RvbbitSafe

RvbbitSafe: The Hacker's Nightmare – A Six-Fortress Anti-Ransomware Architecture for Windows 🛡️ Overview RvbbitSafe is a research prototype demonstrating a paradigm shift in ransomware defense. It's an active, multi-layered fortress that combines hardware virtualization, AI-driven deception,...

fastfinder

FastFinder أداة استجابة للحوادث خفيفة الوزن لصيد التهديدات والفحص الجنائي ✨ نظرة عامة FastFinder هي أداة استجابة للحوادث قوية وخفيفة الوزن، مصممة لمتخصصي الأمن السيبراني الذين يقومون بصيد التهديدات، والفحص الجنائي المباشر، والفرز الأولي لنقاط النهاية. تم بناؤها لكل من منصتي ويندوز ولينكس، وتتفوق ...

fastfinder

FastFinder A lightweight incident response tool for threat hunting and forensic triage ✨ Overview FastFinder is a powerful, lightweight incident response tool designed for cybersecurity professionals conducting threat hunting, live forensics, and endpoint triage. Built for both Windows and Linux...

CVE-2018-2628

CVE-2018-2628 WebLogic डीसीरियलाइज़ेशन कमज़ोरी का पुनरुत्पादन weblogic गेटशेल python CVE-2018-2628-Getshell.py ip port shell1.jsp root@kitploit: C:\Users\CTF\Desktoppython CVE-2018-2628-Getshell.py 10.10.20.166 7001 jason1.jsp / \ \ / / | | \ / / |/ \ | \ / /| \ / \ | | \ \ / /| | | | | || | | / ...

iPwn

iPwn A Framework meant for the exploitation of iOS devices. REMEMBER: THE IPHONE YOU ARE ATTEMPTING TO GET INTO USING THIS TOOL MUST BE JAILBROKEN Status - ❌ This project is still being worked on. I'm adding more extensions and options for post-exploitation for harvesting Device information and...

mdk4

MDK4 MDK is a proof-of-concept tool to exploit common IEEE 802.11 protocol weaknesses. About MDK4 MDK4 is a new version of MDK3. MDK4 is a Wi-Fi testing tool from E7mer, ASPj of k2wrlz, it uses the osdep library from the aircrack-ng project to inject frames on several operating systems. Many part...

Security Bulletin: Langflow OSS is affected by arbitrary file read due to path traversal vulnerabilities in file and knowledge base components

Summary Langflow uses filesystem path construction as part of several components and API endpoints, including the Directory component, the Knowledge Base connector ingestion endpoint, and the Knowledge Base flow component. In the Directory component, user-supplied path values are not validated...

pulsegram

PulseGram PulseGram is a keylogger integrated with a Telegram bot. It is a monitoring tool that captures keystrokes, clipboard content, and screenshots, sending all the information to a configured Telegram bot. It is designed for use in adversary simulations and security testing contexts. ⚠️...

decker

Decker - Penetration Testing Orchestration Framework Purpose Decker is a penetration testing orchestration framework. It leverages HashiCorp Configuration Language 2 the same config language as Terraform to allow declarative penetration testing as code, so your tests can be versioned, shared,...

See-SURF

See-SURF Security scanner now powered with AI 🤖 to find potential Server Side Request Forgery SSRF parameters in your web application. See-SURF not only helps you detect potential SSRF parameters but also helps you validate it, protecting your application with system and user data compromise. 🎓...

iam-vulnerable

IAM Vulnerable Use Terraform to create your own vulnerable by design AWS IAM privilege escalation playground. IAM Vulnerable uses the Terraform binary and your AWS credentials to deploy over 250 IAM resources into your selected AWS account. Within minutes, you can start learning how to identify a...

drakvuf-sandbox

DRAKVUF Sandbox !WARNING Here be dragons 🐉. Maintaining your own sandbox is a difficult task and this project uses technology that is not user-friendly. Be prepared to brush up on your debugging skills as bugs may be reproducible only on your configuration. On the other hand, it's not purely an R...

CVE-2020-16898-EXP-POC

CVE-2020-16898 CVE-2020-16898 Vulnérabilité d'exécution de code à distance TCP/IP Windows EXP&POC Reproduction forforever：https://www.cnblogs.com/forforever/p/13846077.html poc CVE-2020-16898Checker-poc Commande : Lancer PowerShell/CMD en tant qu'administrateur root@kitploit: Powershell.exe...

CVE-2025-6543_CitrixNetScaler_PoC

CVE-2025-6543CitrixNetScalerPoC 🔐 وصف مستودع GitHub CVE-2025-6543 Enhanced Checker ماسح ومدقّق متعدد المضيفين والمنافذ للأجهزة NetScaler المتأثرة بـ CVE-2025-6543. يدعم تعداد SNMP وSSH مع إمكانية إعداد تقارير CSV وبنى استغلال تجريبية. 📄 README.md root@kitploit: CVE-2025-6543 Enhanced Checker ماسح...

ClientInspectorV2

Introduction to ClientInspector v2 Are you in control? - or are some of your core infrastructure processes like patching, antivirus, bitlocker enablement drifting? Or would you like to do advanced inventory , where you can lookup your warranty state against Lenovo or Dell warranty, then keep...

autoSource

AutoSource AutoSource is an automated source code review framework integrated with SonarQube which is capable of performing static code analysis/reviews. It can be used for effectively finding the vulnerabilities at very early stage of the SDLCSoftware Development Life Cycle. The user can scan th...

urlfinder

URLFinder एक उच्च-गति वाला टूल जो निष्क्रिय रूप से URL एकत्र करता है, बिना सक्रिय स्कैनिंग के कुशल वेब एसेट डिस्कवरी के लिए अनुकूलित। विशेषताएँ • स्थापना • उपयोग • उदाहरण • Discord से जुड़ें अवलोकन URLFinder एक उच्च-गति, निष्क्रिय URL खोज टूल है जिसे वेब एसेट डिस्कवरी को सरल और तेज़ बनाने के लिए...

ipa-medit

ipa-medit Ipa-medit is a memory search and patch tool for resigned ipa without jailbreaking. It supports iOS apps running on iPhone and Apple Silicon Mac. It was created for mobile game security testing. Many mobile games have jailbreak detection, but ipa-medit does not require jailbreaking, so...

RevShell

🔥 RevShell Project — Advanced Windows Reverse Shell root@kitploit: ██▀███ ▓█████ ██▒ █▓ ██████ ██░ ██ ▓█████ ██▓ ██▓ ▓██ ▒ ██▒▓█ ▀ ▓██░ █▒ ▒██ ▒ ▓██░ ██▒ ▓█ ▀ ▓██▒ ▓██▒ ▓██ ░▄█ ▒▒███ ▓██ █▒░ ░ ▓██▄ ▒██▀▀██░ ▒███ ▒██░ ▒██░ ▒██▀▀█▄ ▒▓█ ▄ ▒██ █░░ ▒ ██▒░▓█ ░██ ▒▓█ ▄ ▒██░ ▒██░ ░██▓ ▒██▒░▒████▒ ▒▀█░...

wodat

wodat Windows Oracle Database Attack Tool Simple port of the popular Oracle Database Attack Tool ODAT https://github.com/quentinhardy/odat to C .Net Framework. Credit to https://github.com/quentinhardy/odat as lots of the functionality are ported from his code. Perform password based attacks e.g...