apk-medit

apk-medit Apk-medit 是一款针对可调试 APK 的内存搜索和补丁工具，无需 root 权限与 NDK。 它专为手机游戏安全测试而设计。 许多手机游戏都有检测 root 的功能，但 apk-medit 不需要 root 权限，因此可以在不绕过 root 检测的情况下进行内存修改。 动机 内存修改是游戏作弊最简单的方法，也是安全测试中需要检查的项目之一。 也有一些像 GameGuardian 这样可随意使用的作弊工具。 然而，针对非 root 设备且支持 CUI 的工具却不存在。因此我将其作为安全测试工具进行了开发。 针对 iOS 应用的版本是...

apk-medit

apk-medit Apk-medit is a memory search and patch tool for debuggable apk without root & ndk. It was created for mobile game security testing. Many mobile games have rooting detection, but apk-medit does not require root privileges, so memory modification can be done without bypassing the rooting...

BDFProxy

¡Nueva versión de BDFProxy disponible! Solo para patrocinadores. Obtén acceso aquí: https://github.com/sponsors/secretsquirrel BLOG: http://secureallthethings.blogspot.com/2017/08/closing-door-end-of-backdoor-factory.html The Backdoor Factory Proxy BDFProxy v0.3.8 Solo para profesionales de...

CVE-2020-0022

CVE-2020-0022 非常感谢 Insinuator 提供的精彩博文和代码！ 结果 Insinuator 博客中提到的所有步骤都已完成，甚至更多。这些步骤太多，无法完整放入 README.md 文件，因此请自行查阅上述 Insinuator 的博文。 该漏洞利用已完成到以下阶段： 1. 泄漏了攻击者控制的足够大的内存区域地址 2. 程序计数器被修改为指向自定义地址 3. 自动重试直到失败概率显著降低 4. 在断开时间和内存搜索速度方面进行了优化，以至于进一步优化会损害漏洞利用的稳定性 差异与改进 此漏洞利用与 Insinuator 的实现有以下不同： 1. 它用 C 语言编写而非...

ioccheck

ioccheck A tool for simplifying the process of researching file hashes, IP addresses, and other indicators of compromise IOCs. Features Look up hashes across multiple threat intelligence services, from a single command or a few lines of Python. Currenty supports the following services: VirusTotal...

pyrasite

.. image:: docs/logo.png pyrasite .. image:: https://api.travis-ci.org/lmacken/pyrasite.png?branch=develop :target: http://travis-ci.org/lmacken/pyrasite .. image:: https://coveralls.io/repos/lmacken/pyrasite/badge.png?branch=develop :target: https://coveralls.io/r/lmacken/pyrasite?branch=develop...

CVE-2018-6789

CVE-2018-6789 环境搭建 安装依赖 root@kitploit: apt-get install gcc net-tools vim gdb python wget git make procps libpcre3-dev libdb-dev libxt-dev libxaw7-dev 下载旧版本的exim root@kitploit: wget ftp://mirror.easyname.at/exim-ftp/exim/exim4/old/exim-4.89.tar.gz tar -xvzf ./exim-4.89.tar.gz cd ./exim-4.89 cp...

w13scan

W13Scan W13scan is an open-source web vulnerability discovery tool based on Python3. It supports active and passive scanning modes and can run on Windows, Linux, and Mac. HTML template source code: w13scan-report Disclaimer Please comply with local laws before using W13Scan. W13Scan is provided f...

