qark

Quick Android Review Kit This tool is designed to look for several security related Android application vulnerabilities, either in source code or packaged APKs. The tool is also capable of creating "Proof-of-Concept" deployable APKs and/or ADB commands, capable of exploiting many of the...

qark

Быстрый набор для проверки Android Этот инструмент предназначен для поиска различных уязвимостей в Android-приложениях, связанных с безопасностью, как в исходном коде, так и в упакованных APK. Инструмент также способен создавать «Proof-of-Concept» развёртываемые APK и/или ADB-команды, способные...

CVE-2020-7882

CVE-2020-7882 Donate Support the maintenance of this project with PayPal or by scanning the QR code below. ⚡ Simple Usage Use this project only in safe and authorized environments such as: Local virtual machines Docker containers Isolated lab setups Authorized penetration testing environments...

CVE-2015-10141

CVE-2015-10141 – XDebug Remote Code Execution RCE CVE-2015-10141 is an unauthenticated OS command injection vulnerability affecting Xdebug versions 2.5.5 and earlier. Root Cause: When Xdebug's remote debugging feature is enabled, the extension listens on port 9000 and accepts debugger protocol...

Stracciatella

Stracciatella v0.7 Powershell runspace from within C aka SharpPick technique with AMSI, ETW and Script Block Logging disabled for your pleasure. Nowadays, when Powershell got severly instrumented by use of techniques such as: AMSI ETW Script Block Logging Transcript file Modules logging Constrain...

TP-Link-WDR-Router-Command-injection_POC

This repository does not have a README...

CVE-2021-26855

CVE-2021-26855-PoC PoC exploit code for CVE-2021-26855. Original code was developed by https://github.com/GreyOrder. The original repo was deleted shortly after additional features user enumeration etc. were added. Please post a pull request, if you have the latest version. CVE-2021-26855 ssrf...

CVE-2025-69212-PoC

CVE-2025-69212 - OpenSTAManager OS Command Injection PoC Usage Install dependencies: root@kitploit: pip install -r requirements.txt Run a single command and print its output: root@kitploit: python3 cve-2025-69212poc.py -u http://target.com -U admin -P 'password' -c 'id' Drop a persistent PHP...

ldsview

ldsview Offline search tool for LDAP directory dumps in LDIF format. Features Fast and memory efficient parsing of LDIF files Build ldapsearch commands to extract an LDIF from a directory Show directory structure UAC and directory time format translation Config Config options can be passed as CLI...

popeye

Popeye: Kubernetes Live Cluster Linter Popeye is a utility that scans live Kubernetes clusters and reports potential issues with deployed resources and configurations. As Kubernetes landscapes grows, it is becoming a challenge for a human to track the slew of manifests and policies that orchestra...

ship-safe v9.7.5

Find risky code, AI-agent vulnerabilities, and supply-chain issues before they ship. Website · Docs · Security & Data Flow · Benchmark · Pricing · Blog · Contribute Ship Safe CLI Ship Safe is an AI security scanner for modern software teams. It runs locally in your repo, finds issues across...

Awesome_shiro

Awesome-shiro CVE-2016-4437 Shiro Base64 decode -- AES decrypt -- Deserialize Environment Works on both linux/win10 Works on both python2/python3 Since the module directory contains ysoserial.jar, the project is a bit large. Please bear with us. Local Target Setup...

flipperzero-firmware

Flipper Zero Firmware Flipper Zero Official Website - A simple way to explain to your friends what Flipper Zero can do. Flipper Zero Firmware Update - Improvements for your dolphin: latest firmware releases, upgrade tools for PC and mobile devices. User Documentation - Learn more about your...

flipperzero-firmware

Flipper Zero 固件 Flipper Zero 官方网站 - 向朋友介绍 Flipper Zero 功能的最简单方式。 Flipper Zero 固件更新 - 让你的海豚更强大：最新固件版本、PC 和移动设备升级工具。 用户文档 - 了解更多关于你的海豚：规格、使用指南，以及你想问的任何问题。 开发者文档 - 深入探索 Flipper Zero 固件源代码：构建系统、固件结构等。 贡献 我们的主要目标是围绕 Flipper 建立一个健康、可持续的社区，因此我们欢迎任何新想法和贡献。不过这里也有一定的规则和禁忌，请仔细阅读本页和我们的行为准则。 我需要帮助...

CVE-2026-39949

CVE-2026-39949: Authenticated Remote Code Execution in Cacti Through Host Variable Injection Summary An OS command injection vulnerability in Cacti ≤ 1.2.30 allows any authenticated user with device and graph template creation privileges to execute arbitrary commands on the underlying server. The...

pandorafms_7.44

Pandora FMS 7.44 CVE-2020-13851 Pandora FMS 7.44 CVE-2020-13851 RCE allows an authenticated user to achieve remote command execution via the events feature. Can be done with credentials or a PHP session cookie. Getting Started Executing program Using credentials root@kitploit: python3...

CVE-2022-36446-Webmin-Software-Package-Updates-RCE

A Python script to exploit CVE-2022-36446 Software Package Updates RCE Authenticated on Webmin 1.997. Features Supports HTTP and HTTPS even with self-signed certificates with --insecure. Single command execution with --command option. Interactive console with --interactive option...

username-anarchy

Username Anarchy Version: 0.6 20 September 2024 Author: urbanadventurer Andrew Horton Homepage: https://www.morningstarsecurity.com/research/username-anarchy Source: https://github.com/urbanadventurer/username-anarchy/ License: MIT Description Tools for generating usernames when penetration...

lk_scraper

LinkedIn Scraper Scrapes Any LinkedIn Data Installation root@kitploit: $ pip install git+git://github.com/jqueguiner/lkscraper Setup Using Docker compose root@kitploit: $ docker-compose up -d $ docker-compose run lkscraper python3 Using Docker only for Selenium server First, you need to run a...

Simple-CTF-Writeup

Simple-CTF-Writeup Professional TryHackMe Simple CTF walkthrough covering enumeration, CMS Made Simple SQL Injection CVE-2019-9053, credential recovery, SSH access, privilege escalation via Vim, and root compromise. TryHackMe - Simple CTF Writeup A complete walkthrough of the Simple CTF room on...