threatest

Threatest Threatest is a CLI and Go framework for testing threat detection end-to-end. Threatest allows you to detonate an attack technique, and verify that the alert you expect was generated in your favorite security platform. Read the announcement blog post:...

CVE-2016-2098

CVE-2016-2098 Action Pack in Ruby on Rails before 3.2.22.2, 4.x before 4.1.14.2, and 4.2.x before 4.2.5.2 allows remote attackers to execute arbitrary Ruby code by leveraging an application's unrestricted use of the render method. https://vulners.com/cve/CVE-2016-2098 Usage root@kitploit: git clo...

nox-framework

root@kitploit: ███╗ ██╗ ██████╗ ██╗ ██╗ ████╗ ██║██╔═══██╗╚██╗██╔╝ ██╔██╗ ██║██║ ██║ ╚███╔╝ ██║╚██╗██║██║ ██║ ██╔██╗ ██║ ╚████║╚██████╔╝██╔╝ ██╗ ╚═╝ ╚═══╝ ╚═════╝ ╚═╝ ╚═╝ Cyber Threat Intelligence Framework OSINT framework for red teaming, digital forensics, and corporate exposure analysis...

karton

Karton Distributed malware processing framework based on Python, Redis and S3. The idea Karton is a robust framework for creating flexible and lightweight malware analysis backends. It can be used to connect malware analysis systems into a robust pipeline with very little effort. We've been in th...

heapinfo

HeapInfo As pwn lovers, while playing CTF with heap exploitation, we always need a debugger e.g. gdb for tracking memory layout. But we don't really need gdb if we want to see whether the heap layout same as our imagination or not. Hope this small tool helps us exploit easier ;. Why HeapInfo is...

IAGA-Sentinel

IAGA Sentinel The EU AI Act conformity evidence layer for AI agents. Cryptographically signed, replay-verifiable evidence of every action an agent routes through it, structured to support AI Act Article 12 record-keeping and Annex IV documentation. Documentation · Setup in one prompt · Quickstart...

CVE-2024-22275

CVE-2024-22275: Partial File Read in VMware vCenter Server The vCenter Server contains a partial file read vulnerability. A malicious actor with administrative privileges on the vCenter appliance shell may exploit this issue to partially read arbitrary files containing sensitive data. Vendor...

Valid8Proxy

If you find this GitHub repo useful, please consider giving it a star! ⭐️ .png Valid8Proxy is a fast and efficient tool designed for fetching, validating, and storing working proxies HTTP, HTTPS, SOCKS4, SOCKS5, and Mixed. Perfect for web scraping, OSINT, automation, or network testing. 🚀 Run...

ransomware-simulator

QuickBuck - Ransomware Simulator root@kitploit: / \ / / / / / / // // // // // // '// |/ // // // '/ \\,/// ///\// ,/ ///\ Nextron Systems GmbH The goal of this repository is to provide a simple, harmless way to check your AV's protection on ransomware. This tool simulates typical ransomware...

esp32_esp8266_attacks

Ataques Wi-Fi en ESP32/ESP8266 Este repositorio es parte del resultado de una investigación delASSET Research Group. Este repositorio demuestra 3 ataques Wi-Fi contra los populares dispositivos IoT ESP32/8266: Zero PMK Installation CVE-2019-12587 - Secuestro de clientes ESP32/ESP8266 conectados a...

Vxscan

Vxscan 2.0 English | 简体中文 Python3 comprehensive scanning tool, mainly used for sensitive file detection directory scanning and js leak interface, WAF/CDN identification, port scanning, fingerprint/service identification, operating system identification, weak password detection, POC scanning, SQL...

Mass-exploit-CVE-2022-29464

Meow Meow Meow! Just a Mass Exploit based on a Python PoC for WSO2 Carbon Server CVE-2022-29464 Pre-auth RCE bug CVE-2022-29464. Meow Meow Meow? Requirements? Python3 Shodan Zoomeye A Brain What is this tool? This is a mass-autoscan-exploit of CVE-2022-29464 based on the PoC wrote in python by a...

InfraGuard

Red team infrastructure tracker and C2 redirector -- a modern alternative to RedWarden. InfraGuard sits between the internet and your C2 teamserver, validating every inbound request against your malleable C2 profile and blocking anything that doesn't conform. Scanners, bots, and blue team probes...

CVE-2024-51568---CyberPanel-Command-Injection-Nuclei-Template

CVE-2024-51568 - CyberPanel Command Injection PoC A proof-of-concept environment and Nuclei template for testing CVE-2024-51568, a critical pre-authentication command injection vulnerability in CyberPanel. Vulnerability Details CVE: CVE-2024-51568 Severity: Critical CVSS 9.8 Type:...

CVE-2026-41940-PoC-Exploit

🚀 CVE-2026-41940 - Exploit de Bypass de Autenticación en cPanel/WHM Edición cPanel & WHM - Inyección CRLF para Bypass de Autenticación y Secuestro Total de Sesión 📌 Descripción general Este exploit aprovecha CVE-2026-41940 , una vulnerabilidad crítica de bypass de autenticación en cPanel/WHM. Al...

CVE-2023-27524-Apache-Superset-Auth-Bypass-and-RCE

CVE-2023-27524: Apache Superset Auth Bypass and RCE Apache Superset, a widely used open-source tool for data visualization and exploration, has been identified as having potential security weaknesses that could lead to authentication bypass and remote code execution RCE. These vulnerabilities cou...

CVE-2019-19609

Strapi CMS Exploit This exploit targets two vulnerabilities in the Strapi CMS Framework version 3.0.0-beta-17.4 allowing for unauthenticated remote code execution RCE. Vulnerabilities CVE-2019-18818 Weak Password Recovery Mechanism for Forgotten Password CVSS : 9.8 - Critical More details:...

Outpacket

📦 Outpacket ¿Cansado de impacket? Esta chuleta mapea los flujos de trabajo comunes de impacket a sus alternativas modernas Índice Referencia rápida de autenticación 1. Ejecución remota WMI Exec · wmiexec.py DCOM Exec · dcomexec.py Exec basado en servicios · smbexec.py · psexec.py Exec mediante...

CVE-2021-42559

CVE-2021-42559: Command Injection via Configurations in MITRE Caldera Caldera versions =2.8.1 contains multiple startup "requirements" that execute commands when starting the server. Because these commands can be changed via the Rest API, an authenticated user can insert arbitrary commands that...

CVE-2023-32784-EXPLOIT-REPORT

CVE-2023-32784 Exploit Demonstration Project Overview This repository provides a demonstration of CVE-2023-32784, a critical vulnerability found in KeePass versions prior to 2.54. The exploit allows the recovery of the master password through memory dumps, exposing stored credentials. This...