fraud-bridge

Intro fraud-bridge helps bypassing restrictive censorship environments that block direct TCP or UDP connections, by setting up ICMP, NTP or DNS over IPv4 or IPv6 tunnels. It automatically patches TCP MSS option to achieve a non-fragmented stream of packets known as MSS-clamping to gain performanc...

CVE-2022-20128

CVE-2022-20128 Android Debug Bridge adb was vulnerable to directory traversal attacks that could have been mounted by rogue/compromised adb daemons during an adb pull operation. The rogue device: root@kitploit: ./adbdirtrav.py -lp 5111 --content "hello world" --destination-path /etc/proof The...

burp-cc-bridge

CC-Bridge A Burp Suite Montoya API extension that exposes Burp's most useful primitives over a localhost HTTP API so an agentic coding shell Claude Code, OpenAI Codex, etc. can drive Burp from curl. Works on Burp Community. Download Grab the latest release JAR — no clone or build required:...

OnionHop

OnionHop V3 OnionHop V3 is a modern, cross-platform desktop app Windows, macOS and Linux that routes your traffic through Tor. It can run Tor as a local SOCKS proxy or as a system-wide tunnel, automatically pick a working connection strategy for your network with Smart Connect , scan and apply...

wssip

This repository does not have a README...

DVHMA

DVHMA Damn Vulnerable Hybrid Mobile App DVHMA is an hybrid mobile app for Android that intentionally contains vulnerabilities. Its purpose is to enable security professionals to test their tools and techniques legally, help developers better understand the common pitfalls in developing hybrid...

bread

🍞 BREAD BREAD BIOS Reverse Engineering & Advanced Debugger is an 'injectable' real-mode x86 debugger that can debug arbitrary real-mode code on real HW from another PC via serial cable. Introduction BREAD emerged from many failed attempts to reverse engineer legacy BIOS. Given that the vast...

ghidra2frida

ghidra2frida ghidra2frida is a Ghidra Extension that, working as a bridge between Ghidra and Frida, lets you create powerful Ghidra scripts that take advantage of Frida's dynamic analysis engine to improve Ghidra statical analysis features. It supports all platforms supported by Frida Windows,...

esp_wifi_repeater

espwifirepeater A full functional WiFi NAT router and now also a WiFi repeater aka. L2 bridge NEW 2026: 10 years after the first release it has finally become, what it ever pretendend to be:a true WiFi Repeater. In order not to break any existing docs and links, the standard edition still remains...

cheatengine-mcp-bridge

Demo Cheat Engine MCP Bridge Let multibillion $ AI datacenters analyze the program memory for you. Create mods, trainers, security audits, game bots, accelerate RE, or do anything else with any program and game in a fraction of a time. !NOTE Thanks everyone for the stars, much appreciated!...

ProxyBridge

ProxyBridge...

ATAboy

If you don't want to build your own, the hardware can be purchased here: https://obsoletetech.us/products/ataboy-an-open-source-legacy-ide-usb-bridge ATAboy is designed for retro computing enthusiasts, data recovery experts, and archivists. Read and write the oldest of IDE hard drives, without th...

sliver-tor-bridge

sliver-tor-bridge tor-based transport bridge for sliver c2. creates a hidden service and proxies traffic to your sliver server so your real ip is never exposed. what it does sets up a tor hidden service that points to a local http proxy. the proxy forwards everything to sliver's https listener...

AutoSploit

Docker deployment instructions tl;dr Using docker-compose: root@kitploit: git clone https://github.com/NullArray/AutoSploit.git cd Autosploit/Docker docker-compose run --rm autosploit Using just Docker: root@kitploit: git clone https://github.com/NullArray/AutoSploit.git cd Autosploit/Docker If y...

apk-interceptor

apk-interceptor Помощник для оценки Android deeplink, Intent и WebView bridge apk-interceptor — это портативный APK для тестирования Android в рамках авторизованных оценок безопасности приложений. Он помогает инженерам по безопасности проверить, как Android-приложение обрабатывает внешние точки...

CVE-2022-3168-adb-unexpected-reverse-forwards

The reverse tunnel feature in Android Debug Bridge adb was vulnerable as it allowed malicious adb daemons to open connections to arbitrary host/ports and unix domain sockets on the host. Attacker window where the rogue daemon is running: root@kitploit: $ ./adbroguedaemon.py Victim window a GCE VM...

CVE-2025-4602

eMagicOne Store Manager for WooCommerce = 1.2.5 - Unauthenticated Arbitrary File Read The eMagicOne Store Manager for WooCommerce plugin exposes a remote management protocol endpoint ?connector=bridge that allows file deletion operations on the server. The authentication mechanism relies on a...

sqlmap-tamper-api

SQLmap Tamper-API It's an API for SQLmap tamper scripts allows you to use your favorite programming language to write your tamper scripts. This API solves SQLmap limitation of accepting only python to write tamper scripts. How it works taper-api.py script sends the payload and kwargs in a JSON...

pipe-intercept

pipe-intercept Burp 또는 유사한 HTTP 프록시 도구를 사용하여 Windows 명명된 파이프Named Pipes 통신 가로채기 명명된 파이프Named Pipes는 Windows에서 프로세스 간 통신에 매우 널리 사용됩니다. Windows RPCRemote Procedure Call를 포함한 많은 애플리케이션에서 사용됩니다. 이 도구의 목적은 보안 연구원과 침투 테스터가 명명된 파이프를 사용하는 애플리케이션에 대한 보안 평가를 수행할 수 있도록 하는 것입니다. 이 프로젝트는 CyberArk Labs의 훌륭한...

phantap

PhanTap 유령 탭 PhanTap은 레드팀을 위한 '보이지 않는' 네트워크 탭입니다. 대상 건물에 제한된 물리적 접근만으로도 이 탭을 네트워크 장치와 사내 네트워크 사이에 인라인으로 설치할 수 있습니다. PhanTap은 네트워크에서 조용히 동작하며, NACNetwork Access Control 802.1X - 2004가 있는 네트워크에서도 피해자의 트래픽에 영향을 주지 않습니다. PhanTap은 네트워크의 트래픽을 분석하고 자신의 트래픽을 피해자 장치로 위장합니다. 원격 서버로 터널을 구축하여 사용자에게 네트워크 내 발판...