OBO

Off-By-One Slides from Off-By-One Conferences Watch all the talks Year ↓| Slides| Youtube playlist ---|---|--- 2024| Slides for Day 1...

oversight

Oversight v0.5.8 Oversight is a terminal-based security intelligence tool designed to audit shell scripts and commands before they touch your system. It bridges the gap between "blind trust" and "manual auditing" by providing a high-speed, interactive analysis of both local files and remote scrip...

SpringVulScan

SpringVulScan If you like it, give the author a star SpringVulScan -- Burp Suite Plugin Updates 1.1 1. Added custom root path scanning. 2. Right-click to send to SpringVulScan, custom dictionaries, etc. 3. Optimized detection logic. 4. Custom selection can be used not only for detecting route...

BetterRAT

Information BetterRAT is InfinityRATDiamondRAT Based Next Generation RAT All responsibilities are at your own risk. Please use it only for research purposes. Feature Remote Desktop Remote Connection Controller Remote Keylogger Remote File Manager Remote TaskManager Remote Script...

pDNS2

pDNS2 Proyecto pDNS2 pDNS2 es otra implementación de una herramienta DNS pasiva que trabaja con Redis como base de datos. pDNS2 significa 'passive DNS version 2' y favorece la velocidad en las consultas sobre otras características de la base de datos. pDNS2 está basado en el dnslogger original de...

hulak

Cliente de API nativo de Git con secretos cifrados. REST · GraphQL · OAuth Inicio rápido • Explorador de GraphQL • Estructura del proyecto • Documentación Ejecuta una petición, un directorio completo o permanece en modo interactivo root@kitploit: hulak run ./requests/ Hulak ejecuta archivos de...

zirgen

Compilador de Circuitos Zirgen Zirgen es un compilador para un lenguaje específico de dominio, también llamado "zirgen", que crea circuitos aritméticos para el sistema de pruebas RISC Zero. En su mayor parte, los usuarios de RISC Zero deberían escribir sus zkApps en Rust y usar nuestra zkVM RISC-...

Pachine

Pachine Python implementation for CVE-2021-42278 Active Directory Privilege Escalation. Installation root@kitploit: $ pip3 install impacket Usage root@kitploit: Impacket v0.9.23 - Copyright 2021 SecureAuth Corporation usage: pachine.py -h -scan -spn SPN -impersonate IMPERSONATE -domain-netbios...

rop-tool

rop-tool v2.4.2 Una herramienta para ayudarte a escribir exploits binarios OPCIONES root@kitploit: rop-tool v2.4.2 Help you make binary exploits. Usage: rop-tool OPTIONS Commands : gadget Search gadgets patch Patch the binary info Print info about binary heap Display heap structure disassemble...

wafaray

Mejora tu detección de malware con WAF + YARA WAFARAY WAFARAY es un despliegue de LAB basado en Debian 11.3.0 estable x64 hecho y cocinado entre dos ingredientes principales WAF + YARA para detectar archivos maliciosos p.ej. webshells, virus, malware, binarios típicamente a través de funciones we...

x18-leak

x18-leak iOS 11.2 introduced a kernel information leak that could be used to determine the kASLR slide. The issue was the result of a newly added feature, ARMKERNELPROTECT, that inadvertently caused the address of the kernel function Lel0synchronousvector64long to appear in register x18 when...

punk.py

punk.py Herramienta 1337 de post-explotación SSH en Unix cómo funciona punk.py es una herramienta de post-explotación diseñada para ayudar en el pivoteo de redes desde una caja Unix comprometida. Recolecta nombres de usuario, claves SSH y hosts conocidos de un sistema Unix, y luego intenta...

punk.py

punk.py unix SSH post-exploitation 1337 tool how it works punk.py is a post-exploitation tool meant to help network pivoting from a compromised unix box. It collect usernames, ssh keys and known hosts from a unix system, then it tries to connect via ssh to all the combinations found. punk.py is...

tartufo

...

SCCMSecrets

SCCMSecrets SCCMSecrets.py is an SCCM policies exploitation tool. It goes beyond NAA credentials extraction, and aims to provide a comprehensive approach regarding SCCM policies exploitation. The tool can be executed from various levels of privileges, and will attempt to uncover potential...

CVE-2021-4034

CVE-2021-4034 Local privilege escalation via pkexec YouTube video Watch the ✨ YouTube Video Run locally root@kitploit: make all && ./pwnkit && make clean Run in docker root@kitploit: Build the docker image docker build -t pwnkit . Run the exploit docker run -it pwnkit bash make all && ./pwnkit &&...

DeepZero

Automated vulnerability research pipeline engine Define pipelines as YAML. DeepZero handles orchestration, parallelism, fault tolerance, and state. English | 简体中文 | Français 🔗 Pipeline-as-YAML - chain ingest, filter, transform, and LLM-assess stages declaratively ⚡ Parallel execution -...

C3

C3 Build C3 MSVC/badge.svg?branch=master Build C3 Clang/badge.svg?branch=master C3 Custom Command and Control is a tool that allows Red Teams to rapidly develop and utilise esoteric command and control channels C2. It's a framework that extends other red team tooling, such as the commercial Cobal...

CarbonCopy

CarbonCopy Una herramienta que crea un certificado falsificado de cualquier sitio web en línea y firma un ejecutable para la evasión de AV. Funciona tanto en Windows como en Linux. Requisitos previos Para usarlo en Linux, ejecute los siguientes comandos: root@kitploit: apt-get install osslsigncod...

nvidia-gpu-security-poc

NVIDIA GPU driver — two findings NVIDIA closed as expected behavior Proof-of-concept code and raw evidence for two findings in the NVIDIA Linux GPU driver, both reported through NVIDIA's VDP and both closed by NVIDIA as intended/expected behavior. Published so the behaviour is documented and...