wesng

Windows Exploit Suggester - Next Generation WES-NG WES-NG is a tool based on the output of Windows' systeminfo utility which provides the list of vulnerabilities the OS is vulnerable to, including any exploits for these vulnerabilities. Every Windows OS between Windows XP and Windows 11, includin...

kalimux

...

CVE-2026-59941 — Updated!

CVE-2026-59942: Dompdf Resource Exhaustion DoS - Proof of Concept Vulnerability Type: Denial of Service DoS via Resource Exhaustion Affected Software: Dompdf = 3.1.5 Credits: Fabian Rosales far00t01. Disclaimer This repository and its content are provided for educational and research purposes onl...

onelinepy

onelinepy Обфускатор Python для FUD Python кода. Загрузка и запуск root@kitploit: git clone https://github.com/spicesouls/onelinepy cd onelinepy chmod +x setup.sh ./setup.sh onelinepy Руководство по использованию root@kitploit: | || | . | | -| | | | -| . | | |Python |||||||||| | |Obfuscator || ||...

onelinepy

onelinepy Python Obfuscator for FUD Python Code. Download & Run root@kitploit: git clone https://github.com/spicesouls/onelinepy cd onelinepy chmod +x setup.sh ./setup.sh onelinepy Usage Guide root@kitploit: | || | . | | -| | | | -| . | | |Python |||||||||| | |Obfuscator || || usage: oneline.py -...

CVE-2020-1066-EXP

Ссылка Эта уязвимость представляет собой локальное повышение привилегий через произвольную замену файлов, вызванную некорректной обработкой службой Windows CardSpace объектов символических ссылок. Заявление Автор предоставляет PoC исключительно в исследовательских целях. Если читатель использует...

HTMLSmuggler

HTMLSmuggler ✉️ HTMLSmuggler - HTML 스머글링을 통한 IDS 우회 및 페이로드 전송을 위한 JS 페이로드 생성기. 설명 HTML 스머글링이 무엇인지에 대한 전체 설명은 여기에서 찾을 수 있습니다. HTML 스머글링의 주요 목표는 실행 파일/아카이브 등과 같은 악성 페이로드를 겉보기에는 무해한 HTML 및 JavaScript 코드 내에 숨겨 방화벽 및 침입 탐지 시스템과 같은 네트워크 보안 제어를 우회하는 것입니다. 웹 애플리케이션의 동적 특성을 악용함으로써 공격자는 보안 경고를 트리거하거나 기존 보안...

CVE-2023-45542

CVE-2023-45542 mooSocial v3.1.8의 검색 기능에 있는 q 매개변수에 반사형 크로스 사이트 스크립팅XSS 취약점이 존재합니다. 이 취약점을 통해 공격자는 조작된 URL을 사용하여 사용자의 세션 쿠키를 탈취하고 계정을 가장할 수 있습니다. 취약한 매개변수: q 익스플로잇 - 개념 증명POC 반사형 크로스 사이트 스크립팅XSS root@kitploit: Payload : test"alert1test FINAL Payload URL encoded :...

soc-investigation-lab

종단 간 SOC 조사 랩 Metasploitable2를 대상으로 4단계 공격 체인정찰 → 악용 → 지속 → 유출을 완전하게 실행하고, 각 단계에서 증거를 수집하며, 구조화된 인시던트 타임라인과 SOC 보고서를 생성합니다 — 공격자와 방어자의 사고를 동시에 보여줍니다. 목표 이것은 캡스톤 프로젝트입니다. 다음 능력을 입증합니다: 의도적으로 취약하게 만든 대상에 대해 현실적인 킬 체인 실행 여러 텔레메트리 소스를 사용해 각 단계에서 포렌식 증거 수집 서로 다른 시스템의 로그 항목을 통합된 인시던트 타임라인으로 상호 연관 가시성 격...

TheFatRat

TheFatRat A Massive Exploiting Tool TheFatRat is an exploiting tool which compiles a malware with famous payload, and then the compiled maware can be executed on Linux , Windows , Mac and Android. TheFatRat Provides An Easy way to create Backdoors and Payload which can bypass most anti-virus...

smb

SMB Пакет Go для взаимодействия по протоколу SMB. В настоящее время реализован лишь минимальный набор функций для клиентской стороны. Вот пример клиента, который устанавливает сеанс с сервером: root@kitploit: package main import "log" "github.com/stacktitan/smb/smb" func main host :=...

fuzztruction

Fuzztruction Fuzztruction is an academic prototype of a fuzzer that does not directly mutate inputs as most fuzzers do but instead uses a so-called generator application to produce an input for our fuzzing target. As programs generating data usually produce the correct representation, our fuzzer...

aws-key-disabler

AWS Lambda - IAM Access Key Disabler The AWS Key disabler is a Lambda Function that disables AWS IAM User Access Keys after a set amount of time in order to reduce the risk associated with old access keys. AWS Lambda Architecture SysOps Output for EndUser Developer Toolchain Current Limitations A...

php_code_analysis

this script will scan your code the script can find 1. checkfileupload issues 2. hostheaderinjection 3. SQl injection 4. insecure deserialization 5. openredirect 6. SSRF 7. XSS 8. LFI 9. commandinjection features 1. fast 2. simple report usage: root@kitploit: python code.py file.php -this will sc...

emba

EMBA The security analyzer for firmware of embedded devices EMBA is designed as the central firmware analysis and SBOM tool for penetration testers, product security teams, developers and responsible product managers. It supports the complete security analysis process starting with firmware...

Heartbleed-PoC-Exploit-Script

Heartbleed-PoC-Exploit-Script Этот скрипт на Python, реализующий Proof-of-Concept PoC, обнаруживает уязвимость Heartbleed CVE-2014-0160 путём выполнения TLS-рукопожатия с расширением heartbeat и отправки специально сформированного heartbeat-запроса. Он анализирует ответы сервера для выявления...

CVE-2026-16723 — Updated!

CVE-2026-16723 Exploit A standalone C++17 implementation for CVE-2026-16723 , a critical vulnerability affecting Fastjson versions 1.2.68 – 1.2.83. Requirements Linux or WSL on Windows C++17 compatible compiler GCC 7+ or Clang 5+ CMake 3.10 or newer System packages: libzip-dev zlib1g-dev Debian /...

CVE-2017-4490-install-Script-Python-in-Terminal-

CVE-2017-4490-установка-скрипта-Python-в-терминале- Что такое CVE-2017-4490 Пост-эксплуатация, == Давайте, моя идея эксплойта, .bashrc в использовании. Многие из идей вредоносны. 1 Установить скрипт webdeilvary в терминале с помощью .bashrc 2 Уничтожить и отображать пугающие тексты в терминале 3...

CVE-2022-42889-text4shell

CVE-2022-42889-text4shell 🔥🔥🔥 Apache commons text — CVE-2022-42889 Text4Shell — эксплойт PoC. Подробности📃 CVE-2022-42889 затрагивает версии Apache Commons Text с 1.5 по 1.9. Патч выпущен в версии Commons Text 1.10. Уязвимость сравнивают с Log4Shell, поскольку это уязвимость на уровне библиотеки ...

Impersonating IT support: how threat actors turn a remote session into enterprise-wide access

In this article 1. Risk to enterprise environments 2. Attack chain overview 3. Mitigation and response recommendations 4. Learn more Microsoft Threat Intelligence has observed a human-operated intrusion campaign that abuses Microsoft Teams external collaboration to impersonate IT or helpdesk...