Veto

Veto 一款开源的 Android VirusTotal 客户端 免费且开源。自带 VirusTotal API 密钥，即可扫描文件、链接和已安装应用，覆盖超过 70 个引擎，采用 Material 3 界面构建。无需账户、无追踪、无广告。 什么是 Veto？ Veto 是 VirusTotal 的 Android 客户端。提交文件、链接或已安装应用，即可查看实时分析结果。应用会显示清晰的报告，从单一综合判定到服务返回的完整字段集一应俱全。 该项目免费且开源，不包含任何用户账户、追踪系统或广告。由于用户自带 VirusTotal API...

jfscan

!CAUTION ⚠️ 项目已弃用 该项目已使用 Go 重写，以获得更好的性能和功能。 请使用新版本：nullt3r/massmap 描述 核心特性 利用 Masscan 释放 Nmap 的强大能力，进行大规模扫描 使用域名和其他格式扫描目标 以清晰的 domain:port 格式输出结果 使用 stdin/stdout 模式与其他工具流式传输结果 享受 Masscan 自动速率调整带来的无忧扫描 生成 Nmap XML 报告 通过范围控制保持专注并锁定目标 JFScan 是一个包装器，利用 Masscan 的速度和 Nmap 的指纹识别能力。JFScan 接受 URL、域名或 IP（包括...

jfscan

!CAUTION ⚠️ Project Deprecated This project has been rewritten in Go for better performance and features. Please use the new version here: nullt3r/massmap Description Killing features Unleash the power of Nmap with Masscan for large-scale scans Scan targets using domain names and other formats...

Check-LocalAdminHash

Check-LocalAdminHash Check-LocalAdminHash is a PowerShell tool that attempts to authenticate to multiple hosts over either WMI or SMB using a password hash to determine if the provided credential is a local administrator. It's useful if you obtain a password hash for a user and want to see where...

BigBountyRecon

BigBountyRecon BigBountyRecon tool utilises 58 different techniques using various Google dorks and open source tools to expedite the process of initial reconnaissance on the target organisation. Reconnaissance is the most important step in any penetration testing or a bug hunting process. It...

fsociety

fsociety 模块化渗透测试框架 安装 root@kitploit: pip install fsociety 更新 root@kitploit: pip install --upgrade fsociety 用法 root@kitploit: usage: fsociety -h -i -s 渗透测试框架 可选参数： -h, --help 显示帮助信息并退出 -i, --info 获取 fsociety 信息 -s,...

CVE-2026-93371

A security vulnerability has been detected in marcopiovanello yt-dlp-web-ui up to v4. This issue affects the function NewGenericDownload of the file server/internal/downloaders/generic.go. Such manipulation of the argument params leads to command injection. It is possible to launch the attack...

fsociety

fsociety A Modular Penetration Testing Framework Install root@kitploit: pip install fsociety Update root@kitploit: pip install --upgrade fsociety Usage root@kitploit: usage: fsociety -h -i -s A Penetration Testing Framework optional arg...

CVE-2026-93467

The OAKlouds developed by HGiga has a Insecure Deserialization vulnerability. Unauthenticated remote attackers can execute arbitrary code on the server by sending maliciously crafted serialized content...

CVE-2021-31166

CVE-2021-31166: HTTP Protocol Stack Remote Code Execution Vulnerability This is a proof of concept for CVE-2021-31166 "HTTP Protocol Stack Remote Code Execution Vulnerability", a use-after-free dereference in http.sys patched by Microsoft in May 2021. According to this tweet the vulnerability has...

scopeblind-gateway

⚠️ 此仓库已迁移。 后续开发请移至 ScopeBlind/scopeblind-gateway 。 此个人分支可能落后于官方仓库。请使用组织仓库提交问题、拉取请求并获取最新代码。 protect-mcp MCP 服务器安全网关。默认以影子模式记录日志，支持按工具策略、可选的本地 Ed25519 签名收据，以及便于验证的审计输出。 当前 CLI 路径： 将任何 stdio MCP 服务器包装为透明代理。在影子模式下，它会记录所有 tools/call 请求并放行所有内容。添加策略文件以实施按工具规则。运行 protect-mcp init 生成本地签名密钥和配置，以便网关也能输出签名收据。...

Geogramint

Geogramint - OSINT Geolocalization tool for Telegram The End : 06/09/2024 Pavel Durov, the founder and CEO of Telegram, announced the discontinuation of the "People Nearby" feature. The feature has been non-functional for a week. The removal of this feature means that Geogramint and other OSINT...