus Evasion Tool AVET is not being further developed due to technical development and time constraints. AVET is an AntiVirus Evasion Tool, which was developed for making life easier for pentesters and for experimenting with antivirus evasion techniques, as well as other methods used by...
RedRoot
🔴 RedRoot Lite – Mark X Marco de Seguridad Ofensiva Edición Lite | Basado en CLI “Menos poder. La misma disciplina.” RedRoot Lite es la edición restringida de RedRoot , diseñada para ofrecer funcionalidad básica de red teaming mientras mantiene los módulos avanzados bloqueados. Usa la misma...
full-60-ddos-tools
Full 60 Ddos Tools Yoo, It's a collection of 60 most popular and powerful ddos tools now. Most powerful DDOS Tools need Python to run. This is a highly personal and optimized programming language. Widely used, easy to learn and simpler optimized syntax. Also used to write Tool DDOS Python to test...
overlord
Overlord – Red Teaming Automation Overlord provides a python-based console CLI which is used to build Red Teaming infrastructure in an automated way. The user has to provide inputs by using the tool’s modules e.g. C2, Email Server, HTTP web delivery server, Phishing server etc. and the full infra...
zelos
Zelos Zelos Z eropoint E mulated L ightweight O perating S ystem is a python-based binary emulation platform. One use of zelos is to quickly assess the dynamic behavior of binaries via command-line or python scripts. All syscalls are emulated to isolate the target binary. Linux x8664 32- and...
isf
框架介绍 ISFIndustrial Exploitation Framework，是一款基于python编写的类似metasploit的工控安全测试框架。 ISF基于开源项目routersploit修改而来。 该文档的其他语言版本:English, 简体中文, 免责声明 未经事先双方同意，使用ISF对目标进行攻击性测试是非法的。最终用户有责任遵守所有适用的地方、州和联邦法律。 开发人员对使用该程序造成的任何损害不承担责任。 工控协议客户端...
flare-qdb
FireEye Labs Query-Oriented Debugger flare-qdb is a command-line and scriptable Python-based tool for evaluating and manipulating native program state. It uses Vivisect to set a breakpoint on each queried instruction and executes Python code when hit. flare-qdb frees the analyst to take a nonline...
HIROO
HIROO HIROO is an FUD Remote Administration Tool RAT Generator and Controller HOW TO USE its really easy to use just do this in your terminal root@kitploit: git clone https://github.com/E-RROR/HIROO cd HIROO python HIROO.py RUN ON WINDOWS the shell output will be python format you can make it .ex...
The vulnerability of the Python programming language-based UltraJSON package lies in the lack of memory release after the effective lifespan, which allows a malicious actor to trigger a service failure.
The vulnerability of the Python programming language-based UltraJSON package is related to the lack of memory release after the effective lifespan of the package. Exploiting this vulnerability can allow a remote attacker to cause a service failure...
SPIP Ultimate Auditor – Comprehensive Security Assessment Script
SPIP Ultimate Auditor is a Python-based security assessment script designed to perform a multi-phase audit against a SPIP CMS installation. The tool automates reconnaissance and misconfiguration detection tasks to identify potential security weaknesses in a target deployment...
webguard-scanner
webguard-scanner COMPANY: CODETECH IT SOLUTIONS NAME: KA...
ShadowV2 Botnet Exploits Misconfigured AWS Docker Containers for DDoS-for-Hire Service
Cybersecurity researchers have disclosed details of a new botnet that customers can rent access to conduct distributed denial-of-service DDoS attacks against targets of interest. The ShadowV2 botnet, according to Darktrace, predominantly targets misconfigured Docker containers on Amazon Web...
CVE-2025-57804
CVE-2025-57804 affects the Python package h2 (HTTP/2 protocol stack). Prior to version 4.3.0, it allows HTTP/2 request splitting via CRLF injection in headers when servers downgrade HTTP/2 requests to HTTP/1.1 without validating header names/values. This can enable attackers to manipulate request...
New Malware Campaign Uses Cloudflare Tunnels to Deliver RATs via Phishing Chains
A new campaign is making use of Cloudflare Tunnel subdomains to host malicious payloads and deliver them via malicious attachments embedded in phishing emails. The ongoing campaign has been codenamed SERPENTINECLOUD by Securonix. It leverages "the Cloudflare Tunnel infrastructure and Python-based...
CMU CERT/CC VINCE v2.0.6 Stored XSS
Summary VINCE is the Vulnerability Information and Coordination Environment developed and used by the CERT Coordination Center to improve coordinated vulnerability disclosure. VINCE is a Python-based web platform. Description The framework suffers from an authenticated stored cross-site scripting...
Important: Red Hat Security Advisory: rhc-worker-playbook security update
An update for rhc-worker-playbook is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...