Android-Disassembler

Android-Disassembler CodeFactor Analyze malicious app on your phone Maintenance status Maintenance has resumed, but the project is still in a recovery and modernization phase. The baseline now expects initialized git submodules before building. Default open/import/export flows now use SAF-first...

dlinject

dlinject.py Inject a shared library i.e. arbitrary code into a live linux process, without ptrace. Inspired by Cexigua and linux-inject, among other things. Usage root@kitploit: .. . | /| | || || / | .. / | | | | |/ \ | |/ / \ \ \ | \ | |/|| /| |\ \ | /| // | / /| / / /|| / source:...

Umay

IoT Malware Similarity Analysis Platform View Demo Table of contents About The Project Current features Getting Started Prerequisites Installation Create your own dataset Contributing License About The Project This project provides IoT malware similarity analysis based on shared codes. It helps t...

pulledpork

PulledPork PulledPork for Snort and Suricata rule management from Google code Find us on Libera.Chat IRC pulledpork Copyright C 2009-2021 JJ Cummings, Michael Shirk and the PulledPork Team! Thank you for choosing to use PulledPork! This file provides some basic guidance on the usage of PulledPork...

gpblib

GPBLib GPBLib contains the common code used by the GroupPolicyBackdoor, OUned and GPOddity projects for GPO manipulations. The migration of the tools to the use of the present library is still in progress...

hosting

General Information: This is a setup for a Tor based shared hosting server. It is provided as is and before putting it into production you should make changes according to your needs. This is a work in progress and you should carefully check the commit history for changes before updating. For a...

CVE-2021-3156

CVE-2021-3156 PoC Introduction This is an exploit for the CVE-2021-3156 sudo vulnerability dubbed Baron Samedit by Qualys. Usage build: root@kitploit: $ make list targets: root@kitploit: $ ./sudo-hax-me-a-sandwich run: root@kitploit: $ ./sudo-hax-me-a-sandwich manual mode: root@kitploit: $...

LibTP

LibTP A shared Crystal Palace library for proxying Nt API calls via the Threadpool. Credits Raphael Mudge, Adversary Fan Fiction Writers Guild Chetan Nayak, Dark Vortex...

CVE-2025-32463

CVE-2025-32463 Exploit Overview This repository provides a Go-based exploit tool for CVE-2025-32463 , a critical local privilege escalation vulnerability CVSS 9.3 in sudo versions 1.9.14 to 1.9.17. It allows unauthorized local users to gain root access by exploiting a flaw in the --chroot -R...

malasada

malasada Donut for Linux, converts a Linux ELF shared object .so into a position-independent .bin blob that can be executed directly from memory for example, by copying it into an mmap'd region and jumping to it as a function pointer. This project intentionally avoids memfd memfdcreate, execveat ...

SYNwall

SYNwall Zero config IoT firewall. SYNwall is a project built for the time being as a Linux Kernel Module, to implement a transparent and no-config/no-maintenance firewall. You may want to have a look to the for an example of usage. Basics Usually IoT devices are out of a central control, with low...

page_inject

pageinject - AFALG aead cross-container escape AFALG aead vulnerability cross-container exploit -- pivot from one compromised container into every sibling container that shares the samelibc.so.6 image layer. This is an escape primitive : it runs from inside an unprivileged container that the...

cip-security-poc

cip-security-poc — proving the fix principle behind CVE-2021-22681 not just its flaw Six runnable scripts — real EtherNet/IP protocol traffic Test 1, real TLS/PKI mechanics Tests 3–6 — zero Rockwell software or licensing anywhere in the chain. Built to test a claim before writing it up, not to...

CVE-2025-63353

CVE-2025-63353: Predictable Wi-Fi Password Vulnerability in FiberHome GPON ONT Devices References Based on research by Hanianis original CVE disclosure at CVE-2025-63353 Thanks to the security researchers who identified this vulnerability. Legal Disclaimer This information is provided for...

CVE-2025-1974

CVE-2025-1974: Kubernetes Ingress Nginx Controller Vulnerability Analysis and PoC Environment Setup Test Environment MacOS M2 Ingress NGINX Controller 1.11.3 Rancher Desktop Docker Minikube Kubernetes Local Test Environment Setup M2 MacOS Install minikube for local testing minikube start...

lutlol

Living Under the Land on Linux Material for talks with the same name at... BSides Belfast 2025 BSides Vienna 2025 The code isn't particularly usable as-is, but may be useful for reference. Helpful things: The src/ directory - Source code for most of the things in the talk ProcrastinationEDR -...

phpMussel

What is phpMussel? An ideal solution for shared hosting environments, where it's often not possible to utilise or install conventional anti-virus protection solutions, phpMussel is a PHP script designed to detect trojans, viruses, malware and other threats within files uploaded to your system...

cve-2025-32462

cve-2025-32462 sudo/NEWS at SUDO188 · sudo-project/sudo · GitHub The sudo -h --host documentation states that -h can only be used with -l. In later updates, sudo -h was allowed to be used with -e, -i, etc. sudo --host-h -l--list /etc/sudoer.d is used to check what permissions a user has on a...

recipe-blog-encoding

recipe-blog-encoding !WARNING This project is entirely vibe-coded likely partially plagiarized from this repository and the author is a dumb-dumb who just thought the idea was funny Use SEO-gaming recipe preambles as a vehicle for encoding secret messages the prompt can really be anything though,...

bing-ip2hosts

Bing-ip2hosts Bing-ip2hosts is a Bing.com web scraper to discover hostnames by IP address. Description Bing-ip2hosts is a Bing.com web scraper that discovers hostnames by IP address. Bing is the flagship Microsoft search engine formerly known as MSN Search and Live Search. It provides a feature...