ACF

Android Connections Forensics This software enables a forensic investigator to map each connection to its originating process. It doesn't require root privliges on the system, but do require adb & USB debugging. Supported OS ACF works currently only on Linux Ubuntu 14.04 Installation root@kitploi...

profilehound

root@kitploit: / \ / / / / / / / / / // / / / // / / / // / / / / / / / / / / / // / / / / / / // / // / / / / // / // // // ///// ///,// //,/ ProfileHound ProfileHound is a post-escalation tool to help find and achieve red-teaming objectives by locating domain user profiles on machines...

Zetsu

Un sistema RAG offline personal para conocimiento de seguridad ofensiva. Ingiere tus writeups, soluciones de laboratorio, informes de bug bounty y blogs de seguridad, luego consúltalos en lenguaje natural durante los compromisos. Sin nube, sin SaaS, tu conocimiento permanece tuyo. Qué hace ZETSU...

cve-2017-12945

CVE-2017-12945 Exploit for CVE-2017-12945 A remote authenticated blind OS command injection vulnerability exists in Mersive Solstice Pods - a wireless collaboration and presentation platform designed by Mersive Technologies Inc. - running versions of the firmware prior to 2.8.4, as...

Watcher

Plataforma automatizada de detección de amenazas cibernéticas impulsada por IA Watcher es una plataforma basada en Django y React JS diseñada para descubrir y monitorear amenazas de ciberseguridad emergentes con análisis de inteligencia de amenazas impulsado por IA. Se puede desplegar en servidor...

Detect-It-Easy

Detect It Easy DiE is a powerful tool for file type identification, popular among malware analysts , cybersecurity experts , and reverse engineers worldwide. Supporting both signature-based and heuristic analysis , DiE enables efficient file inspections across a broad range of platforms, includin...

ShellSweep

ShellSweep ShellSweep: barriendo el mal Por qué ShellSweep "ShellSweep" es una herramienta de PowerShell/Python/Lua diseñada para detectar posibles archivos de web shell en un directorio específico. ShellSweep y su conjunto de herramientas calculan la entropía del contenido de los archivos para...

the-endorser

🚨 The Endorser ya no recibe mantenimiento. Si necesitas soporte o consultoría para tus proyectos OSINT, envíame un correo a [email protected] 🚨 The Endorser Una herramienta OSINT que te permite descubrir relaciones entre personas en LinkedIn a través de recomendaciones/habilidades. Echa un...

the-endorser

🚨 The Endorser is no longer maintained. If you need support or consultation for your OSINT endeavours, drop me an e-mail [email protected] 🚨 The Endorser An OSINT tool that allows you to draw out relationships between people on LinkedIn via endorsements/skills. Check out the example digraph,...

openwifipass

OpenWifiPass An open source implementation of the grantor role in Apple's Wi-Fi Password Sharing protocol. Disclaimer OpenWifiPass is experimental software and is the result of reverse engineering efforts by the Open Wireless Link project. The code serves solely documentary and educational...

openwifipass

OpenWifiPass Una implementación de código abierto del rol de otorgante en el protocolo de Compartir Contraseña Wi-Fi de Apple. Descargo de responsabilidad OpenWifiPass es un software experimental y es el resultado de esfuerzos de ingeniería inversa por parte del proyecto Open Wireless Link. El...

Active-Directory-Exploitation-Cheat-Sheet

Hoja de referencia de explotación de Active Directory Esta hoja de referencia contiene métodos comunes de enumeración y ataque para Active Directory de Windows. ℹ️ Este repositorio fue creado por Nikos Katsiopis y Nikos Vourdas. Esta hoja de referencia está inspirada en el repositorio...

CVE-2024-41651

Blind SSRF to RCE Exploit - PrestaShop 8.1.7 This document outlines a Blind SSRF to RCE exploit on a fresh PrestaShop 8.1.7 docker installation. Prerequisites Ensure you have at least an outdated module installed, for example: psfacetedsearch Download the original package: Download psfacetedsearc...

sleuthkit

The Sleuth Kit INTRODUCTION The Sleuth Kit is an open source forensic toolkit for analyzing Microsoft and UNIX file systems and disks. The Sleuth Kit enables investigators to identify and recover evidence from images acquired during incident response or from live systems. The Sleuth Kit is open...

I-know-where-your-page-lives

I-know-where-your-page-lives I Know Where Your Page Lives: Derandomizing the latest Windows 10 Kernel - ZeroNights 2016 Requirements Intel Processor Haswell or newer Windows 10 x64 Usage Run ASLRSideChannelAttack.exe to get the PML4-Self-Ref entry root@kitploit:...

the-book-of-secret-knowledge

"El conocimiento es poderoso, ¡ten cuidado cómo lo usas! " Una colección de listas inspiradoras, manuales, chuletas, blogs, trucos, one-liners, herramientas CLI/web y más. 📔 ¿Qué es? Este repositorio es una colección de diversos materiales y herramientas que uso a diario en mi trabajo. Contiene...

CVE-2024-57972

Authors Tânia Silva, António Pinto, Pedro Pinto and Sara Paiva Denial of Service on HoloLens via Device Portal functionalities A Denial of Service DoS attack aims to overload a target system in such a way that it gradually becomes unable to respond to all the requests sent to it. This way, a...

Node.js-CVE-2024-39943

Node.js HFS Command Execution Vulnerability CVE-2024-39943 White Hat School 3rd – Jeongmin Noh @JenmrR Summary In a Node.js-based HFS server environment, there is a vulnerability where the content of an uploaded file is executed via childprocess.execSync. An attacker can directly execute OS...

permanently-jailbroken

Permanently Jailbroken We asked GPT-4, Claude, Gemini, DeepSeek, Grok, and Mistral 5 questions about their own programming. All 6 said jailbreaking will never be fixed. Not because the patches are bad. Because alignment doesn't change what the model understands — it changes what the model says. T...

herpaderping

Process Herpaderping Process Herpaderping is a method of obscuring the intentions of a process by modifying the content on disk after the image has been mapped. This results in curious behavior by security products and the OS itself. Summary Generally, a security product takes action on process...