Rabbit Hole

Overview Rabbit Hole provides a very limited subset of the functionality of Maltego, focused on creating visual representations of information for Penetration Testing. It provides creation of various types of nodes such as IP Addresses, Ports, Services, etc and links between them, with a much mor...

sslx

sslx openssl, pero no tienes que buscar las opciones en Google. Un solo binario que maneja certificados, conexiones TLS y todo lo que normalmente necesitas tres invocaciones diferentes de openssl. Construido con Rust y rustls, no requiere OpenSSL del sistema. Instalar root@kitploit: cargo install...

Node.js st module Directory Traversal

A directory traversal vulnerability in the st module before 0.2.5 for Node.js allows remote attackers to read arbitrary files via a %2e%2e encoded dot dot in an unspecified path. id: CVE-2014-3744 info: name: Node.js st module Directory Traversal author: geeknik severity: high description: A...

smbexec

root@kitploit: smbexec A rapid psexec style attack with samba tools Original Concept and Script by Brav0Hax & PureHate Ported to ruby and modified by Smilingraccoon and Zeknox Codename - Machiavellian Written because we got sick of Metasploit PSExec getting popped Special thanks to Carnal0wnage...

sshuttle

sshuttle: donde convergen el proxy transparente, la VPN y ssh Hasta donde sé, sshuttle es el único programa que resuelve el siguiente caso común: Tu máquina cliente o router es Linux, FreeBSD o MacOS. Tienes acceso a una red remota a través de ssh. No necesariamente tienes acceso de administrador...

curveball

curveball CVE-2020-0601 curveball - Calculadora de clave alternativa Compilación Windows Visual Studio 2012 o superior, luego compile la solución. Linux / Unix cc altkey.c -lcrypto -o altkey Uso Uso: altkey ecpubliccertificate.pem ecnewprivatekey.pem Ejemplo root@kitploit:...

CVE-2004-1561

Versión no Metasploit de CVE-2004-1561 Alternativa a la versión en C Desarrollado para TryHackme : Ice...

powerview.py

Installation | Basic Usage | Obfuscation | Modules | Logging | User Defined Rules | MCP | Plugins | Acknowledgements Overview PowerView.py is an alternative for the awesome original PowerView.ps1 script. Most of the modules used in PowerView are available here some of the flags are changed . Main...

malice

malice La misión de Malice es ser una versión gratuita de código abierto de VirusTotal que cualquiera pueda usar a cualquier escala, desde un investigador independiente hasta una empresa Fortune 500. Pruébalo DEMOSTRACIÓN: demo.malice.io nombre de usuario : malice contraseña : ecilam Requisitos...

BlackThrone

BlackThrone PHP BlackThrone Script Una alternativa de código abierto a burp collaborator BlackThrone creado para detectar tráfico websockets y HTTP en el sitio web principal, proporcionando algunos encabezados del servidor e información del cliente. BlackThrone es una herramienta basada en web pa...

dcshadow

!WARNING DO NOT RUN IN PRODUCTION. This is meant for lab testing, for blue teams to work on identifying IoCs, event types, and behavior. Also, this tool is provided as-is. No support is planned apart from standard review on pull requests you may want to create. Don't run this from a Windows host...

CVE-2026-53571

CVE-2026-53571 CVE-2026-53571 server.fs.deny bypass on Windows alternate paths PoC. The contents of files that are specified by server.fs.deny can be returned to the browser on Windows. root@kitploit: mkdir CVE-2026-53571 cd CVE-2026-53571 npm init -y npm install [email protected]...

CVE-2024-55591

CVE-2024-55591 PoC Este repositorio contiene una PoC Prueba de Concepto para CVE-2024-55591 , una vulnerabilidad crítica de omisión de autenticación descubierta en los productos FortiOS y FortiProxy de Fortinet. Resumen de la vulnerabilidad CVE-2024-55591 es una vulnerabilidad de omisión de...

The vulnerability of the compatibility package for Microsoft Azure Entra ID allows a perpetrator to circumvent the authentication process by using an alternative path or channel, thereby allowing them to increase their privileges.

The vulnerability of the compatibility package for Microsoft Azure Entra ID involves bypassing the authentication process by using an alternative path or channel. Exploiting this vulnerability can allow a malicious actor to gain increased privileges...

thm_steelmountain_CVE-2014-6287

thmsteelmountainCVE-2014-6287 una versión en python3 del exploit escrito para CVE-2014-6287. Útil para completar la sala "Steel Mountain" en TryHackMe.com sin el uso de metasploit...

USN-8736-1: Perl vulnerabilities

It was discovered that Perl incorrectly handled certain large inputs during regular expression matching. An attacker could possibly use this issue to trigger out-of-bounds heap reads or writes, resulting in a denial of service or arbitrary code execution. CVE-2026-15534 It was discovered that Per...

python-paddingoracle

python-paddingoracle: 이식 가능한 패딩 오라클 익스플로잇 API PYTHON 3용으로 업데이트됨 python-paddingoracle는 PadBuster 및 다른 패딩 오라클 익스플로잇 도구에 대한 맞춤형 대안을 침투 테스터에게 제공하는 API입니다. 이러한 도구들은 대규모 재작성 없이는 고유한 애플리케이션별 시나리오에서 쉽게 사용할 수 없습니다. 비 HTTP 애플리케이션, 원시 소켓, 클라이언트 애플리케이션, 고유 인코딩 등을 생각해 보세요. 사용법: paddingoracle API를 사용하려면...

codecrypt

Codecrypt The post-quantum cryptography tool. Codecrypt is currently unmaintained, although I still successfully use it. If you are interested in developing/maintaining it, ping me. About This is a GnuPG-like unix program for encryption and signing that uses only quantum-computer-resistant...

The vulnerability of the OpenSSH cryptographic protection mechanism, which stems from the use of an unprotected alternative channel, allows attackers to compromise data integrity.

The vulnerability of the OpenSSH cryptographic protection lies in the use of an unprotected alternative channel. Exploiting this vulnerability could allow a attacker to compromise the integrity of data...

Astra Linux – Vulnerability in curl

There is an authentication bypass vulnerability in libcurl version 8.0.0, particularly in the FTP connection reuse feature. This vulnerability can cause incorrect credentials to be used during subsequent transfers. Previously created connections are retained in a connection pool for reuse if they...