safer-dependencies

Safer Dependencies for Claude Code When AI coding assistants like Claude add packages to your project, they often pick whatever version sounds right — without checking whether it has known security vulnerabilities, whether the package is still actively maintained, or whether the name is a typo aw...

karonte

Karonte Karonte is a static analysis tool to detect multi-binary vulnerabilities in embedded firmware. The master branch provides the latest version of Karonte, ported to python3. For the original implementation and experiments presented in our paper, please checkout the IEEE-SP-20 branch and hav...

Reticulum

Reticulum Network Stack This repository isa public mirror. All development is happening elsewhere. To understand the foundational philosophy and goals of this system, read the Zen of Reticulum. Reticulum is the cryptography-based networking stack for building local and wide-area networks with...

nono

Built by the team that brought you Sigstore The standard for secure software attestation, used by PyPI, npm, brew, and Maven Central !NOTE In the lead-up to a 1.0 release, APIs are stabilizing. API changes may still occur where necessary, but will be kept to a minimum. !IMPORTANT Organization...

btrfs_fixes

btrfsfixes: Custom BTRFS Repair Tools Custom tools written during recovery of a 12TB multi-device BTRFS pool with severe extent tree corruption that the native commands btrfs check --repair, --init-extent-tree, etc. could not repair. SeeINCIDENT-ANALYSIS.md for a structured case study of the...

security-audit-skill

security-audit A coding-agent skill that turns your agent into a security auditor. It orchestrates multiple parallel agents through a six-phase pipeline -- recon, hunting, validation, reporting, structured output, and independent verification -- to find exploitable vulnerabilities with real impac...

azure-sentinel-detection-engineering

Azure Sentinel Detection Engineering Detection engineering on a live Microsoft Sentinel and Defender XDR environment I operate. Nine custom analytics rules span three planes, each mapped to MITRE ATT&CK and proven end to end: a controlled action triggers the rule, the rule raises an incident, and...

CVE-2024-4358_Mass_Exploit

CVE-2024-4358MassExploit Modified tools from @sinsinology to do mass exploit. Requirements Python 3.x Installation root@kitploit: git clone https://github.com/Sk1dr0wz/CVE-2024-4358MassExploit.git cd CVE-2024-4358MassExploit pip intstall -r requirements.txt How To Run root@kitploit: usage: python...

DesckVB-RAT

DesckVB RAT v2.9 — Modular .NET RAT, Multi-Stage Delivery & Plugin Ecosystem Toolchain Linkage to “Pjoao1578” Author: ShadowOpCode X/Twitter: https://x.com/ShadowOpCode This repository accompanies a full technical report documenting an active malware ecosystem centered around DesckVB RAT , a...

phantomprint

PHANTOMPRINT Passive Hybrid ANalysis Tool for Os-agnostic Multiprotocol PRofiling & INTelligence Fingerprint hosts on your network without sending a single packet. PHANTOMPRINT correlates multiple passive signals TCP/IP stack, TLS/JA4, DHCP Option 55, HTTP/2 HPACK, DNS behavior to identify...

cs-suite

Cloud Security Suite cs-suite - Version 3.0 Usage root@kitploit: usage: cs.py -h -env aws,gcp,azure,digitalocean -aip AUDITIP -u USERNAME -pem PEMFILE -p -pId PROJECTID -azu AZUREUSER -azp AZUREPASS -o OUTPUT -w -n NUMBER this is to get IP address for lynis audit only optional arguments: -h, --he...

uEmu

Overview uEmu is a tiny cute emulator plugin for IDA based on unicorn engine. Supports following architectures out of the box: x86 , x64 , ARM , ARM64 , MIPS , MIPS64 What is it GOOD for? Emulate bare metal code bootloaders, embedded firmware etc Emulate standalone functions What is it BAD for?...

Le Panthéon de la Souveraineté

🏠 Developed on: GitLab | 🪞 Automated mirror on: GitHub 🏛️ The Pantheon of Sovereignty A 100% sovereign, redundant and secure cloud infrastructure, designed to completely break free from GAFAM. Version 1.1: Private network foundation, DNS request encryption for servers DoT and multi-datacenter...

hyperion-disassembler

Hyperion A native multi-architecture disassembler and binary analysis tool. Supports PE, ELF, Mach-O, and .NET binaries across x86, x64, ARM, ARM64, MIPS, and PPC. Built from scratch in C++20 with ImGui. Single statically-linked executable. No installer, no runtime dependencies. Under 3MB...

Security-101

🌐 Multi-Language Support Supported via GitHub Action Automated & Always Up-to-Date Arabic | Bengali | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | |...

neet

NEET - Network Enumeration and Exploitation Tool Neet is a flexible, multi-threaded tool for network penetration testing. It runs on Linux and co-ordinates the use of numerous other open-source network tools, with the aim of gathering as much network information as possible in clear, easy-to-use...

seccomp-tools

Seccomp Tools Powerful tools for seccomp analysis. This project is aimed primarily but not exclusively at analyzing seccomp sandboxes in CTF pwn challenges. Some features are CTF-specific, but they're just as useful for analyzing real-world seccomp filters. Features Dump - Automatically dumps...

Umay

IoT Malware Similarity Analysis Platform View Demo Table of contents About The Project Current features Getting Started Prerequisites Installation Create your own dataset Contributing License About The Project This project provides IoT malware similarity analysis based on shared codes. It helps t...

analyzer

This project automates the daily tasks of Threat Intelligence Analyzer role internally without external resources' interaction. It analyzes, visualizes and structures sensitive files Malware or data by extracting features, artifacts and IoC using different modules. The output of those modules can...

libinjection

libinjection SQL / SQLI tokenizer parser analyzer. For C and C++ PHP Python Lua Java external port LuaJIT/FFI https://github.com/p0pr0ck5/lua-ffi-libinjection external port See https://www.client9.com/ for details and presentations. Simple example: root@kitploit: include include include include...