mimikatz

mimikatz mimikatz is a tool I've made to learn C and make somes experiments with Windows security. It's now well known to extract plaintexts passwords, hash, PIN code and kerberos tickets from memory. mimikatz can also perform pass-the-hash, pass-the-ticket or build Golden tickets. root@kitploit:...

CVE-NetScalerFileSystemCheck

CVE-NetScalerFileSystemCheck This script checks the Citrix Netscaler if it has been compromised by CVE-2019-19781 attacks and collects all file system information. The following files and logs will be checked Latest version 1.13: Template folders for XML files Apache Access logfiles Apache Error...

pip3line

Pip3line Codacy Badge Linux / MacOS Builds Windows Builds Raw bytes manipulation utility, able to apply well known and less well known transformations, quick binary search, network proxy interception and more. Install on Windows: Download the release zip here Remember to install/repair the VS...

CVE-2025-40019-Essiv

CVE-2025-40019-Essiv A PoC for CVE-2025-40019 in ESSIV module. exploit WIP for exploitation, note that scatterlist both req-src and req-dst has pagelink member. pagelink is a way to encode sg table info alongside page pointer as far as I understand: root@kitploit: gdb ptype struct scatterlist typ...

cve-2021-34558

PoC para CVE-2021-34558 root@kitploit: Run the malicious TLS server go run main.go -mode server Run a normal http.Get client call against the server which panics go run main.go -mode client Hay una modificación menor en ./vendor/github.com/refraction-networking/utls/handshakeserver.go para permit...

crypto

Go Cryptography This repository holds supplementary Go cryptography packages. Report Issues / Send Patches This repository uses Gerrit for code changes. To learn how to submit changes to this repository, see https://go.dev/doc/contribute. The git repository is https://go.googlesource.com/crypto...

how2heap

Educational Heap Exploitation This repo is for learning various heap exploitation techniques. We use Ubuntu's Libc releases as the gold-standard. Each technique is verified to work on corresponding Ubuntu releases. You can run apt source libc6 to download the source code of the Libc you are using...

Copy-Fail-CVE-2026-31431-dirty-frag-CVE-2026-43284

रिमोट root@kitploit: git clone https://github.com/6abc/Copy-Fail-CVE-2026-31431-dirty-frag-CVE-2026-43284.git && cd Copy-Fail-CVE-2026-31431-dirty-frag-CVE-2026-43284 && gcc -O0 -Wall -o exp exp.c -lutil && ./exp root@kitploit: git clone...

Security Bulletin: IBM Sterling B2B Integrator and IBM Sterling File Gateway are Vulnerable due to Cryptographic Weakness in IBM Liberty Server ( CVE-2020-36732)

Summary IBM Sterling B2B Integrator and IBM Sterling File Gateway have addressed the cryptographic weakness vulnerability Vulnerability Details CVEID:CVE-2020-36732 DESCRIPTION: The crypto-js package before 3.2.1 for Node.js generates random numbers by concatenating the string "0." with an intege...

curveball

curveball CVE-2020-0601 curveball - वैकल्पिक कुंजी कैलकुलेटर निर्माण विंडोज विजुअल स्टूडियो 2012 या उससे ऊपर, फिर समाधान बनाएं। लिनक्स / यूनिक्स cc altkey.c -lcrypto -o altkey उपयोग उपयोग: altkey ecpubliccertificate.pem ecnewprivatekey.pem उदाहरण root@kitploit: C:\security\curveball\Releasealtkey...

CVE-2017-13253

CVE-2017-13253 كود PoC لثغرة CVE-2017-13253. الشرح الكامل متاح هنا. لاحظ أن الأرقام مختلفة قليلاً عن مقال المدونة، حيث وجدت أن هناك فرصة أكبر لحدوث انهيار crash مع كومة بحجم 0x2000 بالطبع إذا قمت بتشغيله مرات كافية فسوف ينهار على أي حال. لأي أسئلة/مشاكل/تعليقات، يمكنك التواصل معي على تويتر...

psc

PortShellCrypter -- PSC This project - as well as its sister project crash - belongs to my anti-censorship tool-set that allows to setup fully working encrypted shells and TCP/UDP forwarding in hostile censoring environments. It is also useful for forensics to dump data from devices via UART or...

temcrypt

La crittografia di nuova generazione Prova temcrypt sul Web → SDK temcrypt Concentrato sulla protezione di dati estremamente sensibili, temcrypt è un meccanismo avanzato di crittografia evolutiva a più strati che offre complessità scalabile nel tempo ed è resistente ai comuni attacchi a forza...

mks-copy-fail-mitigation

DaemonSet per mitigazione Copy Fail DaemonSet per correggere le vulnerabilità della famiglia Copy Fail su tutti i worker node dei cluster MKS. Contenuto CVE-2026-31431 Copy Fail CVE-2026-43284, CVE-2026-43500, CopyFail2 Dirty Flag CVE-2026-31431 Copy Fail Descrizione della vulnerabilità ID CVE:...

proxmark3-amiimicyou

Istruzioni per il simulatore Amiibo Una copia del wrapper Lua di amiitool è inclusa in client/libluamiibo.so, ma se vuoi compilarlo da solo, segui queste istruzioni: 1. Ottieni il branch lua-lib di amiitool da https://github.com/jamchamb/amiitool/tree/lua-lib. 2. In CMakeLists.txt imposta...

glasgo

Glasgo Ferramenta de Análise Estática O repositório oficial deste projeto foi movido para Github-ttarvis/glasgo. Projeto Esta é uma ferramenta de análise estática escrita em Go para código Go. Ela encontrará problemas de segurança e alguns problemas de correção que podem ter implicações de...

passgen

🔐 passgen — Passwörter vom Terminal aus generieren Ein kleines Go-CLI, das sichere zufällige Passwörter mit flexiblen Zeichensätzen und Ausschlüssen generiert. Verwendet crypto/rand für kryptografisch sichere Zufälligkeit. Wenn keine Zeichensatz-Flags angegeben werden, sind standardmäßig alle...

DamnVulnerableCryptoApp

Warum? Wenn du versuchst, ein bisschen mehr über Krypto zu lernen, entweder weil du wissen willst, wie die Angriffe funktionieren oder weil du sicheren Code schreiben möchtest, tauchst du sehr schnell in die Mathematik hinter den Algorithmen ein, und für viele Menschen ist das ein...

replica

REPLICA DOMA IL DRAGO ✨Funzionalità ⚡ Disassembla le istruzioni mancate - Definisce il codice che l'analisi automatica di Ghidra non ha rilevato ⚡ Rileva e correggi le funzioni mancate - Definisci le funzioni che l'analisi automatica di Ghidra non ha rilevato ⚡ Correggi i tipi di dato 'undefinedN...

CVE-2022-21449-TLS-PoC

CVE-2022-21449-TLS-PoC CVE-2022-21449 nota anche come Psychic Signatures nell'analisi della vulnerabilità di Neil Madden è una Proof of Concept che ne dimostra l'utilizzo con un client vulnerabile e un server TLS dannoso. Il server dannoso presenta una catena di certificati valida al 2022-04-20 p...