NeuroCore

NeuroCore High-Performance Structural Binary Analysis and Visualization Utility Abstract NeuroCore is a native macOS utility engineered for the structural analysis of binary data through high-velocity visualization. By leveraging General-Purpose Computing on Graphics Processing Units GPGPU via...

beagle

Beagle 1. About Beagle 2. Installation 1. Docker 2. Python Package 3. Configuration 3. Web Interface 1. Uploading Data 2. Browsing Existing Graphs 3. Graph Interface 1. Inspecting Nodes and Edges 2. Expanding Neighbours 3. Hiding Nodes 4. Running Mutators 5. Toggling Node and Edge Types 6...

HikvisionExploiter_fixed

HikvisionExploiter Educational security tool for testing unsecured Hikvision exposures and checking CVE-2021-36260 in authorized environments. ⚠️ Legal and Ethical Warning This project should be used only on systems you own or have explicit permission to test. Scanning/exploitation without...

logdata-anomaly-miner

logdata-anomaly-miner This tool parses log data and allows to define analysis pipelines for anomaly detection. It was designed to run the analysis with limited resources and lowest possible permissions to make it suitable for production server use. Requirements In order to install...

pentestagent

PentestAgent AI Penetration Testing https://github.com/user-attachments/assets/a67db2b5-672a-43df-b709-149c8eaee975 Requirements Python 3.10+ API key for OpenAI, Anthropic, or other LiteLLM-supported provider Install root@kitploit: Clone git clone https://github.com/GH05TCREW/pentestagent.git cd...

cve-2018-1002105

This was modified from https://gravitational.com/blog/kubernetes-websocket-upgrade-security-vulnerability/. All credit goes to the kind folks at Gravitational. The original PoC code was modified to go a bit beyond checking for vulnerability and to actually run a command inside the first container...

CVE-2024-21626

PoC of CVE-2024-21626 Read my full article for detailed explanation here. Related article While investigating CVE-2024–21626 , I discovered an overlooked vulnerability in older versions of Docker and runC. To learn more about what I found, read the following article: “Exploring Hidden...

OpenPetya

OpenPetya A Proof-of-Concept bootkit and UEFI boot application inspired by Petya ransomware, written in Assembly, C, and C++ If you find this project helpful or informative, I would truly appreciate a ⭐ on the repository. Your support would be a great motivation for me to continue improving this...

Grafxploit

Automated Exploit Tool for Grafana CVE-2021-43798 Overview This project is an automated exploit tool designed to scan for and extract sensitive information from compromised Grafana instances vulnerable to CVE-2021-43798. The tool identifies vulnerable plugins and extracts SSH keys from compromise...

PcapViz

PcapViz PcapViz draws networks as device topologies and as information flows using the packet information in pcap files captured from a network device using tcpcap or other capture software. It filters and optionally displays the captured packets at any one of 3 "layers". These are: device level...

PiKarma

root@kitploit: ██████╗ ██╗██╗ ██╗ █████╗ ██████╗ ███╗ ███╗ █████╗ ██╔══██╗██║██║ ██╔╝██╔══██╗██╔══██╗████╗ ████║██╔══██╗ ██████╔╝██║█████╔╝ ███████║██████╔╝██╔████╔██║███████║ ██╔═══╝ ██║██╔═██╗ ██╔══██║██╔══██╗██║╚██╔╝██║██╔══██║ ██║ ██║██║ ██╗██║ ██║██║ ██║██║ ╚═╝ ██║██║ ██║ ╚═╝ ╚═╝╚═╝ ╚═╝╚═╝...

nox-framework

root@kitploit: ███╗ ██╗ ██████╗ ██╗ ██╗ ████╗ ██║██╔═══██╗╚██╗██╔╝ ██╔██╗ ██║██║ ██║ ╚███╔╝ ██║╚██╗██║██║ ██║ ██╔██╗ ██║ ╚████║╚██████╔╝██╔╝ ██╗ ╚═╝ ╚═══╝ ╚═════╝ ╚═╝ ╚═╝ Cyber Threat Intelligence Framework OSINT framework for red teaming, digital forensics, and corporate exposure analysis...

auditpolCIS

auditpolCIS CIS Benchmark testing of Windows SIEM configuration This is an application for testing the configuration of Windows Audit Policy settings against the CIS Benchmark recommended settings. A few points: The tested system was Windows Server 2019, and the benchmark used was also Windows...

PuttyRider

PuttyRider Hijack Putty sessions in order to sniff conversation and inject Linux commands. Download PuttyRider-bin.zip Documentation Defcamp 2014 presentation - pdf Defcamp 2014 presentation - video Examples List existing Putty processes and their status injected / not injected root@kitploit:...

CVE-2024-10914

CVE-2024-10914 - D-Link Remote Code Execution RCE Exploit This script is a proof-of-concept PoC exploit for CVE-2024-10914, a remote code execution vulnerability in certain D-Link devices. The script identifies and exploits vulnerable devices to execute arbitrary commands. Note: This script shoul...

CVE-2022-22947

CVE-2022-22947 Run: CVE-2022-22947.exe ip command Affected versions: Spring Cloud Gateway 3.1.1 Spring Cloud Gateway 3.0.7 Spring Cloud Gateway other no longer updated versions...

Out-FINcodedCommand

Out-FINcodedCommand v1.0 Introduction Out-FINcodedCommand is a PowerShell v2.0+ compatible PowerShell POC script designed to highlight several obfuscation techniques used by FIN threat actors. The primary obfuscation techniques highlighted in this tool are: 1. cmd.exe's variable char/string...

rz-ghidra

rz-ghidra This is an integration of the Ghidra decompiler and Sleigh Disassembler for Rizin. It is solely based on the decompiler part of Ghidra, which is written entirely in C++, so Ghidra itself is not required at all and the plugin can be built self-contained. This project was presented,...

Heartexploit

Heartexploit Here is my new first exploit, this exploit attacks the HeartBleed vulnerability CVE-2014-0160, I hope you like it. This exploit only works on linux since part of it is made in languages not compatible with windows. The only command needed to start this application is: ./Heartexploit....

CVE-2024-46507

The script was tested and built on Ubuntu Server 20.04 LTS, while Kali Linux was used for exploitation and walkthrough. This walkthrough guides you through exploiting the vulnerable server containing CVE-2024-46507 command injection and CVE-2024-46508 authentication bypass vulnerabilities. Initia...