1444251 matches found
pocs
pocs 我们将在此仓库中发布PoC 此仓库中的所有漏洞均已负责任地披露...
RCLocals
RCLocals Inspired by 'Autoruns' from Sysinternals, RCLocals analyzes all Linux startup possibilities to find backdoors, also performs process integrity verification, scan for DLL injected processes and much more Things covered: ·List GPG keys trusted by the system ·Installed Packages ·File...
apkleaks
APKLeaks Escaneando archivo APK en busca de URIs, endpoints y secretos. Instalación desde PyPi desde el código fuente desde Docker Uso Opciones Salida Patrón Argumentos para descompilador Licencia Agradecimientos Instalación Es bastante sencillo instalar APKLeaks : desde PyPi root@kitploit: $ pip...
powerob
Powerob An on-the-fly Powershell script obfuscator meant for red team engagements. Built out of necessity. This only obfuscates functions and removes found in PowerShell scripts. Roadmap includes bfuscating variables. Pull requests and collaborative welcomed. About This was built out of the need ...
KnockMail
KnockMail Copyright 2017 KnockMail Written by: Alisson Moretto - 4w4k3 Twitter: @4w4k3Official Cloning: root@kitploit: git clone https://github.com/4w4k3/KnockMail.git Running: root@kitploit: cd KnockMail root@kitploit: sudo su root@kitploit: pip install -r requeriments.txt root@kitploit: python...
clusterfuzz
ClusterFuzz ClusterFuzz 是一个可扩展的模糊测试基础设施，用于发现软件中的安全性和稳定性问题。 Google 使用 ClusterFuzz 对所有 Google 产品进行模糊测试，并作为 OSS-Fuzz 的模糊测试后端。 ClusterFuzz 提供了许多功能，帮助将模糊测试无缝集成到软件项目的开发过程中： 高度可扩展。可在任何规模的集群上运行（例如 OSS-Fuzz 实例在 100,000 台虚拟机上运行）。 精确的崩溃去重。 完全自动的漏洞提交、分类和关闭，支持多种问题追踪器（例如 Monorail、Jira）。...
ROOT-APP-NPM-CVE-2026-64645 CVE-2026-64645 in next - Patched by Root
Root has patched CVE-2026-64645 in the next package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-GHSA-Q4GF-8MX6-V5V3 GHSA-q4gf-8mx6-v5v3 in next - Patched by Root
Root has patched GHSA-q4gf-8mx6-v5v3 in the next package for Root:npm. Multiple fixed versions available...
linux-4.1.15_CVE-2022-42703
Linux kernel release 4.x http://kernel.org/ These are the release notes for Linux version 4. Read them carefully, as they tell you what this is all about, explain how to install the kernel, and what to do if something goes wrong. WHAT IS LINUX? Linux is a clone of the operating system Unix, writt...
st
ST Smart Things ST Smart Things Sentinel es una herramienta de seguridad avanzada diseñada específicamente para examinar y detectar amenazas dentro de los intrincados protocolos utilizados por los dispositivos IoT Internet de las cosas. En el panorama en constante expansión de los dispositivos...
st
ST Smart Things ST Smart Things Sentinel is an advanced security tool engineered specifically to scrutinize and detect threats within the intricate protocols utilized by IoT Internet of Things devices. In the ever-expanding landscape of connected devices, ST Smart Things Sentinel emerges as a...
Vajra
Vajra - Your Weapon To Cloud About Vajra Vajra is a UI based tool with multiple techniques for attacking and enumerating in target's Azure environment. The term Vajra refers to the Weapon of God Indra in Indian mythology God of Thunder & Storms. Its connection to the cloud makes it a perfect name...
ipa-medit
ipa-medit Ipa-medit is a memory search and patch tool for resigned ipa without jailbreaking. It supports iOS apps running on iPhone and Apple Silicon Mac. It was created for mobile game security testing. Many mobile games have jailbreak detection, but ipa-medit does not require jailbreaking, so...
cve-2025-22235-demo
CVE-2025-22235: Spring Boot EndpointRequest.to Authentication Bypass Vulnerability Demo Vulnerability Description CVE-2025-22235 is a Spring Boot security vulnerability involving the EndpointRequest.to method, which may generate an incorrect matcher when configuring security rules, leading to the...
wesng
Windows Exploit Suggester - Next Generation WES-NG WES-NG is a tool based on the output of Windows' systeminfo utility which provides the list of vulnerabilities the OS is vulnerable to, including any exploits for these vulnerabilities. Every Windows OS between Windows XP and Windows 11, includin...
wesng
Windows Exploit Suggester - 下一代 WES-NG WES-NG 是一款基于 Windows systeminfo 命令输出的工具，能够列出操作系统当前存在的漏洞（包括对应的利用程序）。支持 Windows XP 到 Windows 11 的所有 Windows 操作系统及其服务器版本。 BITSADMIN 博客上有一篇关于 WES-NG 的深入文章： Windows Security Updates for Hackers。 使用方法 1. 通过 pip install wesng 或使用以下命令行下载 WES-NG：git clone...
CVE-2025-32433
Working PoC for CVE-2025-32433 Blog post: https://platformsecurity.com/blog/CVE-2025-32433-poc...
CrackMapExecWin
CrackMapExecWin Description The great CrackMapExec tool compiled for Windows Features Latest 2.2 version Compiled for x86 so should work on x86 and x64 platforms Usage 1. Download the whole archive 2. Extract it and run crackmapexec.exe 3. Profit Older versions Browse the release section to find...
truegaze
truegaze A static analysis tool for Android and iOS applications focusing on security issues outside the source code such as resource strings, third party libraries and configuration files. Requirements Python 3 is required and you can find all required modules in the requirements.txt file. Only...