linux-root-kit

このプロジェクトについて このプロジェクトは、Technische Hochschule DeggendorfのDigitale Forensikコースの一環として開発されました。 これは、以下を含む完全なフォレンジック調査と攻撃シミュレーションを示しています： 悪意のあるPyPIパッケージを使用したPython依存関係の混乱（dependency confusion）攻撃 脆弱なバージョンのsudoを介した権限昇格（CVE-2025-32463） Sliver C2ビーコンの展開 カーネルモジュールのロード、システムコールフック、udevベースの永続化を備えたカスタムルートキット...

dolos_cloak

Dolos Cloak Dolos Cloak is a python script designed to help network penetration testers and red teamers bypass 802.1x solutions by using an advanced man-in-the-middle attack. The tool is able to piggyback on the wired connection of a victim device that is already allowed on the target network...

btlejack

BtleJack: a new Bluetooth Low Energy swiss-army knife Btlejack provides everything you need to sniff, jam and hijack Bluetooth Low Energy devices. It relies on one or more BBC Micro:Bit . devices running a dedicated firmware. You may also want to use anAdafruit's Bluefruit LE sniffer or a nRF5182...

cve-lfi-lab

🧠 CVE Lab: Tier 1 SOC Analyst Simulation CVE-2025-39507 | Local File Inclusion in WordPress Nasa Core Plugin 📝 Scenario: A Day in the SOC It’s a regular Monday. I’m logged into the SOC dashboard, reviewing alerts like usual. One comes in that catches my eye: ALERT: Possible Local File Inclusion L...

webhandler

WebHandler PHPシステム関数用のハンドラーであり、'netcat' ハンドラーの代替でもあります 情報 WebHandlerは、'Linux bash プロンプト'をシミュレートして、以下を処理および実行しようとします： root@kitploit: - PHPプログラム実行関数 例: system、passthru、exec など - バインドシェル接続 - リバースシェル接続 もう1つの機能は、HTTPヘッダーの"User-Agent"フィールドを偽装することです。--random-angent。 また、HTTPプロキシもサポートします --proxy http://:...

gattacker

A Node.js package for BLE Bluetooth Low Energy Man-in-the-Middle & more. Prerequisites see: https://github.com/sandeepmistry/noble https://github.com/sandeepmistry/bleno Install root@kitploit: npm install gattacker Usage Configure Running both components Set up variables in config.env:...

craftcms-vcard-exploit

Craft CMS vCard プラグインのデシリアライゼーション脆弱性 Craft CMSには、「vCard」という名前の連絡先を.vcfファイル形式でダウンロードするためのプラグインがあります。このプラグインはCraftのリポジトリとGithubで確認できます： Craft Plugin Store Github 説明...

CVE-2026-84452

Windows ML CLI is a command line tool for building portable, performant, and high-quality AI models for Windows ML. Prior to 0.4.0, the src/winml/modelkit/serve/cliapi.py component exposes WinML CLI commands through a localhost HTTP API without authentication and configures the alloworigins setti...

dnscat2

NOTE: The password for the .zip downloads are all "password"! Introduction Welcome to dnscat2, a DNS tunnel that WON'T make you sick and kill you! This tool is designed to create an encrypted command-and-control C&C channel over the DNS protocol, which is an effective tunnel out of almost every...

uro

uro Using a URL list for security testing can be painful as there are a lot of URLs that have uninteresting/duplicate content; uro aims to solve that. It doesn't make any http requests to the URLs and removes: incremental urls e.g. /page/1/ and /page/2/ blog posts and similar human written conten...

manul

Manul Manulは、Windows、Linux、macOS（ベータ版）上でオープンソースおよびブラックボックスバイナリ向けの、カバレッジガイド付き並列ファザーです。純粋なPythonで書かれています。 クイックスタート root@kitploit: pip3 install psutil git clone https://github.com/mxmssh/manul cd manul mkdir in mkdir out echo "AAAAAA" in/test python3 manul.py -i in -o out -n 4 "linux/test/testafl @@...

manul

Manul Manul is a coverage-guided parallel fuzzer for open-source and black-box binaries on Windows, Linux and macOS beta written in pure Python. Quick Start root@kitploit: pip3 install psutil git clone https://github.com/mxmssh/manul cd manul mkdir in mkdir out echo "AAAAAA" in/test python3...

cve-2025-48384-hook

이 저장소에는 README가 없습니다...

reconerator

Overview This is a custom .NET assembly which will perform a number of situational awareness activities. There are a number of current featuresets: BASIC - Obtains information from the disk and registry. LDAP - Allows customised AD LDAP queries to be made. RESOLVEHOST - Performs DNS lookup querie...

zscan

Zscan a scan blasting tool set 📄English document 업데이트 내용은 로그log 참조 결과 출력 형식 -출력된 일부 결과 스크린샷, 두 단계로 나뉩니다. 첫 번째 단계는 스캔 과정 중 출력으로, 호스트 생존 탐지 종료부터 시작됩니다. 두 번째 단계는 모든 스캔 결과를 정리한 것으로, 'port result list' 출력부터 시작됩니다. 소개🎉 ​ Zscan은 오픈 소스 내부 네트워크 포트 스캐너, 무차별 대입 도구 및 기타 유틸리티 도구의 모음으로, 툴킷이라고 할 수 있습니다. 내부 네트워크...

Sharp-SMBExec

Sharp-SMBExec Kevin Robertsons Invoke-SMBExec PowerShellスクリプトのネイティブC変換版です。https://github.com/Kevin-Robertson/Invoke-TheHash/blob/master/Invoke-SMBExec.ps1 .NET 3.5用 使用方法 Sharp-SMBExec.exe hash:"hash" username:"username" domain:"domain.tld" target:"target.domain.tld" command:"command" 説明...

CVE-2026-84452 Windows ML CLI: CORS misconfig enables localhost RCE

Windows ML CLI is a command line tool for building portable, performant, and high-quality AI models for Windows ML. Prior to 0.4.0, the src/winml/modelkit/serve/cliapi.py component exposes WinML CLI commands through a localhost HTTP API without authentication and configures the alloworigins setti...

CVE-2026-84452

Windows ML CLI (a command-line tool for building AI models for Windows) is vulnerable to arbitrary code execution via a CORS misconfiguration on its localhost HTTP API. Prior to version 0.4.0 , the cli_api.py and app.py components expose WinML CLI commands on localhost without authentication and ...

CVE-2026-84452 Windows ML CLI: CORS misconfig enables localhost RCE

Windows ML CLI is a command line tool for building portable, performant, and high-quality AI models for Windows ML. Prior to 0.4.0, the src/winml/modelkit/serve/cliapi.py component exposes WinML CLI commands through a localhost HTTP API without authentication and configures the alloworigins setti...

EUVD-2026-70264

Windows ML CLI is a command line tool for building portable, performant, and high-quality AI models for Windows ML. Prior to 0.4.0, the src/winml/modelkit/serve/cliapi.py component exposes WinML CLI commands through a localhost HTTP API without authentication and configures the alloworigins setti...