CVE-2022-0847-DirtyPipe-Exploits

CVE-2022-0847-DirtyPipe-Exploits Una colección de exploits y documentación para testers de penetración y red teamers que puede ser utilizada para ayudar en la explotación de la vulnerabilidad Dirty Pipe de Linux. Acerca de la Vulnerabilidad Dirty Pipe CVE-2022-0847 es una vulnerabilidad de escala...

Registry-Spy

Registry Spy: Navegador de Registro de Windows Multiplataforma Registry Spy es un visor gratuito, de código abierto y multiplataforma del Registro de Windows. Es un explorador rápido, moderno y versátil para archivos de registro en bruto. Características: Soporte para Windows, macOS y Linux El...

CVE-2019-0232

CVE-2019-0232 Exploit Remote Code Execution RCE in CGI Servlet – Apache Tomcat on Windows Refference : https://wwws.nightwatchcybersecurity.com/2019/04/30/remote-code-execution-rce-in-cgi-servlet-apache-tomcat-on-windows-cve-2019-0232/ root@kitploit: Apache Tomcat has a vulnerability in the CGI...

github-dorks

Github Dorks Github Search is a quite powerful and useful feature that can be used to search for sensitive data on repositories. Collection of Github dorks can reveal sensitive personal and/or organizational information such as private keys, credentials, authentication tokens, etc. This list is...

DeepBlueCLI

DeepBlueCLI DeepBlueCLI - un módulo de PowerShell para la caza de amenazas a través de registros de eventos de Windows Eric Conrad, Backshore Communications, LLC deepblue at backshore dot net Twitter: @ericconrad http://ericconrad.com Los archivos EVTX de muestra están en el directorio .\evtx Not...

kiterunner

Kiterunner Introduction For the longest of times, content discovery has been focused on finding files and folders. While this approach is effective for legacy web servers that host static files or respond with 3xx’s upon a partial path, it is no longer effective for modern web applications,...

fix-CVE-2020-15228

Arreglar CVE-2020-15228 set-env, add-path en Github-Actions Este script cambia líneas en tu archivo de acción de github. Le das un nombre de directorio, y busca todos los archivos con la extensión ".sh" o ".yml". Reconoce estas líneas: root@kitploit: echo ::set-env name=FOOBAR::$FOOBAR echo...

CVE-2002-0347

CVE-2002-0347 Vulnerabilidad de salto de directorio en Cobalt RAQ 4 permite a atacantes remotos leer archivos protegidos por contraseña, y posiblemente archivos fuera de la raíz web, mediante .. punto punto en una solicitud HTTP. Publicación de Packetstorm en...

DiaSymbolView

DiaSymbolView DiaSymbolView is a tool for visually inspecting debug information recorded in .pdb files. It relies on MSDIA API and presents a hierarchy of debug symbols and their 200+ properties. You can download the binaries from the releases page. To build the tool yourself, follow instructions...

lifer

lifer A forensic tool for Windows link file examinations i.e. Windows shortcuts SYNOPSIS 'lifer' is a Windows or nix command-line tool inspired by the whitepaper 'The Meaning of Link Files in Forensic Examinations' by Harry Parsonage and available here. It started life as a lightweight tool that ...

EUVD-2026-88253

A security vulnerability has been detected in dbgate up to 7.3.1. Affected by this vulnerability is the function files of the file packages/api/src/controllers/runners.js of the component Files Endpoint. The manipulation of the argument runid leads to path traversal. The attack is possible to be...

CVE-2026-101070

The software dbgate (up to version 7.3.1 ) contains a path traversal vulnerability within the Files Endpoint component. The flaw exists in the files function of the packages/api/src/controllers/runners.js file, where the manipulation of the runid argument allows for unauthorized file system acces...

bscan

:mag: an asynchronous target enumeration tool :magright: Synopsis bscan is a command-line utility to perform active information gathering and service enumeration. At its core, bscan asynchronously spawns processes of well-known scanning utilities, repurposing scan results into highlighted console...

modelaudit

ModelAudit Secure your AI models before deployment. Static scanner that detects malicious code, potential backdoor indicators, and security vulnerabilities in ML model files — without ever loading or executing them. Full Documentation | Usage Examples | Supported Formats...

BRC4-BOF-Artillery

Generic This repository includes a collection of generic BOFs I wrote over a period of time. This repository solely focuses on porting and execution, without modifying the original source for stability. While I may conduct further testing in the future, this is not officially supported. Contact...

CVE-2025-8088

CVE-2025-8088 Herramienta Python para manejo seguro de archivos, conciencia de path traversal y extracción segura. Inspirado en CVE-2025-8088. Safe Archive Handling PoC Herramienta educativa de equipo azul inspirada en problemas de path traversal como CVE-2025-8088. Este script ayuda a detectar y...

tiktok-scraper

TikTok Scraper & Downloader Scrape and download useful information from TikTok. No login or password are required This is not an official API support and etc. This is just a scraper that is using TikTok Web API to scrape media and related meta information. Content Features To Do Contribution...

fernflower

fernflower Quickly decompile class files in the terminal Usage: root@kitploit: Usage: java -jar fernflower.jar -= + Example: java -jar fernflower.jar -dgs=true c:\my\source\ c:\my.jar d:\decompiled\ Ps: No more need for jd-gui, it is more powerful than jd-gui...

rifiuti2

Introducción Rifiuti2 es una herramienta para analizar archivos INFO2 de la Papelera de Reciclaje de Windows. El análisis de la Papelera de Reciclaje de Windows se realiza normalmente durante la informática forense en Windows. Rifiuti2 puede extraer la hora de eliminación de archivos, la ruta...

tachyon

Tachyon Tachyon is a fast web application security reconnaissance tool. It is specifically meant to crawl a web application and look for left over or non-indexed files with the addition of reporting pages or scripts leaking internal data. User Requirements Linux Python 3.6+ User Installation...