filtron

Filtron Proxy HTTP inverse pour filtrer les requêtes selon différentes règles. Peut être utilisé entre le serveur web de production et le serveur d'application pour empêcher les abus du backend de l'application. Le but original de ce programme était de défendre searx, mais il peut être utilisé po...

filtron

Filtron Reverse HTTP proxy to filter requests by different rules. Can be used between production webserver and the application server to prevent abuse of the application backend. The original purpose of this program was to defend searx, but it can be used to guard any web application. Installatio...

Exploit for Eval Injection in Langflow

Description Usage python3 poc.py -u -c Without...

kernelpop

kernelpop kernelpop is a framework for performing automated kernel vulnerability enumeration and exploitation on the following operating systems: Linux Mac It is designed to be python version-agnostic, meaning that it should work with both python2 and python3 please let me know if you find that i...

CVE-2025-29927-Proof-of-Concept

Прохождение Шаг 1 5 мин Подсказка Какие сетевые службы открыты на цельном хосте? — — — Решение root@kitploit: kali@kali:$ nmap kali@kali:$ nmap -sC -sV -p Шаг 2 5 мин Подсказка 1 Главная страница показывает только страницу входа, но веб-серверы часто раскрывают дополнительные пути. Подсказка 2...

cliam

cliam Multi cloud iam permissions enumeration tool. Currently covers: AWS GCP Azure Oracle 🚧 WIP Description Cliam is a simple cloud permissions identifier. There are two main components to the CLI. Most of the enumerated permissions are list, describe or get permissions. enumerate which can be...

CVE-2018-8120

CVE-2018-8120 CVE-2018-8120 Windows LPE эксплойт Поддерживает x32 и x64. Протестировано на: Win7 x32, Win7 x64, Win2008 x32, Win2008 R2 x32, Win2008 R2 Datacenter x64, Win2008 Enterprise x64. Использование root@kitploit: CVE-2018-8120 exploit by @unamerhttps://github.com/unamer Usage: exp.exe...

noia

Noia Noia is a web-based tool whose main aim is to ease the process of browsing mobile applications sandbox and directly previewing SQLite databases, images, and more. Powered by frida.re. Please note that I'm not a programmer, but I'm probably above the median in code-savyness. Try it out, open ...

PrivateSphare

PrivateSphare PrivateSphare est une plateforme sécurisée, anonyme et zero-knowledge de stockage et de partage de fichiers. Elle permet aux utilisateurs de téléverser des fichiers et de recevoir une phrase de passe lisible de 24 mots pour la récupération. Pas de comptes, pas de suivi, et aucune...

rizin

Rizin Rizin is a reverse engineering framework, born as a fork of the radare2, with a focus on usability, features and cleanliness. Rizin is portable and it can be used to analyze binaries, disassemble code, debug programs, as a forensic tool, as a scriptable command-line hexadecimal editor able ...

CVE-2026-39987 — Updated!

CVE-2026-39987 Exploit POC Overview This repository contains a Proof-of-Concept POC script for CVE-2026-39987, a pre-authentication Remote Code Execution RCE vulnerability in Marimo. The exploit leverages a WebSocket endpoint to execute arbitrary commands on the target system. Vulnerability Detai...

EternalBlue-Exploit-Demonstration-MS17-010

Démonstration de l'exploit EternalBlue MS17-010 Laboratoire de cybersécurité démontrant l'exploitation de CVE-2017-0144 EternalBlue à l'aide de Metasploit contre un système Windows 7 vulnérable, obtenant un accès de niveau SYSTEM via Meterpreter. Ce projet simule également une attaque de ransomwa...

altdns

Altdns - Subdomain discovery through alterations and permutations Altdns is a DNS recon tool that allows for the discovery of subdomains that conform to patterns. Altdns takes in words that could be present in subdomains under a domain such as test, dev, staging as well as takes in a list of...

wesng

Windows Exploit Suggester - Next Generation WES-NG WES-NG is a tool based on the output of Windows' systeminfo utility which provides the list of vulnerabilities the OS is vulnerable to, including any exploits for these vulnerabilities. Every Windows OS between Windows XP and Windows 11, includin...

CloudRecon

CloudRecon Trouvez des actifs à partir des certificats ! Scannez le web ! Outil présenté @DEFCON 31 PAR Gunnar Andrews @G0LDENinfosec Jason Haddix @Jhaddix Installation Vous devez activer CGO et peut-être installer gcc pour exécuter CloudRecon root@kitploit: sudo apt install gcc root@kitploit: go...

Snoopy

root@kitploit: | || | | || || || || | | | | || || || || || || || | | | | || | | || | | || || || | | || || || || || || || | | || | | || || || | | | |||| |||||||| || V0.1 "Amy, технологии не являются по своей сути хорошими или плохими. Всё зависит от того, как их использовать. Как с Лучом смерти."...

CVE-2023-24055_PoC

CVE-2023-24055 PoC KeePass 2.5x В процессе обсуждения и анализа... https://sourceforge.net/p/keepass/discussion/329220/thread/a146e5cf6b/ https://sourceforge.net/p/keepass/feature-requests/2773/ Злоумышленник, имеющий доступ на запись к конфигурационному файлу KeePass, может изменить его и внедри...

frp

frp README | 中文文档 Sponsors frp is an open source project with its ongoing development made possible entirely by the support of our awesome sponsors. If you'd like to join them, please consider sponsoring frp's development. Gold Sponsors The complete IDE crafted for professional Go developers The...

CVE-2023-23752

Binaires pour CVE-2023-23752 À des fins éthiques et éducatives uniquement 😉 Utilisation root@kitploit: CVE-2023-23752 -u http://someserverexample.com Compilation à partir des sources Go Si vous avez Go installé, faites : root@kitploit: git clone https://github.com/gunzf0x/CVE-2023-23752.git cd...

CVE-2022-22954-PoC

CVE-2022-22954 PoC VMware Workspace ONE Access e Identity Manager RCE mediante SSTI. CVE-2022-22954 - PoC SSTI Uso: root@kitploit: CVE-2022-22954.py -h -m SETMODE -i IP -c CMD optional arguments: -h, --help show this help message and exit -m SETMODE, --mode SETMODE Available modes: shodan | file ...