katana

A next-generation crawling and spidering framework Features • Installation • Usage • Scope • Config • Filters • Join Discord Features Fast And fully configurable web crawling Standard and Headless mode JavaScript parsing / crawling Customizable automatic form filling Scope control - Preconfigured...

RsWindowsThingies

RsWindowsThingies Windows Thingies... 但由 Rust 实现 工具 listenmft 监视条目的值变化。 root@kitploit: listenmft 0.2.0 Matthew Seyer See the differences in MFT attirbues. USAGE: listenmft.exe OPTIONS FLAGS: -h, --help Prints help information -V, --version Prints version information OPTIONS: -d, --debug Debug lev...

WebKit-CVE-2016-4622

WebKit CVE-2016-4622 分析：深入剖析 Slice ValueOf 快速路径漏洞 对 WebKit JavaScript Core 漏洞的全面分析与利用，该漏洞可通过 Array.slice 操作实现内存泄露 目录 执行摘要 漏洞概述 研究环境搭建 技术分析 利用过程演示 关键发现 资源与参考 执行摘要 本仓库包含对 CVE-2016-4622 的全面分析，这是 WebKit 的 JavaScript Core 引擎中的一个严重内存泄露漏洞。该漏洞源于 Array.slice 实现中的竞争条件，可利用它泄露相邻内存内容，并作为 addrof 和 fakeobj...

xss2shell

🔥 XSS2Shell — Escáner y kit de PoC para CVE-2026-64638 Escáner masivo basado en el comportamiento y generador de PoC de calidad probatoria para la cadena XSS a RCE sin autenticación previa de WordPress que afecta a más de 500 millones de sitios web. Solo detección. Sin weaponización. Diseñado par...

hook

amalmurali47/hook This repository is part of the PoC for exploiting CVE-2024-32002, a vulnerability in Git that allows RCE during a git clone operation. This repository contains the malicious hook used in the exploit. Overview For detailed instructions and an explanation of how the exploit works,...

hook

amalmurali47/hook 该仓库是用于利用CVE-2024-32002的PoC的一部分，该漏洞存在于Git中，允许在git clone操作期间执行远程代码（RCE）。该仓库包含用于该漏洞利用的恶意钩子。 概述 有关详细说明和漏洞利用工作原理的解释，请参考gitrce仓库或博文：https://amalmurali.me/posts/git-rce。 免责声明 本仓库仅供教育目的。此处提供的信息旨在帮助开发者理解该漏洞并保护其系统。请勿恶意或未经授权使用此漏洞利用。使用本仓库的风险由您自行承担。作者不对因使用这些信息而产生的任何损害或法律问题负责。...

wesng

Windows Exploit Suggester - Next Generation WES-NG WES-NG is a tool based on the output of Windows' systeminfo utility which provides the list of vulnerabilities the OS is vulnerable to, including any exploits for these vulnerabilities. Every Windows OS between Windows XP and Windows 11, includin...

Exploit for CVE-2026-12513

CVE-2026-12513: Shared Files Quick Links: Explore the res...

dhcpoptinj

DHCP option injector Have you ever wanted to intercept DHCP requests and squeeze in a few extra DHCP options, unbeknownst to the sender? Probably not. However, should the need ever come, dhcpoptinj will hopefully help you. Why There can be many a reason to mangle DHCP requests, although chances a...

creepy-plugins

creepy-plugins Description Plugins for cree.py The architecture of cree.py allows for multiple user-defined sources for geolocation information. These sources are defined as plugins and can be installed in creepy by copying them into the plugins folder under the installation directory. New plugin...

malware-jail

malware-jail Sandbox for semi-automatic Javascript malware analysis, deobfuscation and payload extraction. Written for Node.js malware-jail is written for Node's 'vm' sandbox. Currently implements WScript Windows Scripting Host context env/wscript.js, at least the part frequently used by malware...

drovorub-hunt

Dispatches from Drovorub: Network Threat Hunting for Russia GRU GTsSS' Malware at Scale Recently, the National Security Agency and Federal Bureau of Investigation released a report outlining command and control capabilities leveraged by the Russian General Staff Main Intelligence Directorate GRU...

house

root@kitploit: / | \ / / | | / // \ \ Y | /\ \ / | / /|// \ / House / / Dynamic Mobile Analysis Tool Contact: [email protected] House : A runtime mobile application analysis toolkit with a Web GUI, powered by Frida, written in Python. It is designed for helping assess mobile...

agentic-dm-gateway

Agentic DM Gateway Security control plane for LLM agents over private chat typically Discord DMs. It sits in front of your agent. It decides who may talk, whether the session is unlocked, whether the process is paused, and whether this message is safe enough to forward. Your model and tools stay...

ctf-writeups

COMPFEST 18 CTF 2026 — OuSec Team Writeups Event: COMPFEST C...

NoiseHound

NoiseHound Detection-aware Active Directory attack-path scoring. DreadHost Research | companion to OffsetInspect PowerShell and OffsetScan Rust BloodHound and PlumHound on top of it finds a path to the objective. NoiseHound ingests the same graph data and re-ranks paths by expected detection cost...

GyoiThon

GyoiThon : 下一代渗透测试工具 日文页面请点击此处。 演讲与展示 January 25th,2018:JANOG41 March 23th,2018:Black Hat ASIA 2018 Arsenal August 12th,2018:DEFCON26 DemoLabs October 24th,2018:OWS in CSS2018 November 3rd,2018:AV TOKYO 2018 HIVE December 22-23th,2018:SECCON YOROZU 2018 March 28th,2019:Black Hat ASIA 2019 Arsenal...

violin

Violin ☤ — Perfil de Pentest Agéntico Supervisado para Hermes 35 playbooks · 17 referencias · 13 plantillas · guarda de ejecución obligatoria · nativo de Hermes Violin es un perfil de pentest agéntico nativo de Hermes para pruebas de penetración supervisadas y autorizadas — desde el reconocimient...

popeye

Popeye: Kubernetes Live Cluster Linter Popeye is a utility that scans live Kubernetes clusters and reports potential issues with deployed resources and configurations. As Kubernetes landscapes grows, it is becoming a challenge for a human to track the slew of manifests and policies that orchestra...

rtl_433

rtl433 rtl433 despite the name is a generic data receiver, mainly for the 433.92 MHz, 868 MHz SRD, 315 MHz, 345 MHz, and 915 MHz ISM bands. The official source code is in the https://github.com/merbanan/rtl433/ repository. See also a list of software that works with rtl433 in the wiki. For more...