fi6s

fi6s：快速 IPv6 扫描器 fi6s 是一款旨在快速运行的 IPv6 端口扫描器，面向互联网扫描与发现。它通过异步发送和处理原始数据包来实现这一目标。 其设计与目标与 Masscan 非常相似，但功能不如其全面。 请注意 许可证。 最后：这是一款安全研究工具，您（用户）有全部责任在使用时遵守当地法规并在必要时获得许可。 编译 在任何较新的 Linux 系统上构建 fi6s 都非常简单，例如在 Ubuntu 上： root@kitploit: apt install gcc make git libpcap-dev $ git clone...

subjs

subjs subjs fetches javascript files from a list of URLS or subdomains. Analyzing javascript files can help you find undocumented endpoints, secrets, and more. It's recommended to pair this with gau and then https://github.com/GerbenJavado/LinkFinder Resources Usage Installation Usage: Examples:...

polymorph

Polymorph Polymorph 是一个工具，它允许在实时拦截的网络数据包上执行 Python 代码，从而动态修改网络流量。 该框架可用于实时修改实现任何公开指定网络协议的网络数据包。此外，通过创建自定义抽象和字段，它还可用于修改私有网络协议。 安装 Polymorph 专为在 Linux 操作系统上安装和运行而设计。安装该框架前，必须先安装以下依赖项： root@kitploit: sudo apt install build-essential python3-dev libnetfilter-queue-dev tshark tcpdump python3-pip...

polymorph

Polymorph Polymorph is a tool that facilitates the modification of network traffic on the fly by allowing the execution of Python code on network packets that are intercepted in real time. This framework can be used to modify in real time network packets that implement any publicly specified...

CVE-2023-4911

CVE-2023-4911 This is a PoC Proof Of Concept for the Looney Tunables Linux Privilege Escalation vulnerability. This is based on this PoC. Great thanks to leesh3288. Here you can find a very detailed writeup, and here you can see a very cool video by IppSec. Usage Check if it's vulnerable...

venom

VENOM 1.0.17 - metasploit Shellcode 生成器/编译器 root@kitploit: 版本发布 : v1.0.17 作者 : pedro ubuntu r00t-3xp10it 代号: 乌头 Aconitum napellus 支持发行版 : Linux Ubuntu, Kali, Mint, Parrot OS Suspicious-Shell-Activity SSA RedTeam 开发 @2019...

openvpn-install

openvpn-install OpenVPN installer for Debian, Ubuntu, Fedora, openSUSE, CentOS, Amazon Linux, Arch Linux, Oracle Linux, Rocky Linux and AlmaLinux. This script will let you setup and manage your own secure VPN server in just a few seconds. What is this? This script is meant to be run on your own...

CVE-2023-0386

typora-copy-images-to: ./image CVE-2023-0386 Exploit Usage: First : Upload fuse.c and exp.sh to the /tmp directory. You can use scp or python3 -m http.server to upload the file to the target. root@kitploit: scp /Desktop/CVE-2023-0386/exp.sh [email protected]:/tmp scp...

CVE-2021-3493

CVE-2021-3493 Ubuntu OverlayFS Local Privesc Description "Ubuntu specific issue in the overlayfs file system in the Linux kernel where it did not properly validate the application of file system capabilities with respect to user namespaces. A local attacker could use this to gain elevated...

CVE-2020-0796-Checker

CVE-2020-0796-Checker Script that checks if the system is vulnerable to CVE-2020-0796 SMB v3.1.1 LINUX USAGE: sudo apt-get install nmap chmod +x CVE-2020-0796-Checker.sh bash CVE-2020-0796-Checker.sh -t TARGET-IP...

chronomaly

Chronomaly Chronomaly es un exploit del kernel para el kernel de Android / Linux usando CVE-2025-38352. El exploit fue escrito específicamente para el kernel de Linux v5.10.157, pero debería funcionar contra todos los kernels vulnerables v5.10.x, ya que no requiere ningún offset específico del...

DynastyPersist

DynastyPersist 1.5 DynastyPersist: A streamlined tool for achieving Linux persistence effortlessly. Supports KoTH, Battlegrounds and Pentest Operations Install • Documentation • Usage Documentation FEATURES Features| Description ---|--- SSH Key Generation| Automatically generates SSH keys for...

Pip-Intel

🌐PIP-INTEL - OSINT and Cyber Intelligence Tool🌐 Tested: Kali-Linux Pip-Intel is a powerful tool designed for OSINT Open Source Intelligence and cyber intelligence gathering activities. It consolidates various open-source tools into a single user-friendly interface simplifying the data collection...

SYNwall

SYNwall Zero config IoT firewall. SYNwall is a project built for the time being as a Linux Kernel Module, to implement a transparent and no-config/no-maintenance firewall. You may want to have a look to the for an example of usage. Basics Usually IoT devices are out of a central control, with low...

DirtyPipe-Exploit

CSE 5380: Information Security Paper CVE-2022-0847 Dirty Pipe By Karan Vasudevamurthy UTA ID: 1002164438 What is CVE? Common Vulnerabilities and Exposures CVE is a list of publicly disclosed information security vulnerabilities and exposures. The MITRE corporation introduced CVE in 1999 to identi...

kali-rpi-luks-crypt

Full disk encryption for Kali on Raspberry or other similar architecture using LUKS This HOWTO is dedicated to running Kali on Raspberry or other similar architecture, e.g. ODROID-C2 using full disk encryption with LUKS. Based on the little bit outdated document here. Motivation Deploying Kali on...

CVE-2022-34918

CVE-2022-34918 LPE POC Tried incorporating the USMA exploitation idea proposed by 360, not bad. Chinese writeup: CVE-2022-34918 netfilter Analysis Notes Practice of Writing Generic Kernel EXP Based on USMA on CVE-2022-34918 !! For educational / research purposes only. Use at your own risk. !! poc...

climber

Climber 自动化审计工具，用于检查UNIX/Linux系统中可能导致本地权限提升的错误配置。 依赖项 python = 2.7 python-crypto python-mako python-paramiko 注意事项 Climber需要Exscript，这是一个Python模块和一个模板处理器，用于通过Telnet或SSH等协议自动化网络连接。 https://github.com/knipknap/exscript 该模块已包含在Climber源代码中。 许可证 本程序是自由软件：您可以自由地重新分发和/或修改它，前提是遵循自由软件基金会发布的GNU General Publ...

climber

Climber Automated auditing tool to check UNIX/Linux systems misconfigurations which may allow local privilege escalation. Dependencies python = 2.7 python-crypto python-mako python-paramiko Note Climber needs Exscript, a Python module and a template processor for automating network connections ov...

AndroSH

AndroSH - Run Linux Distributions on Android No Root, ADB/Shizuku Powered Run and manage full Linux distributions on your Android device - no root required. Table of Contents Quick Start Features Supported Distributions Overview Screenshots Architecture Installation Updating Usage Use Cases...