431 matches found
logdata-anomaly-miner
logdata-anomaly-miner This tool parses log data and allows to define analysis pipelines for anomaly detection. It was designed to run the analysis with limited resources and lowest possible permissions to make it suitable for production server use. Requirements In order to install...
coffeeMiner
CoffeeMiner Collaborative mitm cryptocurrency mining pool in wifi networks Warning: this project is for academic/research purposes only. A blog post about this project can be read here: http://arnaucode.com/blog/coffeeminer-hacking-wifi-cryptocurrency-miner.html Concept Performs a MITM attack to...
param-miner
param-miner This extension identifies hidden, unlinked parameters. It's particularly useful for finding web cache poisoning vulnerabilities. It combines advanced diffing logic from Backslash Powered Scanner with a binary search technique to guess up to 65,000 param names per request. Param names...
BengalSEO Poisons Bing Search Results to Deliver MayaBot and Tech Support Scams
Cybersecurity researchers have disclosed details of a sprawling search engine optimization SEO poisoning campaign that paves the way for malware deployment and tech support scams. The campaign, discovered by the DFIR Report in March 2026, has been codenamed BengalSEO. It has operated out of the...
cave_miner
CAVE MINER This tools search for code cave in binaries Elf, Mach-o, Pe, and inject code in them. Installation root@kitploit: pip install cave-miner Usage Exemple...
rvbbit-arsenal
RVBBIT Arsenal: The Ultimate Offense & Defense Duality Overview This repository houses two sides of the same coin: attack/ – Project RVBBIT, a classic Linux kernel rootkit with embedded miner and network worm. defense/ – RvbbitSafe, the definitive countermeasure that detects, neutralizes, and...
CVE-NetScalerFileSystemCheck
CVE-NetScalerFileSystemCheck 此脚本用于检查 Citrix Netscaler 是否受到 CVE-2019-19781 攻击的入侵，并收集所有文件系统信息。 将检查以下文件和日志（最新版本 1.13）： 模板文件夹中的 XML 文件 Apache 访问日志文件 Apache 错误日志文件 Cron 任务 后门脚本 加密矿工 Bash 日志文件 开始使用 输出文件将在执行目录中创建。 先决条件 CVE-NetScalerFileSystemCheck.ps1 需要 plink.exe 位于执行目录中，并可在本地计算机上运行。...
PlasmaRAT
PlasmaRAT 远程访问木马RAT, 挖矿程序, DDoS 所有责任自负。 请仅将其用于研究目的。 功能 远程桌面 键盘记录器 DDoS 挖矿程序 启动项控制 网络连接查看 原生方法控制器...
CVE-2025-63602
CVE-2025-63602 关于CVE-2025-63602的披露，包含一个用于Awesome Miner 11.2.4中不安全驱动程序的PoC，导致对MSRs的任意内核读/写，从而实现内核代码执行。...
Rig-Exploit-for-CVE-2018-8174
Rig-Exploit-for-CVE-2018-8174 Rig Exploit for CVE-2018-8174 As with its previous campaigns, Rig’s Seamless campaign uses malvertising. In this case, the malvertisements have a hidden iframe that redirects victims to Rig’s landing page, which includes an exploit for CVE-2018-8174 and shellcode. Th...
gf
gf A wrapper around grep to avoid typing common patterns. What? Why? I use grep a lot. When auditing code bases, looking at the output of meg, or just generally dealing with large amounts of data. I often end up using fairly complex patterns like this one: root@kitploit: ▶ grep -HnrE...
security checks
🔍 Miner Hunter Crypto-miner detection, removal, and hardening toolkit for Linux servers. Built from real-world incident response — detects miners that hide from ps, top, htop, and btop using rootkit techniques. 📦 Installation root@kitploit: git clone...
Apple macOS Screen Sharing Flaw Exploited on Internet-Exposed Macs to Install Monero Miner
A recently patched security flaw in Apple macOS has come under active exploitation in the wild to deploy a cryptocurrency miner, the Netherlands National Cyber Security Centre NCSC-NL has warned. The vulnerability in question is CVE-2026-65400 CVSS score: 9.8, a critical authentication issue...
CVE-2026-14723
A vulnerability was determined in AD-Security ADMiner 1.9.0. Affected is the function requesta of the file adminer/scripts/analysecache.py of the component Cache Handler. This manipulation of the argument sys.argv1 causes deserialization. The attack can only be executed locally. The pull request ...
CVE-2026-14723
A vulnerability was determined in AD-Security ADMiner 1.9.0. Affected is the function requesta of the file adminer/scripts/analysecache.py of the component Cache Handler. This manipulation of the argument sys.argv1 causes deserialization. The attack can only be executed locally. The pull request ...
CVE-2026-14723
The vulnerability CVE-2026-14723 affects AD-Security AD_Miner 1.9.0. It resides in the Cache Handler, specifically the analyse_cache.py file’s function request_a. Manipulating the argument sys.argv[1] leads to deserialization, enabling a local exploit. Public details note that exploitation is loc...
CVE-2026-14723 AD-Security AD_Miner Cache analyse_cache.py request_a deserialization
A vulnerability was determined in AD-Security ADMiner 1.9.0. Affected is the function requesta of the file adminer/scripts/analysecache.py of the component Cache Handler. This manipulation of the argument sys.argv1 causes deserialization. The attack can only be executed locally. The pull request ...
Langflow RCE Exploited to Deploy Monero Miner on Exposed AI App Endpoints
Threat actors are continuing to exploit a critical Langflow vulnerability as part of fresh attacks designed to deliver a Monero cryptocurrency miner. The activity has been found to weaponize CVE-2026-33017 CVSS score: 9.3, an unauthenticated remote code execution RCE vulnerability in Langflow,...
