ntlm_relay_gat

NTLM Relay Gat विवरण NTLM Relay Gat एक शक्तिशाली उपकरण है जिसे Impacket टूल सूट के ntlmrelayx.py का उपयोग करके NTLM रिले के शोषण को स्वचालित करने के लिए डिज़ाइन किया गया है। ntlmrelayx.py की क्षमताओं का लाभ उठाकर, NTLM Relay Gat NTLM रिले कमजोरियों के शोषण की प्रक्रिया को सुव्यवस्थित करता है, जो...

simplify

Simplify Generic Android Deobfuscator Simplify virtually executes an app to understand its behavior and then tries to optimize the code so that it behaves identically but is easier for a human to understand. Each optimization type is simple and generic, so it doesn't matter what the specific type...

cve-2024-10914

POC - CVE-2024–10914- Command Injection Vulnerability in name parameter for D-Link NAS Overview A vulnerability was found in D-Link DNS-320, DNS-320LW, DNS-325 and DNS-340L up to 20241028. It has been declared as critical. Affected by this vulnerability is the function cgiuseradd of the file...

cook

COOK أداة قوية جداً لتوليد قوائم الكلمات، تقسيمها، دمجها، البحث عنها، حفظها، إنشاء التباديل والتوافيق للكلمات، تطبيق ترميز/فك ترميز مختلف وكل ما تحتاجه. قاتل الإحباط! وقابلة للتخصيص! الفهرس التثبيت الإعدادات أساسيات النطاقات منهج الوسائط مكونات COOK التصنيفات احفظ قوائم الكلمات/القوائم/الحروف كل...

CVE-2026-42530

cve-id ⚡ सरल उपयोग इस प्रोजेक्ट का उपयोग केवल सुरक्षित और अधिकृत वातावरण में करें जैसे: स्थानीय वर्चुअल मशीनें Docker कंटेनर पृथक प्रयोगशाला सेटअप अधिकृत पैठ परीक्षण वातावरण उदाहरण सेटअप: root@kitploit: git clone cd Project use python follow below Create a virtual environment python -m venv venv...

ridrelay

RidRelay Quick and easy way to get domain usernames while on an internal network. Hit me up: @skorov8 How it works RidRelay combines the NTLM Relay attack, common lsarpc based queries and RID cycling to get a list of domain usernames. It takes these steps: 1. Spins up an SMB and HTTP servers and...

mantra

「🔑」 About Mantra The tool in question was created in Go and its main objective is to search for API keys in JavaScript files and HTML pages. It works by checking the source code of web pages and script files for strings that are identical or similar to API keys. These keys are often used for...

kalitorify

Transparent Proxy through Tor for Kali Linux About kalitorify kalitorify is a shell script for Kali Linux which use iptables settings to create a Transparent Proxy through the Tor Network , the program also allows you to perform various checks like checking the Tor Exit Node i.e. your public IP...

CVE-2022-30040

Tenda AX1803 v1.0.0.12890 Denial-of-service Vulnerability Overview Manufacturer's website infomation: https://www.tenda.com.cn/profile/contact.html Firmware download address: https://www.tenda.com.cn/download/default.html Vulnerability description The vulnerability lies in rootfs In / goform /...

CVE-2023-0386

typora-copy-images-to: ./image CVE-2023-0386 Exploit Usage: First : Upload fuse.c and exp.sh to the /tmp directory. You can use scp or python3 -m http.server to upload the file to the target. root@kitploit: scp /Desktop/CVE-2023-0386/exp.sh [email protected]:/tmp scp...

tiktok-scraper

TikTok Scraper & Downloader Scrape and download useful information from TikTok. No login or password are required This is not an official API support and etc. This is just a scraper that is using TikTok Web API to scrape media and related meta information. Content Features To Do Contribution...

cottage

cott age is a GitOps tool for teams to manage age-encrypted secrets in git repositories. It provides a simple workflow to encrypt/decrypt secrets, manage recipients, and keep secrets out of the repo while still allowing for easy sharing via VCS. cottage also generates redacted previews of encrypt...

CVE-2020-5902

CVE-2020-5902 BIG-IP संस्करण 15.0.0-15.1.0.3, 14.1.0-14.1.2.5, 13.1.0-13.1.3.3, 12.1.0-12.1.5.1, और 11.6.1-11.6.5.1 में, ट्रैफिक मैनेजमेंट यूज़र इंटरफ़ेस TMUI, जिसे कॉन्फ़िगरेशन उपयोगिता भी कहा जाता है, में अज्ञात पृष्ठों पर रिमोट कोड एक्ज़ीक्यूशन RCE कमजोरी है। प्रूफ ऑफ कॉन्सेप्ट root@kitploit:...

automato

automato.rb automato देशी LDAP लाइब्रेरी का उपयोग करके विभिन्न निर्देशिका ऑब्जेक्ट्स के संग्रह और गणना को स्वचालित करता है। यह आंतरिक पैठ परीक्षण के दौरान अत्यंत उपयोगी है। automato पासवर्ड स्प्रेइंग हमले भी कर सकता है, और यह पहचान सकता है कि कोई उपयोगकर्ता किसी भी संख्या में सिस्टम पर स्थानीय...

flawfinder

About This is "flawfinder" by David A. Wheeler. Flawfinder is a simple program that scans C/C++ source code and reports potential security flaws. It can be a useful tool for examining software for vulnerabilities, and it can also serve as a simple introduction to static source code analysis tools...

CVE-2026-PoCs

CVE-2026-PoCs A community-curated, verified collection of Proof-of-Concept exploits for CVEs disclosed in 2026. Why this repo Most CVE PoC collections are scattered across Twitter threads, gists, and dead blog links. This repo aims to be the single, well-organized, actively maintained index of 20...

apachedos

This tool uses CVE-2016-8740 to crash servers running Apache HTTPD 2.4.17 - 2.4.23 that support HTTP2. It crashes these servers by forcing them to allocate insanely large amounts of RAM, making the computer unuasable. It can be downloaded here you will need to run it from the command line Usage:...

CVE-2023-1389

Description CVE-2023–1389 is an Unauthenticated Command Injection vulnerability in the TP-Link Archer AX21 WiFi router. A calllback in the country parameter uses the popen function, which is run as root, allowing the attacker to inject arbitrary values through GET or POST requests to the admin...

unisoc-su

unisoc-su A method for CVE-2025-31710 and to connect to cmdskt abstract socket to obtain a root shell on unisoc unpatched models Before everyone screams, Unisoc itself authorized me to publish this after CVE-2025-31710 bullettin, so stay quiet. Let's start with a joke Yes, you are not dreaming,...

xc

XC شيل عكسي يشبه Netcat لنظامي لينكس وويندوز. الميزات ويندوز root@kitploit: Usage: └ Shared Commands: !exit !upload uploads a file to the target !download downloads a file from the target !lfwd local portforwarding like ssh -L !rfwd remote portforwarding like ssh -R !lsfwd lists active forwards...