AzureHound

AzureHound Il raccoglitore di dati BloodHound per Microsoft Azure Scarica AzureHound Binari delle release Scarica il binario appropriato per la tua piattaforma da una delle nostre Releases. Rolling Release La rolling release contiene binari precompilati che vengono mantenuti automaticamente...

tlsx

Funzionalità • Installazione • Utilizzo • Eseguire tlsx • Unisciti su Discord Un analizzatore TLS veloce e configurabile focalizzato sulla raccolta e analisi dei dati basati su TLS. Funzionalità Connessione TLS veloce e completamente configurabile Molteplici Modalità per la Connessione TLS...

dirty_sock

dirtysock: Linux Privilege Escalation via snapd In January 2019, current versions of Ubuntu Linux were found to be vulnerable to local privilege escalation due to a bug in the snapd API. This repository contains the original exploit POC, which is being made available for research and education. F...

goblin

libgoblin Documentation https://docs.rs/goblin/ changelog Usage Goblin requires rustc 1.85.0 Rust 2024 edition. Add to your Cargo.toml root@kitploit: dependencies goblin = "0.10" Features awesome crate name zero-copy, cross-platform, endian-aware, ELF64/32 implementation - wow! zero-copy,...

CVE-2026-46371

Fleet (open-source device management platform built on osquery) versions up to 4.84.1 have a vulnerability in the Apple MDM commands endpoint (GET /api/v1/fleet/mdm/apple/commands). An unvalidated user-supplied order_key parameter, passed to a deprecated ORDER BY helper that joins the hosts and n...

EUVD-2026-66671

Fleet is an open-source device management platform built on osquery. In versions up to and including 4.84.1, the Apple MDM commands listing endpoint GET /api/v1/fleet/mdm/apple/commands allowed an authenticated user with the lowest-privilege Observer role to extract sensitive values from joined...

CVE-2026-46371 Fleet: Observer-level enrollment secret extraction via ORDER BY oracle on Apple MDM commands endpoint

Fleet is an open-source device management platform built on osquery. In versions up to and including 4.84.1, the Apple MDM commands listing endpoint GET /api/v1/fleet/mdm/apple/commands allowed an authenticated user with the lowest-privilege Observer role to extract sensitive values from joined...

CVE-2026-46371 Fleet: Observer-level enrollment secret extraction via ORDER BY oracle on Apple MDM commands endpoint

Fleet is an open-source device management platform built on osquery. In versions up to and including 4.84.1, the Apple MDM commands listing endpoint GET /api/v1/fleet/mdm/apple/commands allowed an authenticated user with the lowest-privilege Observer role to extract sensitive values from joined...

CVE-2026-46371 Fleet: Observer-level enrollment secret extraction via ORDER BY oracle on Apple MDM commands endpoint

Fleet is an open-source device management platform built on osquery. In versions up to and including 4.84.1, the Apple MDM commands listing endpoint GET /api/v1/fleet/mdm/apple/commands allowed an authenticated user with the lowest-privilege Observer role to extract sensitive values from joined...

pyrdp

PyRDP PyRDP is a Python Remote Desktop Protocol RDP Monster-in-the-Middle MITM tool and library. It features a few tools: RDP Monster-in-the-Middle Logs plaintext credentials or NetNTLM hashes used when connecting Steals data copied to the clipboard Saves a copy of the files transferred over the...

ret-sync

ret-sync ret-sync sta per Reverse-Engineering Tools SYNChronization. È un insieme di plugin che aiutano a sincronizzare una sessione di debug WinDbg/GDB/LLDB/OllyDbg/OllyDbg2/x64dbg con un disassemblatore IDA/Ghidra/Binary Ninja. L'idea di base è semplice: prendere il meglio da entrambi i mondi...

GitMiner

⚠️ Repository veraltet – Projekt ersetzt Dieses Repository wird nicht mehr gewartet und ist offiziell veraltet. Das Projekt wird aktiv weiterentwickelt unter: https://github.com/unkl4b/Gitminer3 Bitte migrieren Sie zu GitMiner3 , um die neuesten Updates, Verbesserungen und aktiven Support zu...

memguard

MemGuard Software enclave for storage of sensitive information in memory. This package attempts to reduce the likelihood of sensitive data being exposed when in memory. It aims to support all major operating systems and is written in pure Go. Features Sensitive data is encrypted and authenticated...

MISP v2.5.45

MISP - Threat Intelligence Sharing Platform MISP is an open source software solution for collecting, storing, distributing and sharing cyber security indicators and threats about cyber security incidents analysis and malware analysis. MISP is designed by and for incident analysts, security and IC...

sx

sx is the command-line network scanner designed to follow the UNIX philosophy. The goal of this project is to create the fastest network scanner with clean and simple code. 📖 Table of Contents Features Install Build from source Quick Start References Contributing Credits License ✨ Features ⚡ 30x...

TREVORspray

TREVORspray 2.0 TREVORspray è uno spruzzatore di password modulare con threading, proxy SSH, moduli di loot e altro ancora! Di @thetechr0mancer Installazione: root@kitploit: pip install git+https://github.com/blacklanternsecurity/trevorproxy pip install...

FinalRecon

Twitter - Telegram - thewhiteh4t's Blog FinalRecon is an all in one automatic web reconnaissance tool written in python. Goal of FinalRecon is to provide an overview of the target in a short amount of time while maintaining the accuracy of results. Instead of executing several tools one after...

stride-gpt

STRIDE GPT is an AI-powered threat modelling tool that leverages Large Language Models LLMs to generate threat models and attack trees for a given application based on the STRIDE methodology. Users provide application details, such as the application type, authentication methods, and whether the...

TinyInst

TinyInst Copyright 2020 Google LLC Licensed under the Apache License, Version 2.0 the "License"; you may not use this file except in compliance with the License. You may obtain a copy of the License at root@kitploit: https://www.apache.org/licenses/LICENSE-2.0 Unless required by applicable law or...

CVE-2026-56547 An input reflection vulnerability affects HCL Traveler

The Apple profile generated for the Apple built-in Mail, Calendar and Contacts account to synchronize with HCL Traveler requires the Logon Name and Mail Address to be embedded in them. The values cannot be changed later on, so the Apple profile generation page asks for those values and reflects...