airecon

AI-Powered Autonomous Penetration Testing Agent -orange.svg AIRecon is an autonomous penetration testing agent that combines a self-hosted Ollama LLM with a Kali Linux Docker sandbox , native Caido proxy integration , a structured RECON → ANALYSIS → EXPLOIT → REPORT pipeline , and a real-time...

Klip

Klip Minimal terminal-based password manager. Features · Installation · Usage · Security Features Fully offline operation. Secure encryption using Argon2id for key derivation and authenticated encryption with libsodium. Secure password generator. Custom TUI built without external libraries...

laforge

Laforge Security Competition Infrastructure Automation Framework Laforge enables rapid development of infrastructure for the purpose of information security competitions. Using a simple and intuitive configuration language, Laforge manages a dependency graph and state management and allows for...

hcxdumptool

hcxdumptool Una herramienta para capturar paquetes de dispositivos WLAN y descubrir posibles puntos débiles en redes WiFi propias ejecutando ataques de capa 2 contra el protocolo WPA. Diseñada para ejecutarse mayormente sin cabeza en sistemas pequeños como una Raspberry Pi Zero. hcxnmealog Una...

Hypervisor-From-Scratch

Hypervisor From Scratch A tutorial on creating a hypervisor from scratch All the parts » Part 1 · Part 2 · Part 3 · Part 4 · Part 5 · Part 6 · Part 7 · Part 8 If you're looking to use a hypervisor for analysis and reverse engineering tasks, check outHyperDbg Debugger. It's a hypervisor-based...

raven

Raven - Mapa Avanzado de Amenazas Cibernéticas Simplificado, personalizable y adaptable. Usa D3.js con TOPO JSON, tiene 247 países, 100,000 ciudades, y puede usarse en un entorno aislado ¡sin búsquedas externas! Estructura Sin conexión - Demo Firefox, Chrome o Safari En vivo - Regresión 500 ataqu...

poc-cve-collection

poc-cve-collection Poc CVE Collection 🧪 Collects CVE PoCs and backs them up to the Internet Archive when they are unavailable on GitHub. Donate Support the maintenance of this project with PayPal or by scanning the QR code below. Example root@kitploit: CVE-2026-31431 Title crypto: algifaead -...

macOS-enterprise-privileges

Privileges Transparent, free, and secure admin rights management for macOS. Privileges is a free macOS application designed for modern enterprise environments. It gives users temporary administrator privileges when needed without granting permanent admin rights. The application is built with...

Octopus

¿Qué es Octopus? Octopus es un servidor C2 de preoperación de código abierto basado en Python que puede controlar un agente de Octopus PowerShell a través de HTTP/S. El propósito principal de crear Octopus es usarlo antes de cualquier operación de red team, donde en lugar de comenzar el compromis...

soc-faker

soc-faker soc-faker se utiliza para generar datos falsos para uso de Centros de Operaciones de Seguridad, profesionales de seguridad de la información, equipos de producto y muchos más. Primeros pasos soc-faker funciona con Python 3.6 o superior. Puede instalar soc-faker usando pip así como...

CVE-2025-48384

PoC for CVE-2025-48384 See CVE-2025-48384 To run: root@kitploit: git -c protocol.file.allow=always clone --recurse-submodules [email protected]:liamg/CVE-2025-48384.git Example output: root@kitploit: git -c protocol.file.allow=always clone --recurse-submodules CVE-2025-48384 test Cloning int...

some-tweak-to-hide-jwt-payload-values

some-tweak-to-hide-jwt-payload-values a handful of tweaks and ideas to safeguard the JWT payload, making it futile to attempt decoding by constantly altering its value, ensuring the decoded output remains unintelligible while imposing minimal performance overhead. What is a JWT Token? A JSON Web...

Navigate CMS 2.9.4 - Server-Side Request Forgery

Navigate CMS 2.9.4 is susceptible to server-side request forgery via feedparser class. This can allow a remote attacker to force the application to make arbitrary requests via injection of arbitrary URLs into the feed parameter, thus enabling possible theft of sensitive information, data...

Micro Focus UCMDB - Remote Code Execution

Micro Focus UCMDB is susceptible to remote code execution. Impacted products include Operation Bridge Manager versions 2020.05, 2019.11, 2019.05, 2018.11, 2018.05, 10.63,10.62, 10.61, 10.60, 10.12, 10.11, 10.10 and all earlier versions, and Operations Bridge containerized 2020.05, 2019.08, 2019.0...

dfirtriage

dfirtriage Digital forensic acquisition tool for Windows-based incident response. How to Use To run, drop dfirtriage.exe on the target or connected USB drive and execute with admin rights, -h for help. DFIRTriage v6.0 User's Manual Description This document outlines the functionality and proper u...

brawl-public-game-001

BRAWL One of the challenging problems for cyber security researchers developing detection and response capabilities is finding a realistic environment in which to test their hypothesis and capabilities. The cheapest method is to test capabilities on a small lab network. But this environment is...

CVE-2018-11235

CVE-2018-11235 1. ssh a tu vps. 2. Clona este repositorio: root@kitploit: git clone https://github.com/Rezy-Dev/CVE-2018-11235 cd CVE-2018-11235 3. Dale a exploit.sh permiso de ejecución x y luego ejecútalo: root@kitploit: sudo chmod +x exploit.sh sudo ./exploit.sh Descarga apache2 y construye el...

CVE-2023-21608

CVE-2023-21608 Discord Server Este error era un uso después de liberación Use after Free que fue causado durante la operación resetForm al manejar referencias de memoria de objetos. Blog Adobe Acrobat Reader - resetForm - CAgg UaF - Explotación de RCE - CVE-2023-21608 Aviso CVE-2023-21608 Demo...

CVE-2022-2588

CVE-2022-2588 La corrección El error está corregido en Linux v5.19 por este commit. El error El error fue introducido en Linux v3.17 por este commit en 2014. Requiere User Namespaces para activarse. Este error es muy similar a CVE-2021-3715, que fue causado por una operación incorrecta en la list...

cq

cq Code Query, 범용 코드 보안 스캐닝 도구. CQ는 보안 취약점과 보안 중심 코드 리뷰어에게 관심을 끄는 기타 항목을 코드에서 스캔합니다. 발견된 문제에 대한 참조가 포함된 텍스트 파일을 출력 디렉토리에 생성합니다. 이 출력 파일들은 이후 검토하거나, grep과 같은 unix 명령줄 도구로 필터링하거나, 지정된 file:line 참조에서 코드베이스로 '점프'하는 수단으로 사용할 수 있습니다. 널리 사용되는 방식 중 하나는 출력 파일을 '할 일todo' 목록으로 간주하여, 검토하면서 오탐false positive으로...