Coldroot

Coldroot Mac OS Trojan made with love 3 i make this one cuz i believe we don't give Mac it's rights in this field :P so i decided to make this Trojan to Play with Mac users 😂 Tools i'm using Free Pascal 3.0 http://www.freepascal.org/down/i386/macosx.var Intellij IDEA 15 Ultimate...

OpenSSL_1_1_1_g

OpenSSL 1.1.1g 21 Apr 2020 Copyright c 1998-2020 The OpenSSL Project Copyright c 1995-1998 Eric A. Young, Tim J. Hudson All rights reserved. DESCRIPTION The OpenSSL Project is a collaborative effort to develop a robust, commercial-grade, fully featured, and Open Source toolkit implementing the...

Anthropic-Cybersecurity-Skills

Anthropic Cybersecurity Skills The largest open-source cybersecurity skills library for AI agents !Hermes Agenthttps://img.shields...

Elemental

Elemental Elemental is a centralized threat library of MITRE ATT&CK techniques, Atomic Red Team tests, and over 280 Sigma rules. It provides an alternative way to explore the ATT&CK dataset, mapping relevant Atomic Red Team tests and Sigma rules to their respective technique. Elemental allows...

secator

La navaja suiza del pentester. Características • Comandos soportados • Instalación • Uso • Documentación • ¡Únete a nosotros en Discord! secator es un ejecutor de tareas y flujos de trabajo utilizado para evaluaciones de seguridad. Soporta docenas de herramientas de seguridad conocidas y está...

peirates

Peirates What is Peirates? Peirates, a Kubernetes penetration tool, enables an attacker to escalate privilege and pivot through a Kubernetes cluster. It automates known techniques to steal and collect service account tokens, secrets, obtain further code execution, and gain control of the cluster...

CVE-2025-24071

Security Vulnerability Report: CVE-2025-24071 - Windows File Explorer Spoofing Vulnerability Overview NSFOCUS CERT has detected that Microsoft recently released a security update to address a critical spoofing vulnerability in Windows File Explorer, identified as CVE-2025-24071. This vulnerabilit...

CVE-2022-45025

CVE-2022-45025 Command injection via PDF import in Markdown Preview Enhanced VSCode, Atom Description The Mume markdown tool library was vulnerable to command injection due to use of spawn command with shell: true option. This could allow an attacker to achieve arbitary code execution by tricking...

startpage-parser

startpage-parser parsing search results from startpage search engine based on google.com results you can use it if you need get some results without get banned from google INSTALL from pip root@kitploit: $ pip install startpage-parser from source root@kitploit: $ git clone...

RSA

RustCrypto: RSA A portable RSA implementation in pure Rust. Example root@kitploit: use rsa::Pkcs1v15Encrypt, RsaPrivateKey, RsaPublicKey; let mut rng = rand::rng; let bits = 2048; let privkey = RsaPrivateKey::new&mut rng, bits.expect"failed to generate a key"; let pubkey =...

dnsdmpstr

dnsdmpstr Unofficial API & Client for DNS Dumpster and HackerTarget.com IP tools. https://dnsdumpster.com/ https://hackertarget.com/ip-tools/ Installation root@kitploit: git clone https://github.com/zeropwn/dnsdmpstr cd dnsdmpstr pip3 install -r requirements.txt chmod +x ddump.py Usage As a...

CVE-2025-32463

CVE-2025-32463 Exploit Overview This repository provides a Go-based exploit tool for CVE-2025-32463 , a critical local privilege escalation vulnerability CVSS 9.3 in sudo versions 1.9.14 to 1.9.17. It allows unauthorized local users to gain root access by exploiting a flaw in the --chroot -R...

BridgeHead

BridgeHead Native C++ access to Active Directory over ADWS, no .NET, no WCF, no HTTP stack. BridgeHead is a C++20 static library implementing the full Active Directory Web Services ADWS protocol stack directly over TCP. Named after the AD bridgehead server, the gateway through which directory...

codeql

CodeQL This open source repository contains the standard CodeQL libraries and queries that power GitHub Advanced Security and the other application security products that GitHub makes available to its customers worldwide. How do I learn CodeQL and run queries? There is extensive documentation abo...

xori

Xori - Marco de desensamblado personalizado Xori es una librería de desensamblado y análisis estático preparada para automatización que consume shellcode o binarios PE y proporciona datos de análisis de triage. Agradecimientos: Xori no existiría sin la inspiración e ideas de la comunidad de códig...

ROOT-APP-MAVEN-CVE-2026-0636 CVE-2026-0636 in org.bouncycastle:bcprov-jdk18on - Patched by Root

Root has patched CVE-2026-0636 in the org.bouncycastle:bcprov-jdk18on package for Root:Maven. Multiple fixed versions available...

ROOT-APP-MAVEN-CVE-2026-59639 CVE-2026-59639 in org.bouncycastle:bcpkix-jdk18on - Patched by Root

Root has patched CVE-2026-59639 in the org.bouncycastle:bcpkix-jdk18on package for Root:Maven. Multiple fixed versions available...

aco-prompt-shield

aco-prompt-shield 🛡️ Stop prompt injection attacks before they reach your LLM — zero API costs, runs entirely locally, integrates in 2 minutes. Prompt injection is the 1 security risk for LLM applications. aco-prompt-shield catches known jailbreak patterns, understands semantic intent via ML, and...

sigmalite

github.com/runreveal/sigmalite Package sigmalite provides a parser and an execution engine for the Sigma detection format. root@kitploit: rule, err := sigmalite.ParseRulebyte title: My example rule detection: keywords: - foo - bar selection: EventId: 1234 condition: keywords and selection if err ...

PHP-Fuzzer

PHP Fuzzer This library implements a fuzzer for PHP, which can be used to find bugs in libraries particularly parsing libraries by feeding them "random" inputs. Feedback from edge coverage instrumentation is used to guide the choice of "random" inputs, such that new code paths are visited...