espoofer

espoofer espoofer is an open-source testing tool to bypass SPF, DKIM, and DMARC authentication in email systems. It helps mail server administrators and penetration testers to check whether the target email server and client are vulnerable to email spoofing attacks or can be abused to send spoofi...

NullSection

NullSection NullSection is an Anti-Reversing tool that applies a technique that overwrites the section header with nullbytes. Install root@kitploit: git clone https://github.com/MatheuZSecurity/NullSection cd NullSection gcc nullsection.c -o nullsection ./nullsection Advantage When running...

pulledpork

PulledPork PulledPork for Snort and Suricata rule management from Google code Find us on Libera.Chat IRC pulledpork Copyright C 2009-2021 JJ Cummings, Michael Shirk and the PulledPork Team! Thank you for choosing to use PulledPork! This file provides some basic guidance on the usage of PulledPork...

dns-rebinding-tool

Inspired by @tavisio This project is meant to be an All-in-one Toolkit to test further DNS rebinding attacks and my take on understanding these kind of attacks. It consists of a web server and pseudo DNS server that only responds to A queries. The root index of the web server allowes to configure...

onionjuggler

OnionJuggler Feature-rich onion service manager for UNIX-like operating systems written in POSIX compliant shellscript OnionJuggler is a minimal requirement, portable collection of scripts and documentation to help the service operator juggle manage his onions. WARNING:do not trust this repo yet,...

shotlooter

Introduction Shotlooter tool is developed to find sensitive data inside the screenshots which are uploaded to https://prnt.sc/ via the LightShot software by applying OCR and image processing methods. root@kitploit: +-------------------+ IMAGE FILE |!/usr/bin/python | +--------------------+ |...

CVE-2024-31317-PoC-Deployer

CVE-2024-31317-PoC-Deployer A deployment tool for CVE-2024-31317 proof-of-concept exploit targeting Android 9 through 13 devices. 📝 Project Description CVE-2024-31317-PoC-Deployer is an automated deployment script for quickly generating and configuring all the files required for exploiting...

Overflow-Demo-CVE-2017-11882

Overflow-Demo-CVE-2017-11882 عرض توضيحي بسيط لتجاوز سعة الذاكرة عبر نسخ نص باستخدام strcpy، مثل استغلال CVE-2017-11882 البناء البناء باستخدام Visual Studio 2017 الإصدار 2019 يعمل أيضًا، بينما الإصدار 2015 لا يعمل. إعدادات المشروع root@kitploit: Project setting: c/c++ Optimization Optimization:...

React2Shell-CVE-2025-55182-Testing-Environment

React2Shell CVE-2025-55182 Testing Environment A containerized testing environment for CVE-2025-55182, a critical 10.0 CVSS Remote Code Execution vulnerability in React Server Components. ⚠️ WARNING This environment is intentionally vulnerable and should ONLY be used for: Security research and...

CVE-2024-46507

यह स्क्रिप्ट Ubuntu Server 20.04 LTS पर परीक्षित और निर्मित की गई थी, जबकि Kali Linux का उपयोग शोषण और वॉकथ्रू के लिए किया गया था। यह वॉकथ्रू आपको CVE-2024-46507 कमांड इंजेक्शन और CVE-2024-46508 प्रमाणीकरण बायपास कमजोरियों वाले असुरक्षित सर्वर के शोषण की प्रक्रिया बताता है। प्रारंभिक टोही पहले,...

lst2x64dbg

lst2x64dbg This command extracts all the labels found in the LST file that is given as the single argument. An x64dbg database is created in the current directory based on the extracted labels. The LST file can be generated in IDA from the File menu: Produce file - Create LST file... Example...

CVE-2022-30216

CVE-2022-30216 A Zeek package which raises notices for attempts and exploits of CVE-2022-30216, a technique used against Windows Server to force an NTLM authorization to an arbitrary server. An attacker can reuse the NTLM token to generate a client certificate, enabling them to request a Kerberos...

CVE-2018-12613-phpMyAdmin

CVE-2018-12613-phpMyAdmin This article will share a file inclusion vulnerability in phpMyAdmin version 4.8.1, explaining from configuration to principle, and then to vulnerability reproduction. More importantly, it helps everyone understand the knowledge behind these real vulnerabilities. A basic...

uBlock v1.74.1b3

uBlock Origin uBO Browser| Install from ...| Status ---|---|--- | Firefox Add-ons| uBO works best on Firefox | E...

CVE-2026-48282

CVE-2026-48282-POC CVE-2026-48282 est une vulnérabilité de path traversal dans le Remote Development Service RDS d'Adobe ColdFusion avec un score CVSS de 10.0 Critique. Elle permet à des attaquants non authentifiés de lire et d'écrire des fichiers arbitraires via le point d'accès...

SecretFinder

about SecretFinder SecretFinder is a python script based on LinkFinder, written to discover sensitive data like apikeys, accesstoken, authorizations, jwt,..etc in JavaScript files. It does so by using jsbeautifier for python in combination with a fairly large regular expression. The regular...

phonepe-sensitive-data-exposure-cve-2025-5154

-تخزين محلي غير آمن لبيانات المستخدم الحساسة في تطبيق PhonePe لنظام أندرويد غير مصحح- اكتشف بواسطةhc4 تاريخ التقرير: أبريل 2025 حالة CVE: CVE مطلوب معلق طلب CVE 1862785 لمعرف CVE 📌 نظرة عامة تم اكتشاف ثغرة محلية حرجة في تطبيق PhonePe لنظام أندرويد تم اختباره على الإصدار v25.03.21.0، حيث يتم تخزين...

CVE-2023-0386

README root@kitploit: gcc -Wall exp.c pkg-config fuse --cflags --libs -o exp ./exp /tmp Vulnerability Analysis The theoretical knowledge in this article namespaces, overlay filesystem, fuse filesystem, etc. comes from ChatGPT. Vulnerability Overview Vulnerability ID: CVE-2023-0386 Vulnerable...

pfBlockerNg-CVE-2022-40624

pfBlockerNg-CVE-2022-40624 Background pfBlockerNG is the Next Generation of pfBlocker with the following features: 1. Manage IPv4/v6 List Sources into 'Deny, Permit or Match' formats. 2. GeoIP database by MaxMind Inc. GeoLite2 Free version. 3. De-Duplication, Suppression, and Reputation...

X-force

IBM X-Force Exchange library | IBM Security X-FORCE Exchange library in Python 3. Search: threatactivities, threatgroups, malwareanalysis, collector and industries. For others applications. See ---|--- Install root@kitploit: pip3 install XForce Use Using you APIKEY make a basic authentication. Se...