WDExtract

WDExtract Extract Windows Defender database from vdm files and unpack it This program is distributed as-is, without any warranty; No official support, if you like this tool, feel free to contribute. Features Unpack VDM containers of Windows Defender/Microsoft Security Essentials; Decrypt VDM...

KNX-Bus-Dump

KNX Bus Dump KNX es un protocolo popular de automatización de edificios y se utiliza para interconectar sensores, actuadores y otros componentes de un edificio inteligente. Nuestra herramienta KNX Bus Dump utiliza la biblioteca Java Calimero, a la que contribuimos para esta herramienta, para...

CVE-2022-0739

CVE-2022-0739 My take on CVE-2022-0739 BookingPress exploit, based on destr4ct's POC - just prettier. Example Example usage against HackTheBox's MetaTwo machine, which hosts a WordPress with a vulnerable bookingpress plugin version 1.0.10. root@kitploit: python booking-sqlinjector.py -u...

ProcDump-for-Linux

ProcDump ProcDump es una reinvención de la clásica herramienta ProcDump del conjunto Sysinternals para Windows, adaptada para Linux y Mac. ProcDump proporciona una manera conveniente para que los desarrolladores de Linux y Mac creen volcados de núcleo de sus aplicaciones basados en disparadores d...

telegram-history-dump

telegram-history-dump Esta utilidad es la sucesora de telegram-json-backup, escrita desde cero en Ruby. Permite crear copias de seguridad de tus diálogos de usuario y súpergrupos de Telegram utilizando la función de control remoto de telegram-cli. En comparación con el proyecto anterior,...

NativeDump

NativeDump NativeDump permite volcar el proceso lsass usando solo NTAPIs generando un archivo Minidump con solo los streams necesarios para ser analizados por herramientas como Mimikatz o Pypykatz SystemInfo, ModuleList y Memory64List Streams. NTOpenProcessToken y NtAdjustPrivilegeToken para...

AOSP-DownloadProviderDbDumperSQLiLimit

AOSP-DownloadProviderDbDumperSQLiLimit PoC Exploiting SQL Injection in Android's Download Provider in Sort Parameter CVE-2019-2196 Security Advisory Android AOSP Download Provider SQL Injection in Query Sort Parameter CVE-2019-2196 Demo...

github-dorks

Github Dorks Github Search is a quite powerful and useful feature that can be used to search for sensitive data on repositories. Collection of Github dorks can reveal sensitive personal and/or organizational information such as private keys, credentials, authentication tokens, etc. This list is...

CVE-2022-24491

CVE-2022-24491 A Zeek detector for CVE-2022-24491: https://vulners.com/cve/CVE-2022-24491 This detector will generate a notice if it sees a portmap set and dump, an action performed when exploiting CVE-2022-24491. Example: root@kitploit: separator \x09 setseparator , emptyfield empty unsetfield -...

frida-ios-hook

Frida iOS hook 📍 A tool that helps you can easy using frida. It support script for trace classes, functions, and modify the return values of methods on iOS platform. 👉 For Android platform: frida-android-hook 👉 For Intercept Api was encrypted on iOS application: frida-ios-intercept-api Env OS...

WPForce

WPForce - Wordpress Attack Suite ABOUT: WPForce is a suite of Wordpress Attack tools. Currently this contains 2 scripts - WPForce, which brute forces logins via the API, and Yertle, which uploads shells once admin credentials have been found. Yertle also contains a number of post exploitation...

LsassReflectDumping

LsassReflectDumping This tool leverages the Process Forking technique using the RtlCreateProcessReflection API to clone the lsass.exe process. Once the clone is created, it utilizes MINIDUMPCALLBACKINFORMATION callbacks to generate a memory dump of the cloned process. Steps Getting the handle of...

fatal_core_dump

Misterio de Asesinato del Core Dump Fatal Repositorio para generar un sitio web de juego de misterio de asesinato con depuración de core dump. ESTE REPO CONTIENE SPOILERS DEL JUEGO!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!! Puedes jugarlo aquí: https://www.robopenguins.com/fatalcoredump/ Para una entrada ...

TrollDump

TrollDump Injects x64 managed DLL into x64 managed/unmanaged process process must have GUI because we obtain its windows handle using setwindowshook Here as a TROLL, we inject into hidden window taskmgr to do a lsass dump undetected see Test Case section below The injector DLL and injected DLL is...

antivmdetection

Antivmdetection Background A script to help you create templates, which you can use with VirtualBox to make VM detection harder. My first post on the subject was in 2012 and have after that been updated at random times. The blog format might have not been the best way of publishing the informatio...

CVE-2025-8045

CVE-2025-8045 — Arm Mali GPU KCPU Queue UAF A local privilege escalation exploit for CVE-2025-8045 , a use-after-free in the Arm Mali GPU kernel driver kbase. A non-privileged local process races the CSF KCPU queue dump path to free and reclaim a cpuqueue.buffer, turns the dangling allocation int...

DahuaConsole

Dahua Console Version: Pre-alpha Bugs: Indeed TODO: Lots of stuff Install requirements root@kitploit: sudo pip3 install -r requirements.txt Arguments root@kitploit: -h, --help show this help message and exit --rhost RHOST Remote Target Address IP/FQDN --rport RPORT Remote Target Port --proto...

CVE-2022-24497

CVE-2022-24497 A Zeek detector for CVE-2022-24497: https://vulners.com/cve/CVE-2022-24497 Example notices from the testing PCAP: root@kitploit: separator \x09 setseparator , emptyfield empty unsetfield - path notice open 2022-04-13-21-45-25 fields ts uid id.origh id.origp id.resph id.respp fuid...

CVE-2026-25243

CVE-2026-25243 — Redis RESTORE zipmap doble liberación → ejecución remota de código TL;DR. Un payload DUMP malformado pasado a RESTORE desencadena una doble liberación en el cargador de hash-zipmap heredado de Redis. Con jemalloc predeterminado, la doble liberación es silenciosa el servidor sigue...

IRTriage

Triage de Respuesta a Incidentes: Recopilación automatizada de información del sistema valiosa para un Analista Forense. IRTriage se ejecutará automáticamente "Como ADMINISTRADOR" en todas las versiones de Windows excepto WinXP. La fuente original fue Triage-ir v0.851, un script Autoit escrito po...