msfpc

MSFvenom Payload Creator MSFPC A quick way to generate various "basic" Meterpreter payloads via msfvenom part of the Metasploit framework. About MSFvenom Payload Creator MSFPC is a wrapper to generate multiple types of payloads, based on users choice. The idea is to be as simple as possible only...

CVE-2021-3129

CVE-2021-3129 Laravel RCE CVE-2021-3129 بيئة الاختبار root@kitploit: mkdir CVE-2021-3129-docker cd CVE-2021-3129-docker wget https://raw.githubusercontent.com/vulhub/vulhub/master/laravel/CVE-2021-3129/docker-compose.yml docker compose up -d الاستخدام root@kitploit: git clone...

dr_checker

DR.CHECKER : A Soundy Vulnerability Detection Tool for Linux Kernel Drivers This repo contains all the sources, including setup scripts. Now with an Amazing UI to view the warnings along with corresponding source files. Tested on Ubuntu = 14.04.5 LTS Announcements 16 Feb 2018 : DR.CHECKER has bee...

wikipedia-c2

Wikipedia-C2 Wikipedia C2 Blog Post This is a demo project to demonstrate Command and Control utilizing Wikipedia. After Josh Abraham's demo of C2 utilizing Slack and ICMP, I thought I'd explore what other options in the internet's top sites could be used for C2. After reviewing Wikipedia's API, ...

EUVD-2026-71976

Pterodactyl Panel before 1.14.1 fails to validate action-specific permissions in scheduled task creation, allowing subusers with only schedule.update permission to execute arbitrary console commands. Attackers can create and immediately trigger scheduled tasks that run game-server console command...

xc

XC Netcat like reverse shell for Linux & Windows. Features Windows root@kitploit: Usage: └ Shared Commands: !exit !upload uploads a file to the target !download downloads a file from the target !lfwd local portforwarding like ssh -L !rfwd remote portforwarding like ssh -R !lsfwd lists active...

Windows-Privilege-Escalation-Notes

Windows 권한 상승 선호하는 룸은 https://tryhackme.com/room/windows10privesc 이지만, 원하는 것을 사용해도 됩니다. 몇 가지 리소스, https://www.absolomb.com/2018-01-26-Windows-Privilege-Escalation-Guide/ https://sushant747.gitbooks.io/total-oscp-guide/content/privilegeescalationwindows.html...

SharpGmailC2

SharpGmailC2 Notre Gmail convivial agira comme serveur et l'implant exfiltrera des données via SMTP et lira les commandes du C2 Gmail via le protocole IMAP. AVERTISSEMENT : Ce projet ne fonctionne pas contre Windows Defender après le 29 novembre 2022. Cet outil est désormais signé par MS Windows...

hershell

Hershell Simple TCP reverse shell written in Go. It uses TLS to secure the communications, and provide a certificate public key fingerprint pinning feature, preventing from traffic interception. Supported OS are: Windows Linux Mac OS FreeBSD and derivatives Why ? Although meterpreter payloads are...

pythem

pythem - Penetration Testing Framework pythem is a multi-purpose pentest framework written in Python. It has been developed to be used by security researchers and security professionals. The tool intended to be used only for acts within the law. I am not liable for any undue and unlawful act...

ssct

ShadowSocks ConnecTion A wrapper tool for shadowsocks to consistently bypass firewalls. Quick start Automatically connect The easiest way to run this tool is just type ssct in terminal, and ssct will acquire available shadowsocks servers from ishadowsocks and connect to it automatically. Connect ...

CVE-2025-5548

⚡ CVE-2025-5548: Исследование уязвимостей и эксплуатация Этот репозиторий содержит технический анализ и пошаговое руководство по доказательству концепции Proof-of-Concept для CVE-2025-5548. Это исследование охватывает полный жизненный цикл уязвимости: от первоначального анализа бинарного файла до...

CVE-2007-1567

🐞 CVE-2007-1567: خادم FTP War الإصدار 1.65 - تجاوز سعة المخزن المؤقت على المكدس تجاوز سعة المخزن المؤقت التقليدي على المكدس في خادم FTP War الإصدار 1.65 يوضح تنفيذ التعليمات البرمجية عن بعد بالأسلوب القديم من خلال أوامر FTP غير صالحة. 📑 جدول المحتويات لماذا يوجد هذا المستودع لماذا هذه الثغرة مثير...

D-Link - Remote Command Execution

A Remote Command Execution RCE vulnerability exists in all series H/W revisions D-link DIR-810L, DIR-820L/LW, DIR-826L, DIR-830L, and DIR-836L routers via the DDNS function in ncc2 binary file id: CVE-2021-45382 info: name: D-Link - Remote Command Execution author: king-alexander severity: critic...

ncrack

ncrack Ncrack is a high-speed network authentication cracking tool. It was built to help companies secure their networks by proactively testing all their hosts and networking devices for poor passwords. Security professionals also rely on Ncrack when auditing their clients. Ncrack was designed...

CVE-2026-80759

CVE-2026-80759 affects the Linux kernel's Bluetooth HCI AML driver . The function aml_download_firmware() reads two lengths from the firmware header and uses them to build pointers before verifying that the header and segment data are actually present. A truncated or inconsistent firmware image c...

Pentest-Command

Предыстория проекта В процессе пентестинга мы используем различные фреймворки, например: MSF, CS, Empire, Impacket и т.д. Основная цель этого проекта — собрать команды, часто используемые на этапе пост-эксплуатации. Базовые знания Обзор каталогов Windows a、Каталог автозагрузки программc...

gladius

Gladius Easy mode from Responder to Credentials Author: Cory Duplantis @ctfhacker / blog Blog post on Gladius asciicast Gladius provides an automated method for cracking credentials from various sources during an engagement. We currently crack hashes from Responder, secretsdump.py, and...

viper

This repository is archived and development of Viper 1.x is discontinued. A full refactor of the project started withViper 2. Viper is a binary analysis and management framework. Its fundamental objective is to provide a solution to easily organize your collection of malware and exploit samples a...

novahot

novahot novahot is a webshell framework for penetration testers. It implements a JSON-based API that can communicate with trojans written in any language. By default, it ships with trojans written in PHP, ruby, and python. Beyond executing system commands, novahot is able to emulate interactive...