trustlock

trustlock A Git-native dependency admission controller. Evaluates trust signals on every dependency change. How it works trustlock runs as a Git pre-commit hook advisory mode and a CI check enforce mode: Advisory pre-commit: warns on violations, exits 0, advances the trusted baseline when all...

santa

Santa Santa is a binary and file access authorization system for macOS. It consists of a system extension that monitors for executions & file access, and makes decisions based on the contents of a local database, a GUI agent that notifies the user in case of a block decision, a background service...

CVE-2020-25540

CVE-2020-25540 ThinkAdmin CVE-2020-25540 poc Since the directory traversal vulnerability is too limited, only the file reading function has been implemented. Please go easy on the criticism, and I appreciate your guidance. The logic is based on the PHP source code; the key is the encryption metho...

mobsfscan

mobsfscan mobsfscan is a static analysis tool that can find insecure code patterns in your Android and iOS source code. Supports Java, Kotlin, Android XML, iOS Info.plist, Swift and Objective C Code. mobsfscan uses MobSF static analysis rules and is powered by semgrep and libsast pattern matcher...

guardian-cli

🔐 Guardian AI-Powered Penetration Testing Automation Platform Guardian is an enterprise-grade AI-powered penetration testing automation framework that combines multiple AI providers OpenAI GPT-4, Claude, Google Gemini, OpenRouter, Requesty with battle-tested security tools to deliver intelligent,...

pyghidra-mcp

PyGhidra-MCP - Ghidra Model Context Protocol Server Overview pyghidra-mcp is a command-line Model Context Protocol MCP server that brings the full analytical power of Ghidra, a robust software reverse engineering SRE suite, into the world of intelligent agents and LLM-based tooling. It bridges...

CVE-2026-43284

🚨 CVE-2026-43284 - Dirty Frag 🚨 Universal Linux Kernel Local Privilege Escalation 📋 Overview Dirty Frag also known as Copy Fail 2 is a high-impact local privilege escalation vulnerability in the Linux kernel. It allows an unprivileged local user to obtain root privileges on affected systems...

nikto

nikto Nikto web server scanner - https://cirt.net/Nikto2 Full documentation - https://github.com/sullo/nikto/wiki Run normally: root@kitploit: git clone https://github.com/sullo/nikto Main script is in program/ cd nikto/program Run using the shebang interpreter ./nikto.pl -h http://www.example.co...

nikto

nikto Nikto escáner de servidores web - https://cirt.net/Nikto2 Documentación completa - https://github.com/sullo/nikto/wiki Ejecutar normalmente: root@kitploit: git clone https://github.com/sullo/nikto Main script is in program/ cd nikto/program Run using the shebang interpreter ./nikto.pl -h...

godoh

🕳 godoh A DNS-over-HTTPS Command & Control Proof of Concept introduction godoh is a proof of concept Command and Control framework, written in Golang, that uses DNS-over-HTTPS as a transport medium. Currently supported providers include Google, Cloudflare but also contains the ability to use...

ChromeAlone

ChromeAlone - A Browser C2 Framework What does this get me? ChromeAlone is a browser implant that can be used in place of conventional implants like Cobalt Strike or Meterpreter. This repo provides a simple build process that will generate a management console, deploy infrastructure, and create a...

CF-Hero

CF-Hero CF-Hero What's it? • Features • Background • Installation • Usage • Running cf-hero • ZoomEye Sponsor • To Do What's it? CF-Hero is a comprehensive reconnaissance tool developed to discover the real IP addresses of web applications protected by Cloudflare. It performs multi-source...

renode

Renode Copyright c 2010-2026 Antmicro ¿Qué es Renode? Renode fue creado por Antmicro como una herramienta virtual de desarrollo para redes embebidas multi-nodo tanto cableadas como inalámbricas y está destinado a permitir un flujo de trabajo escalable para crear sistemas IoT efectivos, probados y...

GraphSpy

GraphSpy root@kitploit: / / by RedByte1337 / / / / | | / / / \ \ \ \ \ | | \ \ \ \ | | \ \ \ | / | | | \ / \ | \ | \ /| | | /|| / / / | / /|| / /|| / Table of Contents GraphSpy Table of Contents Quick Start Installation Execution Usage Features Release Notes Upcoming Features Sponsors...

andor

andor Blind SQL Injection Tool with Golang Usage Download andor.go and go to the folder where the file andor.go located. And type this to command prompt: go run andor.go --url "http://deneme.com/index.php?id=1" Note: Get parameter value must be correct, otherwise it will not work...

url-tracker

URL Tracker v0.5.0 URL Tracker is a robust and scalable web application designed to monitor and track URLs, log changes, and provide detailed insights into the status and behavior of various web resources. Built on top of Sails.js, this application is perfect for tracking URLs for uptime, content...

catphish

CATPHISH Generate similar-looking domains for phishing attacks. Check expired domains and their categorized domain status to evade proxy categorization. Whitelisted domains are perfect for your C2 servers. Perfect for Red Team engagements. Installation root@kitploit: bundle install Current...

catphish

CATPHISH Genera dominios de aspecto similar para ataques de phishing. Verifica dominios expirados y su estado de categorización para evadir la categorización de proxies. Los dominios en lista blanca son perfectos para tus servidores C2. Ideal para compromisos de Red Team. Instalación root@kitploi...

agent

Binary Refinery Skill This repository stores a Claude skill for Binary Refinery. It can augment your malware analysis agent with a number of useful tools for data extraction and transformation. !CAUTION Make sure you are using refinery version 0.10.5 or later. The skill relies on changes to the...

CVE-2025-27636-Apache-Camel-PoC

PoC de Apache Camel CVE-2025–27636 y CVE-2025-29891 CVE-2025–27636 y CVE-2025-29891 son vulnerabilidades en Apache Camel que afectan a las versiones: 4.10.0-4.10.1, 4.8.0-4.8.4, 3.10.0-3.22.3. La explotación de estas vulnerabilidades puede permitir a los atacantes ejecutar métodos internos de...