Zapscape

The KVM Escape Trilogy ITScape CVE‑2026‑46316 | Januscape CVE‑2026‑53359 | Zapscape CVE‑2026‑64561 ---|---|--- Zapscape: Guest-to-Host Escape in KVM/x86 Abstract This document describes the Zapscape CVE-2026-64561 vulnerability discovered and reported by Hyunwoo Kim @v4bel. It is a KVM escape...

CVE-2026-66804-CrossDevice-LPE

CVE-2026-66804: Microsoft Windows Cross Device Service Elevation of Privilege Vulnerability Proof of concept for a CrossDevice/FrameServer LPE I reported to MSRC which received CVE-2026-66804. It affects Windows 10 and Windows 11. Vulnerability Windows registers this machine-wide COM server:...

pybatfish

Got questions, feedback, or feature requests? Join our community onSlack! Pybatfish Pybatfish is a Python client for Batfish. What is Batfish? Batfish is a network validation tool that provides correctness guarantees for security, reliability, and compliance by analyzing the configuration of...

CVE-2023-41425

CVE-2023-41425 CVE-2023-41425 XSS to RCE, Wonder CMS 3.2.0 = 3.4.2 Usage root@kitploit: ➜ CVE-2023-41425 python3 exploit.py Enter target URL RHOST, e.g., http://example.com/loginURL: http://redacted.com/loginURL Enter your local host IP LHOST, e.g., 10.10.14.xxx: xx.xx.xx.xx Enter your local web...

decoder-plus-plus

Decoder++ Decoder++ is an extensible application designed for penetration testers, software developers, and anyone in between looking to effortlessly decode and encode data across various formats. It includes a wide range of preinstalled scripts and codecs, smart decoding and format identificatio...

bitbang-cli

BitBang CLI bitbang is a single static binary remote-access multitool. From any browser: an interactive shell and file browser access to the remote machine. You can also reach web apps on that machine's network. Beyond the browser, it does TCP port forwarding, file copy, and terminal sharing. It...

easyssh

EasySSH The SSH connection manager to make your life easier. Looking for maintainers! A complete, efficient and easy-to-use manager. Create and edit connections, groups, customize the terminal, with multiple instances of the same connection. Features Manage connections and groups Customize termin...

sharesniffer

sharesniffer sharesniffer is a network analysis tool for finding open and closed file shares on your local network. It includes auto-network discovery and auto-mounting of any open cifs and nfs shares. How to use Example to find all hosts on any local network with open/closed nfs/smb shares:...

bitchat-android

!WARNING This software has not received external security review and may contain vulnerabilities and may not necessarily meet its stated security goals. Do not use it for sensitive use cases, and do not rely on its security until it has been reviewed. Work in progress. bitchat for Android A secur...

CVE-2021-21389

CVE-2021-21389 BuddyPress 7.2.1 - REST API Privilege Escalation to RCE PoC Full Affected version: 5.0.0 to 7.2.0 User requirement: Subscriber user Method: Privilege Escalation to Administrator and trigger RCE via REST API Endpoint: /v1/members/me endpoint. How to use Docker root@kitploit: git clo...

getaltname

GSAN - Get Subject Alternative Names GSAN is a tool that can extract Subject Alternative Names SAN found in SSL Certificates directly from https servers which can provide you with DNS names subdomains or virtual servers. It doesn't rely on Certificate Transparency logs, it connects directly to th...

Amsi-Killer

Lifetime AMSI bypass Opcode Scan we get the exact address of the jump instruction by searching for the first byte of each instruction this technique is effective even in the face of updates or modifications to the target data set. for example : | 48:85D2 | test rdx, rdx | | 74 3F | je...

HSTP

Protocolo de Texto Simple Hiper en Redes Pruébalo ahora: https://hstp.ai root@kitploit: npx hstp; El protocolo tiene como objetivo desarrollar una abstracción de capa de aplicación para el Protocolo de Transferencia de Servicio Hyper. HSTP es una recursión como naturaleza de HSTP. Este protocolo ...

iWant

iWant CLI based decentralized peer to peer file sharing Build Status What is it? A commandline tool for searching and downloading files in LAN network, without any central server. Features Decentralized : There is no central server hosting files. Therefore, no central point of failure Easy...

core

Secluso Private DIY home security for Raspberry Pi, with encrypted remote access and a 5-minute software setup. Download Secluso Deploy • Build Your Own Guide • Security Model • Website Secluso is a private home security camera system for Raspberry Pi. Watch live video, get alerts, and open...

p2p

P2P Remote Desktop Remote Desktop P2P based - Portable, No Configuration or Installation Needed. How it works Compile and Open p2p.exe as admin in 2 different PC's. Copy the My Lan or Wan IP and communicate it to other peer and vice versa. The 2 peers have now the 2 endpoint to connect to, so pre...

heartwood

❤️🪵 Radicle Heartwood Protocol & Stack Heartwood is the third iteration of the Radicle Protocol, a powerful peer-to-peer code collaboration and publishing stack. The repository contains a full implementation of Heartwood, complete with a user-friendly command-line interface rad and network daemon...

sc2pe

sc2pe Simple dotnet Native AOT app that uses AsmResolver to convert shellcode to PE. Both 32-bit and 64-bit x86, x64 shellcode is supported - resulting in 32-bit or 64-bit PE. Releases are compiled for both linux-x64 and win-x64. Description It is compiled to Native AOT format to demonstrate how...

sc2elf

sc2elf Simple dotnet Native AOT app that uses LibObjectFile to convert shellcode to ELF. Both 32-bit and 64-bit x86, x64 shellcode is supported - resulting in 32-bit or 64-bit ELF. Releases are compiled for both linux-x64 and win-x64. Description It is compiled to Native AOT format to demonstrate...

Januscape

Januscape: Escape de Invitado a Anfitrión en KVM/x86 Resumen Este documento describe la vulnerabilidad Januscape CVE-2026-53359 descubierta e informada por Hyunwoo Kim @v4bel. Es una vulnerabilidad de escape de KVM que permite que un invitado escape al anfitrión en un entorno KVM/x86. Hasta donde...