nimcrypt

nimcrypt Un cargador de shellcode de Sliver escrito en Nim dirigido a Windows x64. Dos variantes que cubren las dos situaciones de entrega más comunes. Probado contra Windows Defender con protección en tiempo real habilitada. Variantes stager Lee un blob de shellcode cifrado del disco, lo descifr...

awesome-ida-x64-olly-plugin

Awesome IDA, Ghidra, x64DBG, GDB & OllyDBG plugins A curated list of IDA, x64DBG, Ghidra, GDB and OllyDBG plugins. IDA is a powerful disassembler and debugger that allows to analyze binary, it also includes a decompiler. X64DBG is an open-source x64/x32 debugger for Windows. OllyDbg is a 32-bit...

vmpdump

VMPDump Un volcador VMP dinámico y reparador de importaciones, impulsado por VTIL. Funciona para VMProtect 3.X x64. Antes vs Después Uso VMPDump.exe "" -ep= -disable-reloc Argumentos: : El ID del proceso objetivo, en forma decimal o hexadecimal. : El nombre del módulo que debe volcarse y reparars...

NovaHypervisor

NovaHypervisor Description NovaHypervisor is a defensive x64 Intel host based hypervisor. The goal of this project is to protect against kernel based attacks either via Bring Your Own Vulnerable Driver BYOVD or other means by safeguarding defense products AntiVirus / Endpoint Protection and kerne...

r2frida

r2frida Radare2 and Frida better together Description Self-contained plugin for radare2 that ships frida and allows to instrument local or remote processes using r2 commands instead but not limited to Frida scripts. The radare project provides a complete toolchain for reverse engineering, it's...

lacuna-rs

lacuna-rs Suplantación de pila de llamadas de fotogramas fantasma + llamadas al sistema indirectas en tiempo de ejecución para Windows x64 — portado a Rust. Portado de LACUNA Chain lacunachain.c por Mohamed Alzhrani 0xmaz. lacuna-rs es una crate Rust reutilizable que proporciona las mismas...

Chaos-Rootkit

Chaos-Rootkit Chaos-Rootkit is an x64 Ring 0 rootkit i wrote to better understand kernel internals and rootkit techniques. Gui version Features Hide process: This feature allows you to hide processes from listing tools via DKOM. Elevate specific process privileges : This feature enables you to...

ghostdebug

GhostDebug GhostDebug is a Windows x64 debugger prototype composed of a native debugging DLL and a .NET Framework command-line client. It is intended for debugging targets that use debugger-detection checks. For background on the design, see Developing an undetected debugger on Windows...

Fritter

Fritter The evasive cousin of Donut. Fritter is a heavily modified fork of TheWover and Odzhan's Donut shellcode generator. It generates position-independent shellcode for in-memory execution of VBScript, JScript, EXE, DLL, and .NET assemblies, with a focus on evasion and signature resistance. Th...

shellcode-x64

Shellcode for Microsoft Windows 11 x64 This script generate Windows 11 x64 Reverse TCP Shellcode with PIC technique. Usage for generate shellcode root@kitploit: python ./shellreversetcp.py -i 192.168.10.10 -p 443 Defualt language is C type shellcode, also Python, Csharp and powershell:...

CVE-2024-1086

CVE-2024-1086 Universal local privilege escalation Proof-of-Concept exploit for CVE-2024-1086, working on most Linux kernels between v5.14 and v6.6, including Debian, Ubuntu, and KernelCTF. The success rate is 99.4% in KernelCTF images...

upx

ooooo ooo ooooooooo. ooooooo ooooo 888' 8' 888 Y88. 8888 d8' 888 8 888 .d88' Y888..8P 888 8 888ooo88P' 8888' 888 8 888 .8PY888. 88. .8' 888 d8' 888b YbodP' o888o o888o o88888o root@kitploit: The Ultimate Packer for eXecutables Copyright c 1996-2026 Markus Oberhumer, Laszlo Molnar & John Reiser...

CVE-2020-1020-Exploit

CVE-2020-1020 Type1 Font Pool Overflow LPE Exploit Supported OS : Windows 7,8,8.1 x64...

CVE-2013-2028-x64-bypass-ssp-and-pie-PoC

for bypass NX PIE SSP ASLR this poc is not stable. sometimes http service will down. you should fix morecore-offset and chose correct libc-file...

CVE-2016-9079

CVE-2016-9079 A demo exploit of CVE-2016-9079 on Ubuntu x64...

Phantom-Evasion-Loader

SROP-Assisted Cross-Memory Attach CMA Injection via Direct Syscalls. 👻 Phantom-Evasion-Loader x64 Linux Phantom-Evasion-Loader is a standalone, pure x64 Assembly injection engine engineered to minimize the detection surface of modern EDR/XDR solutions and Kernel-level monitors like Falco eBPF. It...

inject-assembly

inject-assembly - Execute .NET in an Existing Process This tool is an alternative to traditional fork and run execution for Cobalt Strike. The loader can be injected into any process, including the current Beacon. Long-running assemblies will continue to run and send output back to the Beacon,...

IronPE

IronPE - Cargador manual mínimo de Windows PE escrito en Rust. Implementación de Cargador PE / Mapeo Manual en Rust IronPE es un cargador manual mínimo de Windows PE escrito en Rust para archivos PE tanto x86 como x64. Este proyecto es una reimplementación en Rust de mi proyecto anterior...

CVE-2021-3156

CVE-2021-3156 Sudo Baron Samedit This repository is CVE-2021-3156 exploit targeting Linux x64. For writeup, please visit https://datafarm-cybersecurity.medium.com/exploit-writeup-for-cve-2021-3156-sudo-baron-samedit-7a9a4282cb31 Credit to Braon Samedit of Qualys for the original advisory. Files...

pcileech

PCILeech Summary: PCILeech uses PCIe hardware devices to read and write target system memory. This is achieved by using DMA over PCIe. No drivers are needed on the target system. PCILeech also works without hardware together with a wide range of software memory acqusition methods supported by the...