agent-skills

Elastic Agent Skills Elastic Agent Skills — built by the people who built Elastic — deliver native platform expertise directly to your AI coding agent. This is the official Agent Skills library, compatible with agentic IDEs such as Cursor, GitHub Copilot, Windsurf, Gemini CLI, and more. Skills...

CVE-2023-27350

CVE-2023-27350 POC for CVE-2023-27350 affecting PaperCut MF/NG Technical Analysis A technical root cause analysis of the vulnerability, indicators of compromise, and internet exposure can be found on our blog: https://www.horizon3.ai/papercut-cve-2023-27350-deep-dive-and-indicators-of-compromise...

RATel

RATel Please do not upload to virustotal ! To prevent RATel from being detected by antivirus, please do not upload the payload to TOTAL VIRUS. Each month I will test myself if the payload gets detected by antivirus. So you’ll have a photo every month to prove RAtel discretion. Description RAT-el ...

CVE-2022-30190

CVE-2022-30190 - Microsoft Support Diagnostic Tool About This script will attempt to create a Microsoft Office document which will remotely execute code. Setup root@kitploit: git clone https://github.com/joshuavanderpoll/CVE-2022-30190.git cd CVE-2022-30190 python3 CVE-2022-30190.py --help Option...

sysbox

简介 Sysbox 是一个开源免费的容器运行时（一种专门的 "runc"），最初由 Nestybox 开发（于 2022 年 5 月被 Docker 收购），它通过两种关键方式增强容器： 增强容器隔离性： 所有容器均启用 Linux 用户命名空间（即容器内的 root 用户在宿主机上没有任何权限）。 虚拟化容器内的部分 procfs 和 sysfs。 隐藏容器内的宿主机信息。 锁定容器的初始挂载等。 使容器能够运行与虚拟机相同的工作负载 ： 借助 Sysbox，容器可以无缝且安全地运行系统级软件，如...

auditpolCIS

auditpolCIS CIS Benchmark testing of Windows SIEM configuration This is an application for testing the configuration of Windows Audit Policy settings against the CIS Benchmark recommended settings. A few points: The tested system was Windows Server 2019, and the benchmark used was also Windows...

octosuite

基于终端的 GitHub 数据分析工具包。 root@kitploit: $ octosuite user torvalds root@kitploit: from pprint import pprint import octosuite user = octosuite.Username="torvalds" exists, profile = user.exists if exists: pprintprofile 安装 root@kitploit: pip install octosuite 用法 TUI（交互式） 启动交互式终端界面： root@kitploit:...

inspector

MCP Inspector A developer tool for inspecting Model Context Protocol MCP servers. It ships as a single package, @modelcontextprotocol/inspector, that provides three ways to inspect a server: Web — a Vite + React + Mantine single-page app with a Node backend. CLI — a scriptable command-line client...

Reverse_HTTPS_Bot

ReverseHTTPSBot 0.8 Description: A python based https remote access trojan for penetration testing. Server is currently NodeJS based Bot Requires: pip install requests pip install pyscreenshot Server Requires: sh setup.sh to generate self signed certificate and key for testing sudo npm install...

CVE-2022-25061

CVE-2022-25061 This script exploits a remote command execution vulnerability under the oalsetIp6DefaultRoute component in the TPLink WR840N router...

BugId

BugId 检测、分析并唯一标识应用程序缺陷。 TL;DR 你是否... 想知道是什么类型的缺陷导致应用程序崩溃？ 想知道某个缺陷是否可能是安全漏洞？ 想弄清楚两次或多次崩溃是否由同一个缺陷引起？ 想要一份包含缺陷分析的人类可读报告？ ……那么 BugId 可能适合你！ 快速设置 要使用 BugId，请下载并安装以下软件： 最新的 Python 2.7.14 最新的 Windows 调试工具 最新的 BugId 版本 如果你使用默认设置安装 Python 和 Windows 调试工具，BugId 应该无需调整任何设置即可运行。你可以将 BugId 解压到本地文件系统的任何位置。 在启动...

minder

| | | | | Installation | Documentation | Releases What is Minder? Minder is an open source platform that helps development teams and open source communities build more secure software, and prove to others that what they’ve built is secure. Minder helps project owners proactively manage their...

FinalRecon

Twitter - Telegram - thewhiteh4t's Blog FinalRecon is an all in one automatic web reconnaissance tool written in python. Goal of FinalRecon is to provide an overview of the target in a short amount of time while maintaining the accuracy of results. Instead of executing several tools one after...

CVE-2021-22205

CVE-2021-22205 GitLab fails to properly verify image files passed to the file parser, leading to command execution. An attacker can craft malicious requests to exploit this vulnerability and execute arbitrary commands on the target system, ultimately taking control of the GitLab server. Since mos...

CVE-2020-27976

CVE-2020-27976 Exploit osCommerce Phoenix CE . This has produced the best results during testing. Newlines in the payload are replaced with spaces before upload. ================== Sources: https://www.tenable.com/cve/CVE-2020-27976 https://herolab.usd.de/security-advisories/usd-2020-0026/...

csf

ArmourBird CSF - Container Security Framework Note: The CSF Client is under active development and is getting converted into GoLang for better performace and architecture Table of Contents 1. About 2. Architecture Diagram 3. APIs-CSF Server 4. Installation/Usage 5. Building Docker Images 6. Sneak...

smtpshell

smtpshell A simple Reverse Shell that can communicate through Gmail SMTP or any other SMTP to evade network restrictions Note: root@kitploit: This reverse shell communicates Via Gmail SMTP or u can use any other smtps as well but Gmail SMTP is valid because most of the companies block unknown...

mySCADA-myPRO-7-Hardcoded-FTP-Username-and-Password

mySCADA myPRO 7 Hardcoded Credentials CVE-2018-11311 https://vulners.com/cve/CVE-2018-11311 https://www.exploit-db.com/exploits/44656/ http://myscada.org/wp-content/uploads/downloads/BOXv7/changelog.txt root@kitploit: Changelog v7.0.46 ----------------- - fix of possible vulnerability as describe...

cve-2025-32463

cve-2025-32463 chroot sudo chroot Execute the command in the selected dir name. Principle This issue was introduced in sudo v1.9.14, which upgraded the matching handling code when the chroot feature is used. This new change modifies the root directory id before matching execution of the chroot...

iCSeeU

This is a suite of tools/PoCs/exploits that can be used iCSee video-call cameras via LAN and maybe non-video call cameras as well. This could easily be used to flash alternative firmwares as a replacement for the SD card update method. Note: Any memory corruption exploit will only work if your...