SimpleEmailSpoofer

SimpleEmailSpoofer A few Python programs designed to help penetration testers with email spoofing. This Project is Retired Due to improvements in email protections and anti-spam techniques, it is no longer effective to attempt to spoof emails simply because they do not have a proper DMARC record ...

lanGhost

⚠️ Warning! This project is no longer maintained and may not work as excepted. A LAN dropbox chatbot controllable via Telegram features: installation: warning: lanGhost is designed for Raspberry Pis Raspbian /Kali for RPi. Running it on other/desktop distros could cause issues and may not work as...

InfoLeak-Scanner

InfoLeak-Scanner Docker First run docker run --rm -p 8000:80 siwecos/infoleak-scanner. Open your browser and use the scanner: http://localhost/?url= Install Get php5, curl and a webserver: root@kitploit: sudo apt-get install apache2 php5 php5-curl Copy application into webserver: root@kitploit: c...

macro_pack

macropack Descripción breve Advertencia: MacroPack no se mantiene desde 2021, si eres un profesional y necesitas herramientas ofensivas de infosec para acceso inicial, asunción de brecha, evasión de EDR, revisa https://www.balliskit.com MacroPack Community es una herramienta utilizada para...

macro_pack

macropack Short description Warning: MacroPack is not maintained since 2021, if you are a pro and need Offensive infosec tools for initial access, assume breach, EDR bypass, check https://www.balliskit.com MacroPack Community is a tool used to automatize obfuscation and generation of retro format...

Invoke-ATTACKAPI

Invoke-ATTACKAPI DEPRECATED WE RECOMMEND TO USE: https://github.com/Cyb3rWard0g/ATTACK-Python-Client A PowerShell script to interact with the MITRE ATT&CK Framework via its own API in order to gather information about techniques, tactics, groups, software and references provided by the MITRE ATT&...

GOSINT

GOSINT - Open Source Threat Intelligence Gathering and Processing Framework The GOSINT framework is a project used for collecting, processing, and exporting high quality indicators of compromise IOCs. GOSINT allows a security analyst to collect and standardize structured and unstructured threat...

MAL-2026-15905 Malicious code in tailwindcss-3d-styles (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6afb2de10208993a1e7511cb81a6f11806561b389673da3fa24d22598178b744 The package's main entry point fetches a JavaScript file from http://23.27.245.100:3000/index.js over plain HTTP at require time, writes the response...

Malicious code in tailwindcss-3d-styles (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6afb2de10208993a1e7511cb81a6f11806561b389673da3fa24d22598178b744 The package's main entry point fetches a JavaScript file from http://23.27.245.100:3000/index.js over plain HTTP at require time, writes the response...

MAL-2026-15907 Malicious code in tiny-folder-tree (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb7707665659f287294c31f37c4eff9ceba537e9b54859837615929c296a9540 [email protected] declares a postinstall script src/build.js that runs on npm install. The script performs a DNS TXT lookup for...

Malicious code in tiny-folder-tree (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb7707665659f287294c31f37c4eff9ceba537e9b54859837615929c296a9540 [email protected] declares a postinstall script src/build.js that runs on npm install. The script performs a DNS TXT lookup for...

Veil

Veil Veil Logo Veil is a tool designed to generate metasploit payloads that bypass common anti-virus solutions. Veil is current under support by @ChrisTruncer Software Requirements: The following OSs are officially supported: Debian 8+ Kali Linux Rolling 2018.1+ The following OSs are likely able ...

firefox_tunnel

firefoxtunnel The way to use firefox to make a tunnel to remote communication. For I/O of payloads uses cookie.sqlite and html with javascript to auto submit, the browser runs in hidden mode. Read the docs: https://medium.com/code-fighters/firefox-tunnel-to-bypass-any-firewall-bc6f8b432980 Step b...

CVE-2026-45034

🧨 PHPSpreadsheet Phar Deserialization Exploit BypassprohibitWrappers + Remote Code Execution RCE on phpoffice/phpspreadsheet This repository provides a proof-of-concept PoC exploit for a critical vulnerability in the popular PHP library PHPSpreadsheet. The attack abuses the phar:// wrapper to...

MeterPwrShell

Inactive Tool - Reason : busy with something else root@kitploit: . . . / \ / | \ \ / /| | | | | | \ \ / \ / / \ / \ \ | / / | \ \ | | / | | | | / / / Y \ /| | \ /| | / | \ / | | / | Y \ /| || |/ \ | /\ | \ | || // || / /|| /\ /| \ / / / / / / / MeterPwrShell2 Automated Tool That...

syntribos

======================== Team and repository tags .. image:: http://governance.openstack.org/badges/syntribos.svg :target: http://governance.openstack.org/reference/tags/index.html .. image:: http://img.shields.io/badge/docs-latest-brightgreen.svg?style=flat :target:...

CVE-2026-18963

CVE-2026-18963 Keycloak Reset-Credentials State Bypass Detector https://github.com/user-attachments/assets/005fab89-339a-4e4e-881c-da6a626f6c9e root@kitploit: python3 kc-resetforge.py -h usage: kc-resetforge.py -h --target TARGET --targets-file TARGETSFILE --port PORT --realm REALM --client-id...

CFUnmitigate

CFUnmitigate UAM Bypass only by using CloudScraper requests. Install root@kitploit: git clone https://github.com/Mrakovic-ORG/CFUnmitigate cd CFUnmitigate npm install node CFUnmitigate.js Disclaimer We are not responsible for any damage done with this script, its has been made for educational...

frida-fuzzer

Frida API Fuzzer v1.4 Copyright C 2020 Andrea Fioraldi [email protected] Released under the Apache License v2.0 This experimental fuzzer is meant to be used for API in-memory fuzzing. The design is highly inspired and based on AFL/AFL++. ATM the mutator is quite simple, just the AFL's havoc...

FullPowers

FullPowers FullPowers is a Proof-of-Concept tool I made for automatically recovering the default privilege set of a service account including SeAssignPrimaryToken and SeImpersonate. Rationale On Windows, some services executed as LOCAL SERVICE or NETWORK SERVICE are configured to run with a...