uddup

UDdup - URLs Deduplication Tool The tool gets a list of URLs, and removes "duplicate" pages in the sense of URL patterns that are probably repetitive and points to the same web template. For example: root@kitploit: https://www.example.com/product/123 https://www.example.com/product/456...

PatrowlHears

Codacy Badge PatrowlHears PatrOwl provides scalable, free and open-source solutions for orchestrating Security Operations and providing Threat Intelligence feeds. PatrowlHears is an advanced and real-time Vulnerability Intelligence platform, including CVE, exploits and threats news. Try it now! T...

Root-My-Galaxy

Root My Galaxy Root My Galaxy es un instalador de un solo clic para combinaciones de modelo y kernel de Samsung explícitamente compatibles. La aplicación en sí se mantiene separada de los offsets de dispositivo, los payloads nativos de explotación y los artefactos de compilación de KernelSU. Últi...

WP2Shell-Scanner

WP2Shell Scanner A command line tool that checks whether a WordPress site is exposed to WP2Shell CVE-2026-63030 and CVE-2026-60137. It reads the WordPress version and REST API surface over read-only requests and reports a verdict. It does not exploit anything. !WARNING For authorised testing only...

gha-lab-83342297e0

Automated research artifact — not the upstream project. This repository is a disposable lab built by an automated harness for a master's thesis at Université Laval on reproducing published GitHub Actions workflow vulnerabilities. It is a verbatim snapshot of monkeytypegame/monkeytype at commit...

CVE-2024-0044

CVE-2024-0044 Overview CVE-2024-0044 is a vulnerability discovered in certain Android applications that allows attackers to escalate privileges by exploiting a flaw in the run-as command. This vulnerability can be exploited by crafting a specific payload that grants unauthorized access to...

gitjacker

gitjacker Gitjacker downloads git repositories and extracts their contents from sites where the .git directory has been mistakenly uploaded. It will still manage to recover a significant portion of a repository even where directory listings are disabled. For educational/penetration testing use...

Exploit for Code Injection in Gitea

🫖 CVE-2026-60004 Gitea Validator A standalone discovery, as...

CVE-2026-76070

CVE-2026-76070: Desbordamiento de búfer en la pila no autenticado previo a la autenticación mediante la contraseña decodificada en Base64 en el login.cgi de Netis NC63 que conduce a RCE Investigador: Özcan Ersan @ozcanpng Estado de divulgación CVE: CVE-2026-76070 Proveedor: Netis Systems Co., Ltd...

dnxfirewall

NOTICE: The license has changed from the CMD version GPLv3. The 'FULL' version current branch is licensed under AGPLv3. Overview DNXFIREWALL™ is an optimized/high performance collection of applications and services to convert a standard linux system into a zone based next generation firewall. The...

0day-Rubbish batch-8-2026-08

0day Rubbish 0day vulnerabilities have become rubbish in the AI era. 🌐 Official Website : https://0day-rubbish.com/blog 🎯 Why This Exists Traditional vulnerability disclosure is broken. It's slow, bureaucratic, and ineffective. In the AI era, we can mass-produce 0days at scale—making individual...

bbrecon

This project is no longer maintained and I took the crawling infrastructure offline. The audience was not big enough to justify maintaining it. Bug Bounty Recon bbrecon is a free Recon-as-a-Service for bug bounty hunters and security researchers. The API aims to provide a continuously up-to-date...

bbrecon

此项目不再维护，我已将爬虫基础设施下线。 由于受众规模不足以证明维护的合理性。 Bug Bounty Recon（bbrecon）是一项免费的“侦察即服务”，专为漏洞赏金猎人和安全研究人员设计。该API旨在持续提供互联网“安全港”攻击面的最新地图，排除范围外的目标。 它附带一个符合人体工程学的CLI和Python库。 重要声明 尽管我们已努力确保bbrecon返回的结果可靠且可信，但本服务及其运营者对您使用所提供数据的行为概不负责。 请仔细检查您的范围，并确保您停留在安全港内。 功能特性 公开项目 - 公开漏洞赏金项目，支持索引和筛选搜索 域名 - 各项目范围内的域名 通知 -...

kali-arm

Kali-ARM Build-Scripts Kali Linux ARM build-scripts. These are the same build scripts that we use to generate the pre-generated official Kali Linux ARM images, found here: https://www.kali.org/get-kali/ There are additional scripts included in this repository, supporting more devices, but these...

PurpleSharp

PurpleSharp Defending enterprise networks against attackers continues to present a difficult challenge for blue teams. Prevention has fallen short; improving detection & response capabilities has proven to be a step in the right direction. However, without the telemetry produced by adversary...

So You Want To Build A Nethunter Kernel

So You Want To Build A Nethunter Kernel Introduction The biggest hurdle for most people who want to set up a Nethunter device is the kernel requirement. Unless your device already has a prebuilt and maintained kernel, then you will be told to build one yourself. There is a lot of documentation on...

Cryptolocker

DISCLAIMER : OUR TOOLS ARE FOR EDUCATIONAL PURPOSES ONLY. DON'T USE THEM FOR ILLEGAL ACTIVITIES. YOU ARE THE ONLY RESPONSABLE FOR YOUR ACTIONS! OUR TOOLS ARE OPEN SOURCE WITH NO WARRANTY AND AS ARE. Cryptolocker Crypto is open source Crypto-Locker. Crypto is developed in Visual C++. It has featur...

Hacking-Tools — Updated!

Hacking Tools A curated list of penetration testing and ethical hacking tools, organized by category. This collection includes Kali Linux tools and other notable utilities. Supporters .png?raw=true Table of Contents 🔍 Information Gathering 🔎 Vulnerability Analysis 💥 Exploitation Tools 📡 Wireless...

CVE-2025-42944

CVE-2025-42944 Due to a deserialization vulnerability in SAP NetWeaver, an unauthenticated attacker could exploit the system through the RMI-P4 module by submitting malicious payload to an open port. The deserialization of such untrusted Java objects could lead to arbitrary OS command execution,...

TryHack3M-Bricks-Heist

objetivo:10.201.6.98 enumeración root@kitploit: nmap -A 10.201.6.98 ya que hay un wordpress con nombre "brick by brick" y el nombre de esta sala es brick, probablemente sea donde podemos encontrar la vulnerabilidad así que enumeremos wordpress root@kitploit: wpscan --url https://bricks.thm...