HeaderLessPE

HeaderLessPE Introduction 中文 HeaderLessPE is a memory PE loading technique used by the Icedid Trojan. Based on this technology, we propose a new way of file-less attack using HVNC . This enhancement allows to inject HeaderLessPE into execute graphical hacking tools without limitations. Compared t...

ir-rescue

ir-rescue ir-rescue is composed of two sister scripts that collect a myriad of forensic data from 32-bit and 64-bit Windows systems ir-rescue-win and from Unix systems ir-rescue-nix. The scripts respect the order of volatility and artifacts that are changed with the execution e.g. , prefetch file...

msploitego

msploitego - The Pentesting suite for Maltego THIS IS A BETA RELEASE, please be nice and report any issues Whats New New Features Now supporting multiple workspaces for Metasploit via Postgres queries A bash script that runs tons of auxiliary modules against targets. Really 'fattens' up the...

vuln-chain-labs

VulnChain Labs A deliberately vulnerable API that reproduces...

cc-ddos

Please Star this repo if you find it useful, because it's free : Donation information in the release The script still works normally, tested in 2025. cc-ddos A Python script to DDOS a website using multiple HTTP Flood methods, a normal website only needs 5 seconds to completely crash! How to Use:...

CVE-2022-22954

CVE-2022-22954 PoC RCE en VMware Workspace ONE Access e Identity Manager mediante SSTI. CVE-2022-22954 - PoC SSTI Uso: root@kitploit: CVE-2022-22954.py -h -m SETMODE -i IP -c CMD optional arguments: -h, --help show this help message and exit -m SETMODE, --mode SETMODE Available modes: shodan | fi...

dragondance

Dragon Dance What is that? Dragon Dance is a plugin for Ghidra to get visualize and manipulate the binary code coverage data. Coverage data can be imported from the multiple coverage sources. For now the plugin supports Dynamorio and Intel Pin binary instrumentation tools. Dynamorio has its own...

NimPackt-v1

A Nim-based packer for .NET executables and raw shellcode ByCas van Cooten @chvancooten With special thanks to Marcello Salvati @byt3bl33der and Fabian Mosch @S3cur3Th1sSh1t Description Update: NimPackt-v1 is among the worst code I have ever written I was just starting out learning Nim. Because o...

MATE

MATE MATE is a suite of tools for interactive program analysis with a focus on hunting for bugs in C and C++ code. MATE unifies application-specific and low-level vulnerability analysis using code property graphs CPGs, enabling the discovery of highly application-specific vulnerabilities that...

NetNTLMtoSilverTicket

SpoolSample - NetNTLMv1 - NTLM - Silver Ticket This technique has been alluded to by others, but I haven't seen anything cohesive out there. Below we'll walk through the steps of obtaining NetNTLMv1 Challenge/Response authentication, cracking those to NTLM Hashes, and using that NTLM Hash to sign...

crowbar

Crowbar - Brute forcing tool What is Crowbar? Crowbar formally known as Levye is a brute forcing tool that can be used during penetration tests. It was developed to brute force some protocols in a different manner according to other popular brute forcing tools. As an example, while most brute...

CVE-2022-31814

CVE-2022-31814 Exploit actualizado - pfBlockerNG = 2.1.426 Unauth RCE CVE-2022-31814 Descripción Este script es un exploit de prueba de concepto para pfBlockerNG = 2.1.426 que permite la ejecución remota de código. Toma una URL objetivo única o una lista de URLs, intenta subir un shell usando...

CVE-2025-43919

CVE-2025-43919: Directory Traversal in GNU Mailman 2.1.39 cPanel/WHM Bundle Discovered by: Firudin Davudzada & Musazada Aydan Disclosure Date: April 2025 CVE ID: CVE-2025-43919 Severity: 5.8 Medium CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N Attack Type: Remote Affected Software: GNU Mailman...

winevt_logs_analysis

Winevt logs analysis Remote connections Simple script for the purpose of finding remote connections to Windows machine and ideally some public IPs. It checks for some EventIDs regarding remote logins and sessions. You should pip install -r requirements.txt so the script can work and parse some of...

pstf2

pstf^2 Passive Security Tools Fingerprinting Framework Have you ever wanted a simple, easy and stealth bypass for multiple classes of security products? pstf^2 pronounced pstf-square is an implementation of an HTTP server capable of passive browser fingerprinting - and it might just be the thing...

CVE-2016-6914-UniFiVideo-LPE

CVE-2016-6914 - Ubiquiti UniFi Video 3.7.3 LPE PoC 🔥 Overview This repository contains a proof-of-concept PoC for CVE-2016-6914 , a Local Privilege Escalation LPE vulnerability affecting Ubiquiti UniFi Video 3.7.3. An attacker with low privileges can replace a trusted binary taskkill.exe inside...

CVE-2021-27513

CVE-2021-27513 ITSMBrokencontrol root@kitploit: Exploit Title: EyesOfNetwork 5.3 - File Upload Remote Code Execution Date: 10/01/2021 Exploit Author: Ariane.Blow Vendor Homepage: https://www.eyesofnetwork.com/en Software Link: http://download.eyesofnetwork.com/EyesOfNetwork-5.3-x8664-bin.iso...

Pentest-Windows

Pentest-Windows11 v3.2 The First Windows Penetration Testing Environment on Mac M Chips 中文文档 | English README 📖 Project Overview 📝 System Introduction This environment aims to provide a ready-to-use Windows penetration testing environment. Reposting is welcome. Please indicate the original author...

BeaconHunter

BeaconHunter Behavior based monitoring and hunting tool built in C leveraging ETW tracing. Blue teamers can use this tool to detect and respond to potential Cobalt Strike beacons. Red teamers can use this tool to research ETW bypasses and discover new processes that behave like beacons. Author :...

fake-sandbox

Fake Sandbox Processes FSP This small script will simulate fake processes of analysis, sandbox and VM software that some malware will try to avoid. You can download the original script made by @x0rz here thanks, by the way. You can also download my slightly optimized script from the root director...