NimPackt-v1

A Nim-based packer for .NET executables and raw shellcode ByCas van Cooten @chvancooten With special thanks to Marcello Salvati @byt3bl33der and Fabian Mosch @S3cur3Th1sSh1t Description Update: NimPackt-v1 is among the worst code I have ever written I was just starting out learning Nim. Because o...

CVE-2025-3248-POC

Langflow RCE Exploit - CVE-2025-3248 ⚠️ Disclaimer This code is strictly intended for educational and research purposes only. Unauthorized use on systems without explicit permission may constitute a violation of the law. The author is not responsible for any misuse or malicious activity involving...

Redcloud

Weather report. Cloudy with a chance of shells! Early release. Follow me on Twitter to stay updated on Redcloud's development. 💁☁️🐚🌱 Quick Start - Architecture - Use-cases - Screenshots Introduction Redcloud is a powerful and user-friendly toolbox for deploying a fully featured Red Team...

athena

Dive into a new Pentesting Experience with Athena OS...

Mr.Holmes

🔍 Mr.Holmes Mr.Holmes is a information gathering tool OSINT. The main purpose is to gain information about domains,username and phone numbers with the help of public source avaiable on the internet also it use the google dorks attack for specific researchers. It also use proxies for make your...

Mindmap

Hacking Articles- Cyber Security Mindmap A comprehensive collection of cybersecurity mind maps covering technologies, tools, methodologies, courses, and certifications used in the security industry. This repository organizes complex cybersecurity concepts into visual tree structures, making it...

mailinabox

Mail-in-a-Box By @JoshData and contributors. Mail-in-a-Box helps individuals take back control of their email by defining a one-click, easy-to-deploy SMTP+everything else server: a mail server in a box. Please seehttps://mailinabox.email for the project's website and setup guide! Our goals are to...

CVE-2025-31129

CVE-2025-31129 exploits for CVE-2025-31129...

InvestigacionAplicacionCVE-1999-0517

InvestigacionAplicacionCVE-1999-0517...

CVE-2023-36845

Juniper Scanner Scanner for CVE-2023-36845 by bt0 More information about the Vulnerability: https://supportportal.juniper.net/JSA72300 Requirements: python3+ shodan colorama urlopen pyOpenSSL censys $ python3 -m pip install -r requirements.txt Options root@kitploit: -h, --help show this help...

Log4j_dos_CVE-2021-45105

Log4j2 DOS CVE-2021-45105 Poc root@kitploit: $$::-$::-$$::-$ Versions Affected: all versions from 2.0-beta9 to 2.16.0 This application is based on Spring Boot web application vulnerable to CVE-2021-45105 It uses Log4j 2.16.0 Running the application Run it: root@kitploit: Import the project in Jav...

dorkish

Dorkish During reconaissance phase or when doing OSINT , we often use google dorking and shodan and thus the idea of Dorkish. Dorkish is a Chrome extension tool that facilitates custom dork creation for Google and Shodan using the builder and it offers prebuilt dorks for efficient reconnaissance...

bloom

Bloom: Automated Behavioral Evaluations for LLMs !IMPORTANT Bloom has a new home. It is now developed and maintained by Meridian Labs and lives at meridianlabs-ai.github.io/petribloom — all new features and fixes will land there. This repository is frozen at its last standalone release and will n...

sj

sj Swagger Jacker sj is a command line tool designed to assist with auditing of exposed Swagger/OpenAPI definition files by checking the associated API endpoints for weak authentication. It also provides command templates for manual vulnerability testing. It does this by parsing the definition fi...

BloodHound-Legacy

BloodHound Legacy Edition v4 Has Been Deprecated This repository is for BloodHound Legacy version 4, which was last updated in 2023 and is no longer maintained. It will be archived in the near future. Please Use the New BloodHound Community Edition BloodHound Legacy has been replaced by the free...

firezone

Secure remote access that's 3x faster than OpenVPN with zero-trust, peer-to-peer connections Docs | Quickstart | Download Clients | Discussions | Support Overview Firezone is an open source platform to securely manage remote access for any-sized organization. Unlike most VPNs, Firezone takes a...

CVE-2020-0618_DETECTION

CVE-2020-0618 - Microsoft SQL Server Reporting Services SSRS RCE Detection PoC 📜 Description This is a simple PoC to detect CVE-2020-0618 , a Remote Code Execution vulnerability affecting Microsoft SQL Server Reporting Services SSRS. The vulnerability exists due to improper path validation in the...

CVE-2022-48429_poc

CVE-2022-48429 - YouTrack Stored XSS The reported description of the CVE on the NVD database lacks accuracy. This is a more accurated description: Youtrack version = 2022.3.65373 has a stored Cross-Site Scripting XSS in dashboards. A malicious low-privileged user can create and share a malformed...

CVE-2022-22947-POC-Reproduce

CVE-2022-22947-POC CVE-2022-22947 reproduce...

EasyTokens

EasyTokens A device-code phishing server for adversary emulation. Captures Microsoft 365 OAuth tokens via the Device Authorization Grant flow. Inspired by GraphSpy. Warning — Authorized Use Only. This tool is intended for penetration testers and red teamers operating under explicit written...