AutoPWN-Suite

AutoPWN Suite AutoPWN Suite is a project for scanning vulnerabilities and exploiting systems automatically. Features CLI Fully automatic scanning and exploitation Detect network IP range without any user input Vulnerability detection based on service versions Web app vulnerability testing LFI, XS...

androidqf

androidqf NOTE: this project is currently not maintained. An independent fork can be found under theMVT Project. androidqf Android Quick Forensics is a portable tool to simplify the acquisition of relevant forensic data from Android devices. Download androidqf Build Executable binaries for Linux,...

wifi-password

wifi-password Obtén rápidamente tu contraseña WiFi y, si es necesario, genera un código QR de tu WiFi para que los teléfonos puedan conectarse fácilmente. Funciona en macOS , Linux y Windows Instalación Instalar usando pip root@kitploit: $ python3 -m pip install --user wifi-password Instalar usan...

threat-dragon

OWASP Threat Dragon OWASP Threat Dragon is a free, open-source, cross-platform threat modeling application. It is used to draw threat modeling diagrams and to list threats for elements in the diagram. Mike Goodwin created Threat Dragon as an open source community project that provides an intuitiv...

smbeagle

root@kitploit: / \ / // / / / // / / / / / ///\ / / / / / / / / / / / / / / // / / / / , / / / // // / / / / // // / // ,// ///||////,// ///, / PRESENTS // SMBeagle SMBeagle is a cross-platform SMB fileshare auditing tool that hunts out all files it can see in the network and reports if...

nray

nray 概述 Nray 是一款免费、平台与架构无关的端口及应用层扫描器。 nray 以分布式方式运行，以加速扫描并从不同视角执行扫描。 基于事件的结果允许在扫描过程中进一步处理信息，例如使用 jq 等工具。 如果您正在寻找用户文档，请查看项目主页。 有关开发和贡献 nray 的信息，请继续阅读。 构建 在 git 检出后，您可以通过调用 go build 来构建项目。 Nray 使用纯 Go 编写，并注意仅选择同样满足此要求的依赖项，因此标准的 Go 安装（加上 git）就足以在任何支持的平台上构建 nray——这意味着也没有 对 libpcap 等库的依赖。 使用 makefile...

CarbonCopy

CarbonCopy A tool which creates a spoofed certificate of any online website and signs an Executable for AV Evasion. Works for both Windows and Linux Prerequisites In order to use it on Linux, please execute commands below: root@kitploit: apt-get install osslsigncode pip3 install pyopenssl...

CVE-2022-24990-POC

CVE-2022-24990-POC Just a POC, not an EXP For Windows systems: use cve-2022-24990.exe For Linux systems: use cve-2022-24990 Very simple to use: -u Single target scan -f Batch scan -t Number of threads, default 20...

XMachOViewer

XMachOViewer Overview XMachOViewer is a Mach-O viewer for Windows, Linux, and macOS. Features Heuristic Scan : Automatically detect various characteristics and anomalies in Mach-O files. String Viewer : Display all readable strings within the Mach-O file. Hex Viewer : Inspect the raw hexadecimal...

Shellcrypt

Shellcrypt A single-file cross-platform quality of life tool to obfuscate a given shellcode file and output in a useful format for pasting directly into your source code. Contributors These are going here because they deserve it An00bRektn github twitter ♥ 0xtejas github Encryption Methods...

XPEViewer

PE file viewer/editor for Windows, Linux and MacOS. Download: https://github.com/horsicq/XPEViewer/releases How to run: https://github.com/horsicq/XPEViewer/blob/master/docs/RUN.md How to build: https://github.com/horsicq/XPEViewer/blob/master/docs/BUILD.md Changelog:...

binlex

...

VISION-ProcMon

About VISION-ProcMon is a tool dedicated for malware analysis and specifically when performing behavioral analysis. VISION-ProcMon is using a combination of the rust and web technologies in order to provide a fast and better visualization of the behavior of a malware after capturing its activity...

RscScan-cve-2025-55182

RscScan - Next.js Server Actions Vulnerability Scanner Professional cross-platform vulnerability scanner for Next.js Server Actions RCE Features • Installation • Usage • Video Demo • Screenshots 🇺🇸 English • 🇮🇷 فارسی • 🇨🇳 简体中文 • 🇷🇺 Русский • 🇩🇪 Deutsch ⚠️ LEGAL DISCLAIMER...

RustHound-CE v2.5.2

RustHound-CE is a cross-platform and cross-compiled BloodHound collector tool written in Rust, making it compatible with Linux, Windows, and macOS. It therefore generates all the JSON files that can be analyzed by BloodHound Community Edition. This version is only compatible with BloodHound...

DDoSia Attack Tool Evolves with Encryption, Targeting Multiple Sectors

The threat actors behind the DDoSia attack tool have come up with a new version that incorporates a new mechanism to retrieve the list of targets to be bombarded with junk HTTP requests in an attempt to bring them down. The updated variant, written in Golang, "implements an additional security...

LogMein LastPass Password Manager Authorization Issues Vulnerability

Logmein LogMeIn LastPass is a cross-platform online password management tool from US-based Logmein. LogMein LastPass Password Manager suffers from an authorization issue vulnerability that originates from forcing the authentication result to be true via a runtime operation, which can bypass the P...

Introducing Microsoft Application Inspector

Modern software development practices often involve building applications from hundreds of existing components, whether they’re written by another team in your organization, an external vendor, or someone in the open source community. Reuse has great benefits, including time-to-market, quality, a...

Microsoft DirectX SDK - Xact.exe Remote Code Execution

Microsoft DirectX SDK - Xact.exe Remote Code Execution + Credits: John Page aka hyp3rlinx + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/MICROSOFT-DIRECTX-SDK-XACT.EXE-TROJAN-FILE-CODE-EXECUTION.txt + ISR: Apparition Security Greetz: indoushka | Eduardo...

pidusage command injection vulnerability

pidusage is a cross-platform tool for monitoring CPU and memory usage. A command injection vulnerability exists in pidusage 1.1.4 and earlier versions. A remote attacker can exploit this vulnerability to execute arbitrary commands...