SkillsGuard

Support Development If SkillsGuard protects your pipeline, consider supporting ongoing research and new detection rules. ETH Donation Wallet 0x11282eE5726B3370c8B480e321b3B2aA13686582 Scan the QR code or copy the wallet address above. Static security scanner for AI agent skill packages. Detects...

CVE-2018-20250-WinRAR-ACE

CVE-2018-20250-WinRAR-ACE Proof of concept code in C to exploit the WinRAR ACE file extraction path CVE-2018-20250. Resources https://research.checkpoint.com/extracting-code-execution-from-winrar/ https://github.com/droe/acefile https://apidoc.roe.ch/acefile/latest/ Dependencies InvertedTomato.Cr...

mitm-proxy

Go MITM Proxy A lightweight, developer-friendly Man‑in‑the‑Middle MITM HTTP/HTTPS proxy written in Go. It supports HTTP/1.1 and HTTP/2, CONNECT tunneling, WebSocket tunneling ws/wss, on‑disk response caching with flexible filters, and live config reloading. Badges Admin Dashboard Preview Overview...

Glass

Glass 如其名，透明而顺滑 一款快速、原生、移动应用优先 的交互式反汇编器。它是针对 Android / iOS 逆向工程工作流程的 IDA Pro 的精神继承者，围绕以下组件构建： smali 用于处理 APK / DEX / smali armv8-encode 用于 AArch64 和 ARMv7（A32 / Thumb）——原生 .so、iOS Mach-O gpui（Zed）用于 GPU 加速的原生 UI redb 用于内容寻址持久化 内置 MCP 服务器，使得任何支持 MCP 的主机（Claude Desktop、Cursor、Zed）都可以直接驱动 Glass...

flan

Flan Scan is a lightweight network vulnerability scanner. With Flan Scan you can easily find open ports on your network, identify services and their version, and get a list of relevant CVEs affecting your network. Flan Scan is a wrapper over Nmap and the vulners script which turns Nmap into a...

ClientInspectorV2

Introduction to ClientInspector v2 Are you in control? - or are some of your core infrastructure processes like patching, antivirus, bitlocker enablement drifting? Or would you like to do advanced inventory , where you can lookup your warranty state against Lenovo or Dell warranty, then keep...

mkdev

mkdev 本地开发的真实 HTTPS —— 带 TUI 和局域网共享。 mkdev 在 .local 上运行受信任的 HTTPS。单个 Go 二进制：证书颁发机构 + 反向代理 + /etc/hosts + mDNS 广播 + 完整的 TUI。 它的不同之处在于： 局域网共享 将路由标记为共享，从手机或同一 Wi-Fi 上的任何设备访问 https://app.local。 TUI，不仅仅是 CLI。 实时路由表、请求日志、证书检查、健康诊断。不带参数运行 mkdev 会进入 TUI。 强化的特权边界。 在任何提权调用之前，对 sudo...

threadfire

threadfire Program uses Thread Hijacking to Inject Native Shellcode into a Standard Win32 Application. I was 15 years old when I made this - please ignore the substandard code. About I developed this small project to continue my experiences of different code injection methods and to allow RedTeam...

CVE-2023-0386

typora-copy-images-to: ./image CVE-2023-0386 Exploit Usage: First : Upload fuse.c and exp.sh to the /tmp directory. You can use scp or python3 -m http.server to upload the file to the target. root@kitploit: scp /Desktop/CVE-2023-0386/exp.sh [email protected]:/tmp scp...

csrf_casdoor

Casdoor – 사이트 간 요청 위조 CSRF 요약 취약점: 동의 없이 비밀번호 변경을 허용하는 /api/set-password의 CSRF. 영향받는 버전: 소프트웨어의 모든 버전이 영향을 받습니다. 현재 패치된 릴리스는 없습니다. CVE: CVE-2023-34927 최신 CVE는 아직 할당되지 않음. 익스플로잇 작성자: Van Lam Nguyen. 테스트 환경: Windows 영향 피해자가 Casdoor에 로그인된 상태에서 사이트 간 POST로 피해자의 비밀번호예: built-in/admin를 변경할 수 있어 계정 탈취로...

BurpCopyIssues

Support Development If this project helps your work, support ongoing maintenance and new features. ETH Donation Wallet 0x11282eE5726B3370c8B480e321b3B2aA13686582 Scan the QR code or copy the wallet address above. BurpCopyIssues Burp Suite extension for browsing, copying, and exporting scan...

vss-fr2system

vss-fr2system 两个小型工具，可将 Windows 上的任意文件读取 漏洞转化为 SYSTEM Shell 。 vssfreeze/ —— 以标准用户 身份创建卷影副本，然后保持其打开状态，以便你有足够时间从中读取 SAM/SECURITY/SYSTEM 配置单元 fr2system/ —— 获取你复制出的配置单元，离线解密本地 NTLM 哈希，并弹出 SYSTEM Shell 配合任何以 SYSTEM 身份运行（或能够读取 \?\GLOBALROOT\Device\HarddiskVolumeShadowCopyN... 路径）的任意文件读取原语，这在默认的...

RsWindowsThingies

RsWindowsThingies Windows Thingies... pero en Rust Herramientas listenmft Observa los cambios de valores de una entrada. root@kitploit: listenmft 0.2.0 Matthew Seyer See the differences in MFT attirbues. USAGE: listenmft.exe OPTIONS FLAGS: -h, --help Prints help information -V, --version Prints...

pmanager

Pmanager Demo Description Store and retrieve your passwords from a secure offline database. Check if your passwords has leaked previously to prevent targeted password reuse attacks. Why develop another password manager ? This project was initially born from my desire to learn Rust. I was tired of...

pmanager

Pmanager Demostración Descripción Almacena y recupera tus contraseñas desde una base de datos local y segura. Verifica si tus contraseñas han sido filtradas anteriormente para evitar ataques de reutilización dirigida de contraseñas. ¿Por qué desarrollar otro gestor de contraseñas? Este proyecto...

pwncat_pwnkit

pwncatpwnkit Introduction The purpose of this module is to attempt to exploit CVE-2021-4034 pwnkit on a target when using pwncat. There is no need to setup any directories, compile any source or even have gcc on the remote target; the pwnkit module takes care of this automatically using the pwnca...

CVE-2026-33017

CVE-2026-33017 Langflow RCE ★ CVE-2026-33017 Langflow Remote Code Execution PoC ★ https://github.com/user-attachments/assets/562fc637-6be1-4ab9-a396-bfad56447af7 Environment Setup Use the following commands to build and run the vulnerable Langflow environment: root@kitploit: docker build -t...

http-mcp-bridge

HTTP MCP Bridge This project implements an HTTP server that acts as a bridge between HTTP/1.1 requests and a remote MCP server, using the mcp python library GitHub. The main purpose of this initiative is to be able to use HTTP security tools to test remote MCP servers using the remote transport...

root-sonim-xp3800

Root Sonim XP3800 Root access for the Sonim XP3800. Two methods are available — choose whichever fits your situation. Root Manager App The Root Manager app exploits CVE-2019-2215 a binder use-after-free kernel vulnerability to gain root directly on the device. No computer, no bootloader unlock, n...

GitSecure

GitSecure About GitSecure GitSecure is a GitHub action that can be used to alert security teams of any exposed API keys for push and pull requests. When files are added or modified on a GitHub repo, this action will be initiated and will start looking for exposed credentials in the system. After...