InstagramOSINT

Instagram OSINT Tool - Archive The Instagram OSINT Tool gets a range of information from an Instagram account that you normally wouldn't be able to get from just looking at their profile. This repository has been archived. The information includes: 1. Username 2. Profile Name 3. URL 4. Followers ...

badsuccessor

BadSuccessor.py A penetration testing tool that exploits the dMSA delegated Managed Service Account privilege escalation vulnerability in Windows Server 2025 Active Directory environments. ⚠️ Legal Disclaimer This tool is for authorized penetration testing and security research purposes only. Use...

zip_smuggling

zipsmuggling This Python utility creates zip files that contain additional data embedded within the file structure. This extra data is not visible/does not display when the zip is examined or decompressed, but can be retrieved using powershell via a Windows shortcut file LNK within the zip file...

CVE-2018-2628-detect

CVE-2018-2628 Vulnerability Batch Detection Script Usage IP format: root@kitploit: 192.168.31.1:443 192.168.31.100:443 Name it url.txt and save it in the same directory, then run the script. Please comment out the output display yourself! Run it like this: root@kitploit:...

PMD

Practical Malware Development Exercise 1 - Environment Setup 1. Get a Windows virtual machine setup within a hypervisor. a. Make sure to take a snapshot of your base installation. 2. Download and install Visual Studio 2022 - https://visualstudio.microsoft.com/vs/ a. Select Desktop development wit...

sleep_python_bridge

Cobalt Strike Sleep Python Bridge This project is 'bridge' between the sleep and python language. It allows the control of a Cobalt Strike teamserver through python without the need for the standard GUI client. NOTE: This project is very much in BETA. The goal is to provide a playground for testi...

skill-scanner v2.0.14

Skill Scanner A best-effort security scanner for AI Agent Skills that detects prompt injection, data exfiltration, and malicious code patterns. Combines pattern-based detection YAML + YARA, LLM-as-a-judge , and behavioral dataflow analysis to maximize detection coverage of probable threats while...

CVE-2022-2333

CVE-2022-2333 Worked on this for over half a year, let me show you something nice Do you guys like sxf vpn? I don't really like it Worked on it for over half a year, and finally popped a shell Turns out it was on an old firmware It's gone in M7.6.8 Forget it It's not that I don't trust you, it's...

LinkedIntel

LinkedIntel root@kitploit: ╔══════════════════════════════════════════════════════════════════════════════════════╗ ║ ║ ║ ██▓ ██▓ ███▄ █ ██ ▄█▀▓█████ ▓█████▄ ██▓ ███▄ █ ▄▄▄█████▓▓█████ ██▓ ║ ║ ▓██▒ ▓██▒ ██ ▀█ █ ██▄█▒ ▓█ ▀ ▒██▀ ██▌▓██▒ ██ ▀█ █ ▓ ██▒ ▓▒▓█ ▀ ▓██▒ ║ ║ ▒██▒ ▒██▒▓██ ▀█ ██▒▓███▄░ ▒███ ░...

PANIX

PANIX - Persistence Against NIX PANIX is a powerful, modular, and highly customizable Linux persistence framework designed for security researchers, detection engineers, penetration testers, CTF enthusiasts, and more. Built with versatility in mind, PANIX emphasizes functionality, making it an...

CVE-2024-36587

CVE-2024-36587 - dnscrypt-proxy Local Privilege Escalation Overview Vulnerability Description : When installing the dnscrypt-proxy service, it trusts and registers executables in the current directory, allowing privilege escalation by inserting a malicious binary. Affected Versions : dnscrypt-pro...

CVE-2019-5736

CVE-2019-5736 Reference: cve-2019-5736-poc 1. edit poc command in stage2.cve 2. build docker docker build -t cve . 3. run docker docker run -d cve /bin/bash -c "tail -f /dev/null" 4. backup docker-runc cp /usr/bin/docker-runc /usr/bin/docker-runc.bak 5. docker exec -it docker-id /bin/bash 6. edit...

MasterHttpRelayVPN-RUST v1.9.37

mhrv-rs — bypass censorship for free, with your own Google account A small program that runs on your computer and lets you visit blocked websites for free, using a Google Apps Script you deploy in your own free Google account. Your ISP only sees encrypted traffic towww.google.com — it can't tell...

SoliditySecurity

What's this This post aims to be a relatively in-depth and up-to-date introductory post detailing the past mistakes that have been made by Solidity developers in an effort to prevent future devs from repeating history. Table of Contents 1. Re-Entrancy The Vulnerability Preventative Techniques...

UniPwn

Unitree Robot BLE Service Command Injection Analysis Author: Bin4ry aka Andreas Makris [email protected] Co-Author: h0stile aka Kevin Finisterre Contributor: legion1581 aka Konstantin Severov from theroboverse helped to fix the payload for the injection and proved it with a fully working PoC...

agent-vault v0.39.3

HTTP credential proxy and vault An open-source credential broker by Infisical that sits between your agents and the APIs they call. Agents should not possess credentials. Agent Vault eliminates credential exfiltration risk with brokered access. New here? Thelaunch blog post has the full story...

CVE-2026-21005-Docker-Registry-V2-Schema-1-Image-Poisoning

CVE-2026-21005 – Docker Registry V2 Schema 1 Image Poisoning Program Code Python Flask + Shell root@kitploit: dockerregistrysim.py - Simulated registry that serves schema1 manifests from flask import Flask, request, jsonify app = Flaskname images = 'myapp': 'v1': 'layers': 'sha256:abc',...

grafana-unauth-file-read

grafana-unauth-file-read : CVE-2021-43798 Unauthorized reading of files in Grafana 0day It looks like the new 0day LFI in Grafana exists thanks to the grafana-clock-panel plugin. It is enough to send a GET request of the form: GET /public/plugins/grafana-clock-panel/../../../../../../../etc/passw...

LinkScope_Client

LinkScope Client Installer Download Get the installer for LinkScope Client from here: https://accentusoft.com/downloads/ Description This is the repository for the LinkScope Client Online Investigation software. LinkScope allows you to perform online investigations by representing information as...

c4-meta-system

C4-META System v1.0.0 research prototype Research prototype for multi-layer AI defense: C4 explainability, ensemble classifiers, deobfuscation, O₂ security engine, ThoughtVirus defense, and SVETILO value alignment. Alpha-grade — validated internally, external audit pending. Version: 1.0.0-alpha |...