WinObjEx64

WinObjEx64 Windows Object Explorer 64-bit WinObjEx64 is an advanced utility that lets you explore the Windows Object Manager namespace. For certain object types, you can double-click on it or use the "Properties..." toolbar button to get more information, such as description, attributes, resource...

ogi

OpenGraph Intel OGI Open-source visual link analysis and OSINT framework. Free, self-hostable, and community-driven. Features • Screenshots • Quick Start • Docker • Transform Hub • Architecture • Contributing Heads up: This project is actively evolving. It has solid core capabilities and test...

pphack

pphack Advanced Client-Side Prototype Pollution Scanner Coded with 💙 by edoardottt Share on Twitter! Install • Get Started • Examples • Changelog • Contributing • License Install 📡 Using Go root@kitploit:...

cerbrutus

Cerbrutus Modular brute force tool written in Python, for very fast password spraying SSH, and FTP and in the near future other network services. COMING SOON: SMB, HTTPs POST, HTTPs GET, HTTP BASIC AUTH Thanks to @0dayctf, Rondons, Enigma, and 001 for testing and contributing Installation:...

HATCHA

HATCHA CAPTCHA proves you're human. HATCHA proves you're not. HATCHA H yperfast A gent T est for C omputational H euristic A ssessment is a reverse CAPTCHA that gates access behind challenges trivial for AI agents but painful for humans — large-number multiplication, string reversal, binary...

Crescendo

Table of Contents 1. Getting Started 2. Requirements 3. Components 4. Testing and Development 5. Signing 6. Building 7. Issues/Bugs/Features 8. Troubleshooting 9. TODO Getting Started Apple has introduced some new security mechanisms that we need to enable to get Crescendo running. 1. Ensure that...

AutoDirbuster

root@kitploit: / | / / / / / / / / /| |/ / / / / / / / / / / / / / / / / / / / / // / // // / // / / / / // / // // / / // |,////// /./,///// Automatically run and save ffuf scans for multiple IPs Contents Quick Run FAQ Why? What is the recommended usage? What data does this need? How...

mail-security-tester

Mail Security Testing Framework A testing framework for mail security and filtering solutions. IMPORTANT: Don't do anything evil with this! Tests of cloud or otherwise hosted solutions should always be approved by the tested provider. Only use your own test accounts and don't annoy anyone with a...

LiMEaide

LiMEaide v2.0 by Daryl Bennett - kd8bnyatgmaildotcom About LiMEaide is a python application designed to remotely or locally dump RAM of a Linux client and create a volatility profile for later analysis on your local host. I hope that this will simplify Linux digital forensics in a remote...

isms-builder

ISMS Builder Self-hosted Information Security Management System — open source, no cloud required 📖 Wiki — Docker-Image-Nutzung & Umgebungsvariablen, Architektur & Module, FAQ, Mitwirken DE/EN ⚠️ Security Warning: Fake repositories and copies distributing malware ISMS Builder has no packaged...

CVE-2023-34924

CVE-2023-34924 A buffer over flow vulnerability of H3CMagicB1STV100R012 router CVE info: root@kitploit: • the name of an affected Product: H3C Magic B1STW B1STV100R012 router • the affected or fixed versions: affected version: H3C-Magic-B1STW - H3CMagicB1STV100R012. Fixed version: none • the CVE ...

s3dns

S3DNS s3dns is a lightweight DNS server that helps uncover cloud storage buckets AWS S3, Google Cloud Storage, and Azure Blob by resolving DNS requests, tracing CNAMEs, and matching known bucket URL patterns. It's a handy companion for pentesters , bug bounty hunters , and cloud security analysts...

mquire

mquire mquire, a play on the memory and inquire words, is a memory querying tool inspired by osquery. Key advantage: No external debug symbols needed mquire can analyze Linux kernel memory snapshots without requiring external debug symbols. Everything needed for analysis is already embedded in th...

s4e-cve-scanner

Latest-CVE-Scanner This API allows you to scan latest Common Vulnerabilities and Exposures CVE. This code written for Security For Everyone users. You can register at https://securityforeveryone.com/user/register for free scans. Before we get started, it's good to know: root@kitploit: 1. In order...

slsa

SLSA "salsa" is Supply-chain Levels for Software Artifacts SLSA pronounced "salsa" is a security framework from source to service, giving anyone working with software a common language for increasing levels of software security and supply chain integrity. It’s how you get from safe enough to bein...

GHSA-P569-5GJG-9CMJ rclone: RC per-server auth-proxy bypass

Summary serve/start accepts protocol options in a per-server proxyOpt object. The FTP and S3 RC adapters parse that object and pass it to their server constructors, but the constructors decide whether proxy authentication is enabled by checking the process-global proxy.Opt.AuthProxy instead of th...

rclone: RC per-server auth-proxy bypass

Summary serve/start accepts protocol options in a per-server proxyOpt object. The FTP and S3 RC adapters parse that object and pass it to their server constructors, but the constructors decide whether proxy authentication is enabled by checking the process-global proxy.Opt.AuthProxy instead of th...

numasec

numasec The open source AI security agent. Give your terminal a security brain. Run security workflows with your local tools, agents, runbooks, findings, evidence, replay and reports. npm install -g numasec Demo | Why | What it feels like | Try it | What it does | Commands | Architecture | Roadma...

klara

GReAT's KLara project KLara project is aimed at helping Threat Intelligence researchers hunt for new malware using Yara. In order to hunt efficiently for malware, one needs a large collection of samples to search over. Researchers usually need to fire a Yara rule over a collection / set of...

test-your-sysadmin-skills

:star: "A great Admin doesn't need to know everything, but they should be able to come up with amazing solutions to impossible projects. " - cwheeler33 ServerFault :star: "My skills are making things work, not knowing a billion facts. ... If I need to fix a system I’ll identify the problem, check...