KTO

KTO 🦿 Kick Them Out Point it at an SSID and it automatically discovers every connected client and kicks them --- including ones that try to reconnect --- with no manual targeting needed. Tools like aireplay-ng make you supply a BSSID and a client MAC. You have to know who's on the network first,...

forensic-timeliner

为 DFIR 调查人员打造的高速取证处理引擎。可快速将顶级分类工具输出的 CSV 合并为统一的小型时间线，内置筛选、痕迹检测、日期过滤、关键词标记和去重功能。 发布 Forensic Timeliner v2.3 – 版本说明 新增功能 跨平台浏览器历史记录解析 新增 ForensicWebHistoryParser — 解析来自 forensic-webhistory（Rust 工具）的实时浏览器历史 CSV 支持 Chrome、Firefox、Safari、Brave、Edge、Opera、Vivaldi 和 Arc 活动检测：搜索查询、下载和文件打开事件会自动丰富描述信息...

inhale

Inhale - Malware Inhaler Inhale is a malware analysis and classification tool that is capable of automating and scaling many static analysis operations. This is the beta release version, for testing purposes, feedback, and community development. Background Inhale started as a series of small...

inhale

Inhale - マルウェア吸入器 Inhaleは、多くの静的解析操作を自動化およびスケーリングできるマルウェア分析および分類ツールです。 これはベータリリース版であり、テスト目的、フィードバック、コミュニティ開発のためのものです。 背景 Inhaleは、私が多様なソースから大量のマルウェアを収集・分析する際に使用した一連の小さなスクリプトから始まりました。...

rikune

Rikune Rikune is an MCP server for reverse engineering Windows executables and related binary formats. It combines sample intake, static triage, Ghidra-assisted function recovery, plugin-driven specialist tooling, artifact management, and optional isolated Windows runtime execution behind a Model...

CVE-2021-45232-POC

CVE-2021-45232-POC url:https://carbon.now.sh/FcD8uSynpCwc7Dpk03Qb...

CVE-2018-4878

Author and Credits Author: Vincent Yiu @vysecurity Credits: @evi1cg: Helping me test and keep me motivated @smgoreli: Original Calc.exe PoC @kbandla: He knows, and I know. ; Disclaimer Developed to encourage more Aggressor script development. Use only in authorized penetration testing! Descriptio...

CVE-2019-18935-bypasswaf

CVE-2019-18935-bypasswaf Modified from the original project: https://github.com/noperator/CVE-2019-18935 1. The attack malicious payload is passed from the cookie 2. Metadata data is passed in through an encrypted interface and deserialized 3. Default proxy 127.0.0.1:8080 4. Default attack payloa...

cve-2015-7547

PoC attack server for CVE-2015-7547 vulnerability in glibc DNS resolver To test on local machine with a vulnerable glibc version: root@kitploit: user@localhost:/ echo 'nameserver 127.0.0.127' | sudo tee /etc/resolv.conf user@localhost:/ echo 'nameserver 127.0.0.127' | sudo tee -a /etc/resolv.conf...

CVE-2022-20494

CVE-2022-20494 Download as APK This app demonstrates a high severity permanent denial-of-service vulnerability in Android's NotificationManagerService that I discovered. After running the exploit, the device show a black screen or it will keep repeatedly crashing and rebooting. It exploits the...

Windows11Exploits

Windows11Exploits...

EfiGuard

Overview EfiGuard is a portable x64 UEFI bootkit that patches the Windows boot manager, boot loader and kernel at boot time in order to disable PatchGuard and Driver Signature Enforcement DSE. If you're just looking to try EfiGuard, skip to Usage. Features Currently supports all EFI-compatible...

uBlockOrigin-HUGE-AI-Blocklist

uBlockOrigin & uBlacklist Huge AI Blocklist A huge blocklist of manually curated sites 1000+ that contain AI generated content, for the purposes of cleaning image search engines Google Search, DuckDuckGo, and Bing with uBlock Origin or uBlacklist. Also works on mobile iOS, iPadOS, Android via...

ivre

IVRE IVRE Instrument de veille sur les réseaux extérieurs or DRUNK Dynamic Recon of UNKnown networks is a network recon framework, including tools for passive and active recon. IVRE can use data from: Passive tools: Zeek Argus Nfdump p0f airodump-ng Active tools: Nmap Masscan ZGrab2 ZDNS Nuclei...

CVE-2018-9995_dvr_credentials-dev_tool

Tool show DVR Credentiales root@kitploit: Exploit Title: "Gets DVR Credentials" CVE: CVE-2018-9995 CVSS Base Score v3: 7.3 / 10 CVSS Vector String: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N Date: 09/04/2018 Exploit Author: Fernandez Ezequiel twitter:@capitanalfa Exploit: root@kitploit: $ curl...

CVE-2022-3168-adb-unexpected-reverse-forwards

The reverse tunnel feature in Android Debug Bridge adb was vulnerable as it allowed malicious adb daemons to open connections to arbitrary host/ports and unix domain sockets on the host. Attacker window where the rogue daemon is running: root@kitploit: $ ./adbroguedaemon.py Victim window a GCE VM...

CVE-2026-47668

CVE-2026-47668 — Ejecución Remota de Código en DbGate RCE no autenticado en el ejecutor de scripts JSON de DbGate dbgate-serve ≤ 7.1.8. Herramienta de evaluación: CVE-2026-47668.py — solo para pruebas autorizadas...

mud-visualizer

メーカー使用状況記述 MUD ビジュアライザー 警告: mud-visualizer は現在ベータ版です。自己責任でご利用ください。 このツールは、MUDファイルをJSON形式で可視化するために使用できます。 目次 動機 インストール サポートされているMUD抽象化 貢献 サポート 引用 ライセンス 動機...

mud-visualizer

Manufacturer Usage Description MUD Visualizer Warning: mud-visualizer is currently beta. Use at your own risk. This tool can be used to visualize the MUD files in JSON format. Table of Contents Motivation Installation Supported MUD Abstractions Contribution Support Citation License Motivation MUD...

BlueSAM

BlueSAM BOF Cobalt StrikeのBeacon Object FileとしてBlueHammerを移植したもので、Windows Defenderのアップデート/VSS動作を介してSAMデータベースのコピーを取得し、Beaconからオフラインのレジストリデータを処理しようとします。 元のPoCはNightmare-Eclipse氏のBlueHammer（https://github.com/Nightmare-Eclipse/BlueHammer）に感謝します。 始め方 1. リポジトリをクローンする 2. make を実行する 使用方法 1...