sub.Monitor

sub.Monitor root@kitploit: Herramienta de monitoreo de subdominios rápida y fácil de usar para la gestión continua de la superficie de ataque. ¿Por qué? ¿Por qué optar por sub.Monitor? Este programa ofrece una configuración sencilla gracias a su uso de SQLite para almacenar todos los dominios...

CVE-2026-16723

🚨 CVE-2026-16723 — fastjson 1.2.83 @JSONType Resource Probe Chain RCE A reproduction project for remote class loading / command execution in fastjson 1.2.66 1.2.83 via the@JSONType annotation + an illegal class name + the jar: protocol. ⚠️ Disclaimer This project is intended solely for security...

fingerprint

fingerprint Monitoring Registry and File Changes in Windows - forensic analytics for windows registry and files "fingerprint" records the state of a windows system, in terms of files and registry. Such fingerprints can be compared to find all changed data. The data can be narrowed with procmon...

pytm

pytm: A Pythonic framework for threat modeling Introduction Traditional threat modeling too often comes late to the party, or sometimes not at all. In addition, creating manual data flows and reports can be extremely time-consuming. The goal of pytm is to shift threat modeling to the left, making...

FinalRecon

Twitter - Telegram - thewhiteh4t's Blog FinalRecon is an all in one automatic web reconnaissance tool written in python. Goal of FinalRecon is to provide an overview of the target in a short amount of time while maintaining the accuracy of results. Instead of executing several tools one after...

Hulios

Hulios Sistema endurecido de invisibilidad universal y cebolla para Linux Hulios es una puerta de enlace VPN Tor transparente para Linux impulsada por eBPF. Protege el tráfico de red saliente redirigiendo los sockets TCP y las consultas DNS a través de una instancia embebida de Arti cliente Tor y...

krbrelayx

Krbrelayx - Kerberos 中继和无约束委派滥用工具包 用于滥用 Kerberos 的工具包。 运行需要 impacket、ldap3 和 dnspython。 建议直接从 git 安装 impacket，以获得最新版本。 有关此工具包的更多信息，请参见我的博客 https://dirkjanm.io/krbrelayx-unconstrained-delegation-abuse-toolkit/。有关 Kerberos 中继的信息，请参阅后续博客...

krbrelayx

Krbrelayx - Kerberos relaying and unconstrained delegation abuse toolkit Toolkit for abusing Kerberos. Requires impacket, ldap3 and dnspython to function. It is recommended to install impacket from git directly to have the latest version available. More info about this toolkit available in my blo...

cve-2025-59489

Unity CVE-2025-59489 Vulnerability Detection Tool An automated detection tool for Unity Runtime injection vulnerabilities, specifically designed for Android game platforms. Vulnerability Overview CVE ID : CVE-2025-59489 CVSS Score : 8.4 High Affected Scope : Android applications built with Unity...

HoneyWire

HoneyWire 📋 Tabla de Contenidos Resumen Demostración El Estándar Universal de Eventos Características Arquitectura Guía de Inicio Rápido Notas de Seguridad Stack Tecnológico Hoja de Ruta y Desarrollo Versionado y Referencia de API Resumen HoneyWire es un constructor de Sistemas de Alerta Temprana...

sudoinjection

CVE-2025-32463: Local Privilege Escalation via sudo -R NSS Injection Summary This PoC demonstrates local privilege escalation on Linux systems via abuse of the sudo -R option in conjunction with a custom NSS module. It targets the vulnerability CVE-2025-32463, which stems from unsafe handling of...

rbuster

Rbuster yet another dirbuster Common Command line options -a - specify a user agent string to send in the request -c - use this to specify any cookies that you might need simulating auth. header. -f - force processing of a domain with wildcard results. -l - show the length of the response. -r...

cirro

Cirro es una plataforma extensible de investigación en seguridad que permite a investigadores y testers de penetración recolectar, analizar y visualizar entornos en la nube y relaciones de identidad a través de bases de datos de grafos. Construida con una arquitectura modular, Cirro puede...

CVE-2020-7247

CVE-2020-7247 Esta vulnerabilidad existe en la función “smtpmailaddr” del servidor de correo OpenSMTPD de OpenBSD, y afecta a OpenBSD versión 6.6. Esto permite a un atacante ejecutar comandos de shell arbitrarios como “sleep 66” como usuario root ¿Cómo usar? python3 getShell.py Si necesitas una...

reconmap

Reconmap Pentesting Management, Automation and Reporting Platform Reconmap is an open source vulnerability assessment and penetration testing platform designed to support security professionals throughout the entire engagement lifecycle. It enables penetration testers and InfoSec teams to...

AdGuardHome

Privacy protection center for you and your devices Free and open source, powerful network-wide ads & trackers blocking DNS server. AdGuard.com | Wiki | Reddit | Twitter | Telegram AdGuard Home is a network-wide software for blocking ads and tracking. After you set it up, it'll cover ALL your home...

ios-mac-app

Proton VPN for iOS and macOS Copyright c 2025 Proton Technologies AG Dependencies This project uses Swift Package Manager for all of it's dependencies. Allow Xcode to resolve packages before running any target. Third-party dependencies ACKNOWLEDGEMENTS.md Setup Enable Git LFS on your machine Clon...

pcileech

PCILeech Summary: PCILeech uses PCIe hardware devices to read and write target system memory. This is achieved by using DMA over PCIe. No drivers are needed on the target system. PCILeech also works without hardware together with a wide range of software memory acqusition methods supported by the...

Struts2Shell

Struts2Shell Un exploit y biblioteca para CVE-2017-5638 - el bug S2-045 de Apache Struts2. Instalación root@kitploit: $ npm install -g struts2shell Instalación como Biblioteca root@kitploit: $ npm install struts2shell Opciones de Línea de Comandos root@kitploit: -h, --help muestra información de...

CVE-2020-2038

CVE-2020-2038 Exploit to capitalize on vulnerability CVE-2020-2038. According to Palo Alto Networks: An OS Command Injection vulnerability in the PAN-OS management interface that allows authenticated administrators to execute arbitrary OS commands with root privileges. This issue impacts: PAN-OS...