DDOS-RootSec

RootSec Archive Overview of RootSec Archive Welcome to the RootSec Archive , your ultimate resource for DDOS tools, scanners, botnets, exploits, and more. Our archive includes: Mirai Edits: Private and Public Versions QBot Edits: Private and Public Versions Other Botnet Variants: Diverse...

SSRF-Exploit-CVE-2024-27564

SSRF-Exploit-CVE-2024-27564 Project Title This project demonstrates a Server-Side Request Forgery SSRF vulnerability in the pictureproxy.php file. Description A vulnerability in pictureproxy.php allows remote attackers to perform arbitrary requests by injecting URLs into the url parameter. This...

webauthn_tpm_portable

WebAuthn TPM Portable Credentials ⚠️ Early proof of concept. This project has not been thoroughly tested or audited. Do not use it for anything beyond experimentation. Portable, hardware-backed WebAuthn/passkey credentials that work across multiple devices using TPM 2.0. Traditional TPM credential...

phantomrecon

PhantomRecon PhantomRecon is a CLI-based, modular, agent-driven red team automation tool designed to demonstrate autonomous offensive security workflows powered by AI Google's Gemini via Agent Development Kit - ADK. Quick Start CLI Run interactive console metasploit-style: root@kitploit: python -...

deepsec

deepsec deepsec an agent-powered vulnerability scanner that you can run in your own infrastructure, optimized to perform on-demand review of all code in existing large-scale repos. deepsec is designed to surface hard-to-find issues that have been lurking in applications for a long time. It is...

Dop2Mop

Dop2Mop BloodHound用の概念実証OpenGraphコレクター。DevOpsからMLOpsインフラストラクチャへの攻撃パスをマッピングします。 Pipelines of Privilege: Attack Paths from DevOps to MLOps Infrastructure（Brett Hawkins @h4wkst3r 著）に基づいています。 目次 謝辞 概要 対応プラットフォーム マッピングされた信頼境界 インストール オプションの依存関係 クイックスタート デモデータの生成 BloodHoundへの取り込み 設定 設定ファイル 認証情報の検証...

CVE-2020-0796

Usage Make sure Python and ncat are installed. Run calctargetoffsets.bat on the target computer, and adjust the offsets at the top of the SMBleedingGhost.py file according to the script output also see the note below. Run ncat with the following command line arguments: ncat -lvp Where is the port...

filebuster

Filebuster An extremely fast and flexible web fuzzer What is it? Filebuster is a HTTP fuzzer / content discovery script with loads of features and built to be easy to use and fast! It uses one of the fastest HTTP classes in the world of PERL - Furl::HTTP. Also the thread modelling is optimized to...

text4shell-cve-2022-42889

Text4Shell CVE-2022-42889 Docker Lab for CVE-2022-42889 You can either build the Docker image locally or pull the image from Docker Hub and run the container. Clone the repo root@kitploit: git clone https://github.com/devenes/text4shell-cve-2022-42889.git Build the Docker image locally...

-Educational-PoC-CVE-2026-23520

CVE-2026-23520: Model Context Protocol MCP Connect RCE - Educational PoC - Arcane DISCLAIMER: This repository and the scripts contained within are strictly for educational and academic purposes only. The information provided here is intended to help security researchers, system administrators, an...

ransomware-simulator

QuickBuck - Simulador de Ransomware root@kitploit: / \ / / / / / / // // // // // // '// |/ // // // '/ \\,/// ///\// ,/ ///\ Nextron Systems GmbH El objetivo de este repositorio es proporcionar una forma simple e inofensiva de verificar la protección de tu antivirus contra ransomware. Esta...

ESFileExplorerOpenPortVuln

ES File Explorer Open Port Vulnerability - CVE-2019-6447 As per their Google Play description: ES File Explorer File Manager is a full-featured file Images, Music, Movies, Documents, app manager for both local and networked use! With over 500 million users worldwide, ES File Explorer File Manager...

whosthere

Whosthere Local Area Network discovery tool with an interactive Terminal User Interface TUI written in Go. Discover, explore, and understand your LAN in an intuitive way. Whosthere performs unprivileged, concurrent scans using mDNS and SSDP scanners. Additionally, it sweeps the local subnet by...

openSSL_1.0.1g_CVE-2014-3507

OpenSSL 1.0.1g 7 Apr 2014 Copyright c 1998-2011 The OpenSSL Project Copyright c 1995-1998 Eric A. Young, Tim J. Hudson All rights reserved. DESCRIPTION The OpenSSL Project is a collaborative effort to develop a robust, commercial-grade, fully featured, and Open Source toolkit implementing the...

CVE-2024-36104-PoC

CVE-2024-36104-PoC Proof-of-concept for CVE-2024-36104, an unauthenticated remote code execution vulnerability in Apache OFBiz before 18.12.14. OFBiz's ControlServlet resolves an unauthenticated view forgotPassword before canonicalizing the request path. Appending /%2e/%2e/ collapses back onto...

CVE-2026-64600-Refluxfs-PoC

RefluXFS CVE-2026-64600 PoC This repo contains a PoC of the recently discovered race condition vulnerability affecting COW on XFS reported by the excellent Qualys Security Team. 1 2 PoC info Handwritten based off of the excellent analysis in the Qualys advisory. Rewrites the first 4KB of the...

DoodleCloud

DoodleCloud ☁️ Turn Instagram into your personal, infinite cloud storage. DoodleCloud is a Proof-of-Concept PoC tool that uses Instagram's internal API to store unlimited files for free. By converting files into "Visual Noise" images and uploading them as DM doodles, we can bypass file type...

CheeseTools

CheeseTools This repository has been made basing onto the already existing MiscTool, so big shout-out to rasta-mouse for releasing them and for giving me the right motivation to work on them. CheeseExec Command Exec / Lateral movement via PsExec-like functionality. Must be running in the context ...

dwn

🥽 dwn dockerpwn - un gestor de herramientas de ataque para Docker introducción dwn es un "docker-compose para hackers". Utilizando un formato de "plan" YAML simple similar a docker-compose, se definen nombres de imágenes, versiones y asignaciones de volúmenes/puertos para configurar una herramien...

dwn

🥽 dwn dockerpwn - a docker attack tool manager introduction dwn is a "docker-compose for hackers". Using a simple YAML "plan" format similar to docker-compose, image names, versions and volume / port mappings are defined to setup a tool for use. features With dwn you can: Configure common pentest...