Paranoid-Copy-Fail-CVE-2026-31431

================================ Script de endurecimiento Paranoid AFALG ================================ Bloquea todas las interfaces criptográficas del kernel en espacio de usuario módulos AFALG + algif Mitiga CVE-2026-31431 y reduce la superficie de ataque futura Seguro para sistemas normales...

routersploit

RouterSploit - Exploitation Framework for Embedded Devices Community Join community on Embedded Exploitation Discord. Description The RouterSploit Framework is an open-source exploitation framework dedicated to embedded devices. It consists of various modules that aid penetration testing...

DirtyFrag-Detector

🔍 Dirty Frag — CVE-2026-43284 / CVE-2026-43500 Detection Script TL;DR: There are two new Linux kernel bugs. This script tells you if you're vulnerable. Patch your stuff. What's this about? On May 7th 2026, a vulnerability class called Dirty Frag was publicly disclosed by security researcher Hyunw...

CVE-2021-4034-POC

CVE-2021-4034-POC POC para la vulnerabilidad pwnkit descubierta por Qualys. Compilar y ejecutar: root@kitploit: gcc lpe.c -o lpe; ./lpe Crea la siguiente estructura de directorios/archivos: root@kitploit: /tmp ├── GCONVPATH=. │ └── test ├── payload.c ├── payload.so ├── test │ └── gconv-modules...

social-analyzer

Social Analyzer - API, CLI, and Web App for analyzing & finding a person's profile across +1000 social media \ websites. It includes different analysis and detection modules, and you can choose which modules to use during the investigation process. The detection modules utilize a rating mechanism...

beef

=============================================================================== root@kitploit: Copyright c 2006-2026 Wade Alcorn - [email protected] Browser Exploitation Framework BeEF - https://beefproject.com See the file 'doc/COPYING' for copying permission...

CVE-2024-11003-POC

CVE-2024-11003-POC 描述 Qualys发现，在3.8版本之前的needrestart将一个未经过滤的数据传递给一个期望安全输入的库（Modules::ScanDeps）。这可能允许本地攻击者执行任意shell命令。请参见Modules::ScanDeps中相关的CVE-2024-10224。 如果needrestart可以以root权限运行，你就能以root身份执行任意命令。 使用方法 在目标机器上下载exploit.conf并使用命令： root@kitploit: sudo needrestart -c exploit.conf...

AtomShields

AtomShields |Build| |Codacy| |Docs| |Version| .. |Docs| image:: https://readthedocs.org/projects/atomshields/badge/?version=latest :target: http://atomshields.readthedocs.io/en/latest/?badge=latest :alt: Read the Docs .. |Version| image:: http://img.shields.io/pypi/v/atomshields.svg?style=flat...

evilgrade

Faraday Security Research -- | ISR-evilgrade | www.faradaysec.com | -- .:: BRIEF OVERVIEW ::. Evilgrade is a modular framework that allows the user to take advantage of poor upgrade implementations by injecting fake updates. It comes with pre-made binaries agents, a working default configuration...

social-engineer-toolkit

The Social-Engineer Toolkit SET The Social-Engineer Toolkit is an open-source penetration testing framework for authorized social-engineering assessments. SET provides guided attack vectors for security teams that need to test user awareness, validate controls, and run consent-based red-team...

encrypted-linux-kernel-modules

ELKM: 암호화된 Linux x86-64 로더블 커널 모듈 ELKM은 암호화된 로더블 커널 모듈LKM을 안전하게 전송하고 로드할 수 있는 메커니즘을 제공합니다. 목표는 엔드포인트 탐지 및 대응EDR 소프트웨어의 관찰로부터 커널 기반 루트킷과 임플란트를 보호하고, 디스크 포렌식 도구에 의한 복구 효과를 무력화하는 것입니다. RHEL/CentOS 7 ELKM은 RHEL/CentOS 7 x86-64용으로 특별히 작성되었습니다. root@kitploit: kernel-tools-libs-3.10.0-1127.18.2.el7.x866...

flare-vm

FLARE-VM Welcome to FLARE-VM - a collection of software installations scripts for Windows systems that allows you to easily setup and maintain a reverse engineering environment on a virtual machine VM. FLARE-VM was designed to solve the problem of reverse engineering tool curation and relies on t...

jdam

jdam - 结构化感知的 JSON 模糊测试 jdam 是一个受 Radamsa 启发的工具，用于以结构化感知的方式对任意 JSON 对象进行模糊测试，确保模糊测试结果始终是有效的 JSON。 许多现有的模糊测试工具会盲目更改输入，常常导致结果成为无效的 JSON。这意味着模糊测试只会测试目标应用的 JSON 解析器，而由于请求无效，模糊测试永远不会触及底层应用代码。Jdam 旨在解决这个问题。 jdam...

cve-2018-15473

CVE-2018-15473 OpenSSH 至 7.7 版本存在用户枚举漏洞，原因在于未将无效验证用户的延迟退出推迟到包含请求的数据包完全解析之后，涉及 auth2-gss.c、auth2-hostbased.c 和 auth2-pubkey.c。 安装 你可能需要安装你的发行版对应的 openssl-dev 包 root@kitploit: 注意：如果你在 kali 上安装，可以跳过 pip install；paramiko 已经存在。 git clone https://gitlab.com/epi052/cve-2018-15473.git cd cve-2018-15473 p...

GHunt

🌐 Versión online de GHunt : https://osint.industries 🐍 ¡Ahora compatible con Python 3.13! 😊 Descripción GHunt v2 es un framework ofensivo de Google, diseñado para evolucionar de manera eficiente. Actualmente está centrado en OSINT, pero es posible cualquier uso relacionado con Google...

hatiyar

Hatiyar Kit de herramientas de seguridad moderno para pruebas de penetración, evaluación de vulnerabilidades e investigación en seguridad. ⚠️ IMPORTANTE: Hatiyar está destinado únicamente a fines educativos, de investigación y de seguridad defensiva. No utilice este software en sistemas que no...

patator

Patator Patator 的诞生源于使用 Hydra、Medusa、Ncrack、Metasploit 模块和 Nmap NSE 脚本进行密码猜测攻击时的挫败感。我选择了一种不同的方法，以避免再次创建另一个暴力破解工具并重复相同的缺陷。Patator 是一个用 Python 编写的多线程工具，力求比其前辈更可靠、更灵活。 目前它支持以下模块： ftplogin : Brute-force FTP sshlogin : Brute-force SSH telnetlogin : Brute-force Telnet smtplogin : Brute-force SMTP...

DevSec-Defense

DevSec-Defense DevSec Defense 演示的配套 PowerShell 模块与示例 DevSec Defense：DevOps 实践如何推动防御者的检测开发...

rustbuster

rustbuster A Comprehensive Web Fuzzer and Content Discovery Tool Introduction Check the blog post: Introducing Rustbuster — A Comprehensive Web Fuzzer and Content Discovery Tool Download You can download prebuilt binaries from here. Installation root@kitploit: installrustbuster echo "Installing...

nullscan

Description A modular framework designed to chain and automate security tests. It parses target definitions from the command line and runs corresponding modules and their nullscan-tools afterwards. It can also take hosts and start nmap first in order to perform a basic portscan and run the module...