ThreatHound

ThreatHound ThreatHound is an advanced cybersecurity tool designed to facilitate efficient threat detection and analysis, windows events logs. it offers a user-friendly interface for managing and analyzing security data. Key features include log analysis, Sigma rule integration, and real-time...

Go-RouterSocks

جوارب التوجيه الخطوة التالية بعد اختراق جهاز هي تعداد الشبكة خلفه. توجد العديد من الأدوات لفضح منفذ socks على جهاز المهاجم وإرسال كل حركة المرور عبر نفق إلى الجهاز المخترق. عندما تتوفر عدة منافذ socks، يجب علينا إدارة تكوينات proxychains مختلفة لاختيار الشبكة المستهدفة. ستقوم هذه الأداة بكشف منفذ...

TryHack3M-Bricks-Heist

target:10.201.6.98 enumeration root@kitploit: nmap -A 10.201.6.98 since there is a wordpress with name "brick by brick" and the name of this room is brick it is probably where we can find vulnerability so lets enumerate wordpress root@kitploit: wpscan --url https://bricks.thm --disable-tls-checks...

CVE-2022-1388-rs

CVE-2022-1388-rs Scanner et shell interactif pour CVE-2022-1388 F5 BIG-IP iControl REST Auth Bypass RCE écrit en Rust Résumé Pour résumer, voici un aperçu des conditions nécessaires d'une requête pour exploiter cette vulnérabilité : L'en-tête Connection doit inclure X-F5-Auth-Token L'en-tête...

Crucix

Crucix Votre propre terminal de renseignement. 27 sources. Une commande. Zéro cloud. Visitez le site en direct : crucix.live -orange Enter The Signal Network Plus de captures d'écran Séquence de démarrage| Carte du monde ---|--- |...

iCSeeU

This is a suite of tools/PoCs/exploits that can be used iCSee video-call cameras via LAN and maybe non-video call cameras as well. This could easily be used to flash alternative firmwares as a replacement for the SD card update method. Note: Any memory corruption exploit will only work if your...

Stardox

Available in: Sponsors Huge thanks to the companies supporting Stardox: | | | ---|---|---|--- About Stardox is an advanced GitHub stargazers' information gathering tool. It scrapes GitHub and displays the results in a tree view, letting you collect data on any repository's stargazers — yours or...

CVE-2018-2628

CVE-2018-2628 Un outil de preuve de concept permettant de générer des charges utiles payloads qui exploitent la désérialisation non sécurisée d'objets Java. Étapes détaillées pour reproduire la vulnérabilité CVE-2018-2628 : 0x01 Sur l'hôte JRMPListener, exécutez la commande suivante :...

CVE-2020-26217-XStream-RCE-POC

CVE-2020-26217-XStream-RCE-POC ex. root@kitploit: package org.example; import com.thoughtworks.xstream.XStream; import java.io.IOException; public class CVE202026217 public static void mainString args throws IOException XStream xStream = new XStream; String payload = "\n" + " \n" + " \n" + " 0\n"...

CVE-2022-1388-Exploit-POC

CVE-2022-1388 ЭКСПЛОИТ POC F5 BIG IP root@kitploit: POST /mgmt/tm/util/bash HTTP/1.1 Host: REDACTED:8083 Content-Length: 45 Connection: Keep-Alive,X-F5-Auth-Token Cache-Control: max-age=0 X-F5-Auth-Token: SherlockSecure Content-Type: application/json Authorization: Basic YWRtaW46aG9yaXpvbjM=...

CVE-2026-12243-NLTK-PoC

CVE-2026-12243 — Laboratoire de traversée de chemin NLTK Un petit laboratoire Docker reproductible qui compare le comportement de traversée de chemin encodé en pourcentage dans NLTK 3.9.4 avec le comportement corrigé dans NLTK 3.10.0. La version vulnérable valide le nom de la ressource avant le...

agentsh

agentsh Note macOS : La mise en œuvre native macOS via ESF Endpoint Security Framework + NE Network Extension est en version Alpha. Elle fonctionne de bout en bout — les événements de fichiers, de processus et de réseau transitent par l'extension système vers le moteur de politique Go — mais...

MaliciousMacroGenerator

Malicious Macro Generator Utility Simple utility design to generate obfuscated macro that also include a AV / Sandboxes escape mechanism. Requirement root@kitploit: Python 2.7 Usage root@kitploit: MMG.Malicious Macro Generator v2.0 - RingZer0 Team Author: Mr.Un1k0d3r [email protected] Usage:...

lifer

lifer A forensic tool for Windows link file examinations i.e. Windows shortcuts SYNOPSIS 'lifer' is a Windows or nix command-line tool inspired by the whitepaper 'The Meaning of Link Files in Forensic Examinations' by Harry Parsonage and available here. It started life as a lightweight tool that ...

TrueTree

TrueTree About Read all about the TrueTree concept here TrueTree is more than just a pstree command for macOS. It is used to display a process tree for current running processes while using a hierarchy built on additoinal pids that can be collected from the operating system. The standard process...

CVE-2025-54100

CVE-2025-54100 La commande curl de PowerShell utilise Invoke-WebRequest en arrière-plan. root@kitploit: PS C:\Users\melih curl cmdlet Invoke-WebRequest at command pipeline position 1 Supply values for the following parameters: Uri:...

nuclearpond

Nuclear Pond Nuclear Pond is used to leverage Nuclei in the cloud with unremarkable speed, flexibility, and perform internet wide scans for far less than a cup of coffee. It leverages AWS Lambda as a backend to invoke Nuclei scans in parallel, choice of storing json findings in s3 to query with A...

pwnspoof

pwnSpoof from Punk Security generates realistic spoofed log files for common web servers with customisable attack scenarios. Every log bundle is unique and completely customisable, making it perfect for generating CTF scenarios and for training serials. Can you find the attacker session and build...

stegano

Steganography by bzt Online demo In a nutshell, steganography is the art of hiding messages in another medium in plain sight without people realizing. This implementation reads in images in popular web formats WEBP, PNG, GIF, JPEG, hides the optionally encrypted text in them and saves the result ...

chromepass

Chromepass - Hacking Chrome Saved Passwords and Cookies View Demo · Report Bug · Request Feature Table of Contents About the Project AV Detection Getting started Prerequisites Installation Usage Email Errors, Bugs and Feature Requests Learn More License Demo About The project Chromepass is a...