EITest-tools-scripts-IOCs

IOCs Indicators of Compromise IOCs updated every 30 minutes related to EITest campaigns. The domain stat-dns.com used in EITest's DGA algorithmhas been sinkholed. As a result, the EITest campaign now appears to have been shutdown since 2018-03-15. backend-decipher.py Decodes data transmitted from...

Ruby-On-Rails-Path-Traversal-Vulnerability-CVE-2018-3760-

Ruby On Rails Path Traversal Vulnerability（CVE-2018-3760） 中文版本Chinese version Ruby On Rails is a well-known Ruby Web development framework, which uses Sprockets as a static file server in development environment. Sprockets is a Ruby library that compiles and distributes static resource files. The...

CVE-2006-3392

CVE-2006-3392 Description Webmin before 1.290 and Usermin before 1.220 calls the simplifypath function before decoding HTML, which allows remote attackers to read arbitrary files, as demonstrated using "..%01" sequences, which bypass the removal of "../" sequences before bytes such as "%01" are...

LTESniffer

LTESniffer - An Open-source LTE Downlink/Uplink Eavesdropper LTESniffer is An Open-source LTE Downlink/Uplink Eavesdropper It first decodes the Physical Downlink Control Channel PDCCH to obtain the Downlink Control Informations DCIs and Radio Network Temporary Identifiers RNTIs of all active user...

BeaconEye

BeaconEye Introduction BeaconEye scans running processes for active CobaltStrike beacons. When processes are found to be running beacon, BeaconEye will monitor each process for C2 activity. How it works BeaconEye will scan live processes or MiniDump files for suspected CobaltStrike beacons. In li...

svg_phishing_tools

SVG Security Analysis Toolkit - Tool Documentation This toolkit contains specialized Python tools for analyzing potentially malicious SVG files and detecting security mechanisms. Overview The toolkit consists of four main tools: 1. extract.py - Static analysis for obfuscated URL extraction 2...

jwt-hack

Kit de herramientas para hackear JSON Web Tokens Un kit de herramientas de alto rendimiento para probar, analizar y atacar JSON Web Tokens. Instalación Cargo root@kitploit: cargo install jwt-hack Homebrew root@kitploit: brew install jwt-hack Snapcraft Ubuntu root@kitploit: sudo snap install...

jwt-hack

JSON Web Token Hack Toolkit A high-performance toolkit for testing, analyzing and attacking JSON Web Tokens. Installation Cargo root@kitploit: cargo install jwt-hack Homebrew root@kitploit: brew install jwt-hack Snapcraft Ubuntu root@kitploit: sudo snap install jwt-hack From source root@kitploit:...

vmprotect-research

VMP Devirtualizer - Production Release Generalized VMProtect devirtualizer supporting versions 1.x, 2.x, and 3.x. Standalone CLI tool + Ghidra plugin. Status: ✅ Production Ready | Validation: 22/22 samples 100% | Scope: VMP ≤3.6 3.7+ requires reverse engineering Features Multi-Version Support: VM...

datadome-vm

DataDome VM Analysis Summary This repository documents the first public version of DataDome's in-browser JavaScript virtual machine VM used in their CAPTCHA/interstitial flow. This analysis covers: Bytecode loading and decoding mechanisms VM memory layout and architecture A proof-of-concept...

pybeacon

PyBeacon PyBeacon es una colección de scripts para tratar con el tráfico cifrado de Cobalt Strike. Puede cifrar/descifrar metadatos de beacons, así como analizar tareas cifradas simétricamente. Scripts incluidos Hay una pequeña biblioteca que incluye métodos de cifrado/descifrado, sin embargo se...

snoop

snoop A syscall tracer for Linux, built on eBPF. Like strace but with a live TUI, smart filters, and argument decoding you can actually read. root@kitploit: $ sudo snoop curl https://example.com 0.001 curl1234/1234 openatATFDCWD, "/etc/ssl/certs/ca-certificates.crt", ORDONLY = 4 0.002 curl1234/12...

van-gonography

Hide any type of files inside a image of your choice Table of Contents Features How it works Installation Usage License Contributing File to hide| Cover image| Cover with file hidden ---|---|--- | Features File Hiding: Hide any type of file within an image of your choice, without altering the...

decoder-plus-plus

Decoder++ Decoder++ es una aplicación extensible diseñada para pentesters, desarrolladores de software y cualquier persona que necesite decodificar y codificar datos sin esfuerzo en diversos formatos. Incluye una amplia gama de scripts y códecs preinstalados, decodificación inteligente e...

stack-overflow-poc

CVE-2018-12086 PoC https://nvd.nist.gov/vuln/detail/CVE-2018-12086 https://opcfoundation.org/SecurityBulletins/OPC%20Foundation%20Security%20Bulletin%20CVE-2018-12086.pdf TL;DR: some OPC UA stacks are vulnerable to a stack overflow when decoding specially crafted requests. Build mvn clean package...

DriverBuddyReloaded

Driver Buddy Reloaded Table of Contents Driver Buddy Reloaded Table of Contents Installation Quick Usage Advanced Usage About Driver Buddy Reloaded Finding DispatchDeviceControl Labelling WDM and WDF Structures Finding and Decoding IOCTL Codes Flagging Functions Finding DeviceName Dumping Pooltag...

CVE-2026-63435

Mail (Ruby gem for email generation, parsing, and sending) is vulnerable to email address spoofing via malformed RFC 2047 encoded-words prior to version 2.9.1 . The root cause lies in Mail::Utilities.q_value_decode and Mail::Utilities.b_value_decode in lib/mail/utilities.rb, which used a single S...

CVE-2021-1569

creationtimestamp| type| source ---|---|--- 2026-09-01 20:02:35+00:00| seen| https://t.me/hackingAttack/13351 2026-09-02 01:03:11+00:00| seen| https://t.me/hackingAttack/13351...

cook

COOK An overpowered wordlist generator, splitter, merger, finder, saver, create words permutation and combinations, apply different encoding/decoding and everything you need. Frustration killer! & Customizable! Index Installation Configuration Basic Ranges Param Approach COOK's Ingredients...

CVE-2023-4863

level 1: craft.c - bad.webp root@kitploit: exist: docker 813b6b757038 /webp cd CVE-2023-4863 make -f makefile.unix -B fatal error: jpeglib.h: No such file or directory apt-get update apt-get install libjpeg-dev fatal error: png.h: No such file or directory apt-get install libpng-dev fatal error:...