enject

enject Hide .env secrets from prAIng eyes. Note: this project was previously called enveil and has been renamed to enject AI coding tools like Claude Code, Copilot, Cursor, and others can read files in your project directory, which means a plaintext .env file is an accidental secret dump waiting ...

Openbsd-Privilege-Escalation

Openbsd-Privilege-Escalation A Script that automates the process of escalating privileges on openbsd system CVE-2019-19520 by exploiting the xlock binary and againing it's sgid and escalating to the root user by CVE-2019-19522 exploiting the privileges of auth group and adding keys to the Skey or...

threat-modeling-mcp-server

Threat Modeling MCP Server A Model Context Protocol MCP server for comprehensive threat modeling with automatic code validation. Table of Contents Overview Quick Start Prompts Key Features Prerequisites Installation Running with Kiro CLI Output File Management Quick Reference Tools Overview Threa...

dumpguard_bof

DumpGuard BOF Beacon Object File BOF port of DumpGuard for extracting NTLMv1 hashes from sessions on modern Windows systems. About This Project This repository contains a Beacon Object File BOF implementation of DumpGuard, ported from the original C/.NET implementation to pure C for use with Havo...

pii-shield

PII-Shield 🛡️ Zero-code log sanitization sidecar for Kubernetes. Prevents data leaks GDPR/SOC2 by redacting PII from logs before they leave the pod. PII-Shield runs in-process — CLI, sidecar, or WASM. There is no hosted API and no server your data is sent to. "Don't let PII poison your AI models."...

device-modeling-language

Device Modeling Language The Device Modeling Language DML is a domain-specific language for writing fast functional or transaction-level device models for virtual platforms. DML provides high-level abstractions suitable for functional device models, including constructs like register banks,...

etl2pcapng

About This tool enables you to view ndiscap and pktmon packet captures with Wireshark. Due to performance problems with the other popular packet capture method WinPcap, which was included with older versions of Wireshark, these inbox tools should be preferred. Windows has several inbox components...

linux-privilege-escalation

Linux Privilege Escalation Bash script to check and exploit the CVE-2022-0847 Linux "Dirty Pipe" vulnerability About this Proof of Concept This script allows an unprivileged user on a vulnerable system to do the following: Modify/overwrite read-only files like /etc/passwd. Obtain an elevated shel...

CVE-2021-41773

CVE-2021-41773 Path traversal and file disclosure vulnerability in Apache HTTP Server 2.4.49 Usage root@kitploit: python3 apache2-4-49.py -h python3 apache2-4-49.py --check --single example.com Reference...

EUVD-2026-69705

Vitest is a testing framework powered by Vite. From 2.1.0 until 4.1.11 and 5.0.0-rc.2, the public mockerPlugin and standalone interceptorPlugin exports in packages/mocker/src/node/interceptorPlugin.ts register the vitest:interceptor:register handler on Vite's unauthenticated HMR WebSocket without...

CVE-2026-84373 Vitest: Path Traversal / Arbitrary File Read via @vitest/mocker Redirect Mock

Vitest is a testing framework powered by Vite. From 2.1.0 until 4.1.11 and 5.0.0-rc.2, the public mockerPlugin and standalone interceptorPlugin exports in packages/mocker/src/node/interceptorPlugin.ts register the vitest:interceptor:register handler on Vite's unauthenticated HMR WebSocket without...

CVE-2026-84373

CVE-2026-84373 affects Vitest (a Vite-powered testing framework) versions 2.1.0 through 4.1.10 and 5.0.0-rc.1 . The vulnerability exists in the mockerPlugin and interceptorPlugin exports within packages/mocker/src/node/interceptorPlugin.ts, which register a vitest:interceptor:register handler on ...

auth_analyzer

Auth Analyzer Table of Contents What is it? Why should I use Auth Analyzer? GUI Overview Parameter Extraction Auto Extract From To String Static Value Prompt for Input Parameter Replacement Replacement Location Parameter removement Sample Usage Auto extract session Cookie Session Header and CSRF...

ppmap

ppmap A simple scanner/exploitation tool written in GO which automatically exploits known and existing gadgets checks for specific variables in the global context to perform XSS via Prototype Pollution. NOTE: The program only exploits known gadgets, but does not cover code analysis or any advance...

CVE-2014-7911_poc

CVE-2014-7911poc Local root exploit for Nexus5 Android 4.4.4KTU8P author: retme [email protected] @returnsme on twitter & @retme on weibo website: retme.net how to build Import the project into eclipse,and build. ./cve20147911/assets/msmattack is the binary file of CVE-2014-4322 exploit.You...

gattacker

A Node.js package for BLE Bluetooth Low Energy Man-in-the-Middle & more. Prerequisites see: https://github.com/sandeepmistry/noble https://github.com/sandeepmistry/bleno Install root@kitploit: npm install gattacker Usage Configure Running both components Set up variables in config.env:...

exploit-CVE-2016-6515

OpenSSH remote DOS Before 7.3 OpenSSH does not limit password lengths for password authentication, which allows remote attackers to cause a denial of service crypt CPU consumption via a long string. This bug resides in auth-passwd.c in authpassword function. Attackers can exploit this issue to...

libssh-mirror

root@kitploit: .org The SSH library Why? Why not ? : I've began to work on my own implementation of the ssh protocol because i didn't like the currently public ones. Not any allowed you to import and use the functions as a powerful library, and so i worked on a library-based SSH implementation...

scared

SCAred scared is a side-channel analysis framework maintained by eShard team. Getting started Requirements Scared need python 3.11 , 3.12 or 3.13 and Numpy =2 You can install scared, depending on your setup: from source with pip with conda Install with conda You just have to run: root@kitploit:...

powershell-reverse-tcp

PowerShell Reverse TCP Scripts de PowerShell para comunicarse con un host remoto. El host remoto tendrá control total sobre el cliente y todos los comandos del sistema subyacente. Consulta los shells basados en: comando Invoke-Expression de PowerShell aquí, tuberías de proceso aquí. Probado con...