MK4001MTD-USB-Bridge

MK4001MTD USB Bridge RP2040 Pico firmware that bridges a Toshiba MK4001MTD 0.85" SDIO microdrive as a USB Mass Storage device. The MK4001MTD is a 4 GB Microdrive originally used in the Nokia N91 music phone and some other devices, like MP3 players or USB drives, back when flash storage was still...

aztarna

This repository has been archived and is not maintained any further. Refer to alurity for future progress on robot footprinting and fingerprinting. aztarna This repository contains Alias Robotics' aztarna, a footprinting tool for robots. Alias Robotics supports original robot manufacturers...

defense-matrix

Defense Matrix Archived Project This project was an attempt to automate various aspects of Linux security auditing and hardening. As time passed, I K4YT3X found many of the methodologies used in this project to be unideal and obsolete. Therefore, I recommend not continuing using this project but...

ghosthound

GhostHound GhostHound is a BloodHound OpenGraph extension for Active Directory. SharpHound and every other AD collector skip CN=Deleted Objects: deleted objects tombstones are invisible to standard BloodHound attack-path analysis, even though the AD Recycle Bin and tombstone reanimation mechanism...

run-gemini-cli

run-gemini-cli Overview run-gemini-cli is a GitHub Action that integrates Gemini into your development workflow via the Gemini CLI. It acts both as an autonomous agent for critical routine coding tasks, and an on-demand collaborator you can quickly delegate work to. Use it to perform GitHub pull...

CVE-2026-42533

CVE-2026-42533 — nginx Heap Buffer Overflow PoC Exploit Pre-Authentication Remote Code Execution via Two-Pass Capture Clobbering Public PoC released 2026-07-27 — Don't wait, patch now. | ---|--- CVE| CVE-2026-42533 CVSS 4.0| 9.2 Critical Type| Heap Buffer Overflow CWE-122 Affected| nginx 0.9.6 –...

xray

XRay has been reimplemented in Rust and expanded with more features, this repository is LEGACY code. Usehttps://github.com/evilsocket/legba XRAY XRay is a tool for network OSINT gathering, its goal is to make some of the initial tasks of information gathering and network mapping automatic. How Do...

Neo

The Neo C2 Framework A modular server-client architecture post-exploitation framework built for collaborative agent management in red team operations and security testing. Enables flexibility by allowing operators to add their own extension modules Installation • Agents & Stagers • Profiles &...

phantomstars

phantomstars Automated detection and tracking of fake engagement on GitHub A JS Labs project — part of the AI Slop Intelligence initiative. Runs every day. Scores every suspicious account. Detects coordinated bot campaigns. Files issues directly on compromised repos so maintainers can act. Suppor...

CWFF

CWFF - Custom wordlists for fuzzing CWFF is a tool that creates a special High quality fuzzing/content discovery wordlist for you at the highest speed possible using concurrency and it's heavily inspired by @tomnomnom's Who, What, Where, When, Wordlist NahamCon2020. Usage root@kitploit: CWFF -h...

Aurora-Incident-Response

Aurora Incident Response Incident Response Documentation made easy. Developed by Incident Responders for Incident Responders. Aurora brings "Spreadsheet of Doom" used in the SANS FOR508 class to the next level. Having led many cases and taught so many students how to do IR right, I realized, that...

flan

Flan Scan is a lightweight network vulnerability scanner. With Flan Scan you can easily find open ports on your network, identify services and their version, and get a list of relevant CVEs affecting your network. Flan Scan is a wrapper over Nmap and the vulners script which turns Nmap into a...

teleport

Teleport provides connectivity, authentication, access controls and audit for infrastructure. You might use Teleport to: Set up single sign-on SSO for all of your cloud and on-prem infrastructure. Protect access to servers, Kubernetes clusters, databases, Windows desktops, web applications, and...

ReelPhish

Instructions for ReelPhish: This tool has been released along with a FireEye blog post. The blog post can be found at the following link: https://www.fireeye.com/blog/threat-research/2018/02/reelphish-real-time-two-factor-phishing-tool.html Installation Steps 1. The latest release of Python 2.7.x...

gemma_crackme_tutorial

Using Google's Gemma 4 E4B local AI model to Reverse Engineer a simple Crackme I was playing around with the new Gemma E4B open weights local model which Google released, and to my surprise I was seeing a great deal of success in using it for local offline reverse engineering scenarios. I wanted ...

xcrawl3r

xcrawl3r xcrawl3r is a command-line utility designed to recursively spider webpages for URLs. It works by actively traversing websites - following links embedded in webpages, and parsing files including sitemaps & robots.txt - to uncover every URL. Unlike xurlfind3r that doesn't interact directly...

PowerSploit

This project is no longer supported PowerSploit is a collection of Microsoft PowerShell modules that can be used to aid penetration testers during all phases of an assessment. PowerSploit is comprised of the following modules and scripts: CodeExecution Execute code on a target machine...

gato

!WARNING This repository is deprecated and archived Gato has been superseded by Trajan , Praetorian's multi-platform CI/CD vulnerability detection and attack automation tool. Trajan consolidates GitHub Actions Gato and GitLab Glato CI/CD attack capabilities into a single, actively-maintained...

rtl_433

rtl433 rtl433 despite the name is a generic data receiver, mainly for the 433.92 MHz, 868 MHz SRD, 315 MHz, 345 MHz, and 915 MHz ISM bands. The official source code is in the https://github.com/merbanan/rtl433/ repository. See also a list of software that works with rtl433 in the wiki. For more...

Gorsair

Gorsair Gorsair is a penetration testing tool for discovering and remotely accessing Docker APIs from vulnerable Docker containers. Once it has access to the docker daemon, you can use Gorsair to directly execute commands on remote containers. Exposing the docker API on the internet is a tremendo...