CVE-2026-90781

alsa-lib through 1.2.16.1 contains a stack buffer overflow in the sndctlasciielemidparse function that writes one byte past a 64-byte buffer when parsing a name= field with 64 or more characters. Attackers can supply a long control-element identifier string through saved state files or command-li...

EUVD-2026-76994

procs through 0.14.12 fails to sanitize escape sequences in process command lines before displaying them in the Command column. Local attackers can execute processes with malicious ANSI or OSC escape sequences in their command line arguments, which are written unmodified to other users' terminals...

Argus

A Python-based toolkit for Information Gathering & Reconnaissance About The Project Argus is an all-in-one, Python-powered toolkit designed to streamline the process of information gathering and reconnaissance. It brings together a clean, intuitive interface and a wide range of reliable modules,...

CVE-2026-90781

alsa-lib through 1.2.16.1 contains a stack buffer overflow in the sndctlasciielemidparse function that writes one byte past a 64-byte buffer when parsing a name= field with 64 or more characters. Attackers can supply a long control-element identifier string through saved state files or command-li...

CVE-2026-90781 alsa-lib through 1.2.16.1 Off-by-One Stack Buffer Overflow in __snd_ctl_ascii_elem_id_parse()

alsa-lib through 1.2.16.1 contains a stack buffer overflow in the sndctlasciielemidparse function that writes one byte past a 64-byte buffer when parsing a name= field with 64 or more characters. Attackers can supply a long control-element identifier string through saved state files or command-li...

JustTryHarder

JustTryHarder JustTryHarder is a cheat sheet which will aid you through the PWK course & the OSCP Exam. Inspired by PayloadAllTheThings Feel free to submit a Pull Request & leave a star to share some love if this helped you. 💖 Hacktoberfest friendly! Yes, we are open to Pull Requests for...

toxssin

toxssin Purpose toxssin is an open-source penetration testing tool that automates the process of exploiting Cross-Site Scripting XSS vulnerabilities. It consists of an https server that works as an interpreter for the traffic generated by the malicious JavaScript payload that powers this tool...

jsteg

jsteg root@kitploit: go get lukechampine.com/jsteg jsteg is a package for hiding data inside jpeg files, a technique known as steganography. This is accomplished by copying each bit of the data into the least-significant bits of the image. The amount of data that can be hidden depends on the...

awesome-osint-arsenal

🔍 AWESOME OSINT ARSENAL The Ultimate Open-Source Intelligence + Security Toolkit 751+ tools · 50 categories · Multi-distro installers · Georgian OSINT · Termux support The most comprehensive OSINT and security toolkit on the internet — every tool with installation instructions or a verified link....

A-Red-Teamer-diaries

A Red-Teamer diaries Publicly accessible notes about my pentesting/red teaming experiments tested on several controlled environments/infrastructures that involve playing with various tools and techniques used by penetration testers and redteamers during a security assessment. Project in progress...

Hack Tools

Hack Tools This repository contains a collection of 200+ tools and resources that can be useful for red teaming activities. Some of the tools may be specifically designed for red teaming, while others are more general-purpose and can be adapted for use in a red teaming context. Warning The...

pythoncode-tutorials

Python Code Tutorials This is a repository of all the tutorials of The Python Code website. List of Tutorials Ethical Hacking Scapy Getting Started With Scapy: Python Network Manipulation Tool Building an ARP Spoofer. code Detecting ARP Spoof attacks. code How to Make a DHCP Listener using Scapy ...

maigret

Maigret English · 简体中文 Maigret collects a dossier on a person by username only , checking for accounts on a huge number of sites and gathering all the available information from web pages. No API keys required. AI profiling demo. Sponsors IPcook provides reliable residential proxies for online...

stegano

Steganography by bzt Online demo In a nutshell, steganography is the art of hiding messages in another medium in plain sight without people realizing. This implementation reads in images in popular web formats WEBP, PNG, GIF, JPEG, hides the optionally encrypted text in them and saves the result ...

dirsearch

dirsearch - Web Path Discovery An advanced web path brute-forcer dirsearch is being actively developed by @maurosoria and @shelld3v. Join the Discord server to communicate with the team. Quick Start dirsearch requires Python 3.11 or higher. root@kitploit: git clone...

CVE-2026-90773

procs through 0.14.12 fails to sanitize escape sequences in process command lines before displaying them in the Command column. Local attackers can execute processes with malicious ANSI or OSC escape sequences in their command line arguments, which are written unmodified to other users' terminals...

credential-attacks-toolkit

CredAttack — Credential Attacks Toolkit ⚠️ LEGAL NOTICE — Authorised security testing ONLY. Using this tool against systems you do not own or have explicit written permission to test is illegal under the Computer Fraud and Abuse Act US, Computer Misuse Act UK, and equivalent laws worldwide. See...

sif

install · usage · modules · docs · contribute fast, concurrent recon to exploitation in one binary. every scanner shares one connection-pooled http client. what is sif? sif is a recon and exploitation scanner that runs the whole chain in one binary: subdomain enum, port scan, crawler, nuclei,...

thc-hydra

H Y D R A root@kitploit: c 2001-2023 by van Hauser / THC https://github.com/vanhauser-thc/thc-hydra Many modules were written by David dot Maciejak @ gmail dot com BFG code by Jan Dlabal Licensed under AGPLv3 see LICENSE file Please do not use in military or secret service organizations, or for...

POC-S

POC-S: POC-T Strengthen Version POC-T Enhanced Edition Documentation for POC-T wiki is in the doc directory Preface: Currently Legal Disclaimer Using POC-S to attack targets without prior mutual consent is illegal. POC-S is intended for security testing purposes only. Features Compatible with POC...