437926 matches found
instaloctrack
instaloctrack TL;DR : ascineema, video of the project A tool to scrape geotagged locations on Instagram profiles. Output in JSON & interactive map. requirements root@kitploit: sudo apt install chromium-chromedriver && chmod a+x /usr/bin/chromedriver ๐ ๏ธ installation root@kitploit: git clone...
instaloctrack
instaloctrack TL;DR : ascineema, video del proyecto Una herramienta para extraer ubicaciones georreferenciadas de perfiles de Instagram. Salida en JSON y mapa interactivo. requisitos root@kitploit: sudo apt install chromium-chromedriver && chmod a+x /usr/bin/chromedriver ๐ ๏ธ instalaciรณn...
PowerShellArmoury
!IMPORTANT This repository is now archived. Though it was a fun journey, I think PSArmoury has outlived its usefulness. PowerShellArmoury The PowerShell Armoury is meant for pentesters, "insert-color-here"-teamers and everyone else who uses a variety of PowerShell tools during their engagements. ...
3klCon
3klCon Project Archived Description Automated Recon tool which works with Large and Medium scopes. ูIt's recommended to use it on VPS, it'll discover secrets and search for vulnerabilities So, Welcome, and let's get deep into it subfinder is installed. -- findomain is insta...
Dent
THIS REPOSITORY HAS BEEN ARCHIVED To view the latest version of Dent or to submit an issue, reference https://github.com/Tylous/Dent. Dent More Information If you want to learn more about the techniques utlized in this framework please take a look at this article. Description This framework...
Malicious code in vitest-cli-dev (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ffecbd11a726d511cf3bc41e65ce2a83329b247239d230aeeff9ad70b0e5953 [email protected] is a typosquat package: its name and homepage suggest a vitest tool, but the tarball contains a copy of nodemailer plus an...
MAL-2026-15870 Malicious code in vitest-cli-dev (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ffecbd11a726d511cf3bc41e65ce2a83329b247239d230aeeff9ad70b0e5953 [email protected] is a typosquat package: its name and homepage suggest a vitest tool, but the tarball contains a copy of nodemailer plus an...
CVE-2026-78682
A flaw was found in NLTK. When an HTTP proxy is configured, a server-side request forgery SSRF vulnerability exists in the nltk.pathsec.urlopen function. An attacker can exploit this by providing a seemingly valid public URL, which the proxy then forwards to an internal service without proper...
aura
This repository has moved to a new location: https://github.com/SourceCode-AI/aura Security Auditing and code introspection About the problem The current trend in the development is to use a lot of packages in the development phase, even if they provide only trivial functionality and consist of 1...
AVIator
AviAtor Ported to NETCore 5 with an updated UI AV|Ator About ://name AV : AntiVirus Ator : Is a swordsman, alchemist, scientist, magician, scholar, and engineer, with the ability to sometimes produce objects out of thin air https://en.wikipedia.org/wiki/Ator About ://purpose AV|Ator is a backdoor...
unshackle
End of support โ the project is now archived and will no longer be worked on because of the time that is needed to maintain this project and testing it on VMware in a not-so-good pc, Unshackle - Password Bypass Tool Unshackle is an open-source tool to bypass Windows and Linux user passwords from ...
V8-sbx-bypass-collection
V8 Sandbox escape/bypass/violation and VR collection A collection of links related to V8 sandbox VR and exploitation Contents IssueTracker Articles Papers & Slides Design documents IssueTracker 2023: "issue id: 40940619, V8 Sandbox escape due to type tags in ExternalPointerTable being too coarse...
EDRSandblast-GodFault
EDRSandblast-GodFault By Gabriel Landau at Elastic Security. Modification of EDRSandblast - see original README below. Integrates GodFault into EDR Sandblast, achieving the same result without the use of any vulnerable drivers. Example Output root@kitploit:...
ZeroHVCI
ZeroHVCI - Defeating HVCI without admin privileges or a kernel driver ZeroHVCI accomplishes arbitrary kernel read/writes/function calling in Hypervisor-Protected Code Integrity HVCI protected environments calling without admin permissions or kernel drivers. Features Full non-privileged kernel...
dvenom
๐ Double Venom DVenom Double Venom DVenom is a tool that helps red teamers bypass AVs by providing an encryption wrapper and loader for your shellcode. ๐ Features ๐ก๏ธ Capable of bypassing some well-known antivirus AVs. ๐ Offers multiple encryption methods including RC4, AES256, XOR, and ROT. ๐๏ธ...
recaptcha-phish
reCAPTCHA Phish John Hammond | September 13, 2024 This is small harness to recreate the social engineering and phishing lure recently seen in the wild around August/September 2024. ๐ช The Lure In The Wild Originally seen with the guise "Verify you are human" , the attack vector being copy and past...
kernel: NFSv4: include MAY_WRITE in open permission mask for O_TRUNC
A flaw was found in the Linux kernel's NFSv4 implementation. A local user could exploit a vulnerability where opening a file with OTRUNC truncate and ORDONLY read-only flags would bypass the necessary write permission checks. This oversight allows an attacker to truncate a file without having...
sqlmap-ai
SQLMap AI Assistant An AI-powered wrapper around SQLMap that makes SQL injection testing more accessible and automated. Features Core Features AI-Assisted Testing - Intelligent vulnerability analysis and recommendations Adaptive Testing - Step-by-step testing that adapts to target responses...
peeko
peeko Version: v1.1 peeko is a browser-based XSS-powered C2 Command and Control tool that leverages the victimโs browser as a stealthy proxy inside internal networks. Through an injected XSS payload, peeko establishes a WebSocket connection to a central server, allowing an attacker to remotely...
phantomrecon
PhantomRecon PhantomRecon is a CLI-based, modular, agent-driven red team automation tool designed to demonstrate autonomous offensive security workflows powered by AI Google's Gemini via Agent Development Kit - ADK. Quick Start CLI Run interactive console metasploit-style: root@kitploit: python -...