aws-enumerator

AWS Service Enumeration Disclaimer The tool is in beta stage testing in progress, no destructive API Calls used read only actions . I hope, there will be no issues with the tool. If any issues encountered, please submit the ticket. Description The AWS Enumerator was created for service enumeratio...

poseidon

root@kitploit: ██████╗ ██████╗ ███████╗███████╗██╗██████╗ ██████╗ ███╗ ██╗ ██╔══██╗██╔═══██╗██╔════╝██╔════╝██║██╔══██╗██╔═══██╗████╗ ██║ ██████╔╝██║ ██║███████╗█████╗ ██║██║ ██║██║ ██║██╔██╗ ██║ ██╔═══╝ ██║ ██║╚════██║██╔══╝ ██║██║ ██║██║ ██║██║╚██╗██║ ██║...

polymorph

Polymorph Polymorph is a tool that facilitates the modification of network traffic on the fly by allowing the execution of Python code on network packets that are intercepted in real time. This framework can be used to modify in real time network packets that implement any publicly specified...

MASTG-Hacking-Playground

MASTG Hacking Playground Welcome to the MASTG Hacking Playground which is part of the OWASP Mobile Application Security MAS project. The MASTG Hacking Playground is a collection of educational iOS and Android mobile apps, that are intentionally build insecure in order to give practical guidance t...

RawCopy

Introduction This a console application that copy files off NTFS volumes by using low level disk reading method. Syntax RawCopy /ImageFile:FullPath\ImageFilename /ImageVolume:1,2...n /FileNamePath:FullPath\Filename /OutputPath:FullPath /AllAttr:0|1 /RawDirMode:0|1|2 /WriteFSInfo:0|1 /TcpSend:0|1...

Arecibo

Arecibo Endpoint for Out-of-Band Exfiltration DNS & HTTP Authors Juan Manuel Fernández @TheXC3LL & Pablo Martinez @Xassiz DNS Exfiltration Create a new token: root@kitploit: curl localhost:5000/generatedns "htoken": "c008b5dd22817c50441522f917c66743" Now you can use this identificative token to d...

EagleEye

root@kitploit: $$$$$$$$\ $$\ $$$$$$$$\ $$ | $$ | $$ | $$ | $$$$$$\ $$$$$$\ $$ | $$$$$$\ $$ | $$\ $$\ $$$$$$\ $$$$$\ $$\ $$ $$\ $$ |$$ $$\ $$$$$\ $$ | $$ |$$ $$\ $$ | $$$$$$$ |$$ / $$ |$$ |$$$$$$$$ | $$ | $$ | $$ |$$$$$$$$ | $$ | $$ $$ |$$ | $$ |$$ |$$ | $$ | $$ | $$ |$$ | $$$$$$$$\$$$$$$$...

esp_wifi_repeater

espwifirepeater A full functional WiFi NAT router and now also a WiFi repeater aka. L2 bridge NEW 2026: 10 years after the first release it has finally become, what it ever pretendend to be:a true WiFi Repeater. In order not to break any existing docs and links, the standard edition still remains...

shadow

shadow :: De Mysteriis Dom jemalloc shadow is a jemalloc heap exploitation framework. It has been designed to be agnostic of the target application that uses jemalloc as its heap allocator be it Android's libc, Firefox, FreeBSD's libc, standalone jemalloc, or whatever else. The current version 2....

cset

What is CSET? The Cybersecurity Infrastructure Security Agency CISA and the Idaho National Laboratory INL develop the Cyber Security Evaluation Tool CSET® for asset owners with the primary objective of reducing the risk to the nation’s critical infrastructure. Control systems are defined as...

CVE-2026-19583 Velociraptor Required Permissions bypass by using client monitoring queries

Velociraptor allows some sensitive artifacts to be gated by additional permissions. For example, the Linux.Sys.BashShell artifact allows arbitrary command execution on endpoints, and so it requires the EXECVE permission to schedule. However, no such check was implemented for client monitoring...

CVE-2026-19583

CVE-2026-19583 is a permission bypass in Velociraptor (an endpoint forensics and EDR tool by Velocidex). Sensitive artifacts such as Linux.Sys.BashShell require the EXECVE permission to schedule, enabling arbitrary command execution on endpoints. However, no equivalent permission check was enforc...

EUVD-2026-75233

Velociraptor allows some sensitive artifacts to be gated by additional permissions. For example, the Linux.Sys.BashShell artifact allows arbitrary command execution on endpoints, and so it requires the EXECVE permission to schedule. However, no such check was implemented for client monitoring...

proxy.py

!Python 3.xhttps://img.shields.io/static/v1?label=Python&message=3.6%20%7C%203.7%20%7C%203.8%20%7C%203.9%20%...

pmd

PMD - source code analyzer PMD is an extensible multilanguage static code analyzer. It finds common programming flaws like unused variables, empty catch blocks, unnecessary object creation, and so forth. It's mainly concerned with Java and Apex , but supports 16 other languages. It comes with 400...

fwknop

fwknop - Single Packet Authorization Introduction fwknop implements an authorization scheme known as Single Packet Authorization SPA for strong service concealment. SPA requires only a single packet which is encrypted, non-replayable, and authenticated via an HMAC in order to communicate desired...

rengine

reNgine: The Ultimate Web Reconnaissance & Vulnerability Scanner 🚀 reNgine 2.2.0 is released! reNgine 2.2.0 comes with bounty hub where you can sync and import your hackerone programs, in app notifications, chaos as subdomain e...

odat

Quentin HARDY --- [email protected] [email protected] ODAT ODAT Oracle Database Attacking Tool is an open source penetration testing tool that tests the security of Oracle Databases remotely. Usage examples of ODAT: You have an Oracle database listening remotely and want to find valid...

ThreatCheck

ThreatCheck Modified version of Matterpreter's DefenderCheck. Takes a binary as input either from a file on disk or a URL, splits it until it pinpoints that exact bytes that the target engine will flag on and prints them to the screen. This can be helpful when trying to identify the specific bad...

glue

OWASP Glue Glue is a framework for running a series of tools. Generally, it is intended as a backbone for automating a security analysis pipeline of tools. Recommended Usage For those wishing to run Glue, we recommend using the docker image because it should have the other tools it uses available...