MalwareTracesGenerator

MalwareTracesGenerator Generate malware traces for detection tests Report Bug · Request Feature 📋 Table of content 📋 Table of content 👀 About the project ❓ Why 🚀 Getting started ⚙️ Prerequisites 📦 Installation 🥷 Quick examples 👷 Contributing 🙌 Acknowledgments 📚 Licenses 👀 About the project...

EtwLeakKernel

EtwLeakKernel This repository contains a PoC for a program that utilizes ETW to leak kernel memory addresses. It does so by creating a consumer could be to almost any provider as almost all of them leak kernel addresses and requesting a stack trace from it. Once the stack trace is received, it is...

etl-parser

etl-parser Event Trace Log file reader in pure Python etl-parser is a pure Python 3 parser library for ETL Windows log files. ETL is the default format for ETW as well as the default format for the Kernel logger. etl-parser has no system dependencies, and will work well on both Windows and Linux...

CVE-2023-6702

Chrome Renderer 1day RCE via Type Confusion in Async Stack Trace CVE-2023-6702 Summary This vulnerability allowed a remote attacker to execute arbitrary code inside the Chrome renderer process. There was an insufficient type check in the async stack trace handling code. It leads to a type confusi...

frida-ios-hook

Frida iOS hook 📍 A tool that helps you can easy using frida. It support script for trace classes, functions, and modify the return values of methods on iOS platform. 👉 For Android platform: frida-android-hook 👉 For Intercept Api was encrypted on iOS application: frida-ios-intercept-api Env OS...

frida

Frida Dynamic instrumentation toolkit for developers, reverse-engineers, and security researchers. Learn more at frida.re. Two ways to install 1. Install from prebuilt binaries This is the recommended way to get started. All you need to do is: root@kitploit: pip install frida-tools CLI tools pip...

gftrace

gftrace A command line Windows API tracing tool for Golang binaries. Note: This tool is a PoC and a work-in-progress prototype so please treat it as such. Feedbacks are always welcome! How it works? Although Golang programs contains a lot of nuances regarding the way they are built and their...

gdb-dashboard

GDB dashboard GDB dashboard is a standalone .gdbinit file written using the Python API that enables a modular interface showing relevant information about the program being debugged. Its main goal is to reduce the number of GDB commands needed to inspect the status of current program thus allowin...

hades

About Hades is a proof of concept loader that combines several evasion technques with the aim of bypassing the defensive mechanisms commonly used by modern AV/EDRs. Usage The easiest way, is probably building the project on Linux using make. root@kitploit: git clone https://github.com/f1zm0/hades...

icebox

IceBox Icebox is a Virtual Machine Introspection solution that enable you to stealthily trace and debug any process kernel or user. It's based on project Winbagility. Files which might be helpful: INSTALL.md: how to install icebox. BUILD.md: how to build icebox. Demo Project Organisation fdp: Fas...

cmcp

cMCP：机密 MCP 运行时 在 TEE 内强制执行 MCP 工具策略，使其所管控的智能体无法触及 快速开始 · 架构 · 配置 · CLI · 更新日志 开发者预览版 - 于 2026 年 6 月 23 日在机密计算峰会上发布。在 v1.0 之前可能存在破坏性变更。请参阅 STATUS.md 了解当前已发布内容与路线图规划的确切差异。 cMCP（机密 MCP 运行时）是运行 MCP 的安全、机密方式：一个开源网关，在硬件可信执行环境（TEE）内强制执行 MCP 工具调用策略。 每次工具调用都会被拦截，依据 Cedar...

CVE-2026-56139

camel-undertow Rest DSL muteException 堆栈跟踪泄露复现工具 CVE-2026-56139 本项目演示 Apache Camel 的 camel-undertow Rest DSL 消费者中的一个信息泄露 问题，编号为 CVE-2026-56139 。muteException 选项控制是否将未捕获处理异常的详细信息返回给 HTTP 客户端。在普通 undertow 端点上，该选项有效——但 undertow Rest DSL 在创建其响应绑定时将 muteException 硬编码为 false ，并且从不复制所配置的值，因此 muteExcepti...

CVE-2023-47459

CVE-2023-47459 Description A vulnerability was discovered in Knovos Discovery v.22.67.0 that allows a remote attacker to access confidential information using the components: /DiscoveryReview/Service/CaseManagement.svc/GetProductSiteName,...

CVE-2019-13272

CVE-2019-13272 - Pkexec Local Privilege Escalation ⚠️ For educational and authorized security research purposes only Original Exploit Authors Very grateful to the original PoC author BCOLES Description In the Linux kernel before 5.1.17, ptracelink in kernel/ptrace.c mishandles the recording of the...

hoper

Hoper It shows all the hops that makes a url you specify to reach its endpoint. For example if you want to see the entire trip by email URL or like a URL shorten. Hoper returns you all URLs redirections. Installation root@kitploit: $ gem install hoper Usage Type in your command line: root@kitploi...

AoratosWin

AoratosWin AoratosWin is a tool that removes traces of executed applications on Windows OS which can easily be listed with tools such as ExecutedProgramList by Nirsoft. Feel free to decompile, reverse, redistribute, etc. Supported OS Tested On Windows 7 x86, x64 Windows 8 x86, x64 Windows 8.1 x86...

binder-trace

Binder Trace Binder Trace 是一款用于拦截和解析 Android Binder 消息的工具。你可以把它视为“Binder 版 Wireshark”。 环境要求 python 版本 = 3.9 ⚙️ 安装 你需要一台已 root 的 Android 设备或模拟器。 （仅限 Linux）- 安装 xclip 或 xsel 以获得“复制到剪贴板”功能 sudo apt-get install xclip sudo apt-get install xsel 从 PyPi 安装 pip install binder-trace 检查已安装的 frida 版本（请确保已通过...

MLflow < 3.10.0 - Authentication Bypass on FastAPI Routes

A vulnerability in mlflow/mlflow versions 3.9.0 and earlier allows unauthenticated access to certain FastAPI routes when the server is started with authentication enabled --app-name basic-auth and served via uvicorn ASGI. The FastAPI permission middleware only enforces authentication on /gateway/...

Microweber < 1.2.11 - CRLF Injection

CRLF Injection leads to Stack Trace Exposure due to lack of filtering at https://demo.microweber.org/ in Packagist microweber/microweber prior to 1.2.11. id: CVE-2022-0666 info: name: Microweber 1.2.11 - CRLF Injection author: ritikchaddha severity: high description: | CRLF Injection leads to Sta...

CVE-2026-49365

CVE-2026-49365 — camel-netty-http / camel-undertow muteException 堆栈跟踪信息泄露 针对同一 Apache Camel 漏洞的可运行概念验证（PoC）复现程序，每种运行时各一个： 运行时| 目录| 技术栈| 所展示的组件 ---|---|---|--- Camel Spring Boot| camel-spring-boot/| Spring Boot 3.2.0 + camel-spring-boot 4.18.2| netty-http 与 undertow Camel Quarkus| camel-quarkus/|...