dynmx

dynmx Prototype dynmx spoken dynamics is a signature-based detection approach for behavioural malware features based on Windows API call sequences. In a simplified way, you can think of dynmx as a sort of YARA for API call traces so called function logs originating from malware sandboxes. Hence,...

android_hid

androidhid Use Android as Rubber Ducky against targeted Android device or PC HID attack using Android Using Android as Rubber Ducky against Android or Windows. This is not a new technique, just a demo how to perform HID attack using Android instead of rubber ducky. For targeted Android device it ...

OMIGOD_cve-2021-38647

OMIGODcve-2021-38647 CVE-2021-38647 é uma vulnerabilidade de RCE não autenticada que afeta o agente OMI como root. Ao executar o payload Altere o HOST Command :Substitua seu comando por Comando aqui. como id, whoami etc Crédito https://github.com/horizon3ai/CVE-2021-38647 Siga-nos Vulnmachines...

KubeStalk

KubeStalk KubeStalk is a tool to discover Kubernetes and related infrastructure based attack surface from a black-box perspective. This tool is a community version of the tool used to probe for unsecured Kubernetes clusters around the internet during Project Resonance - Wave 9. Usage The GIF belo...

claude-bug-bounty

BugHunter صيد مكافآت الاختراق مدعوم بالذكاء الاصطناعي — من الاستطلاع إلى التقرير، داخل جهازك الطرفي. إعداد مجاني · بدء سريع · الأوامر · ما يجده · التثبيت · الأسئلة الشائعة !BUGHUNTER — خط أنابيب أتمتة مكافآت...

moonwalk

moonwalk Cover your tracks during Linux Exploitation / Penetration Testing by leaving zero traces on system logs and filesystem timestamps. 📖 Table of Contents Introduction Features Installation Usage Contribution License ℹ️ Introduction moonwalk is a 400 KB single-binary executable that can clear...

cbrutekrag

cbrutekrag Penetration tests on SSH servers using dictionary attacks. Written in C. brute krag means "brute force" in afrikáans Disclaimer This tool is for ethical testing purpose only. cbrutekrag and its owners can't be held responsible for misuse by users. Users have to act as permitted by loca...

dnsobserver

DNSObserver A handy DNS service written in Go to aid in the detection of several types of blind vulnerabilities. It monitors a pentester's server for out-of-band DNS interactions and sends notifications with the received request's details via Slack. DNSObserver can help you find bugs such as blin...

samsung-android-lpe

Partie 1 : Exécution arbitraire de commandes AT CVE-2026-20980 Les commandes du processeur applicatif AP sont gérées par atdistributor après avoir changé le mode de connexion sur un appareil déverrouillé en utilisant : root@kitploit: AT+SWATD=0 AT+ACTIVATE=0,0,0 AT+SWATD=1 atdistributor vérifie l...

CVE-2023-38829-NETIS-WF2409E_Report

Netis WF2409E यन्त्र रिपोर्ट 1. यन्त्र अवलोकन 1.1 मुख्य विशेषताहरूको तालिका श्रेणी| प्यारामिटर| विवरण ---|---|--- यन्त्र जानकारी| मोडेल| Netis WF2409E | प्रकार| 300Mbps Wireless N Router | बिजली आपूर्ति| DC 9V/500mA | हार्डवेयर संस्करण| V1.8 | PCB संस्करण| PB-7189-M02G-20 | उत्पादन मिति|...

Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to multiple Base OS issues

Summary IBM Watson Speech Services Cartridge is vulnerable to multiple Base OS issues. We have updated the base image used by our Speech Services and the following vulnerabilities have been addressed. Please read the details for remediation below. Vulnerability Details CVEID:CVE-2024-34459...

Security update for the Linux Kernel (Live Patch 10 for SUSE Linux Enterprise 15 SP7)

This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.53.34 fixes various security issues: The following security issues were fixed: CVE-2025-40204,CVE-2026-53224,CVE-2026-53246: sctp: validate cached peer INIT chunk length in COOKIEECHO processing bsc1253437 bsc1270023 bsc1270024...

pftriage

pftriage pftriage is a tool to help analyze files during malware triage. It allows an analyst to quickly view and extract properties of a file to help during the triage process. The tool also has an analyze function which can detect common malicious indicators used by malware. Dependencies pefile...

applepie

applepie, a hypervisor implementation for Bochs Hello! Welcome to applepie! This is a tool designed for fuzzing, introspection, and finding bugs! This is a hypervisor using the Windows Hypervisor Platform API present in recent versions of Windows specifically this was developed and tested on...

msprobe

msprobe About Installing Usage Examples Coming Soon Acknowledgements About Finding all things on-prem Microsoft for password spraying and enumeration. The tool will used a list of common subdomains associated with your target apex domain to attempt to discover valid instances of on-prem Microsoft...

CVE-2019-8781-macOS

CVE-2019-8781 सुरक्षा सलाह CVE-2019-8781 POC विवरण POC प्रक्रिया को root तक बढ़ाता है और एक shell निष्पादित करता है। Exploit वातावरण root@kitploit: - macOS 10.14.6 18G95 यह 10.15.0 से पहले जारी सभी macOS संस्करणों पर काम करना चाहिए - SMEP: चालू - SMAP: बंद - Kernel ASLR slide argv1 में पारित किया...

tiktok-scraper

TikTok Scraper & Downloader Scrape and download useful information from TikTok. No login or password are required This is not an official API support and etc. This is just a scraper that is using TikTok Web API to scrape media and related meta information. Content Features To Do Contribution...

melee

MELEE: A Tool to Detect Ransomware Infections in MySQL Instances Attackers are abusing MySQL instances for conducting nefarious operations on the Internet. The cybercriminals are targeting exposed MySQL instances and triggering infections at scale to exfiltrate data, destruct data, and extort mon...

leprechaun

Leprechaun root@kitploit: .-----. / V \ |...| |.....| .-' '-. .-. .-./ .--. |\ /| .-;.-"-.-;;-, =/ . -;,-;, . .-.-. . / ||'-'|| \ ,'--;.\ .;--' // o \ // --.. o '';,//| || : || |\ ;' \ '.\--' |"""""""|// / ':.// ,/\ | '---'| ||| ; Leprechaun ; ;""|""; \ / | '. vonahisec .' .' / \ '. '-,...

doublehop

Doublehop Esta ferramenta visa auxiliar no uso do PowerShell Remoting / WinRM para executar comandos PowerShell em hosts remotos através da técnica de double hop do WinRM. Esta ferramenta pressupõe que você tem acesso à rede interna e à CLI. Uso root@kitploit: doublehop Usage: -c string Command w...