CaptfEncoder

CaptfEncoder Inglés | Chino | V1 | V2 Captfencoder es un conjunto de herramientas de seguridad de red multiplataforma rápido y de código abierto, que proporciona conversión de códigos, criptografía clásica, criptografía, cifrado asimétrico, herramientas misceláneas y agrega varios tipos de...

CVE-2024-32370

CVE-2024-32370 Vulnerability Description Issue An issue in HSC Cybersecurity HSC Mailinspector version 5.2.17-3 has been identified, allowing a remote attacker to obtain sensitive information via a crafted payload to the id parameter in the mliSystemUsers.php component. Vulnerable Component...

CVE-2024-5124

deploy victim server: Install docker root@kitploit: Install packages required for the installation sudo apt-get update sudo apt install --yes ca-certificates curl sudo install -m 0755 -d /etc/apt/keyrings sudo curl -fsSL https://download.docker.com/linux/debian/gpg -o /etc/apt/keyrings/docker.asc...

arducky

Arducky - Arduino Ducky Script Interpreter This project aims to create a cheap alternative but not less efficient to Hak5's USB Rubber Ducky. Introduction The USB Rubber Ducky is a HID Human Interface Device programmable with a simple scripting language allowing penetration testers to quickly and...

AirScout

Right now only a dutch version of the app is available. English will follow soon. User Guide – Wi-Fi Passive Monitor ESSID + Band Filter Legal & Ethics Notice Educational Use For educational and authorized testing only. You are solely responsible for how you use this tool. Intentionally disruptin...

CVE-2026-22020-Weak-Seed-in-Quantum-Key-Distribution-Error-Correction

CVE-2026-22020 – Weak Seed in Quantum Key Distribution Error Correction Program Code Python root@kitploit: qkdweakseed.py - Simulated QKD privacy amplification with weak seed import hashlib, os, time def privacyamplificationsiftedkey, seed: Weak: seed derived from current time, predictable if see...

CVE-2026-21017-LDAP-Anonymous-Bind-Privilege-Escalation

CVE-2026-21017 – LDAP Anonymous Bind Privilege Escalation Program Code Python ldap3 sim root@kitploit: ldapanonsim.py - LDAP server allowing anonymous bind with write access from ldap3 import Server, Connection, ALL Simulated: real server would be misconfigured server =...

Package-Inferno

PackageInferno Blazingly simple, Docker‑first npm supply‑chain scanner. One compose file runs: Enumerator → builds the queue of packages Fetcher → downloads tarballs and optionally uploads to S3 Analyzer → static analysis + optional YARA Postgres → local DB for findings Streamlit Dashboard →...

autotimeliner

AutoTimeliner Extrae automágicamente una línea de tiempo forense de volcados de memoria volátil. AutoTimeliner ejecuta múltiples plugins de Volatility3 contra imágenes de memoria de Windows, Linux y macOS, y luego fusiona sus salidas en una única línea de tiempo CSV ordenada: Plugin de línea de...

autotimeliner

AutoTimeliner Automagically extract forensic timeline from volatile memory dumps. AutoTimeliner runs multiple Volatility3 plugins against Windows, Linux, and macOS memory images, then merges their output into a single, sorted CSV timeline: Generic Timeline Plugin Plugin| What it captures ---|---...

DropboxC2C

DropboxC2C DropboxC2C es un agente de post-explotación que utiliza la infraestructura de Dropbox para operaciones de comando y control. NO UTILICES ESTO CON FINES MALICIOSOS. EL AUTOR NO ES RESPONSABLE DE NINGÚN USO INDEBIDO DE ESTE PROGRAMA. Dropbox-C2C es un proyecto antiguo mío para usar un...

CVE-2020-24750

CVE-2020-24750 Result：...

sharepoint-deserialization-security-assessment

CVE-2026-45659 - Microsoft SharePoint Deserialization RCE Consultant-Style Cybersecurity Report Professional vulnerability assessment report for SharePoint deserialization risk, including executive summary, technical impact, remediation, and mitigation strategy. 📍 Report Snapshot...

macos_xprotect

Introduction to macOS - XProtect Continuing my blogpost series on intoruction to macOS, I've decided to dedicate a short blogpost to XProtect. What is XProtect? XProtect is Apple's built-in antivirus and malware signature system for macOS. It operates as part of the XProtectService, which scans...

debianopenssl

debianopenssl Private keys vulnerable to Debian OpenSSL bug CVE-2008-0166 In 2008 a bug in Debian's and Ubuntu's OpenSSL package led to predictable private keys. While the number of keys is limited, it takes a few considerations to create a proper list of all plausibly affected keys. This...

nrf24-playset

nRF24 Playset El nRF24 Playset es una colección de herramientas de software para dispositivos de entrada inalámbricos como teclados, ratones y presentadores basados en transceptores nRF24 de Nordic Semiconductor, p. ej. nRF24LE1 y nRF24LU1+. Todas las herramientas de software son compatibles con...

CVE-2023-23397-POC-Powershell

CVE-2023-23397-POC-Powershell Script functions to either send or save calendar NTLM leakage using the ReminderSoundFile option. Run script to load the functions in Powershell, then you can use the examples below as a starting point for using the functions. Requires to be run on a Windows machine...

pdtm

ProjectDiscovery's Open Source Tool Manager Features • Installation • Usage • Running pdtm • Join Discord pdtm is a simple and easy-to-use golang based tool for managing open source projects from ProjectDiscovery...

crawlergo

crawlergo Un potente rastreador de navegadores para escáneres de vulnerabilidades web Documento en inglés | 中文文档 crawlergo es un rastreador de navegadores que utiliza el modo chrome headless para la recolección de URLs. Engancha posiciones clave de toda la página web en la etapa de renderizado de...

scan4all

💬 README中文 • Compile/Install/Run • Parameter Description • How to use • Scenario • POC List • Custom Scan • Best Practices Features Free one id Multi-target web netcat for reverse shell What is scan4all: integrated vscan, nuclei, ksubdomain, subfinder, etc., fully automated and intelligent。red te...