MaFrida

MaFrida A simple yet powerful Magisk module that automates starting the Frida server on boot and provides a convenient command-line interface to manage different Frida versions on Android. Features Automatically starts frida-server at boot. Easily switch between different Frida versions...

MK4001MTD-USB-Bridge

MK4001MTD USB Bridge RP2040 Pico firmware that bridges a Toshiba MK4001MTD 0.85" SDIO microdrive as a USB Mass Storage device. The MK4001MTD is a 4 GB Microdrive originally used in the Nokia N91 music phone and some other devices, like MP3 players or USB drives, back when flash storage was still...

sub.Monitor

sub.Monitor root@kitploit: Fast & user-friendly subdomain monitoring tool for continous attack surface management. Why? Why opt for sub.Monitor? This program offers easy setup due to its utilization of SQLite for storing all identified domains removing the necessity for prior database management...

tap-ducky

TapDucky - Android USB HID Keystroke Injector TapDucky - Android USB HID Keystroke Injector Open-source DuckyScript runner for rooted Android with USB Gadget ConfigFS support TapDucky lets you create, customize, schedule, and run DuckyScript on Android by emulating a USB keyboard, mouse, or...

reverse_ssh

Reverse SSH Art credit to https://www.instagram.com/smart.hedgehog.art/ Want to use SSH for reverse shells? Now you can. Manage and connect to reverse shells with native SSH syntax Dynamic, local and remote forwarding Native SCP and SFTP implementations for retrieving files from your targets Full...

pentestkoala

Koala is a patched version of the dropbear SSH server that instead of binding to a port opens up reverse shells by connecting to a remote client. This is useful for gaining a pty terminal on an exploited machine and also for secure exfiltration of data via SSH port forwarding. Pivoting can also b...

loader-CVE-2020-14343

loader-CVE-2020-14343 A web application vulnerable to CVE-2020-14343 insecure deserialization leading to command execution in PyYAML package. Writeup: https://github.com/TebbaaX/CTFs/blob/main/HackerNewsBdarija-CTF-2022/loadder/Loader.md...

cve-2019-2215_SH-M08

This is a port of the proof-of-concept code for obtaining root privileges on Android devices with security patches prior to October 2019, ported to AQUOS sense 2 SH-M08. Operating Environment Operation has been confirmed on the following OS versions. To run on other versions or other devices,...

JS-Tap

JS-Tap v3.0.4 This tool is intended to be used on systems you are authorized to attack and for legal and educational purposes. Do not use this tool for illegal purposes, or I will be very angry in your general direction. Changelogs Major changes are documented in the project Announcements:...

dnsx

A fast and multi-purpose DNS toolkit designed for running DNS queries Features • Installation • Usage • Running dnsx • Wildcard • Notes • Join Discord dnsx is a fast and multi-purpose DNS toolkit designed for running various probes through the retryabledns library. It supports multiple DNS querie...

CVE-2023-23924

CVE-2023-23924 Dompdf vulnerable to URI validation failure on SVG parsing · CVE-2023-23924 · GitHub Advisory Database https://github.com/advisories/GHSA-3cw5-7cxw-v5qg Run root@kitploit: Terminal 1 ❯ cd www ❯ php -S 127.0.0.1:9000 -t . Terminal 2 ❯ cd src ❯ php cve202323924.php Check Check the...

redexer

redexer Redexer is a reengineering tool that manipulates Android app binaries. This tool is able to parse a DEX file into an in-memory data structure; to infer with which parameters the app uses certain permissions we name this feature RefineDroid; to modify and unparse that data structure to...

CVE-2024-48762

CVE-2024-48762 Description Command injection vulnerability in /usr/www/application/models/settingscamera.php in FLIR AX8 up to 1.46.16 allows attackers to run arbitrary commands via the value parameter. POC root@kitploit: GET /settings/applyfirmware/;idtest123.txt;/false HTTP/1.1 Host: XXXX...

frieren

Frieren: The micro-framework for security gadgets Description Frieren is a framework for running security tools on OpenWrt routers and Single Board Computers SBCs. It provides a web panel with WiFi management, installable modules, an integrated terminal, and a package manager. The stack is a PHP...

Invoke-TheHash

Invoke-TheHash Invoke-TheHash contains PowerShell functions for performing pass the hash WMI and SMB tasks. WMI and SMB connections are accessed through the .NET TCPClient. Authentication is performed by passing an NTLM hash into the NTLMv2 authentication protocol. Local administrator privilege i...

CVE-2022-46395

Exploit for CVE-2022-46395 The write up can be found here. This is a bug in the Arm Mali kernel driver that I reported in November 2022. The bug can be used to gain arbitrary kernel code execution from the untrusted app domain, which is then used to disable SELinux and gain root. The exploit is...

CVE-2022-4510-WalkingPath

CVE-2022-4510-Binwalk This script allows you to generate exploits for targeting CVE-2022-4510 Binwalk vulnerabilities. The exploits can be used for testing and demonstrations. The supported options include SSH, command execution, and reverse shell. Prerequisites Python 3.x Usage 1. Clone the...

RTI-Toolkit

RTI-Toolkit Remote Template Injection Toolkit Description RTI-Toolkit is an open-source PowerShell toolkit for Remote Template Injection attack. This toolkit includes a PowerShell script named PS-Templator.ps1 which can be used from both an attacking and defensive perspective. The following table...

Apkx-Hunter

APKX-Hunter v2.7.2 — Debian Package APKX-Hunter is an open-source Android Static Analysis Framework written entirely in C , purpose-built for Android security assessments, reverse engineering, malware analysis, OWASP MASVS compliance scanning, bug bounty hunting, and penetration testing. The...

dorkscout

dorkscout dokrscout is a tool to automate the finding of vulnerable applications or secret files around the internet throught google searches, dorkscout first starts by fetching the dorks lists from https://www.exploit-db.com/google-hacking-database and then it scans a given target or everything ...