crauEmu

Mascot designed by@kottsarapkin crauEmu is an uEmu extension for developing and analyzing payloads for code-reuse attacks. Slides from ZeroNights 2019 Demo 1 - X32-64, Edge, rop-gadgets from pwnjs Demo 2 - ARM64, checkm8 callback-chain RopEditor Installation 1. Put the file crauEmu.py in same...

ReconAIzer

ReconAIzer ReconAIzer is a powerful Jython extension for Burp Suite that leverages OpenAI to help bug bounty hunters optimize their recon process. This extension automates various tasks, making it easier and faster for security researchers to identify and exploit vulnerabilities. Once installed,...

ghidra2frida

ghidra2frida ghidra2frida is a Ghidra Extension that, working as a bridge between Ghidra and Frida, lets you create powerful Ghidra scripts that take advantage of Frida's dynamic analysis engine to improve Ghidra statical analysis features. It supports all platforms supported by Frida Windows,...

checkmk-log4j-scanner

checkmk extension to check for log4j2 CVE-2021-44228 This Plugin wraps around logpresso/CVE-2021-44228-Scanner Apache License 2.0 How it works Run in 5 steps: 1. Find all .jar, .war, .ear, .aar files recursively. 2. Find META-INF/maven/org.apache.logging.log4j/log4j-core/pom.properties entry from...

amlsec

Automated Security Risk Identification in Cyber-Physical Production Systems Using AutomationML-Based Engineering Data This prototype implements the methods presented in the following two publications: 1. Eckhart, M., Ekelhart, A., & Weippl, E. R. 2020. Automated Security Risk Identification Using...

webtech

WebTech 웹사이트에서 사용된 기술을 식별합니다. 릴리스 블로그 게시글에서 더 많은 정보. CLI 설치 WebTech는 pip로 사용할 수 있습니다: root@kitploit: pip install webtech setup.py를 통해서도 설치할 수 있습니다: root@kitploit: python setup.py install --user Burp 통합 Jython 2.7.0 스탠드얼론 버전을 다운로드하여 Burp에 설치하세요. "Extender" "Options" "Python Environment"에서: Jython...

403Kangaroo

403Kangaroo !! This tool is still under development if you have any issues please don't hesitate to contact me via linkedin or smth 403/401 bypass tool via certain headers and values headers.txt,values.txt. When you load the extension for the first time it will open a headers.txt file and write t...

burp-exporter

Burp Suite Community 및 Pro용 Exporter 확장 더 많은 팁과 다른 확장을 알아보려면 팔로우하세요 설명 Exporter는 요청을 파일 이나 클립보드 에 여러 프로그래밍 언어의 함수로 복사하는 Burp Suite 확장입니다. 또한 Exporter라는 탭을 추가하여 HTTP 요청을 검색할 수 있습니다. 다음으로 내보낼 수 있습니다: cURL Wget Python Request Perl LWP PHP HTTPRequest2 Go Native NodeJS Request jQuery AJAX PowerShell...

burp-exporter

Exporter Extension for Burp Suite Community and Pro Follow us to know more about tips and others extensions Description Exporter is a Burp Suite extension to copy a request to a file or the clipboard as multiple programming languages functions. It also adds a tab called Exporter where you can...

CVE-2025-55319-PoC

Reference: CVE-2025-55319 Proof-of-concept VS Code .vsix extension for the HTB "Checkpoint" challenge. Once installed, the extension auto-activates and spawns a hidden PowerShell reverse shell back to the attacker. ⚠️ Authorized use only. This is a CTF/lab artifact. Only deploy it against machines...

CVE-2024-5737

CVE-2024-5737 AdmirorFrames Joomla! Extension HTML tag: root@kitploit: $height=0x3c; $im = imagecreate$width, $height; $hex=unpack'H',$payload; $chunks=strsplit$hex1, 6; for$i=0; $i count$chunks; $i++ $colorchunks=strsplit$chunks$i, 2;...

CVE-2019-16113-Dockerfile

Bludit Directory Traversal Vulnerability CVE-2019--16113 Bludit-3.9.2 is a lightweight CMS that only requires a LAMP environment to run. During image upload, Bludit checks the file extension but does not delete the file in time; an attacker can also achieve directory traversal by controlling the...

CVE-2024-38063

CVE-2024-38063 Overview In August 2024, Microsoft released a patch for a Windows TCP/IP Remote Code Execution RCE vulnerability. Some researchers have already published Proofs of ConceptPoC for this vulnerability, and around the same time, PatchPoint researchers also completed their analysis and...

CVE-2026-56291

CVE-2026-56291 — Balbooa Forms Joomla Mass RCE Exploit Pre-Auth form.uploadAttachmentFile → No CSRF → PHP Upload Overview CVE-2026-56291 is a critical CVSS 9.8 unauthenticated arbitrary file upload vulnerability in the Balbooa Forms combaforms Joomla extension 2.4.1. The form.uploadAttachmentFile...

sonar.js

sonar.js A framework for identifying and launching exploits against internal network hosts. Works via WebRTC IP enumeration, WebSocket host scanning, and external resource fingerprinting. How does it work? Upon loading the sonar.js payload in a modern web browser the following will happen: sonar....

drvtrace

tracedrv デバッグ対象のドライバから他のモジュールへの遷移をトレースする（すなわち関数呼び出しをトレースする）ための小さなWinDbg拡張機能。 使用方法 root@kitploit: !tracedrv 4000 trace for 4000 instructions...

CVE-2017-12615

纪念Chia Junyuan https://packetstormsecurity.com/files/author/11924/ POC CVE-2017-12615 在Windows上运行的Apache Tomcat 7.0.0至7.0.79的POC漏洞利用；CVE-2017-12615 PUT JSP漏洞。 描述： 根据设计，不允许通过PUT方法向Apache Tomcat服务器上传JSP文件。 这很可能是一项安全措施，防止攻击者上传JSP后门并在服务器上获取远程代码执行权限。 然而，由于检查不充分，攻击者可以在启用了PUT的7.0.0至79...

inql

InQL v6.1.2 - 고급 GraphQL 테스트를 위한 Burp 확장 프로그램 !Doyensec Research...

react2shell-detector

React2Shell Detector WebアプリケーションにおけるReact2Shellの脆弱性（CVE-2025-55182 & CVE-2025-66478）を検出するためのChrome拡張機能です。 概要 React2Shell Detectorは、セキュリティ研究者やWeb開発者がWebアプリケーションの潜在的なReact2Shell脆弱性を特定するのに役立つブラウザ拡張機能です。この拡張機能は、ターゲットURLに安全な検出ペイロードを送信し、レスポンスを分析してアプリケーションが脆弱かどうかを判断します。...

CVE-2023-21716

CVE-2023-21716 Microsoft Word RTF フォントテーブルのヒープ破損 Microsoft Officeのwwlib内の脆弱性により、攻撃者は悪意のあるRTF文書を開いた被害者の権限でリモートコード実行を達成できます。攻撃者はこのファイルを電子メールの添付ファイル（またはその他の方法）で配信する可能性があります。 背景 Microsoft WordはMicrosoft Officeに含まれるワードプロセッシングアプリケーションです。デフォルトのインストールでは、Microsoft...