buster

Descripción Buster es una herramienta OSINT avanzada utilizada para: Obtener cuentas sociales de un correo electrónico usando múltiples fuentes gravatar, about.me, myspace, skype, github, linkedin, brechas anteriores Obtener enlaces a donde se encontró el correo usando google, twitter, darksearch...

buster

Description Buster is an advanced OSINT tool used to: Get social accounts of an email using multiple sourcesgravatar,about.me,myspace,skype,github,linkedin,previous breaches Get links to where the email was found using google,twitter,darksearch and paste sites Get breaches of an email Get domains...

digital-forensics-lab

Digital Forensics Lab & Shared Cyber Forensic Intelligence Repository Features of Repository Interactive Digital Forensics Labs: Tailored for students and faculty engagement Linux-Centric Lab Environment: Utilizes Kali Linux exclusively for all labs Visual Learning Support: Each lab includes...

sh1mazu

Shimazu 4.0 - code name met@rpet@r This an auto-reverse backdoor shell program, for exploiting of vulnerability OS...

sicat

SICAT - El útil buscador de vulnerabilidades y exploits SICAT es una herramienta potente diseñada para agregar y buscar vulnerabilidades y exploits de múltiples fuentes de alto perfil. Simplifica la fase de reconocimiento verificando automáticamente bases de datos de confianza basadas en palabras...

pyxamstore

Xamarin AssemblyStore Explorer pyxamstore This is an alpha release of an assemblies.blob AssemblyStore parser written in Python. The tool is capable of unpack and repackaging assemblies.blob and assemblies.manifest Xamarin files from an APK. Installing Run the installer script: root@kitploit:...

zsteg

zsteg Descripción detecta datos ocultos por esteganografía en PNG y BMP Instalación root@kitploit: gem install zsteg Detecta: Esteganografía LSB en PNG y BMP Datos comprimidos con zlib OpenStego Camouflage 1.2.1 LSB con el conjunto de Eratóstenes Uso root@kitploit: zsteg -h Usage: zsteg options...

autovpn

!CAUTION This repository is no longer being maintained. No further updates, bug fixes, or support will be provided. Please use the new version https://github.com/ttlequals0/autowire Overview Script that allows the easy creation of OpenVPN endpoints in any AWS region. To create a VPN endpoint is...

SMBGhost

SMBGhost Simple threaded scanner for CVE-2020-0796 - SMBv3 RCE. The scanner is for meant only for testing whether a server is vulnerable. It is not meant for research or development, hence the fixed payload. It checks for SMB dialect 3.1.1 and compression capability through a negotiate request. A...

cve-2016-0728-testbed

CVE-2016-0728 testbed This repository contains a test program for CVE-2016-0728, a refcount leak and overflow bug in Linux, that leads to a use-after-free. The bug was found and explained by Perception Point. I am not affiliated to them. Usage root@kitploit: Welcome to the CVE-2016-0728 testbed...

CVE-2020-1337

CVE-2020-1337 - Binary Planting CVE-2020-1048 bypass Peleg Hadar @peleghd and Tomer Bar at SafeBreach @safebreach were acknowledged by Microsoft by the CVE-2020-1048, a Windows Spooler Vulnerability that allows an elevation of privilege on Windows 7 and later. Some details were disclosed by Alex...

CVE-2022-30190---Follina---Poc-Exploit

Follina - CVE-2022-30190 Follina is a zero day allowing code execution in Office products. Installation root@kitploit: git clone https://github.com/WesyHub/CVE-2022-30190---Follina---Poc-Exploit.git Usage Example : root@kitploit: python3 FollinaSploit.py -c calc -o poc.docx -p 80 Please make sure...

CVE-2023-35843

CVE-2023-35843 CVE-2023-35843 Arbitrary File Read Vulnerability...

AutoGadgetFS

Donaciones en Ethereum : 0xA919e40ddB0563918dDc174320D91992e0048477 Tabla de Contenidos 1. ¿Qué es AutoGadgetFS? 2. Requisitos 3. La Configuración a. Solo pruebas de dispositivo b. Configuración mínima de agfs en el medio c. Configuración completa de agfs en el medio con soporte de depuración 4...

threatest

Threatest Threatest is a CLI and Go framework for testing threat detection end-to-end. Threatest allows you to detonate an attack technique, and verify that the alert you expect was generated in your favorite security platform. Read the announcement blog post:...

CVE-2026-86669

A vulnerability was detected in aircheng-org iWebShop-5 up to 5.15. This affects the function Login of the file controllers/systemseller.php. Performing a manipulation of the argument Name results in improper authentication. It is possible to initiate the attack remotely. The exploit is now publi...

CVE-2026-86670

A flaw has been found in aircheng-org iWebShop-5 up to 5.15. This impacts an unknown function of the file controllers/admin.php of the component Authentication Storage. Executing a manipulation of the argument Password can lead to password hash with insufficient computational effort. It is possib...

CVE-2025-6019_Exploit

CVE-2025-6019Exploit Step 1: Run 1.sh on a Linux device to build xfs.image Step 2: Transfer xfs.image to the target device and execute 2.sh. Success is indicated as shown below: root@kitploit: neko@aosc-neko205 tmp $ bash 2.sh 当前用户: neko uid=1000neko gid=1001neko...

CVE-2026-86673

A vulnerability was determined in ningzichun Student Management System up to 98760f5711cf6dc8b4adca53a9e207ca49b02ebf. Affected by this issue is the function mysqliconnect of the file config/database.php of the component Database Connection. This manipulation causes hard-coded credentials. The...

CVE-2026-86672

A vulnerability has been found in ningzichun Student Management System up to 98760f5711cf6dc8b4adca53a9e207ca49b02ebf. Affected is an unknown function of the file example.7z of the component Backup Handler. The manipulation leads to information disclosure. The attack can be initiated remotely. Th...