91761 matches found
KVM x86 Zapscape Guest Escape (CVE-2026-64561)
Runs the Zapscape PoC KVM/x86 mmupagezappte recursive-zap UAF with KASLR bypass on a KVM/AMD hypervisor host via /dev/kvm. Default payload starts a reverse TCP shell as root on the host new KittySploit session. Marker-only mode creates /Zapscape for lab verification. !/usr/bin/env python3 --...
KVM ARM64 vGIC-ITS Guest Escape (CVE-2026-46316)
Runs the ITScape PoC vgicitsinvalidatecache double-put UAF on a KVM/arm64 hypervisor host via /dev/kvm. Default payload starts a reverse TCP shell as root on the host new KittySploit session. Marker-only mode creates /ITScape for lab verification. !/usr/bin/env python3 -- coding: utf-8 --...
shodan
Shodan API client for Go A small Shodan API client and CLI bu...
A Combined Feature-Based Framework for Disguise and Spoofing Detection in Face Recognition Systems
Face recognition systems face two distinct, commonly-separated failure modes: spoofing, where an impostor presents a photograph or video of an authorized user, and disguise, where a legitimate user is rejected because their appearance differs from their enrolled template due to accessories, facia...
Windows Download Stager, bitsadmin
bitsadmin transfer + execute hosted EXE/stager legacy Windows !/usr/bin/env python3 -- coding: utf-8 -- from kittysploit import from lib.c2.downloadstagers import buildbitsadmindownloadexec, buildstagerurl class ModulePayload: info = "name": "Windows Download Stager, bitsadmin", "description":...
Kitty Agent Installer Pack
Writes kittyagent.py plus installlinux.sh systemd and/or installwindows.ps1 scheduled task. Controller: listeners/multi/reversehttppolling. from kittysploit import from lib.c2.agentinstaller import buildinstallreadme, buildlinuxinstallsh, buildwindowsschtasksinstallps1, from lib.c2.agentspec impo...
Windows Schtasks Kitty Agent Pack
Writes kittyagent.py and installwindows.ps1 hidden pythonw + schtasks. Complements LOLBAS stagers with durable persistence. Controller: listeners/multi/reversehttppolling. from kittysploit import from lib.c2.agentinstaller import buildinstallreadme, buildwindowsschtasksinstallps1 from...
radmin-vpn-linux v1.0.0
Radmin VPN for Linux Run Radmin VPN on Linux via Wine. Join VPN networks, see peers, play games — all without a Windows VM. I did not build this because it was easier than a VM. I built it because I thought it was easier than a VM. AI-assisted code. Built collaboratively between a human and Claud...
Malicious code in specials-resources-server (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 07bd295669162565e4b75a82a674ae4ee555bd6e5bd1fab67de3093de939ea30 [email protected] is a staged remote-code-execution dropper disguised as an 'Analytics SDK'. Both the package main lib/telemetry.js an...
MAL-2026-13669 Malicious code in specials-resources-server (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 07bd295669162565e4b75a82a674ae4ee555bd6e5bd1fab67de3093de939ea30 [email protected] is a staged remote-code-execution dropper disguised as an 'Analytics SDK'. Both the package main lib/telemetry.js an...
Exploit for SQL Injection in Wordpress
|...
maltrail v3.0
Maltrail Maltrail is a network traffic detection system that identifies communication with known malicious infrastructure and reports selected traffic anomalies. It matches domains, URLs, IP addresses, IP:port pairs, and User-Agent values observed on the network against a set of indicators called...
Gogs PutContents Symlink RCE (CVE-2025-8110)
Exploits CVE-2025-8110 in Gogs .git/config and a PutContents write poisons core.sshCommand for RCE on the following git push. Delivers the configured framework payload reversetcp session by default. Requires an account that can create a repository and the git client binary on the attacker host...
LiteLLM Pre-Auth Blind SQLi (CVE-2026-42208)
CVE-2026-42208 in BerriAI LiteLLM 1.81.16 = version 1.83.7: the proxy virtual-key lookup builds SQL with WHERE v.token = 'token' and interpolates the raw bearer from failed auth logging. Inject via Authorization on LLM routes must NOT start with sk-. Calibrates timing, confirms pgsleep scales, th...
SkillSpector v2.8.2
SkillSpector Security scanner for AI agent skills. Detect vulnerabilities, malicious patterns, and security risks before installing agent skills. Overview AI agent skills used by Claude Code, Codex CLI, Gemini CLI, etc. execute with implicit trust and minimal vetting. Research shows that 26.1% of...
kin v0.5.10
The diff is not the change. AI agents can write a change faster than a team can establish what it touches, whether it reverses an earlier fix, and how far its consequences reach. Git records files and line history. Kin records the software itself as a graph of entities, relations, changes, and...
deadair v0.5.1
Open-source SIEM detection health. Find enabled detections that are blind because their telemetry is missing, stale, late, or schema-incompatible. Runs locally · Read-only · No agent · No telemetry upload Read the technical write-up · Featured in Detection Engineering Weekly Real scan of a...
reverse-skill v1.0.1
reverse-skill Cybersecurity Skills Router · 逆向技能路由包 Navigate the dark waters, sail against the stream. About · Getting Started · Usage · Routing · AI Bootstrap · Contributing 🌐 中文 About If you are an AI Agent, jump toREADMEAI.md and follow the instructions strictly. When an AI agent Claude Code,...