CVE-2026-91717

A flaw was found in Google Chrome on Android. This missing authorization vulnerability allows a local attacker, through a co-installed application, to obtain sensitive information. This could lead to unauthorized access to user data...

MacDirtyCow

MacDirtyCow Example of CVE-2022-46689 aka MacDirtyCow. What? MacDirtyCow is a privilege escalation vulnerability in macOS, similar to the Dirty COW vulnerability in Linux. The vulnerability resides in the copy-on-write COW mechanism used by macOS's XNU kernel. The vulnerability allows an attacker...

nfcgate

NFCGate ⚠️NFCGate is currently being falsely detected as "NGate" malware. Please seethis issue for up-to-date information.⚠️ NFCGate is an Android application meant to capture, analyze, or modify NFC traffic. It can be used as a researching tool to reverse engineer protocols or assess the security...

brakeman

Brakeman Brakeman es una herramienta de análisis estático que verifica las aplicaciones Ruby on Rails en busca de vulnerabilidades de seguridad. Instalación Usando RubyGems: root@kitploit: gem install brakeman Usando Bundler: root@kitploit: group :development do gem 'brakeman', require: false end...

brakeman

Brakeman Brakeman is a static analysis tool which checks Ruby on Rails applications for security vulnerabilities. Installation Using RubyGems: root@kitploit: gem install brakeman Using Bundler: root@kitploit: group :development do gem 'brakeman', require: false end Using Docker: root@kitploit:...

Rock-ON

Rock-ON Un asesino de un solo disparo Rock-On es una herramienta de reconocimiento todo en uno que ayudará a impulsar tu proceso de Recon. Está principalmente destinada a automatizar todo el proceso de reconocimiento y ahorrar el tiempo que se pierde haciendo todo esto manualmente. Pronto habrá u...

CVE-2022-23131

CVE-2022-23131 Zabbix SSO Vulnerability Just like other POCs on GitHub, there is an issue with SSO authentication, and most environments fail during testing. Try it manually yourself...

EUVD-2026-79987

Confused deputy in PriceTracking in Google Chrome on on iOS prior to 153.0.8010.47 allowed a remote attacker leveraging social engineering to bypass system access restrictions into a privileged page via crafted network traffic. Chromium security severity: Medium...

CVE-2026-91726

CVE-2026-91726 is a critical out-of-bounds read in the WebGL component of Google Chrome on Android , affecting versions prior to 153.0.8010.47 . A remote attacker can exploit the flaw via a crafted HTML page to read memory outside the sandbox , potentially leaking sensitive data. The Chromium sec...

on-device-browser-agent

Local Browser - Automatización Web con IA en Dispositivo Pronto lanzaremos soporte para runanywhere-web-sdk en nuestro repositorio principal: échale un vistazo: https://github.com/RunanywhereAI/runanywhere-sdks Una extensión de Chrome que utiliza WebLLM para ejecutar automatización web con IA...

heroku-CVE-2013-0333

heroku-CVE-2013-0333 Inspect all of your heroku apps to see if they are running a vulnerable version of Rails Background A serious security vulnerability has been found in the Ruby on Rails framework. This exploit affects nearly all applications running Rails versions 2.3 and 3.0, and a patch has...

Project-Eyes-On

Proyecto Eyes On v3.0 Vigilancia Global Codificado por: Y0oshi IG: @rde0 "La herramienta unificada de inteligencia para escaneo masivo de cámaras IP." Resumen Project Eyes On es una herramienta de vigilancia ultrarrápida y multihilo diseñada para localizar cámaras IP abiertas en todo el mundo...

OpenAM

Open Access Management OpenAM is an access management solution that includes Authentication, SSO, Authorization, Federation, Entitlements, and Web Services Security. Cross Domain Single Sign On CDSSO, SAML 2.0, OAuth 2.0 & OpenID Connect ensure that OpenAM integrates easily with legacy, custom, a...

railsgoat

RailsGoat RailsGoat is a deliberately vulnerable web application built on Ruby on Rails. It demonstrates real-world security vulnerabilities from the OWASP Top 10 and serves as a hands-on training platform for developers and security professionals. What is RailsGoat? RailsGoat is an intentionally...

frida-c2-mcp

FridaC2MCP An MCP server with streamable HTTP transport that runs Frida's dynamic instrumentation entirely on-device — no client-side tooling required. This project runs directly on rooted Android and jailbroken iOS devices , exposing Frida as a set of tools callable over HTTP. Any MCP-compatible...

androidReverse

Android Reverse A reverse engineering suite that runs entirely on Android. No PC, no ADB, no desktop tools — everything from APK extraction to native binary analysis, editing, and rebuilding happens on-device. MCP Server androidReverse includes a built-in Model Context Protocol server, allowing...

CVE-2020-12593

CVE-2020-12593 CVE-2020-12593 POC Symantec EDR on-prem version prior to "4.5" is prone to an information disclosure vulnerability via the following URL : root@kitploit: https://@IPEDR/atpapi/v2/policies/blacklist Reference...

CVE-2020-5839

CVE-2020-5839 CVE-2020-5839 POC Symantec EDR on-prem version prior to "4.4.0" is prone to an information disclosure vulnerability via the following URL's : root@kitploit: https://@IPEDR/r3epmpi/status/ https://@IPEDR/r3epmpi/status/routes https://@IPEDR/r3epmpi/v1/event/status/ds...

CVE-2019-19547

CVE-2019-19547 CVE-2019-19547 POC Symantec EDR on-prem version prior to "4.3.0" is vulnerable to an unauthenticated reflected XSS via the following URL: root@kitploit: https://@IPEDR/r3epmpi/v1/dx/log Reference...

CVE-2026-64600-Refluxfs-PoC

RefluXFS CVE-2026-64600 PoC This repo contains a PoC of the recently discovered race condition vulnerability affecting COW on XFS reported by the excellent Qualys Security Team. 1 2 PoC info Handwritten based off of the excellent analysis in the Qualys advisory. Rewrites the first 4KB of the...