Bifrost

Bifrost Command and Control What's Bifrost? Bifrost is an open-source Discord BOT that works as Command and Control C2. This C2 uses Discord API for communication between clients and server. Developed with Python, this C2 have multiples features for post-exploitation. How Bifrost works? As...

CVE-2025-43300

CVE-2025-43300: iOS/macOS DNG Image Processing Memory Corruption Overview CVE-2025-43300 is a critical memory corruption vulnerability in Apple's image processing framework that affects iOS 18.6.1 and macOS systems. The vulnerability exists in the JPEG Lossless decompression code within...

krie

KRIe KRIe is a research project that aims to detect Linux Kernel exploits with eBPF. KRIe is far from being a bulletproof strategy: from eBPF related limitations to post exploitation detections that might rely on a compromised kernel to emit security events, it is clear that a motivated attacker...

CVE-2019-11932

CVE-2019-11932 The address of system and the gadget must be replaced by the actual address found by an information disclosure vulnerability. After replacing address of system and gadget. Run the code to generate the corrupted GIF file: root@kitploit: notroot@osboxes:/Desktop/gif$ make...

GhostLock-OPPO-PCKM00

GhostLock — OPPO PCKM00 4.14.180 PoC CVE-2026-43499 GhostLock — Linux kernel futex priority-inheritance use-after-free local privilege escalation PoC, ported to the OPPO PCKM00 OP4A57, SM6150, Android 11, kernel 4.14.180-perf+. DISCLAIMER / 免责声明 This project is for authorized security research an...

CVE-2021-26855_PoC

CVE-2021-26855PoC My early SSRF payloads CVE-2021-26855 over Exchange Server 2019... Payload 1 root@kitploit: curl -i -s -k -X $'GET' -H $'Host: ' -H $'User-Agent: alex666' -H $'Connection: close' -b $'X-AnonResource=true;...

paradoxiaRAT

Paradoxia Remote Access Tool. Are you looking for a GUI alternative? Check outRemote Hacker Probe. More Advanced and Stable with ton of features. Features Paradoxia Console Feature| Description ---|--- Easy to use| Paradoxia is extremely easy to use, So far the easiest rat! Root Shell| - Automati...

jsecret

jsecret simple and fast tool to detect sensitive data in the source code such as javascript files or others install go install -v github.com/raoufmaklouf/jsecret@latest Usage cat jsfiles.txt | jsceret echo http://test.tld/main.js | jsecret Big thank to https://twitter.com/medmahmoudi619 for helpf...

CVE-2022-0847

CVE-2022-0847 Description - POC for CVE-2022-0847: Linux Kernel Local Privilege Escalation Vulnerability. - create by antx at 2022-03-08. Detail - Security researcher Max Kellermann responsibly disclosed the 'Dirty Pipe' vulnerability and stated that it affects Linux Kernel 5.8 and later...

OpenSSL-1_0_1g_CVE-2015-3194

OpenSSL 1.0.1g 7 Apr 2014 Copyright c 1998-2011 The OpenSSL Project Copyright c 1995-1998 Eric A. Young, Tim J. Hudson All rights reserved. DESCRIPTION The OpenSSL Project is a collaborative effort to develop a robust, commercial-grade, fully featured, and Open Source toolkit implementing the...

sshimpanzee

Sshimpanzee Sshimpanzee allows you to build a static reverse ssh server. Instead of listening on a port and waiting for connections, the ssh server will initiate a reverse connect to attacker's ip, just like a regular reverse shell. Sshimpanzee allows you to take advantage of every features of a...

apkinspector

AndroidAnalysisGUI This is a guide to get the alpha release of Android Analysis GUI. It has only been tested on Linux. 1. Install Qt SDK. 1Download the QtSDK QtSDKLin32offlinev111en.run from "http://qt.nokia.com/downloads/sdk-linux-x11-32bit-cpp-offline" and install it using root permission...

inquisitor

Inquisitor Notice This project is only partially complete and I have yet to implement many of the features described in the following blog post I made: https://penafieljlm.com/2017/07/14/inquisitor/. Inquisitor is a simple tool for gathering information on companies and organizations through the...

Tracgram

Trackgram Use Instagram location features to track an account Usage root@kitploit: At this moment the usage of Trackgram is extremly simple: 1. Download this repository 2. Go through the instalation steps 3. Change the parameters in the tracgram main method directly: + Mandatory: - NICKNAME: your...

StegaStamp

StegaStamp: Invisible Hyperlinks in Physical Photographs Project Page CVPR 2020 Matthew Tancik, Ben Mildenhall, Ren Ng University of California, Berkeley Introduction This repository is a code release for the ArXiv report found here. The project explores hiding data in images while maintaining...

node-ipc-malware-protestware-CVE-2022-23812

CVE-2022-23812 RIAEvangelist/node-ipc is malware / protestware The RIAEvangelist/node-ipc module contains protestware peacenotwar. Excerpt from RIAEvangelist/node-ipc: as of v11.0.0 & v9.2.2 this module uses the peacenotwar module. More importantly, commits 847047cf7f81ab08352038b2204f0e763344958...

CVE-2025-8088-WinRAR-Proof-of-Concept-PoC-Exploit-

CVE-2025-8088 WinRAR Proof of Concept PoC-Exploit This repository contains a Proof of Concept PoC script for CVE-2025-8088 , a path traversal vulnerability in WinRAR versions up to 7.12. This PoC demonstrates how attackers could exploit the vulnerability to place malicious files outside the...

SMBSR

STOP THERE! This tool is no longer mantained! Decided to merge the feature of SMBSR and RSMBI, please refer to SMBAT SMBSR - what is that? Well, SMBSR is a python script which given a CIDR/IP/IPfile/HOSTNAMEs enumerates all the SMB services listening 445 among the targets and tries to authenticat...

zelos

Zelos Zelos（Z eropoint E mulated L ightweight O perating S ystem 的缩写，即零起点模拟轻量级操作系统）是一个基于 Python 的二进制模拟平台。其用途之一是通过命令行或 Python 脚本快速评估二进制文件的动态行为。所有系统调用都被模拟，以隔离目标二进制文件。支持 Linux x8664（32 位和 64 位）、ARM 和 MIPS 二进制文件。Unicorn 提供 CPU 模拟。 完整文档可在此获取。 安装 使用包管理器 pip 安装 zelos。 root@kitploit: pip install zelos 基本...

zelos

Zelos Zelos Z eropoint E mulated L ightweight O perating S ystem is a python-based binary emulation platform. One use of zelos is to quickly assess the dynamic behavior of binaries via command-line or python scripts. All syscalls are emulated to isolate the target binary. Linux x8664 32- and...