jsteg

jsteg root@kitploit: go get lukechampine.com/jsteg jsteg is a package for hiding data inside jpeg files, a technique known as steganography. This is accomplished by copying each bit of the data into the least-significant bits of the image. The amount of data that can be hidden depends on the...

steg-tools

steg-tools This is a list of tools and resources for learning and experimenting with steganography and information hiding. Tools Exiftool is a Perl library and a command line application for the manipulation of metadata of different files, including EXIF, GPS, XMP, and ID3. Strings is part of the...

CVE-2021-3060

CVE-2021-3060 POC/ Exploit Description: An OS command injection vulnerability in the Simple Certificate Enrollment Protocol SCEP feature of PAN-OS software allows an unauthenticated network-based attacker with specific knowledge of the firewall configuration to execute arbitrary code with root us...

baron-samedit

Baron Samedit PoC Description This is a Proof-of-Concept PoC exploit for the Baron Samedit vulnerability CVE-2021-3156 tested on Ubuntu 20.04 with sudo version 1.8.31 and glibc version 2.31. The exploit leverages a heap-based buffer overflow in sudo's handling of command-line arguments when using...

CVE-2021-37580

Apache ShenYu Admin has an authentication bypass vulnerability that allows attackers to bypass JSON Web Token JWT security authentication and directly access the system backend. Apache ShenYu is an extensible, high-performance, and reactive API gateway solution used in all microservice scenarios...

steghide

This repository is read-only. A GitHub org,StegHigh has been set up to maintain steghide. Please submit all PRs, discussions, and issues there. Additionally,StegHigh/steghide is looking for maintainters. Please contribute! Introduction : Steghide is a steganography program that is able to hide da...

VK-Scraper

VK Scraper vk-scraper is a command-line application written in Python that scrapes and downloads VK user's / community's data. Use responsibly. To get a better understanding of how it works, head to the docs. Features Scrape photos Scrape videos both uploaded and external Scrape saved photos Scra...

Stracciatella

Stracciatella v0.7 Espacio de ejecución de Powershell desde C técnica SharpPick con AMSI, ETW y registro de bloques de script deshabilitados para tu placer. Hoy en día, cuando Powershell ha sido severamente instrumentado mediante el uso de técnicas como: AMSI ETW Registro de bloques de script...

burpcommander

burpcommander Ruby command-line interface to Burp Suite's REST API Usage root@kitploit: burpcommander VERSION: 1.0.1 - UPDATED: 08/29/2018 -t, --target IP Address Defaults to 127.0.0.1 -p, --port Port Number Defaults to 1337 -k, --key API Key If you require an API key specify it here -i,...

NiCOFF

NiCOFF Basically, NiCOFF is a COFF and BOF file loader written in Nim. NiCOFF reads a BOF or COFF file, parses and executes it in the memory. Whole project is based on Yasser's and Kevin's COFF Loader projects. Both the loader and beacon functions in these projects were rewritten in Nim...

OpenPetya

OpenPetya A Proof-of-Concept bootkit and UEFI boot application inspired by Petya ransomware, written in Assembly, C, and C++ If you find this project helpful or informative, I would truly appreciate a ⭐ on the repository. Your support would be a great motivation for me to continue improving this...

CVE-2023-22527-MEMSHELL

Project Introduction This project references the project of Boogipop at https://github.com/Boogipop/CVE-2023-22527-Godzilla-MEMSHELL and builds upon it with support for: 1. Injection of Behinder memory shell 2. Added HTTP proxy functionality, usage: -proxy http://127.0.0.1:8080 3. Modified the co...

Coercer

A python script to automatically coerce a Windows server to authenticate on an arbitrary machine through many methods. Windows Support To build a binary for Windows, download the installer.ps1 script from this repository. Run it simply with no arguments to create a binary in the working directory...

seer

Introduction Seer - a gui frontend to gdb for Linux. Ernie Pasveer [email protected] This project is actively worked on. The aim is a simple, yet pleasing gui to gdb. Please report any bugs or desired features to my email or create a task in my GitHub project page. Installation Seer can be...

cleverhans

CleverHans latest release: v4.0.0 This repository contains the source code for CleverHans, a Python library to benchmark machine learning systems' vulnerability to adversarial examples. You can learn more about such vulnerabilities on the accompanying blog. The CleverHans library is under continu...

CVE-2026-3629

CVE-2026-3629 - WordPress Privilege Escalation Checker A command-line tool to detect CVE-2026-3629 , a critical privilege escalation vulnerability in the "Import and export users and customers" WordPress plugin. 📢 Join Our Community Stay updated with the latest security tools, vulnerabilities, an...

ghostsplice

GhostSplice: cross-channel trust fragmentation attack PoC Proof-of-concept code for GhostSplice , an attack from the ASSET Research Group. The full write-up is "The AI refused to steal the secrets. So we handed it a form.". The idea in plain words AI coding assistants like Cursor, VS Code with...

waf-bypass

WAF Bypass Tool WAF Bypass Tool is an open source tool to analyze the security of any WAF for False Positives and False Negatives using predefined and customizable payloads. Check your WAF before an attacker does. WAF Bypass Tool is developed by Nemesida WAF team with the participation of...

CVE-2002-0740

CVE-2002-0740 SLRNPull Spool Directory Command Line Parameter Buffer Overflow Vulnerability Packetstorm publication at https://packetstormsecurity.com/files/25989/slrnpull.overflow.txt.html Securiteam publication at http://www.securiteam.com/unixfocus/5FP0R0K6UC.html Securityfocus publication at...

awesome-osint-arsenal

🔍 AWESOME OSINT ARSENAL El conjunto de herramientas OSINT y de seguridad de código abierto más completo 751+ herramientas · 50 categorías · Instaladores multi-distro · OSINT Georgiano · Soporte para Termux El conjunto de herramientas OSINT y de seguridad más completo de internet — cada herramient...