Pesidious

Malware Mutation using Deep Reinforcement Learning and GANs The purpose of the tool is to use artificial intelligence to mutate a malware PE32 only sample to bypass AI powered classifiers while keeping its functionality intact. In the past, notable work has been done in this domain with researche...

laravel-crypto-killer

Laravel crypto killer A tool designed to exploit bad implementations of decryption mechanisms in Laravel applications. This tool was firstly designed to craft payloads targeting the Laravel decrypt function from the package Illuminate\Encryption. It can also be used to decrypt any data encrypted...

laravel-crypto-killer

Laravel crypto killer Una herramienta diseñada para explotar malas implementaciones de los mecanismos de descifrado en aplicaciones Laravel. Esta herramienta fue diseñada inicialmente para crear payloads dirigidos a la función decrypt de Laravel del paquete Illuminate\Encryption. También puede...

QueenSono

QueenSono Exfiltración de Datos ICMP Un Paquete Golang para Exfiltración de Datos con protocolo ICMP IPv4 & IPv6. La herramienta QueenSono solo se basa en el hecho de que el protocolo ICMP no es monitoreado. Es bastante común. También podría usarse dentro de un sistema con inspección básica de IC...

nysm

nysm 一个隐秘的后渗透容器。 目录 1. 简介 2. 安装 2.1 依赖 2.2 Linux 头文件 2.3 构建 3. 使用 3.1 示例 4. 工作原理 4.1 概述 4.2 隐藏 eBPF 对象 4.3 隐藏 Auditd 日志 4.4 隐藏 PID 4.5 隐藏套接字 5. 局限性 简介 随着基于 eBPF 的攻防工具的流行——从凭证窃取器到能隐藏自身 PID 的 rootkit——一个问题浮现出来： 是否有可能让 eBPF 在自己眼中变得不可见？ 由此，我们创建了 nysm，一个 eBPF 隐秘容器，旨在让攻击工具避开系统管理员的视线，不仅隐藏...

slowloris

slowloris.py - Simple slowloris in Python What is Slowloris? Slowloris is basically an HTTP Denial of Service attack that affects threaded servers. It works like this: 1. We start making lots of HTTP requests. 2. We send headers periodically every 15 seconds to keep the connections open. 3. We...

slowloris

slowloris.py - Slowloris simple en Python ¿Qué es Slowloris? Slowloris es básicamente un ataque de Denegación de Servicio HTTP que afecta a servidores con hilos. Funciona así: 1. Comenzamos a hacer muchas solicitudes HTTP. 2. Enviamos encabezados periódicamente cada 15 segundos para mantener las...

l4srs

l4srs Rust implementation of the Log 4 Shell log 4 j - CVE-2021-44228 to build run cargo +nightly build This version will let you build command classes, dynamically serve a mini meterpreter that runs in a thread of the exploited Java app, and runs the LDAP and HTTP servers. This version servers...

l4s_poc

l4spoc Log4Shell Cve-2021-44228 Proof Of Concept This is a personal project that runs a simple POC that will host an LDAP server and an HTTP server for the Log4Shell exploit. Server The runservers.py will setup a stripped down meterpreter client that will call back to the Metasploit instance pass...

CVE-2021-22555

CVE-2021-22555 This repo hosts TUKRU's Linux Privilege Escalation exploit CVE-2021-22555. It demonstrates gaining root privileges via a vulnerability. Tested on Ubuntu 5.8.0-48-generic and COS 5.4.89+. Use responsibly and ethically. CVE-2021-22555: Linux Privilege Escalation Exploit This reposito...

The Quantum Ad-List

The Quantum Ad-List Next-Generation AI-Powered Ad & Tracker Blocking 📜 Table of Contents 1. Legal & Ethical Notice 2. Project Overview Maintainers Technical Architecture Motivation Security & Privacy 3. Installation Hosts File Integration Ad-Blocker Compatibility Pi-hole Integration 4. Issue...

ADTrapper

ADTrapper - Active Directory Security Analysis Platform Professional Active Directory Security Analysis and Threat Detection Platform Transform Windows authentication logs into actionable security insights with advanced threat detection and interactive visualizations Overview ADTrapper is a...

ClickOnceBlobber

ClickOnce AppDomainManager Injection Toolkit Weaponize signed .NET ClickOnce applications for initial access by hijacking a dependency DLL via AppDomainManager injection and loading a C port of ProxyBlob Agent. Ships with a C port of ProxyBlob — a SOCKS5 proxy that tunnels all traffic through Azu...

CVE-2023-22515-check

Disclaimer This script is for educational and testing purposes only. Use it responsibly and ensure you have permission to test the target Confluence instance. Unauthorized testing is illegal and unethical. Confluence CVE-2023-22515 Vulnerability Detection Script This script checks if a Confluence...

censys-python

Biblioteca Python de Censys !WARNING AVISO DE OBSOLESCENCIA : Las APIs de Censys Search v1 y v2 quedarán obsoletas pronto. Migre a la nueva Plataforma Censys. 📖 Nueva documentación de la API : https://docs.censys.com/reference/get-started 📦 Nuevo SDK de Python : censys/censys-sdk-python 🖥️ Nueva...

cve-2025-29927

CVE-2025-29927 CVE-2025-29927 Vulnerability All versions of Next.js from 11.1.4 through 13.5.6, 14.x before 14.2.25, and 15.x before 15.2.3 are affected by this vulnerability. The impact is particularly significant for applications that rely on middleware for implementing access controls, as...

GitHarvest3r

Herramienta simple de recolección de exploits CVE escrita en python. Instalación root@kitploit: git clone https://github.com/34zY/GitHarvest3r cd GitHarvest3r/ pip install -r requirements.txt Configurar clave de API 1. Obtén tu clave de API de Github gratuita = 2. Establécela en la variable TOKEN...

WPAxFuzz

Un Fuzzer Wi-Fi completo Reportar un error · Solicitar una característica Tabla de contenidos 1. Acerca del proyecto 2. Fuzzing de tramas de gestión, control y datos Requisitos y dependencias Descripción 3. Fuzzing del intercambio SAE 4. Módulo de ataque DoS Descripción 5. Vulnerabilidades 6...

All-CEHv13-Module-wise-PDF-Reports

CEHv13 Modules Banner 📁 CEHv13 Modules - PDF Report Collection 📁 Repository Structure CEHv13-Modules/ ├── Module-01-Introduction/ │ └── Module-01-Introduction.pdf ├── Module-02-Footprinting/ │ └── Module-02-Footprinting.pdf ├── Module-03-Scanning/ │ └── Module-03-Scanning.pdf ├──...

pgpdump

pgpdump: a PGP packet visualizer Kazu Yamamoto [email protected] August 16, 2010 Overview pgpdump is a PGP packet visualizer which displays the packet format of OpenPGP RFC 4880 and PGP version 2 RFC 1991. Here is an example: root@kitploit: % pgpdump test/sig1 Old: Marker Packettag 103 bytes...