Stardox

Available in: Sponsors Huge thanks to the companies supporting Stardox: | | | ---|---|---|--- About Stardox is an advanced GitHub stargazers' information gathering tool. It scrapes GitHub and displays the results in a tree view, letting you collect data on any repository's stargazers — yours or...

CVE-2024-4885

CVE-2024-4885 CVE-2024-4885 の PoC: Progress WhatsUp Gold の GetFileWithoutZip における認証なしリモートコード実行 CVE-2024-4885 技術分析 この脆弱性の根本原因分析は私のブログで公開されています： https://summoning.team/blog/progress-whatsup-gold-rce-cve-2024-4885/ 使用方法 root@kitploit: python3 CVE-2024-4885.py -t http://192.168.0.231:9642 -s...

detection-rules

Detection Rules Detection Rules は、Elastic Security で使用されるルールの本拠地です。このリポジトリは、Elastic Security の Detection Engine 向けルールの開発、保守、テスト、検証、リリースに使用されます。 このリポジトリは、Elastic のブログ記事 Elastic Security opens public detection rules repo で初めて発表されました。追加のコンテンツについては、併設のウェビナー Elastic Security: Introducing the public...

detection-rules

Detection Rules Detection Rules is the home for rules used by Elastic Security. This repository is used for the development, maintenance, testing, validation, and release of rules for Elastic Security’s Detection Engine. This repository was first announced on Elastic's blog post, Elastic Security...

wpscan

WPScan WordPress Security Scanner WPScan WordPress Vulnerability Database - WordPress Security Plugin INSTALL Prerequisites Optional but highly recommended: rbenv Ruby = 3.3 - Recommended: latest stable Curl = 7.72 - Recommended: latest stable The 7.29 has a segfault The 7.72 could result in...

osint-scraper

Social Recon This application locates and compiles information about online personalities, given a username and/or email address. Use this to investigate your own online presence, summarize the digital footprint of someone you know, or uncover the person behind a specific username. Getting Starte...

sx

sx is the command-line network scanner designed to follow the UNIX philosophy. The goal of this project is to create the fastest network scanner with clean and simple code. 📖 Table of Contents Features Install Build from source Quick Start References Contributing Credits License ✨ Features ⚡ 30x...

sx

sx 는 UNIX 철학을 따르도록 설계된 커맨드라인 네트워크 스캐너입니다. 이 프로젝트의 목표는 깨끗하고 간단한 코드로 가장 빠른 네트워크 스캐너를 만드는 것입니다. 📖 목차 기능 설치 소스에서 빌드 빠른 시작 참고 자료 기여하기 크레딧 라이선스 ✨ 기능 ⚡ nmap보다 30배 빠름 ARP 스캔 : 로컬 네트워크를 스캔하여 활성 장치 감지 ICMP 스캔 : 고급 ICMP 스캐닝 기술을 사용하여 활성 호스트 및 방화벽 규칙 감지 TCP SYN 스캔 : 전통적인 하프 오픈 스캔으로 열린 TCP 포트 찾기 TCP FIN / NULL...

spiderfoot

SpiderFoot is an open source intelligence OSINT automation tool. It integrates with just about every data source available and utilises a range of methods for data analysis, making that data easy to navigate. SpiderFoot has an embedded web-server for providing a clean and intuitive web-based...

local-mcp

local-mcp ローカルファイル操作用のゼロ依存MCPサーバー。 ファイルシステムツール13個＋段階的ディスカバリ用のメタツール3個 — SDK不要、フレームワーク不要、npm installも不要です。 MCPプロトコル: 2024-11-05 · トランスポート: stdio + Streamable HTTP · ランタイム: Node.js ≥ 22.0.0 アーキテクチャ root@kitploit: local-mcp.mjs — 595 lines, 13 tools, entry point lib/mcp-core.mjs — 229 lines, stdio +...

theo

Theo Obsolete, not maintained anymore, don't install it, don't use it, you were warned! Theo aims to be an exploitation framework and a blockchain recon and interaction tool. Features: Automatic smart contract scanning which generates a list of possible exploits. Sending transactions to exploit a...

