speakeasy

Speakeasy Speakeasy is a Windows malware emulation framework that executes binaries, drivers, and shellcode in a modeled Windows runtime instead of a full VM. It emulates APIs, process/thread behavior, filesystem, registry, and network activity so samples can keep moving through realistic executi...

MalvexC2

!WARNING Work in Progress: This is a WIP side project that is incomplete and insecure! It is only meant to be used as a playground for myself !CAUTION Use at your own risk: Code in this repository might be harmful. Only run and use things you understand! Malvex C2 Welcome to the repository of the...

CVE-2023-0386

CVE-2023-0386 WIP...

CVE-2026-24061

CVE-2026-24061 Exploit - Work Version v0.1 Usage Run the script with a target host: root@kitploit: python3 exploit.py 192.168.1.1 -p 2323 --debug Arguments positional arguments: target IP or hostname of the target options: -h, --help show this help message and exit -p, --port PORT Port default 23...

hosting

General Information: This is a setup for a Tor based shared hosting server. It is provided as is and before putting it into production you should make changes according to your needs. This is a work in progress and you should carefully check the commit history for changes before updating. For a...

XeytanWin32-RAT

WARNING This is a buggy RAT, not completed, not stable. It still a "work in progress" application. Introduction Project created to kill some of my free time, It is not actively maintained. There are a lot of things to improve/fix, and it will take time to reach a stability on this project. Featur...

Automated-blind-xss-search-for-Burp-Suite

Femida-xss WIP 一个用于 Burp Suite 的自动化盲 XSS 搜索插件。 安装 Git clone https://github.com/ianxtianxt/Automated-blind-xss-search-for-Burp-Suite.git Burp - Extender - Add - 找到并选择 blind-xss.py 如何使用 设置 首先，你需要在名为 “Your url” 的字段中设置你的回调 URL，然后按 Enter 键自动将其保存到 config.py 文件中。 设置完成后，你需要用你的 OOB-XSS 向量填充 Payloads...

certipy-merged

certipy-merged This repository contains a fork of ly4k/Certipy with many open pull requests merged, made compatible with each other, and tested to a certain degree. As this is a work in progress , some features may or may not work as expected and things might break. Installation Using pipx...

CVE-2022-32981

CVE-2022-32981 poc for CVE-2022-32981 under work needs testing + adjusting the offset to the correct one for exploit function...

sshhipot

La versión 2 está en desarrollo. Cambie a la rama v2, compile y ejecute con -h. SSHHiPot Honeypot SSH de alta interacción vale, en realidad es un proxy SSH de registro. Todavía más o menos un trabajo en progreso. Siéntase libre de go install este repositorio si quiere probarlo. Ejecútelo con -h...

CVE-2017-13089

CVE-2017-13089 wget v1.19.1 用于漏洞利用开发。 注意 这不是一个可用的漏洞利用——正在开发中。 使用方法 root@kitploit: 构建容器 docker build -t cve201713089 . 或者 ... docker pull robertcolejensen/cve201713089 在容器中操作，src 将会挂载到 /opt/CVE-2017-13089/src ./run.sh 开发漏洞利用，使用外部调试符号运行 gdb ./run.sh dev 运行包含的 DoS 概念验证 ./run.sh dos 运行包含的漏洞利用概念验证（开发中...

centipede

Centipede - 一个分布式模糊测试引擎。正在开发中。 为什么选择 Centipede 为什么不呢？我们目前正尝试对某些非常大且非常慢的目标进行模糊测试，而 libFuzzer、AFL 之类的工具不一定能很好地扩展。关于我们的一个动机示例，请参阅 SiliFuzz。在开发 Centipede 的过程中，我们计划试验一些现有模糊测试引擎未曾尝试的大规模差分模糊测试新方法。 值得注意的特性： 开箱即用地支持基于 libFuzzer 的模糊测试目标。要使用你最喜欢的 LLVMFuzzerTestOneInput，你只需使用 Centipede 的编译器和链接器选项来构建目标。 正在开发中...

Purpleteam

Purpleteam work in progress Scripts i made to trigger events for SOC detections, mapped to MITRE ATT&CK techniques...

how_to_become_a_malware_analyst

マルウェア解析者になるための勉強方法work-in-progress これは@PINKSAWTOOTHの私見で、必ずしもあなたにとって一番良い方法ではないかもしれません。勉強方法の一例として参照してもらえれば幸いです。 これを読む前に、私が尊敬するマルウェア解析者の@hasherezade氏がマルウェア解析の勉強をどのように始めたらよいかをブログにまとめています。 重複する部分があると思いますが、一読することをおすすめします。また、以下のブログは英語のソースが中心なので、可能な限り日本語を中心にしたソースを紹介したいと思います。...

CVE-2020-25705

CVE-2020-25705 CVE-2020-25705 的 PoC POC-2020-25705 这是一个正在进行中的工作。我会在周一完成它 :p 但这里可能已经有足够的内容供你完成它了。...

EUVD-2024-43516

Malicious code in bioql PyPI...

EUVD-2024-43512

Malicious code in bioql PyPI...

CVE-2024-49657

Missing Authorization vulnerability in Renata Bracichowicz 3D Work In Progress renee-work-in-progress allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects 3D Work In Progress: from n/a through = 1.0.3...

CVE-2024-49652

Unrestricted Upload of File with Dangerous Type vulnerability in Renata Bracichowicz 3D Work In Progress renee-work-in-progress allows Upload a Web Shell to a Web Server.This issue affects 3D Work In Progress: from n/a through = 1.0.3...

CVE-2024-49657

Missing Authorization vulnerability in Renata Bracichowicz 3D Work In Progress renee-work-in-progress allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects 3D Work In Progress: from n/a through = 1.0.3...