3727 matches found
SymaX5SW-Rx-Tx
SymaX5SW Rx and Tx Research carried out on a SYMA X5SW Drone with three defined objectives. 1. Intercept the telemetry of the Drone and display it in a graphical interface in real-time. 2. Create a transmitter command control, using RF, Arduino modules and C code. 3. Intercept the video stream of...
CVE-2025-25198-PoC
CVE-2025-25198-PoC Proof-of-concept for CVE-2025-25198, a Host header poisoning issue affecting Mailcow password reset flows. The script starts a local HTTPS listener on port 443, obtains a valid CSRF token automatically, sends the password reset sequence with a poisoned Host header, and stops wh...
IIS-Backdoor
IIS-Backdoor In this article I will explain how I designed a rootkit for Microsoft Internet Information Services IIS.The question is: why a backdoor in a web server? First obvious but useless answer: because we can. Ok, let us give a more clever answer. The purpose of backdooring a web sever is...
CVE-2014-1266-poc
OS X/iOS SSL Flaw POC Overview This repository contains some Go code that demonstrates the recently discovered SSL verification vulnerability in iOS and OS X. Apple Update Announcement Adam Langley's writeup Usage root@kitploit: $ git clone https://github.com/gabrielg/CVE-2014-1266-poc.git $ cd...
tcpflow
TCPFLOW 1.5.0 Downloads directory: http://digitalcorpora.org/downloads/tcpflow/ Installation Most common GNU/Linux distributions ship tcpflow in their repositories. So on Debian/Ubuntu/etc you can say root@kitploit: sudo apt-get install tcpflow and on Fedora/RedHat/CentOS/etc you can say...
AgentGuard
AgentGuard Zero-trust sandbox for autonomous AI agents. AgentGuard wraps any AI agent LangChain, CrewAI, AutoGen, custom scripts with safety rails. One command change: root@kitploit: Before dangerous β agent has full system access python myagent.py After sandboxed agentguard run -- python...
sslnuke
sslnuke -- SSL without verification isn't secure! We have all heard over and over that SSL without verification is not secure. If an SSL connection is not verified with a cached certificate, it can easily be hijacked by any attacker. So in 2013, one would think we had totally done away with this...
reFlutter
Read more on the blog: https://swarm.ptsecurity.com/fork-bomb-for-flutter/ This framework helps with Flutter apps reverse engineering using the patched version of the Flutter library which is already compiled and ready for app repacking. This library has snapshot deserialization process modified ...
starttls-mitm
starttls-mitm is a mitm proxy that will transparently proxy and dump both plaintext and TLS traffic. It uses a user-provided keyfile and certificate file to impersonate remote servers. The user must explicitly instruct the device being man-in-the-middled to trust this certificate authority -- so...
rosemary
Rosemary Cross-platform kernel-level pivoting platform over QUIC. No TUN/TAP. No proxychains. No proxy settings. Rosemary transparently intercepts traffic on remote hosts at the kernel level: no proxy settings, no TUN/TAP devices, no proxychains. Agents connect back to the server over QUIC. You...
MemITM
What's the MemITM tool? The MemITM Mem In The Middle tool has been developped in order to easily intercept "messages" in Windows processes memory. We developped a lot of custom memory interception tools in order to capture network messages before encryption, or IPC messages, and to be able to...
PAPIMonitor
PAPIMonitor P ython API Monitor for Android apps is a python tool based on Frida for monitoring user-select APIs during the app execution. The app should be installed within an emulator already connected through ADB to the pc host. The user can choose to monitor a predefined list of APIs divided...
tirith
tirith Your browser would catch this. Your terminal won't. Website | Docs | SKILL.md | Changelog | Releases Independent open-source project, with hosting supported by the Vercel Open Source Program Spring 2026 Cohort. Can you spot the difference? root@kitploit: curl -sSL...
SocialFish
SocialFish v3.0 Modern Dynamic Phishing Toolkit SocialFish v3.0 brings powerful new features for cloning modern login pages, capturing cookies, and intercepting 2FA codes with a live operator panel. π What's New in v3.0 Playwright Browser Automation β Clone modern JS-heavy login pages Full Cookie...
WebKit-NavigationAPI-SOP-Bypass
WebKit-NavigationAPI-SOP-Bypass WebKit Navigation API β Same-Origin Policy bypass via cross-port interception CVE-2026-20643...
chimera
Chimera Sandbox untrusted code with safe access to the host. Chimera is a userspace sandbox for code you don't fully trust β a natural fit for coding agents that run arbitrary, generated commands on a machine they share with you. It confines what a process can do to the host while still letting i...
Hermes-Proxy
Hermes Proxy Hermes Proxy is a desktop HTTP/HTTPS interception app built with Electron and Vite. It captures requests/responses, lets you replay requests, and export/import HAR files. Features Live traffic table with request/response details Replay requests with editable URL/headers Export all...
ClipGuard
ClipGuard Real-time detection of ClickFix clipboard injection attacks on Windows. ClipGuard monitors clipboard activity and intercepts suspicious paste operations before they can execute β specifically targeting the ClickFix technique where fake verification pages trick users into pasting malicio...
sage
Sage Safety for Agents β Agent Detection & Response for AI coding assistants Sage is a lightweight security layer that protects AI agents from executing dangerous actions. It intercepts tool calls β shell commands, URL fetches, file writes β and checks them against multiple threat detection layer...
goBox
goBox GO sandbox to run untrusted code. goBox uses Ptrace to hook into READ syscalls, giving you the option to accept or deny syscalls before they are executed. Usage root@kitploit: Usage of ./gobox: gobox FLAGS command flags: -h Print Usage. -n value A glob pattern for automatically blocking fil...