RootKit

这是一个在 ubuntu-16.04.6-desktop-amd64 Linux 4.4 上测试过的 rootkit，但应该很容易移植到不同的内核版本。 视频链接 -- https://drive.google.com/file/d/1yDktAg9vIPBH3OPEBYset9OdQb0LMevA/view?usp=sharing 安装 克隆仓库 root@kitploit: git clone https://github.com/Asekon/RootKit 进入文件夹 root@kitploit: cd RootKit 编译 root@kitploit: sudo make 以...

pmanager

Pmanager Demo Description Store and retrieve your passwords from a secure offline database. Check if your passwords has leaked previously to prevent targeted password reuse attacks. Why develop another password manager ? This project was initially born from my desire to learn Rust. I was tired of...

PolyDrop

BYOSI - Bring-Your-Own-Script-Interpreter - Leveraging the abuse of trusted applications, one is able to deliver a compatible script interpreter for a Windows, Mac, or Linux system as well as malicious source code in the form of the specific script interpreter of choice. Once both the malicious...

dorkScanner

DORK SCANNER A typical search engine dork scanner that scrapes search engines with queries that you provide in order to find vulnerable URLs. Introduction Dorking is a technique used by newsrooms, investigative organisations, security auditors as well as tech savvy criminals to query various sear...

PhantomFS

PhantomFS ProjFS provider. Projects files where the content depends on which process reads them. Payload is stored AES-256-CBC encrypted on disk, decrypted only in memory at runtime. This shouldnt bypass any EDR as the payload will be written to disk when allowed processes try to read it...

QUIC-attacks

QUIC-attacks CVE-2022-30591 The current repository serves the purpose of sharing the scripts we used for educational usage. These attacks were a part of our study check here, and were tested against 6 different QUIC-enabled servers IIS, NGINX, LiteSpeed, Cloudflare, H2O, and Caddy. The quic-loris...

packetsifterTool

PacketSifter What is PacketSifter? PacketSifter is a tool to perform batch processing of PCAP data to uncover potential IOCs. Simply initializePacketSifter with your desired integrations VirusTotal, AbuseIPDB and pass PacketSifter a pcap and the desired switches and PacketSifter will sift through...

HookDump

HookDump EDR function hook dumping Please refer to the Zeroperil blog post for more information https://zeroperil.co.uk/hookdump/ Building source In order to build this you will need Visual Studio 2019 community edition is fine and CMake. The batch file Configure.bat will create two build...

WSSAT

WSSAT - Web Service Security Assessment Tool WSSAT is an open source web service security scanning tool which provides a dynamic environment to add, update or delete vulnerabilities by just editing its configuration files. This tool accepts WSDL address list as input file and for each service, it...

tsunami-security-scanner

Tsunami Tsunami is a general purpose network security scanner with an extensible plugin system for detecting high severity vulnerabilities with high confidence. To learn more about Tsunami, visit our documentation. Tsunami relies heavily on its plugin system to provide basic scanning capabilities...

tsunami-security-scanner

Tsunami Tsunamiは、拡張可能なプラグインシステムを備えた汎用ネットワークセキュリティスキャナーであり、高い信頼性で高深刻度の脆弱性を検出します。 Tsunamiの詳細については、ドキュメントをご覧ください。 Tsunamiはそのプラグインシステムに大きく依存しており、基本的なスキャン機能を提供します。公開されているTsunamiプラグインはすべて、別のgoogle/tsunami-security-scanner-pluginsリポジトリでホストされています。 クイックスタート Tsunamiのビルドと実行方法については、ドキュメントをご覧ください。 コントリビューション...

Phoenix

Homepage | Wiki | Contributing Phoenix Phoenix is a suite of configurations & advanced modifications for Mozilla Firefox, designed to put the user first - with a focus on privacy, security, freedom, functionality, & usability. Here a detailed list of Phoenix's features & enhancements. !NOTE...

ODBParser

| ODBParser ---|--- TL;DR ODBParser is a tool to search for PII being exposed in open databases. ONLY to be used to identify exposed PII and warn server owners of irresponsible database maintenance OR to query databases you have permission to access! PLEASE USE RESPONSIBLY What is this? Wrote thi...

KerberosRun

KerberosRun KerberosRun is a little tool I use to study AD security together with my ADCollector. KerberosRun uses the Kerberos.NET library built by Steve Syfuhs. Some code were taken and adapted from Harmj0y's Rubeus project. dev2null is the primary author of this project. My colleague Constanti...

nimcrypt

nimcrypt Nimcrypt は、@byt3bl33d3r の OffensiveNim プロジェクト https://github.com/byt3bl33d3r/OffensiveNim に完全に基づいて Nim で書かれた .NET PE Crypter です。 このツールは、数か月前に @S3cur3Th1sSh1t が公開したブログ記事から着想を得ています。基本的には彼が提示した内容の完全な PoC です: https://s3cur3th1ssh1t.github.io/Playing-with-OffensiveNim/ root@kitploit: .-' '. /...

nimcrypt

nimcrypt Nimcrypt is a .NET PE Crypter written in Nim, based entirely on the work of @byt3bl33d3r's OffensiveNim project: https://github.com/byt3bl33d3r/OffensiveNim This tool was inspired by @S3cur3Th1sSh1t's blog post a few months ago, as it's essentially just a full PoC of what he presented:...

CVE-2026-3576

CVE-2026-3576 - WordPressプラグイン Planyo Online Reservation System = 3.0 - SSRFによる任意ファイル読み取り このリポジトリには、CVE-2026-3576用のPythonベースの概念実証PoCエクスプロイトが含まれています。Exploit-DBでもこちらから入手できます。 また、このエクスプロイト用のMetasploitモジュールも開発しており、こちらで確認できます。 免責事項...

rizin-notebook

Rizin Notebook A notebook for binary analysis with rizin. Keep notes, commands, and scripts organized per binary. Requires rizin 0.7.0 or later. What it does Each notebook page is tied to one binary. It stores the binary itself, its SHA-256 hash, and a list of cells : command cells - a rizin...

goblob

Goblob 🫐 Goblob is a lightweight and fast enumeration tool designed to aid in the discovery of sensitive information exposed publicy in Azure blobs, which can be useful for various research purposes such as vulnerability assessments, penetration testing, and reconnaissance. Warning. Goblob will...

Mistica

Mística --- Mística ロゴ 作成 JoelGMSec Mística は、アプリケーション層プロトコルのフィールドにデータを埋め込み、任意の通信のための双方向チャネルを確立することを目的としたツールです。 現在、HTTP、HTTPS、DNS、ICMP プロトコルへのカプセル化が実装されていますが、近い将来さらに多くのプロトコルが導入される予定です。 Mística は、SOTP Simple Overlay Transport Protocol...