CVE-2025-54068

CVE-2025-54068 A tool designed to exploit CVE-2025-54068 and Remote Command Execution if the APPKEY of the Livewire project is known. This tool is a recoded version of the original project by Synacktiv : Livepyre — https://github.com/synacktiv/Livepyre The core concept and methodology are based o...

violin

Violin ☤ — Supervised Agentic Hermes Pentest Profile 35 playbooks · 17 references · 13 templates · required execution guard · Hermes-native Violin is a Hermes-native agentic pentest profile for supervised, authorised penetration tests — from reconnaissance through safe exploit validation to...

Nac_Bypass_Agent

Agente de Bypass de Nac Este fragmento de código es un script escrito en Python y diseñado para ejecutarse en Kali Linux. A continuación, se presenta un resumen que explica qué hace cada función: runcommandcommand: Esta función ejecuta el comando que recibe como entrada y devuelve su salida...

yaralyzer

THE YARALYZER Visually inspect all of the regex matches and their sexier, more cloak and dagger cousins, the YARA matches found in binary data and/or text. See what happens when you force various character encodings upon those matched bytes. With colors. Quick Start root@kitploit: pipx install...

ghostport

Ghostport Ghostport is a sophisticated port spoofing tool designed to confuse and mislead port scanners. It's a Rust implementation inspired by the concept of portspoof, offering enhanced performance and flexibility. Features Dynamic Port Emulation : Responds to port scans with a variety of...

CVE-2024-4577-RCE

PHP CGI Argument Injection CVE-2024-4577 RCE 📜 Description In PHP versions 8.1. before 8.1.29, 8.2. before 8.2.20, 8.3. before 8.3.8, when using Apache and PHP-CGI on Windows, if the system is set up to use certain code pages, Windows may use "Best-Fit" behavior to replace characters in command...

goCabrito

goCabrito Super organized and flexible script for sending phishing campaigns. Features Sends to a single email Sends to lists of emails text Sends to lists emails with first, last name csv Supports attachments Splits emails in groups Delays sending emails between each group Support Tags to be...

dnsdiag

DNS Measurement, Troubleshooting and Security Auditing Toolset Have you ever wondered if your ISP is intercepting your DNS traffic? Have you noticed any unusual behavior in your DNS responses, or been redirected to the wrong address and suspected something might be off with your DNS? We offer a...

SystemVulnerabilityChecklist_Project4_Decodelabs

🔐 System Vulnerability Checklist A security assessment and network hardening exercise conducted against a vulnerable Linux target machine. The project focuses on identifying critical vulnerabilities, assessing their impact, and implementing firewall-based mitigation using IPTables. 📌 Project...

pwndbg

pwndbg pwndbg /paʊnˈdiˌbʌɡ/ is a GDB and LLDB plug-in that makes debugging suck less, with a focus on features needed by low-level software developers, hardware hackers, reverse-engineers and exploit developers. It has a boatload of features, see our Features page and CHEATSHEET feel free to prin...

azazel

Azazel A lightweight eBPF-based runtime security tracer purpose-built for malware analysis sandboxes. Drop a sample into an isolated container, and Azazel captures every syscall, file touch, network connection, and suspicious behavior, then hands you a clean JSON stream of everything that happene...

PoshSecFramework

PoshSec Framework For the Scripts and Modules to work, please refer to the below documentation. The PoshSec Framework or PSF is a graphical front end utility for running PowerShell scripts, modules, and cmdlets. The PSF exposes parts of it's interface to PowerShell within the individualized...

foxcage

foxcage Run Firefox in a rootless Podman container for security isolation. Your browser runs with almost no Linux capabilities, in its own user and network namespace, isolated from the host — while still having full GPU acceleration, audio, and DRM support. Why foxcage? Firefox already has a...

fubucker

Fubucker | CVE-2022-1386 - Fusion Builder Herramienta masiva automática para comprobar la vulnerabilidad en CVE-2022-1386 - Fusion Builder install.sh sha1sum install.sh | grep 12345678 md5sum install.sh sha512sum install.sh bash install.sh Instalar JQ Linux : comando apt-get install jq -y Windows...

CVE-2023-22884-Airflow-SQLi

Apache Airflow SQL injection PoC CVE-2023-22884 PoC for CVE-2023-22884 is an Apache Airflow RCE vulnerability affecting versions prior to 2.4.0. The official report description says: Improper Neutralization of Special Elements used in a Command 'Command Injection' vulnerability in Apache Software...

WinDefenderKiller

WinDefenderKiller PermanentDisablefromRegistry C++ Code for Permanently Disabling Windows Defender via Registry Keys Just compile and execute it! And when i restart it: BYOVDWindowsDefenderKiller This module implements a BYOVD Bring Your Own Vulnerable Driver technique to disable Windows Defender...

Cerberus

Cerberus Un potente escáner de vulnerabilidades. El subdominio de fuerza bruta utiliza aioDNS, escaneo asíncrono con asyncio, cubre todos los activos del objetivo para escaneo masivo de vulnerabilidades, recopilación de información de middleware, recopila automáticamente proxies IP, al detectar...

nopowershell

NoPowerShell NoPowerShell is a tool implemented in C which supports executing PowerShell-like commands while remaining invisible to any PowerShell logging mechanisms. This .NET Framework 2 compatible binary can be loaded in Cobalt Strike to execute commands in-memory. No...

watermarks-remover

root@kitploit: | | | || | | |/ |/| || |/ |/ |/ | |/| | | | | | |/ ||| | | | | | \ | | | | | \ | \ | \ | | | || / | | \ watermarks-remover Agent skill + stdlib Python service to strip multi-vendor AI provenance marks from text and files — for privacy and hygiene on content you own. The skill is a...

secure-vault-for-commercial

Secure Vault 📄 Technical paper: SecureVaultTechnicalPaperv3.5.0.pdf · Cite on Zenodo Local-first file encryption for Windows, secured by a physical USB key instead of a password. ⚠️ v3.5.0 includes a breaking security fix — see CHANGELOG.md before updating from an earlier version. Table of Content...