Lucene search
+L

937 matches found

Kitploit
Kitploit
added 2026/09/13 5:34 p.m.5 views

sqlwinds

SQLWinds SQL Security Assessment & Post-Exploitation Toolkit SQLWinds is a command-line tool for security testing and exploiting Microsoft SQL Server. It provides an interactive environment to deeply analyze servers, escalate privileges, execute attacks, and pivot through networks all with...

6AI score
SaveExploits0References3
Kitploit
Kitploit
added 2026/09/13 5:32 p.m.100 views

r77-rootkit

r77 Rootkit Fileless ring 3 rootkit r77 is a ring 3 rootkit that hides everything: Files, directories Processes & CPU/GPU usage Registry keys & values Services TCP & UDP connections Junctions, named pipes, scheduled tasks Hiding by prefix Everything that starts with "$77" is hidden. Configuration...

6.3AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/13 5:26 p.m.8 views

wslink-vm-analyzer

WslinkVMAnalyzer WslinkVMAnalyzer is a tool primarily developed to facilitate analysis of Wslink, which is a unique loader running as a server and executing received modules in-memory. This tool uses Miasm, an open source framework that provides us with a symbolic execution engine. The tool and...

6.1AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/13 4:40 p.m.7 views

DesckVB-RAT

DesckVB RAT v2.9 — Modular .NET RAT, Multi-Stage Delivery & Plugin Ecosystem Toolchain Linkage to “Pjoao1578” Author: ShadowOpCode X/Twitter: https://x.com/ShadowOpCode This repository accompanies a full technical report documenting an active malware ecosystem centered around DesckVB RAT , a...

6AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/13 4:03 p.m.9 views

DexLoader

⚡Dex Loader Android This project demonstrates different methods of loading and executing DEX files in Android, with a focus on dynamic loading techniques such as DexClassLoader, PathClassLoader, and in-memory execution. 📦 Project Structure Dex Loader : Loads and executes contacts.dex, which...

5.9AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/13 3:15 p.m.427 views

moneta

/ \ / | / \ / \ / \ / / \ \ / Y | \ /| | / | //| | / | / / / / / Moneta v1.0 | Forrest Orr | 2020 REQUIRED -m |region|referenced|ioc -p |PID OPTIONAL -v detail|debug|surface -d --option from-base|statistics --filter unsigned-module|clr-prvx|clr-heap|metadata-modules --address --region-size -m...

5.7AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/13 2:59 p.m.10 views

execute-assembly-pico

Execute Assembly PICO A PICO for Crystal Palace that implements native CLR hosting to execute an appended .NET assembly in memory, using the same technique as the donut shellcode generator. This allows you to load .NET tools like Rubeus or Seatbelt from position-independent code without dropping...

6AI score
SaveExploits0References3
Kitploit
Kitploit
added 2026/09/13 2:38 p.m.7 views

EXCELntDonut

root@kitploit: | \ / / | | | | || \ | | | | \ / | | | | | | ' | | | | |/ | ' | | | | | | | / \ || || || | | | || || | | | | | || | | |//\|||| |||/ /|| ||,|| by @JoeLeonJr @FortyNorthSec EXCELntDonut is a XLM Excel 4.0 macro generator. Start with C source code EXE and end with a XLM Excel...

5.9AI score
SaveExploits0References2
Kitploit
Kitploit
added 2026/09/13 2:29 p.m.12 views

malasada

malasada Donut for Linux, converts a Linux ELF shared object .so into a position-independent .bin blob that can be executed directly from memory for example, by copying it into an mmap'd region and jumping to it as a function pointer. This project intentionally avoids memfd memfdcreate, execveat ...

5.9AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/13 2:27 p.m.8 views

ScreenshotBOF

ScreenshotBOF An alternative screenshot capability for Cobalt Strike that uses WinAPI and does not perform a fork & run. Screenshot downloaded in memory. Features JPEG compression In memory download as screenshot or as file Supports capturing of minimized windows Grayscale, JPEG quality and...

5.9AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/13 1:59 p.m.11 views

Amnesiac

Amnesiac Amnesiac is a post-exploitation framework designed to assist with lateral movement within active directory environments. Amnesiac is being developed to bridge a gap on Windows OS, where post-exploitation frameworks are not readily available unless explicitly installed. In fact, it is...

5.8AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/13 1:43 p.m.178 views

hollows_hunter

hollowshunter Hollows Hunter is a command-line application based on PE-sieve passive memory scanner. Recognizes and dumps a variety of potentially malicious implants replaced/implanted PEs, shellcodes, hooks, in-memory patches. While in case of PE-sieve you can select the process only by its PID,...

6AI score
SaveExploits0References9
Kitploit
Kitploit
added 2026/09/13 11:48 a.m.12 views

PolyEngine

PolyEngine — Polymorphic PE Packer 📦 PolyEngine is a research-grade, evasive PE packer designed for CTF challenges and low-level Windows security education. It focuses on bypassing EDR and AV heuristics through a layered stack of in-memory execution and obfuscation techniques. This is a side...

6AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/13 11:12 a.m.8 views

Fritter

Fritter The evasive cousin of Donut. Fritter is a heavily modified fork of TheWover and Odzhan's Donut shellcode generator. It generates position-independent shellcode for in-memory execution of VBScript, JScript, EXE, DLL, and .NET assemblies, with a focus on evasion and signature resistance. Th...

5.9AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/13 11:11 a.m.11 views

BOF_RunPe

BOFRunPE BOF RunPE is a Beacon Object File for Cobalt Strike that executes PE files entirely in-memory within the beacon process. Unlike traditional fork&run, no child process is spawned, no console is created, and no pipe is used - all output is captured via IAT hooking and redirected to the...

6AI score
SaveExploits0References2
Kitploit
Kitploit
added 2026/09/13 10:27 a.m.9 views

HeaderLessPE

HeaderLessPE Introduction 中文 HeaderLessPE is a memory PE loading technique used by the Icedid Trojan. Based on this technology, we propose a new way of file-less attack using HVNC . This enhancement allows to inject HeaderLessPE into execute graphical hacking tools without limitations. Compared t...

5.9AI score
SaveExploits0References2
Kitploit
Kitploit
added 2026/09/13 9:33 a.m.8 views

PixelCode-Attack

Malicious PixelCode Delivery Technique Malicious PixelCode is a security research project that demonstrates a covert technique for encoding executable files into pixel data and storing them inside images or videos. A lightweight loader retrieves the media file, reconstructs the original binary, a...

5.9AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/13 9:24 a.m.9 views

Soviet

Soviet A Runtime Crypter in C for Linux. This will encrypt ELF binaries, but allow them to still run in memory while using no file handles. Then it will overwrite the program in memory with random data. The point being to make binary analyis and memory analysis more difficult. Dependencies On...

6AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/13 9:02 a.m.8 views

Inline-Execute-PE

Inline-Execute-PE DISCLAIMER: This project is complex and failure to understand how it works and adequately test it can result in you crashing Beacons and losing access! I highly encourage you to read all of the documentation up until the "Design Considerations and Commentary" section! Introducti...

5.9AI score
SaveExploits0References3
Kitploit
Kitploit
added 2026/09/13 8:41 a.m.50 views

elfloader

Summary elfloader is a super simple loader for ELF files that generates a flat in-memory representation of the ELF. Pair this with Rust and now you can write your shellcode in a proper, safe, high-level language. Any target that LLVM can target can be used, including custom target specifications...

5.9AI score
SaveExploits0
Rows per page
Query Builder