pypykatz

🚩 Sponsors If you like this project, consider purchasing licenses of OctoPwn, our full pentesting suite that runs in your browser! For notifications on new builds/releases and other info, hop on to our Discord pypykatz Mimikatz implementation in pure Python. At least a part of it : Runs on all OS...

cariddi

Take a list of domains, crawl urls and scan for endpoints, secrets, api keys, file extensions, tokens and more Coded with 💙 by edoardottt Share on Twitter! Install • Usage • Get Started • Changelog • Contributing • License Installation 📡 Homebrew root@kitploit: brew install cariddi Snap...

hiphp

🚨 New Build Available! WebHole now supports all major web languages. Check it out on GitHub: WebHole on GitHub Hiphp Free & Open Source project for creating a backdoor to control PHP-based websites. ✓ Command Line Interface CLI. ✓ Graphical User Interface GUI. ✓ Web Application. ✓ Python Package....

NetworkAlarm

NetworkAlarm A command-line tool to monitor local network traffic for possible security vulnerabilities. Warns user against possible nmap scans, Nikto scans, credentials sent in-the-clear, credit card numbers sent in-the-clear, and shellshock attacks. Currently supports live monitoring and networ...

FISSURE

FISSURE - The RF Framework Frequency Independent SDR-based Signal Understanding and Reverse Engineering Overview Videos FISSURE Operational Overview | FISSURE Overview Slides ---|--- Introduction FISSURE is an open-source RF framework that supports both operational deployments and research and...

drmemory

Dr. Memory: the memory debugger About Dr. Memory Dr. Memory is a memory monitoring tool capable of identifying memory-related programming errors such as accesses of uninitialized memory, accesses to unaddressable memory including outside of allocated heap units and heap underflow and overflow,...

CVE-2024-27123

CVE-2024-27123 is a cross-site scripting (XSS) vulnerability in QcalAgent , a QNAP component. Local attackers with active user interaction can exploit it to bypass security mechanisms or read application data , resulting in high confidentiality impact and low integrity impact on the vulnerable sy...

CVE-2024-27123 QcalAgent

A cross-site scripting XSS vulnerability has been reported to affect QcalAgent. The local attackers can then exploit the vulnerability to bypass security mechanisms or read application data. We have already fixed the vulnerability in the following version: QcalAgent 1.1.9 and later...

EUVD-2024-55769

A cross-site scripting XSS vulnerability has been reported to affect QcalAgent. The local attackers can then exploit the vulnerability to bypass security mechanisms or read application data. We have already fixed the vulnerability in the following version: QcalAgent 1.1.9 and later...

CVE-2026-74469

creationtimestamp| type| source ---|---|--- 2026-09-18 06:48:42+00:00| seen| https://infosec.exchange/users/harrysintonen/statuses/117290704561368341 2026-09-18 08:13:08+00:00| seen| https://infosec.exchange/users/decio/statuses/117291036654007377...

CVE-2026-80844

creationtimestamp| type| source ---|---|--- 2026-09-18 06:48:41+00:00| seen| https://infosec.exchange/users/harrysintonen/statuses/117290704561368341 2026-09-18 08:13:07+00:00| seen| https://infosec.exchange/users/decio/statuses/117291036654007377...

hackerone-reports

Live site: reddelexc.github.io/hackerone-reports Tops of HackerOne reports. All reports' raw info stored in data.csv. Scripts to update this file are written in Python 3 and require chromedriver and Chromium executables at PATH. Every script contains some info about how it works. The run order of...

ptcpdump

ptcpdump %20e2e %20e2e English | 中文 ptcpdump is a tcpdump-compatible packet analyzer powered by eBPF, automatically annotating packets with process/container/pod metadata when detectable. Inspired by jschwinger233/skbdump. Table of Contents Features Installation Requirements Usage Example command...

staekka

Stækka Metasploit - Extenting Metasploit This Msf plugin extends Metasploit for some missing features and modules allowing interaction with other/custom exploits/ways of getting shell access. The current focus here is Linux/Unix support. Core features TTY support: starting a shell from Metasploit...

NinjaDroid

NinjaDroid NinjaDroid is a simple tool to reverse engineering Android APK packages. Published at: https://snapcraft.io/ninjadroid root@kitploit: $ snap install ninjadroid --channel=beta Overview NinjaDroid uses AXMLParser together with a series of Python scripts based on aapt, keytool, string and...

PANO

PANO - Platform for Analysis and Network Operations PANO is a powerful OSINT investigation platform that combines graph visualization, timeline analysis, and AI-powered tools to help you uncover hidden connections and patterns in your data. Getting Started • Features • Documentation • Contributin...

simplewall

simplewall Definitely for advanced users. Description: Simple tool to configure Windows Filtering Platform WFP which can configure network activity on your computer. The lightweight application is less than a megabyte, and it is compatible with Windows 7 SP1 and higher operating systems. You can...

TuxResponse

TuxResponse v1.1 Linux Incident Response TuxResponse is incident response script for linux systems written in bash. It can automate incident response activities on Linux systems and enable you to triage systems quickly, while not compromising with the results. Usually corporate systems would have...

ProcessStomping

ProcessStomping A variation of ProcessOverwriting to execute shellcode on an executable's section What is it For a more detailed explanation you can read my blog post Process Stomping, is a variation of hasherezade’s Process Overwriting and it has the advantage of writing a shellcode payload on a...

CVE-2026-78547

creationtimestamp| type| source ---|---|--- 2026-09-18 06:40:26+00:00| seen| https://mastodon.social/users/hugovalters/statuses/117290671866759977 2026-09-18 06:50:04+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mvrlbofk672f...