Get-RBCD-Threaded

Get-RBCD-Threaded Tool to discover Resource-Based Constrained Delegation attack paths in Active Directory Environments Based almost entirely on wonderful blog posts "Wagging the Dog: Abusing Resource-Based Constrained Delegation to Attack Active Directory" by Elad Shamir and "A Case Study in...

pixiewps

Overview Pixiewps is a tool written in C used to bruteforce offline the WPS PIN exploiting the low or non-existing entropy of some software implementations, the so-called "pixie-dust attack" discovered by Dominique Bongard in summer 2014. It is meant for educational purposes only. As opposed to t...

PowerShell-Red-Team

PowerShell-Red-Team-Enum Collection of PowerShell functions a Red Teamer may use to collect data from a machine or gain access to a target. I added ps1 files for the commands that are included in the RedTeamEnum module. This will allow you to easily find and use only one command if that is all yo...

knob

README Dépôt concernant les attaques Key Negotiation Of Bluetooth KNOB sur Bluetooth BR/EDR et Bluetooth Low Energy. Travaux connexes From the Bluetooth Standard to Standard-Compliant 0-days HWIO20 Key Negotiation Downgrade Attacks on Bluetooth and Bluetooth Low Energy TOPS20 Bluetooth blues: KNO...

supply-chain-guard

Supply Chain Guard SCG Un kit de réponse aux incidents pour les attaques sur la chaîne d'approvisionnement npm/yarn et Python pip/poetry/uv — gratuit, local, sans dépendances. SCG n'est pas un moteur d'analyse qui concurrence les outils commerciaux en termes de couverture. C'est une compétence...

CVE-2026-85040 ZhongBangKeJi CRMEB Custom Scheduled Task Feature save eval os command injection

ZhongBangKeJi CRMEB (up to 6.0.0 ) is vulnerable to OS command injection in the Custom Scheduled Task feature. The eval function in /adminapi/system/crontab/save unsafely processes the customCode argument, allowing remote attackers to inject operating-system commands. The vendor documents this as...

kube-alien

Kube-alien This tool launches attack on k8s cluster from within. That means you already need to have an access with permission to deploy pods in a cluster to run it. After running the kube-alien pod it tries to takeover cluster's nodes by adding your public key to node's /root/.ssh/authorizedkeys...

kube-alien

Kube-alien Cet outil lance une attaque sur un cluster k8s depuis l'intérieur. Cela signifie que vous devez déjà avoir un accès avec les autorisations nécessaires pour déployer des pods dans un cluster afin de l'exécuter. Après avoir exécuté le pod kube-alien, il tente de prendre le contrôle des...

WarChild

War Child Warchild is a denial of service testing suite made for analysing the strength of your website against different kinds of denial of service attacks you will be facing which are mainly organised by crooks to cause damage to your website.. Installation root@kitploit: For Installing the...

Anvil

Runtime-first privilege escalation and attack surface assessment for Windows thick clients. Anvil is a runtime-first privilege escalation and attack surface assessment tool for Windows thick client applications. Rather than scanning the filesystem blindly, it pairs Procmon capture with Windows...

mousejack_transmit

This is code extending the mousejack tools https://github.com/RFStorm/mousejack. Replay/transmit tools have been added to the original tools. POC packets based on a Logitech Wireless Combo MK220 which consists of a K220 wireless keyboard and an M150 wireless mouse are included in the logs folder...

amlsec

Automated Security Risk Identification in Cyber-Physical Production Systems Using AutomationML-Based Engineering Data This prototype implements the methods presented in the following two publications: 1. Eckhart, M., Ekelhart, A., & Weippl, E. R. 2020. Automated Security Risk Identification Using...

amlsec

Identification automatisée des risques de sécurité dans les systèmes de production cyber-physiques à l'aide de données d'ingénierie basées sur AutomationML Ce prototype implémente les méthodes présentées dans les deux publications suivantes : 1. Eckhart, M., Ekelhart, A., & Weippl, E. R. 2020...

OMLASP

OMLASP root@kitploit: | | | | | | || | | || | | | | | | | | OMLASP - Open Machine Learning Application Security Project is intended to become a standard for auditing Machine Learning algorithms. It will not only focus on the security of the algorithms but also on their biases. Typically, when...

h4rpy

h4rpy h4rpy is an automated WPA/WPA2 PSK attack tool, wrapper of aircrack-ng framework. h4rpy provides clean interface for automated cracking of WPA/WPA2 PSK networks. h4rpy enables monitor mode on selected wireless interface, scans the wireless space for access points, tries to capture WPA/WPA2...

CVE-2026-31431-copy-fail

Copy Fail Большинство LPE-эксплойтов для Linux требуют окна гонки или специфичного для ядра смещения. Copy Fail — это прямолинейный логический изъян — ему не нужно ни то, ни другое. Один и тот же Python-скрипт размером 732 байта даёт root-права на каждом дистрибутиве Linux, выпущенном с 2017 года...

geoip-attack-map

First and Foremost I do not have much time in my life right now to maintain this project. I undertook this challenge as a means to learn JavaScript, and to improve upon the Python I already knew. I'm sure there are several things I could have done differently in my implementation, and I won't be...

CVE-2026-31431-RCE-Exploit

🔴 CVE-2026-31431 — «Copy Fail» 9-летняя логическая ошибка в ядре Linux, дающая root за секунды Обзор Copy Fail — это уязвимость локального повышения привилегий LPE высокой степени серьёзности в криптографической подсистеме ядра Linux algifaead. Обнаруженная и раскрытая компанией Theori с помощью ...

CVE-2018-25031

CVE-2018-25031 Тесты эксплойтов для CVE-2018-25031 Swagger UI до версии 4.1.3 мог позволить удалённому злоумышленнику проводить атаки с подменой spoofing. Убедив жертву открыть специально сформированный URL, злоумышленник мог использовать эту уязвимость для отображения удалённых...

CVE-2024-40431-CVE-2022-25479-EOP-CHAIN

CVE-2024-40431+CVE-2022-25479 цепочка для EOP АТАКА ТОЛЬКО ДАННЫМИ Один мудрый человек однажды сказал «что аренда слишком чертовски высока» и «отдавай должное там, где это заслужено» — такая благодарность https://x.com/zwclose за находку и публикацию PoC для этих двух багов. Мы reubensammut и Вла...