sshprank

Description A fast SSH mass-scanner, login cracker, banner grabber and password auth checker tool using the python-masscan and shodan module. Usage root@kitploit: hacker@blackarch $ sshprank -H / / / / / / / / / / / / /// | / / / // / / / // / / / / , opts | mode options -h - single host, cidr,...

sshprank

설명 python-masscan 및 shodan 모듈을 사용하는 빠른 SSH 대량 스캐너, 로그인 크래커, 배너 그랩퍼 및 비밀번호 인증 검사 도구입니다. 사용법 root@kitploit: hacker@blackarch $ sshprank -H / / / / / / / / / / / / /// | / / / // / / / // / / / / , opts | mode options -h - single host, cidr, ip range or host list file to crack. multiple ports can...

ParrotSec-Linux-Hardening-Project

ParrotSec Linux - Public Kiosk Project 制限付きで信頼できる環境の設計と実装 ハードニング済みカーネル root@kitploit: - GrSecurity パッチ適用済みカーネル - PaX ハードニング - x PaXctl - x PaXTest - x PaXctld - x ハードニング済みカーネル実行時パラメータ root@kitploit: - x Kernel Self Protection Project KSPP - x pti=on - カーネルページテーブル分離 - x slubdebug=ZF - SLUB...

cupshax

CUPSHax 最近のCUPSエクスプロイトの急ごしらえの概念実証PoCです。もっと大幅に整理するつもりでしたが、エンバーゴが予想よりもずっと早く解除されたため、コードは少し急ぎ足になっています。 技術的な詳細は、正直なところEvilsocketの解説記事を読むべきです。 このエクスプロイトは、公開されているOpenPrinting CUPSリポジトリのこのコミットを見つけた後に書かれました。おそらく、もっとクリーンなインジェクションポイントが存在します。...

CVEs

Rhino CVE Proof-of-Concept Exploits A collection of proof-of-concept exploit scripts written by the team at Rhino Security Labs for various CVEs. CVE-2026-46546: Frappe LMS Header Tag Injection Leading to Open Redirect CVE-2026-39405: Frappe LMS Path Traversal in SCORM Package Upload Leading to...

CVE-2026-50522

CVE-2026-50522 ⚡ Simple Usage Use this project only in safe and authorized environments such as: Local virtual machines Docker containers Isolated lab setups Authorized penetration testing environments Example setup: root@kitploit: git clone cd Project use python follow below Create a virtual...

CVE-2022-1388

BIG-IP iControl REST 脆弱性 CVE-2022-1388 PoC この脆弱性により、管理ポートやセルフIPアドレスを介してBIG-IPシステムにネットワークアクセスできる認証されていない攻撃者が、任意のシステムコマンドの実行、ファイルの作成・削除、またはサービスの無効化を行う可能性があります。 PoC 以下のcurlワンライナーを使用してF5 Big-IPの脆弱性を確認するか、提供されているPythonスクリプトを使用することができます。 root@kitploit: cat ips.txt | while read ip; do curl -su admin -H...

PyMemoryEditor

PyMemoryEditor A pure-Python library built on ctypes that lets you inspect, modify and search the memory of any running process in a few lines of Python — Cheat Engine workflows on Windows, Linux and macOS! Read, write and scan the memory of any process — straight from Python. One unified API...

windbg-mcp

WinDbg MCP MCP Model Context Protocol 서버로, 모든 pybag Windows 디버거 함수를 네이티브 MCP 도구로 노출합니다. 모든 MCP 호환 클라이언트Claude Desktop, Claude Code, Cowork, OpenAI Codex CLI, Cursor 및 사용자 정의 에이전트에게 사용자 모드 프로세스, 커널 세션 및 크래시 덤프 분석에 대한 완전한 제어를 제공합니다. 모든 것은 타입화된 도구 호출과 구조화된 JSON 응답을 통해 이루어집니다. 요구 사항 Windows 전용 — pyba...