DDexec

DDexec news I have updated DDexec so much it is barely recognizable, the parsing of the ELF is now done by machine code instead of by the shell script, making it far faster, reliable and comprehensible. It has also reduced its number of dependencies to the absolute minimum. It also now barely...

spectreScope

spectreScope The demo of the speculative execution attack Spectre CVE-2017-5753, CVE-2017-5715. Tested On macOS Intel - Apple MacBook Pro Retina, 15-inch, Late 2013 - macOS High Sierra 10.13.2 - 1 IntelR CoreTM i7-4750HQ CPU @ 2.00GHz - git 2.14.3 - cmake 3.10.1 - Xcode 9.2 Linux Intel - HP...

msploitego

msploitego - The Pentesting suite for Maltego THIS IS A BETA RELEASE, please be nice and report any issues Whats New New Features Now supporting multiple workspaces for Metasploit via Postgres queries A bash script that runs tons of auxiliary modules against targets. Really 'fattens' up the...

mip22

mip22 mip22 v3.3 mip22 is a advanced phishing tool 83 default websites, clone any site with manual method, add any site with customize method, mask link with subdomains, url shortener, audio notice for view the credentials live, music in background etc... The program is made for educational...

cve-2021-21972

cve-2021-21972 Usage python3 python poc.py -u target -s webshell/ssh The webshell only supports version vecter6.5, SSH supports all versions, and this poc is only for Linux...

SecureOps-Lab

SecureOps Lab - Live Cybersecurity Assessment Overview Performed a live cybersecurity assessment on a university Linux server. During analysis, active attack activity was identified, including brute-force authentication attempts and exploitation attempts targeting Log4Shell CVE-2021-44228...

CVE-2026-31413-BPF-Container-Escape

CVE-2026-31413: One Byte in the BPF Verifier to Container Escape I found a soundness bug in the Linux BPF verifier - a + 1 in a pushstack call that causes the verifier to skip an ALU instruction on a forked path. For BPFOR, this means the verifier tracks dst = 0 while the CPU computes 0 | K = K. ...

kalitorify

Transparent Proxy through Tor for Kali Linux About kalitorify kalitorify is a shell script for Kali Linux which use iptables settings to create a Transparent Proxy through the Tor Network , the program also allows you to perform various checks like checking the Tor Exit Node i.e. your public IP...

libvshadow

libvshadow is a library to access the Volume Shadow Snapshot VSS format. The VSS format is used by Windows, as of Vista, to maintain copies of data on a storage media volume. Project information: Status: alpha Licence: LGPL-3.0-or-later Also see: OSDFC 2012: Paper - Windowless Shadow Snapshots:...

VPNPivot

VPN Pivot: Sometime we do external penetration testing and when we compromise the remote target we would like to explore the internal network behind and getting such compromise like owning Active directory, accessing shared files, conducting MITM attacks ... etc. There are many techniques around...

sharesniffer

sharesniffer sharesniffer is a network analysis tool for finding open and closed file shares on your local network. It includes auto-network discovery and auto-mounting of any open cifs and nfs shares. How to use Example to find all hosts on any local network with open/closed nfs/smb shares: pyth...

GHOSTCHECK-cve-2015-0235

Ghostcheck This is a really, really light fabric script - for checking the impact of CVE-2015-0235 GHOST on a running linux host. Forked into Lyrical after writing. Python 2.6 and higher recommended, and Fabric is needed. Usage: fab -f ghostcheck.py -u sshusername -p sshpassword -H ip ,ip2 ,ipN g...

CVE-2017-7308

CVE-2017-7308 CVE ID: CVE-2017-7308 Publish date: 2017-03-29T20:59:00.373 Base score CVSS 3.0/3.1: 7.8 Description: The packetsetring function in net/packet/afpacket.c in the Linux kernel through 4.10.6 does not properly validate certain block-size data, which allows local users to cause a denial...

CVE-2021-43267

CVE-2021-43267 Local PoC exploit for CVE-2021-43267 Linux TIPC Reference: https://haxx.in/posts/pwning-tipc/...

garble

garble go install mvdan.cc/garble@latest or @master Obfuscate Go code by wrapping the Go toolchain. Requires Go 1.27 or later. garble build build flags packages The tool also supports garble test to run tests with obfuscated code, garble run to obfuscate and execute simple programs, garble revers...

nodexp

NodeXP - Detection and Exploitation Tool for Node.js Services! NodeXP is an intergrated tool, written in Python 2.7, capable of detecting possible vulnerabilities on Node.js services as well as exploiting them in an automated way, based on ServerSideJavascriptInjection attack! Getting Started -...

LinuxForensics

Linux Forensics Everything related to Linux Forensics Note: for better navigation, please visit the repo's main page here Index Talks Workshops Current Team Members: Ali Hadi, Twitter Mariam Khader, Twitter, 2019 - present Alayna Cash, Linux GUI Environments, 2022 - present Tom Claflin, Twitter,...

rehex

Reverse Engineers' Hex Editor A cross-platform Windows, Linux, macOS, BSD hex editor for reverse engineering, and everything else. An online copy of the manual can be accessed here: solemnwarning.net/rehex/manual/. Features Large 1TB+ file support Decoding of integer/floating point value types...

KaliIntelligenceSuite

Kali Intelligence Suite Kali Intelligence Suite KIS is an intelligence gathering and data mining tool for penetration testers. It shall aid in the fast, autonomous, central, and comprehensive collection of intelligence by automatically: executing Kali Linux tools e.g., dnsrecon, gobuster, hydra,...

CVE-2026-31431-poc

Copy Fail Command PoC Wrapper A small modified proof-of-concept wrapper for Copy Fail / CVE-2026-31431 that allows passing a custom command from the terminal instead of always launching an interactive root shell so it can be ran in an none interactive environment such as a web shell. This project...