332065 matches found
awesome-ai-security
awesome-ai-security A curated list of AI Security materials and resources for Pentesters, Bug Hunters, and Security Researchers. root@kitploit: If you find that some links are not working, you can simply replace the username with gmh5225. Or you can send an issue for me. Show respect to all the...
NoiseHound
NoiseHound Detection-aware Active Directory attack-path scoring. DreadHost Research | companion to OffsetInspect PowerShell and OffsetScan Rust BloodHound and PlumHound on top of it finds a path to the objective. NoiseHound ingests the same graph data and re-ranks paths by expected detection cost...
Bastillion
Bastillion Una herramienta moderna y basada en web para consolas SSH y gestiΓ³n de claves SSH. Bastillion te ofrece una forma limpia y basada en navegador de gestionar el acceso SSH en todos tus sistemas β como un host bastiΓ³n con un panel amigable. Hace dos cosas: 1. Terminal SSH basada en web β...
violin
Violin β€ β Supervised Agentic Hermes Pentest Profile 35 playbooks Β· 17 references Β· 13 templates Β· required execution guard Β· Hermes-native Violin is a Hermes-native agentic pentest profile for supervised, authorised penetration tests β from reconnaissance through safe exploit validation to...
watermarks-remover
root@kitploit: | | | || | | |/ |/| || |/ |/ |/ | |/| | | | | | |/ ||| | | | | | \ | | | | | \ | \ | \ | | | || / | | \ watermarks-remover Agent skill + stdlib Python service to strip multi-vendor AI provenance marks from text and files β for privacy and hygiene on content you own. The skill is a...
windows_hardening
HardeningKitty and Windows Hardening Introduction The project started as a simple hardening list for Windows 10. After some time, HardeningKitty was created to simplify the hardening of Windows. Now, HardeningKitty supports guidelines from Microsoft, CIS Benchmarks, DoD STIG and BSI SiSyPHuS Win1...
windows_hardening
HardeningKitty and Windows Hardening Introduction The project started as a simple hardening list for Windows 10. After some time, HardeningKitty was created to simplify the hardening of Windows. Now, HardeningKitty supports guidelines from Microsoft, CIS Benchmarks, DoD STIG and BSI SiSyPHuS Win1...
Undocumented-RCE-in-PLY
Undocumented Remote Code Execution in PLY CVEβ2025β56005 root@kitploit: CVE ID: CVEβ2025β56005 Disclosure Date: July 1, 2025 Affected Product: PLY Python LexβYacc Affected Version: 3.11 PyPI distribution Vendor: PLY Python LexβYacc Affected Component: ply/yacc.py β LRTable.readpickle via...
moltis
Moltis β A secure persistent personal agent server in Rust One binary β sandboxed, secure, yours. Installation β’ Comparison β’ Architecture β’ Security β’ Features β’ How It Works β’ Contributing Moltis recently hit the front page of Hacker News. Please open an issue for any friction at all. I'm focus...
CVE-2015-1328
CVE-2015-1328 Prueba de Concepto Un exploit de Prueba de Concepto PoC para CVE-2015-1328, una vulnerabilidad de escalada de privilegios que afecta la implementaciΓ³n de overlayfs del kernel de Linux. Esta vulnerabilidad permite a usuarios locales sin privilegios obtener acceso root explotando...
CVE-2025-10230
CVE-2025-10230 β Samba WINS Hook Command Injection The author assumes no liability for misuse or damage caused by this tool. Research is provided strictly for educational and defensive purposes. Description This repository contains a Proof-of-Concept PoC for CVE-2025-10230 , a command-injection...
CVE-2024-32002-hook
This repository does not have a README...
vscode-frida
Frida Workbench for VSCode Repository | Issues | Install This is a community contributed project, not affiliated with the official Frida team. It is developed and maintained by @CodeColorist as an open-source extension for Visual Studio Code to enhance the Frida scripting experience. δΈζθ―΄ζ...
CVE-2026-8181-PoC
π¨ CVE-2026-8181 | Burst Statistics Authentication Bypass -brightgreen.svg?style=for-the-badge !CAUTION CRITICAL ALERT: This vulnerability allows an unauthenticated remote attacker to bypass authentication and gain full Administrator privileges on the target WordPress site by simply injecting a...
CVE-2025-14174-analysis
CVE-2025-14174 Analysis: ANGLE Metal Staging Buffer Out-of-Bounds Write Technical analysis and proof-of-concept for CVE-2025-14174 | ---|--- CVE| CVE-2025-14174 Severity| High Exploited ITW| Yes - targeted attacks on iOS 26 Affected| iOS Safari, macOS Chrome/Chromium/Electron not macOS Safari...
CVE-2025-2304-POC
CVE-2025-2304-POC PoC for CVE-2025-2304 β Camaleon CMS 2.9.0 privilege escalation via mass assignment on the password change endpoint. Vulnerability The /admin/users/:id/updatedajax endpoint does not filter the role parameter before passing it to the model update, allowing any authenticated user ...
cve-2019-9053-py3
CVE-2019-9053 β CMS Made Simple SQLi Exploit Python 3 Disclaimer: This tool is intended for authorized penetration testing and educational purposes only. Running this against systems without explicit written permission is illegal. The author assumes no liability for misuse. Overview This is a...
chainsaw
Rapidly Search and Hunt through Windows Forensic Artefacts Chainsaw provides a powerful βfirst-responseβ capability to quickly identify threats within Windows forensic artefacts such as Event Logs and the MFT file. Chainsaw offers a generic and fast method of searching through event logs for...
security-report-for-ruoyi-dictionary-preview-stored-xss
RuoYi 4.8.3 Dictionary Preview Stored XSS English security ad...
H2-database-CVE-2022-23221
H2 Database RCE CVE-2022-23221 whs41λ°κ³ λμ@straightSang 1. Summary Reference: https://nvd.nist.gov/vuln/detail/cve-2022-23221 H2 is a relational database management system that provides the ability to compile and execute Java code directly within the SQL engine. The H2 driver parses JDBC URLs to...