mkpath

mkpath Make URL path combinations using a wordlist Read a wordlist file and generate path combinations for given domain or list of domains. Input from wordlist file is lowercased and unique words are processed. Additionally, wordlist can be filtered using regex. When you use mkpath's -l parameter...

CVE-2025-9074

Description Vibe coded a small exploit script in pure Bash without dependencies on tools that might not be installed. The script talks to the internal Docker API, creates and starts a new container, mounts the host C drive and then executes a command inside that. The output is streamed back to th...

SCMKit

SCMKit Description S ource C ode M anagement Attack Toolkit - SCMKit is a toolkit that can be used to attack SCM systems. SCMKit allows the user to specify the SCM system and attack module to use, along with specifying valid credentials username/password or API key to the respective SCM system...

cve-2023-5044

CVE-2023-5044 Ingress Nginx Exploit Proof-Of-Concept This is a quick Go program to exploit the recent CVE in the Ingress Nginx controller. Details on how to do this are already out there via Rory McCune's blog at https://raesene.github.io/blog/2023/10/29/exploiting-CVE-2023-5044/, this just...

cs-token-vault

Token Vault BOF for Cobalt Strike This Beacon Object File BOF creates in-memory storage for stolen/duplicated Windows access tokens allow you to: Hot swap/re-use already stolen tokens without re-duplicating. Store tokens for later use in case of a person log out. Installation 1. Download the late...

DC30_Workshop

DEF CON 30 Workshop Mainframe Container The scripts here are used to build the MVS 3.8j virtual mainframe for the DEFCON 30 workshop. Thank you for taking a look at the DEFCON 30 Mainframe Buffer Overflow workshop. Use docker This docker container has everything you need to learn how to do MVS...

CVE-2020-27838

Badges License MIT Installation 1. Install Python3 and pip Instructions Here If you can't figure this out, you shouldn't really be using this Install via pip root@kitploit: pip install CVE-2020-27838 Run bellow command to check CVE-2020-27838 -h Configurations 2. We integrated with the Telegram A...

IntelTXE-PoC

Disclaimer All information is provided for educational purposes only. Follow these instructions at your own risk. Neither the authors nor their employer are responsible for any direct or consequential damage or loss arising from any person or organization acting or failing to act on the basis of...

NegoExRelay

Negoexrelayx - Negoex relaying tool Toolkit for abusing Kerberos PKU2U and NegoEx. Requires impacket It is recommended to install impacket from git directly to have the latest version available. negoexrelayx.py This tool allows you to relay NegoEx with PKU2U authentication to other copmuter and...

cybersecurity-interview-questions

Engineering Interview Questions Welcome to the The World of Enginering Interview Questions in Cybersecurity: A collection of awesome framework, libraries, learning tutorials, videos, webcasts, technical resources and cool stuff about Interview for Security & Computer Engineering. Thanks to all...

minion-ticket-bleed-plugin

Minion Ticketbleed Plugin This is a plugin for Minion that run a check for Ticketbleed CVE-2016-9244 vulnerability on F5 TLS layer. The test can either runs as a go script or an linux binary. The script is improved from https://filippo.io/Ticketbleed/ Installation Clone the project with git clone...

security-interview-questions

Sources QUIZ: https://quizlet.com/231268221/general-information-security-questions-flash-cards/ SANS Cheat Sheets: https://www.sans.org/blog/the-ultimate-list-of-sans-cheat-sheets/ Offensive Security OSCP: https://411hall.github.io/OSCP-Preparation/...

bochs_linux_kernel_debugging

bochslinuxkerneldebugging Tools for Linux kernel debugging on Bochs including symbols, native Bochs debugger and IDA PRO Generate symbol file for linux kernel debugging Follow the below steps: 0- Generate a nm style debug info file just use nm command on debug kernel image, example for Debian: 1-...

ThreatIntelligenceDiscordBot

Threat Intelligence Discord Bot The vx-underground Threat Intelligence Discord Bot gets updates from various clearnet domains, ransomware threat actor domains, and Telegram channels. This bot will check for updates in intervals of 1800 seconds omit Telegram bot, this is gotten in real time. Don't...

infosec-interview-questions

Information Security Interview Questions A collection for interview questions for Information Security roles Table Of Contents Application Security Architect Blue Team Encryption Forensics General Incidence Response Networking Red Team Vulnerability Management Where Credit is Due Application...

DC30-Badge-Challenge-Writeup

DC30-Badge-Challenge-Writeup Table of Contents Intro Challenge Part 1: Gathering Notes Challenge Part 2: Calling YИИEႱ Challenge Part 2A: Alice Challenge Part 2B: Bob Challenge Part 2C: Carol Challenge Part 2D: Dan Challenge Part 2E: Eve Challenge Part 2F: Trevor Challenge Part 3: The Final Threa...

CVE-2023-44769_ZenarioCMS--Reflected-XSS---Alias

ZenarioCMS Reflected XSS v.9.4.59197 Author: Sergio Description: Cross Site Scripting vulnerability in ZenarioCMS v.9.4.59197 allows a local attacker to execute arbitrary code via a crafted script to the Spare aliases from Alias. Attack Vectors: Scripting a vulnerability in the sanitization of th...

OverlayFS-PrivEsc-CVE-2022-0944

CVE-2022-0944: Privilege Escalation Vulnerability in OverlayFS 🛡️ Security advisory and mitigation guide for the Linux kernel privilege escalation vulnerability in OverlayFS. 📜 Overview CVE-2022-0944 is a security vulnerability in the Linux kernel's OverlayFS subsystem that allows local attackers...

RPC-Backdoor

RPC Backdoor Emulation This project is a basic implementation of an "RPC Backdoor" meant to emulate TTPs used by certain groups. The project contains an RPC server with five functions: Execute a command with cmd.exe /c and the CreateProcess API call. Steal a token and execute a command with cmd.e...

OSCP

OSCP OSCP Study Guide Table of Contents Enumeration and Recon Web Enumeration Nikto scanning: root@kitploit: nikto -h http://10.10.10.1 Directory busting with different tools: DIRB root@kitploit: dirb http://10.10.10.1 Gobuster root@kitploit: gobuster dir -u http://10.129.155.74:3000 -w...