dirtyZero

dirtyZero A simple customization toolbox that utilizes CVE-2025-24203. Supports iOS 16.0 - iOS 18.3.2. Latest Release • Discord Server • Our Website Installation Please ensure that your device is supported before usage. Refer to the table below. OS Version| Status ---|--- iOS 15 and below|...

Win11Debloat

Win11Debloat Win11Debloat is a lightweight, easy to use PowerShell script that allows you to quickly declutter and customize your Windows experience, no installation required! You can use it to remove pre-installed apps, disable telemetry, remove intrusive interface elements and much more. No nee...

Mandela-Classic

Mandela Rewritten iOS customization app powered by CVE-2022-46689. No jailbreak required. Disclaimer I am not responsible for any damage to your device. Use this app at your own risk. Building instructions root@kitploit: git clone https://github.com/BomberFish/Mandela-Rewritten.git cd Mandela mak...

faraday_plugins

Install root@kitploit: pip install faraday-plugins Commands List Plugins List all plugins and if its compatible with command or/and report Optional params: -cpf / --custom-plugins-folder PATH: If given will also look for custom plugins on that path root@kitploit: faraday-plugins list-plugins Test...

nomore403

NoMore403 nomore403 is a command-line tool for testing HTTP access-control bypasses and parser inconsistencies around 401, 403, and related responses. The tool is designed for practical web security work: bug bounty, penetration testing, security reviews, and regression testing of access-control...

pwndoc

PwnDoc PwnDoc is a pentest reporting application making it simple and easy to write your findings and generate a customizable Docx report. The main goal is to have more time to Pwn and less time to Doc by mutualizing data like vulnerabilities between users. Documentation Installation Data Roles...

Kali-Setup

Script de Personalización de Kali Esta idea del script fue tomada originalmente de g0tmi1k https://github.com/g0tmi1k/os-scripts. No reclamo crédito por la base del script. Dicho esto, he agregado un MONTÓN más de herramientas y corregido muchos errores de la versión original. Mantengo esto y lo...

Mandela-Legacy

Warning! This is being phased out in favour of Mandela Rewritten! Please go there for future updates! Mandela iOS customization app powered by CVE-2022-46689. No jailbreak required. Disclaimer I am not responsible for any damage to your device. Use this app at your own risk. Building instructions...

sh00t

root@kitploit: A Testing Environment for Manual Security Testers Sh00t is a task manager to let you focus on performing security testing provides To Do checklists of test cases helps to create bug reports with customizable bug templates Features: Dynamic Task Manager to replace simple editors or...

changeme

changeme A default credential scanner. About changeme picks up where commercial scanners leave off. It focuses on detecting default and backdoor credentials and not necessarily common credentials. It's default mode is to scan HTTP default credentials, but has support for other credentials. change...

pyt

.. image:: https://travis-ci.org/python-security/pyt.svg?branch=master :target: https://travis-ci.org/python-security/pyt .. image:: https://readthedocs.org/projects/pyt/badge/?version=latest :target: http://pyt.readthedocs.io/en/latest/?badge=latest .. image::...

chiasmodon

Chiasmodon Chiasmodon is an OSINT tool that allows users to gather information from various sources and conduct targeted searches based on domains, Google Play applications, email addresses, IP addresses, organizations, URLs, and more. It provides comprehensive scanning capabilities, customizable...

nodesub

NODESUB Nodesub is a command-line tool for finding subdomains in bug bounty programs. It supports various subdomain enumeration techniques and provides flexible options for customization. Features Perform subdomain enumeration using CIDR notation Support input list. Perform subdomain enumeration...

CVE-2020-8423

CVE-2020-8423 Investigación basada en https://ktln2.org/2020/03/29/exploiting-mips-router/testing-environment hook.c está personalizado especialmente open vmlinux versión 2.6.31...

CVE-2026-12729

The weDocs: AI Powered Knowledge Base, Docs, Documentation, Wiki & AI Chatbot plugin for WordPress is vulnerable to Missing Authorization in versions up to and including 2.3.0. This is due to a missing capability check on the domigration function registered as the wedocsmigratebetterdocstowedocs...

GHSA-53H4-8RC4-F539 Slim has Reflected XSS in the HtmlErrorRenderer

Impact If an application uses HttpException::setTitle and/or setDescription to include untrusted/request-derived data in the error title or description e.g. "No products found matching '$query'.", an attacker could inject arbitrary HTML/JavaScript that executes in the victim's browser when they...

CVE-2026-41837 Spring Data REST Querydsl integration exposes Jackson-hidden persistent fields as filter keys

Spring Data REST's Querydsl integration accepts arbitrary persistent property paths as request-parameter filter keys and does not consider Jackson customizations before handing them to Querydsl. Affected versions: Spring Data REST 3.7.0 through 3.7.19; 4.3.0 through 4.3.16; 4.4.0 through 4.4.14;...

CVE-2026-39980

OpenCTI is an open source platform for managing cyber threat intelligence knowledge and observables. Prior to 6.9.5, the safeEjs.ts file does not properly sanitize EJS templates. Users with the Manage customization capability can run arbitrary JavaScript in the context of the OpenCTI platform...

Introducing Password-Less Provisioning and Atomic Customization for VMs

Akamai Cloud introduces password-less provisioning and atomic customization. Align with Zero Trust by eliminating root passwords and hardening VMs at creation...

From PDB strings to MaaS: Tracking a commodity BadIIS ecosystem used by Chinese-speaking threat

Cisco Talos has uncovered a BadIIS variant -- identifiable by its embedded "demo.pdb" strings -- that functions as commodity malware. This variant is likely sold or shared among multiple Chinese-speaking cybercrime groups that operate under a malware-as-a-service MaaS model for continuous...