xss2shell

🔥 XSS2Shell — CVE-2026-64638 スキャナー & PoC ツールキット ビヘイビアファーストのマススキャナー兼エビデンスグレードのPoCジェネレーター。5億以上のWebサイトに影響するWordPressの 認証前XSS-to-RCEチェーンに対応します。 検出のみ。武器化は一切行いません。バグバウンティプログラムとブルーチーム向けに作られています。 公式チェッカー: https://pwn.ai/xss2shell-checker.html これは何か？ • クイックスタート • Shodan ダークス • 使い方 • 判定マトリックス • 検出 • FAQ 🔎...

openclaw v2026.8.1-beta.2

OpenClaw 🦞 — Your assistant, on your devices, in your chats OpenClaw is an AI assistant that runs on your devices and meets you in the channels you already use. It connects models, tools, messaging channels, and optional companion apps through one Gateway, for a single operator or for a team whos...

StegoLab

🕵️ StegoLab – オールインワン画像ステガノグラフィツールキット StegoLab は、CTF、サイバーセキュリティチャレンジ、デジタルフォレンジック のために作られた、軽量なオールインワン画像ステガノグラフィ解析スイート です。 binwalk、steghide、stegseek、zsteg、exiftool などの一般的なツールの使用を自動化し、すべてを単一のインタラクティブなインターフェースで提供します。 ✨ 特徴 🔍 メタデータの抽出（EXIF、XMP、IPTC、ICC） 🧩 隠しデータの検出：LSBカービング、strings検索、zsteg 🛠...

GPEWebDefender

GPEWebDefender A web-attack monitor. It sits next to nginx / Caddy / the app, tails access logs, and tells you when a site is being probed or exploited. If this process dies, the site keeps serving. It is not Wazuh, not OSSEC, and not a WAF. The command is gpewebdefender. Hosts, tokens, map pins,...

SiemX

SIEM-X A lightweight Security Orchestration, Automation, an...

lm-fingerprint

LM-Fingerprint Fingerprints the serving stack behind an OpenAI-compatible chat endpoint. It records tokenizer accounting, hidden template offset, validation prose, JSON/SSE shape, role acceptance, named limits, and gateway headers. It does not load weights, store API keys, or ask the model who it...

agentic-dm-gateway

Agentic DM Gateway Security control plane for LLM agents over private chat typically Discord DMs. It sits in front of your agent. It decides who may talk, whether the session is unlocked, whether the process is paused, and whether this message is safe enough to forward. Your model and tools stay...

offensive-one-liners

offensive-one-liners Jean Miélot at his desk. Public domain. A notebook of 110 offensive security one-liners for authorized testing, CTFs, bug bounty, and lab research. Organized into one markdown notebook with 12 sections. Each entry is a full command or tight pipeline, not a stub. See...

awesome-ai-security

awesome-ai-security A curated list of AI Security materials and resources for Pentesters, Bug Hunters, and Security Researchers. root@kitploit: If you find that some links are not working, you can simply replace the username with gmh5225. Or you can send an issue for me. Show respect to all the...

oscp-notes-2026

OSCP Field Notebook Port-indexed pentest methodology notebook: decision trees, copy-paste command patterns, and lessons from authorized practice boxes HTB / PG / personal labs. Merged from the older finalnotes-vault into this single tree. A workflow you can run under time pressure. Commands and...

detection-defense-library

Detection Defense Library One defense-engineering library, consolidated. Attack classes, the patterns that detect them, the committed Sigma rules, and the Windows trust-boundary model, all in a single repo. This repo folds in five former sibling repositories: Former repo| Folded into| What it hol...

krane

Krane Kubernetes RBAC Analysis made Easy Krane is a simple Kubernetes RBAC static analysis tool. It identifies potential security risks in K8s RBAC design and makes suggestions on how to mitigate them. Krane dashboard presents current RBAC security posture and lets you navigate through its...

Sandb0x-Xtract0r

SandB0x-Xtract0r An automated, cross-platform security analysis engine for safely detonating suspicious files, binaries, and applications. 🎬 Watch the Project Demo 💻 Tech Stack Core Programming Languages, Core Systems !Darthttps://img...

LeetObfuscator

LeetObfuscator root@kitploit: ██╗ ███████╗███████╗████████╗ ██║ ██╔════╝██╔════╝╚══██╔══╝ ██║ █████╗ █████╗ ██║ ██║ ██╔══╝ ██╔══╝ ██║ ███████╗███████╗███████╗ ██║ ╚══════╝╚══════╝╚══════╝ ╚═╝ ██████╗ ██████╗ ███████╗██╗ ██╗███████╗ ██████╗ █████╗ ████████╗ ██████╗ ██████╗...

Zeek-Intelligence-Feeds

Zeek インテル脅威フィード（複合インジケーター） これは、公開脅威フィードと CRITICAL PATH SECURITY が収集したデータに基づく公開フィードです。 このフィードは可能な限り頻繁に更新されます。 はじめに 以下の手順で、プロジェクトのコピーを取得して実行できます。 依存関係 ZEEK 3.0 以上 インストール Zeek の依存関係をインストールします root@kitploit: sudo apt-get install cmake make gcc g++ flex bison libpcap-dev libssl-dev python-dev swig...

0day-Rubbish

0day Rubbish 0day vulnerabilities have become rubbish in the AI era. 🌐 Official Website : https://0day-rubbish.com/blog 🎯 Why This Exists Traditional vulnerability disclosure is broken. It's slow, bureaucratic, and ineffective. In the AI era, we can mass-produce 0days at scale—making individual...

rhabdomancer

rhabdomancer 「悪用可能なバグへの道は、悪用不可能なバグで舗装されている。」 -- Mark Dowd Rhabdomancer は、バイナリファイル内の潜在的に安全でない API 関数への呼び出しを特定する、超高速な IDA ヘッドレスプラグインです。監査担当者は、これらの候補ポイントからバックトレースして、信頼できない入力へのアクセスを可能にする経路を見つけることができます。 特徴 IDA 9.x と idalib-rs Rust バインディングによる、超高速なヘッドレスユーザーエクスペリエンス。 IDA が実装するあらゆるアーキテクチャ向けにコンパイルされた C/C++...

dploot

dploot dploot is Python rewrite of SharpDPAPI written in C by Harmj0y, which is itself a port of DPAPI from Mimikatz by gentilkiwi. It implements all the DPAPI logic of these tools, but this time it is usable with a python interpreter and from a Linux environment. If you don't know what is DPAPI,...

cobol-shield

cobol-shield Security auditing toolkit for COBOL legacy systems Part of VTR Research Methodology | DOI: 10.5281/zenodo.22063208 Status: Reproducible | License: MIT | Track: Critical Infrastructure What it does Detects compilation context divergences, invisible Unicode attacks, and unsafe COBOL...

linux

리눅스 커널 리눅스 커널은 모든 리눅스 운영 체제의 핵심입니다. 하드웨어와 시스템 리소스를 관리하고, 다른 모든 소프트웨어에 기본 서비스를 제공합니다. 빠른 시작 버그 신고: Documentation/admin-guide/reporting-issues.rst 참조 최신 커널 받기: https://kernel.org 커널 빌드: Documentation/admin-guide/quickly-build-trimmed-linux.rst 참조 커뮤니티 참여: https://lore.kernel.org/ 필수 문서 모든 사용자는 다음을...