215175 matches found
CVE-2025-59501
CVE-2025-59501 POC that abuses SCCM's AdminService API when Entra ID integration is enabled to elevate to Full Administrator and takeover an SCCM hierarchy. More details can be found in this blog Requirements uv Install root@kitploit: git clone https://github.com/garrettfoster13/CVE-2025-59501.gi...
startpage-parser
startpage-parser parsing search results from startpage search engine based on google.com results you can use it if you need get some results without get banned from google INSTALL from pip root@kitploit: $ pip install startpage-parser from source root@kitploit: $ git clone...
pingcastle
PingCastle by Netwrix Stay Connected & Contribute We welcome all PingCastle users: open source contributors, IT admins, and security professionals, to get involved and help shape the future of PingCastle. Join the Netwrix Community : community.netwrix.com Get announcements, view the roadmap, subm...
honeyprompt
honeyprompt Introducing honeyprompt, an LLM-first deception framework made by/for web developers. The personal passion project of @alectrocute. Supports all major cloud and local LLM providers. SSH, HTTP, TLS, TCP, telnet and more. It ships as a small container and a single static binary and keep...
Podroid
Podroid Run Linux containers and a full Linux desktop on your Android phone. No root. A real Alpine Linux VM with its own kernel - not a chroot or proot trick - so Podman, Docker and LXC behave exactly like they do on a server. Website Β· Documentation Β· Download APK What you get Podman, Docker an...
XSSYA
XSSYA-V2.0 has been Released - check https://github.com/yehia-mamdouh/XSSYA-V-2.0 XSSYA is a Cross Site Scripting Scanner & Vulnerability Confirmation Working in two Methods β’ Method number 1 for Confirmation Request and Response β’ Method number 2 for Confirmation Execute encoded payload and sear...
numa v0.23.1
Numa DNS you own. Everywhere you go. β numa.rs A portable DNS resolver in a single binary. Block ads on any network, name your local services frontend.numa, override any hostname with auto-revert, and seal every outbound query with ODoH RFC 9230 so no single party sees both who you are and what y...
cve-2019-0708_bluekeep_rce
Run msfconsole meterpreter/multi/handler listening on 192.168.116.133:6000 2. cd rdesktop-1.5.0 && make 3. Edit config, configure callback IP and port 192.168.116.133 6000 4. Execute ./heapspray 192.168.116.134 134 is the XP address, memory = 2G 5. msfconsole meterpreter will get a session ps:...
Maverick
Maverick An Adaptix C2 agent built with Crystal Palace β a custom PIC Position Independent Code linker and PICO module system. Demonstrates how to build modular shellcode agents where each component transport, tasks, obfuscation is a separate PICO blob loaded at runtime. Note This agent does not...
CVE-2025-15403
CVE-2025-15403 RegistrationMagic π‘ The intel drops here first. Follow @KNxploited on Telegram β precision CVE disclosures, working exploits, and deep-dive vulnerability research. The channel for those who don't wait for the news β they make it. π§ Overview CVE-2025-15403 is a CVSS 9.8 Critical...
CipherGist
If you find this GitHub repo useful, please consider giving it a star! βοΈ π‘οΈ CipherGist - End-to-End Encrypted Messaging via GitHub Gists CipherGist is a lightweight, secure, and open-source encrypted messenger that enables private communication using GitHub Gists as the backend. It leverages NaCl...
SYNwall
SYNwall Zero config IoT firewall. SYNwall is a project built for the time being as a Linux Kernel Module, to implement a transparent and no-config/no-maintenance firewall. You may want to have a look to the for an example of usage. Basics Usually IoT devices are out of a central control, with low...
pingap
pingap Before the pingap version is stable, no pull requests will be accepted. If you have any questions, please create a new issue first. Overview Pingap is a high-performance reverse proxy powered by the Cloudflare Pingora . It simplifies operational management by enabling dynamic, zero-downtim...
uncover
Quickly discover exposed hosts on the internet using multiple search engines. Features β’ Installation β’ Usage β’ Configuration β’ Running Uncover β’ Join Discord uncover is a go wrapper using APIs of well known search engines to quickly discover exposed hosts on the internet. It is built with...
trappsec
trappsec trappsec is an open-source framework that helps developers detect attackers who probe API business logic. By embedding realistic decoy routes and honey fields that are difficult to distinguish from real API constructs, attackers are nudged to authenticate β converting reconnaissance into...
SpecuCheck
SpecuCheck SpecuCheck is a Windows utility for checking the state of the software and hardware mitigations against CVE-2017-5754 Meltdown, CVE-2017-5715 Spectre v2, CVE-2018-3260 Foreshadow, and CVE-2018-3639 Spectre v4. It uses two new information classes that were added to the...
PenScope
root@kitploit: βββββββ ββββββββββββ βββββββββββ βββββββ βββββββ βββββββ ββββββββ βββββββββββββββββββββ ββββββββββββββββββββββββββββββββββββββββββββ ββββββββββββββ ββββββ ββββββββββββββ βββ βββββββββββββββββ βββββββ ββββββ βββββββββββββββββββββ βββ ββββββββββ ββββββ βββ βββββββββββ...
coeus-ci
Coeus CI Competitive Intelligence that sees all. Named after Coeus SEE-us, the 100 eyed Greek Titan of the inquisitive mind β whose name literally means "querying." CI stands for Competitive Intelligence. A business intelligence OSINT tool that builds company profiles from free public data source...
BTPS-SecPack
The Blue Team PowerShell Security Package Using Microsoft Teams for Alerts Instead of Email If you wish to use Microsoft Teams for sending alerts instead of using email you will want to load the microsoft-teams branch for this repository which has the Teams alert modifications. It will take me a...
detux
Detux: The Multiplatform Linux Sandbox Introduction: Detux is a sandbox developed to do traffic analysis of the Linux malwares and capture the IOCs by doing so. QEMU hypervisor is used to emulate Linux Debian for various CPU architectures. The following CPUs are currently supported: x86 x86-64 AR...