ai-security-battle

🤖 AI Security Battle System Red Team vs Blue Team: Adversarial ML Combat Simulation A comprehensive adversarial machine learning security simulation where Red Team attackers battle against Blue Team defenders in a 30-minute AI/ML security warfare scenario. 🎯 Project Overview This system simulates...

vulnerability-assessment

openssh-vulnerability-assessment Professional cybersecurity assessment demonstrating vulnerability identification, CVSS severity scoring, MITRE ATT&CK framework application, and detailed remediation planning for OpenSSH 6.6.1p1 critical vulnerabilities CVE-2016-0777, CVE-2015-5600 🛡️ OpenSSH...

rubyzip before 3.4.0 Path Traversal in Zip::Entry#extract via Sibling-Directory Prefix

...

YARA_for_config_extraction

YARA Module Development and Config Extraction Blog Overview This repository contains the source code and content for my blog post on YARA Module Development and Config Extraction. In this blog, here is my guide into the process of creating a YARA module dedicated to extracting configurations. Blo...

AzTokenFinder

AzTokenFinder Is a small tool to extract JWT or JWT like looking data from different processes, like PowerShell, Excel, Word or others. The idea was inspired from the blog post https://mrd0x.com/stealing-tokens-from-office-applications/ from the amazing @mrd0x. In the new release, I added the...

smoke_conf_extract

Smoke Config Extraction Overview This project aims to extrct configurations from smokeloader samples starting at the initial stage. I was set on doing this statically so had to rely on things like Unicorn to bypass some of the more complicated components. Regardless of how this extraction works f...

SharpNTLMRawUnHide

SharpNTLMRawUnHide C version of NTLMRawUnHide. Based on @mlgualtieri article "Live off the Land and Crack the NTLMSSP Protocol" Usage root@kitploit: SharpNTLMRawUnHide.exe input-file Author Juan Manuel Fernández TheXC3LL...

Volumiser

Volumiser Introduction Volumiser is a command line tool and interactive console GUI for listing, browsing and extracting files from common virtual machine hard disk image formats. The tool was written to combat a regular problem where massive 100G+ disk images are often hard to work with or...

cyberchef-recipes

CyberChef is the self-purported 'Cyber Swiss-Army Knife' created by GCHQ. It's a fantastic tool for data transformation, extraction & manipulation in your web-browser. Full credit to @GCHQ for producing the tool. See: https://gchq.github.io/CyberChef/ General Tips Download CyberChef and run it...

certificate-ripper

Certificate Ripper 🔐 A CLI tool to extract server certificates Demo Advantages...

CVE-2023-42793

root@kitploit: Batch scan python teamcityscan.py -f targets.txt -o results.txt Single target python teamcityscan.py -u http://target.com:8111 -o result.txt Specify thread count python teamcityscan.py -f urls.txt -t 20 -o vuln.txt Target file format targets.txt: root@kitploit:...

kavanoz

🫙 kavanoz 🫙 Kavanoz jar in turkish is a tool to statically unpack common android banker malware. Do you ever wanted to get payload from packed malware without running android emulator ? Me neither : But here is a tool anyway. 👀 Installation root@kitploit: pip install kavanoz To install from sourc...

pyOneNote

pyOneNote pyOneNote is a lightweight python library to read OneNote files. The main goal of this parser is to allow cybersecurity analyst to extract useful information from OneNote files. Installing the parser Installing the latest development root@kitploit: pip install -U...

Metabase-Setup-Endpoint-SQLi-Fix

CVE-2026-72898: Metabase Setup Endpoint SQLi Patch This repository contains the hotfix for CVE-2026-72898 , an unauthenticated SQL Injection vulnerability in the setup endpoint of self-hosted Metabase instances. Left unpatched, attackers can bypass the setup token validation, execute arbitrary...

CVE-2026-82684

Tycon Systems TPDIN-Monitor-WEB3 versions 2.2.9 and prior are vulnerable to a Missing Authorization vulnerability. This could allow an attacker to extract system credentials, configurations, or flash contents...

raccoon_config

raccoonconfig Scans a list of raccoon servers from Tria.ge and extracts the config as JSON. If you like, it can also automatically send follow-up malware extracted from the Raccoon config to Tria.ge API key required Resources: Logo: https://www.deviantart.com/snatti89/art/193-365-Mugshot-58870035...

bitlocker-attacks

BitLocker Attacks A list of public attacks on BitLocker. Any public attack with the potential to attack BitLocker but where the exact method is still not public like baton drop is out of scope. Most of the attacks are for where the VMK is sealed by TPM only, which is the default setting, and is...

CVE-2026-82684 Tycon Systems TPDIN-Monitor-WEB3 Missing Authorization

Tycon Systems TPDIN-Monitor-WEB3 versions 2.2.9 and prior are vulnerable to a Missing Authorization vulnerability. This could allow an attacker to extract system credentials, configurations, or flash contents...

exploit-cve-2023-36808

CVE-2023-36808 - GLPI Unauthenticated SQL Injection Vulnerability GLPI versions field is injected directly into a SQL query without sanitisation: root@kitploit: SELECT id FROM glpiagents WHERE deviceid = '' No authentication is required. The vulnerability allows full database read access via blin...

sysmon-parser

sysmon-parser Automatically generated Sysmon parser for Azure Sentinel Sysmon-AllVersionsParser.txt can be loaded as a function in Azure Sentinel to parse all your events. There is an Azure Devops pipeline that triggers daily to install the latest Sysmon version, extracts the schema and populates...