1180369 matches found
melting-cobalt
melting-cobalt π A tool to hunt/mine for Cobalt Strike beacons and "reduce" their beacon configuration for later indexing. Hunts can either be expansive and internet wide using services like SecurityTrails, Shodan, or ZoomEye or a list of IP's. Getting started 1. Install melting-cobalt 2. Configu...
melting-cobalt
melting-cobalt π Una herramienta para cazar/minar balizas de Cobalt Strike y "reducir" su configuraciΓ³n de baliza para indexaciΓ³n posterior. Las cacerΓas pueden ser expansivas y a nivel de internet utilizando servicios como SecurityTrails, Shodan, o ZoomEye, o una lista de IPs. Comenzando 1...
ExploitWebmin
Script Webmin Project created by: Gabriel Jose. Python script to exploit webmin vulnerability cve-2006-3392 Example of how to use ./exploitWebmin.py -pt http -t host -p port -f file root@kitploit: ./exploitWebmin.py -pt http -t 127.0.0.1 -p 10000 -f /etc/passwd...
snmpvlan
snmpvlan CVE ID: CVE-2014-3341. Cisco Bug ID: CSCup85616. NexusTaco is a snmp scanner that can be used both for internal testing and external testing to assess Cisco Nexus switches 5000 and 6000 family. There are many snmp scanners and brute forcers this was made for just completeness.It has the...
DET
DET extensible Kit de ExfiltraciΓ³n de Datos DET se proporciona TAL CUAL, es una prueba de concepto para realizar ExfiltraciΓ³n de Datos usando uno o mΓΊltiples canales al mismo tiempo. Esta es una Prueba de Concepto destinada a identificar posibles fallos de DLP. Nunca debe usarse para exfiltrar...
DET
DET extensible Data Exfiltration Toolkit DET is provided AS IS, is a proof of concept to perform Data Exfiltration using either single or multiple channels at the same time. This is a Proof of Concept aimed at identifying possible DLP failures. This should never be used to exfiltrate sensitive/li...
DirtyClone
DirtyClone CVE-2026-43503 - Python PoC Non-official Python port of DirtyClone β a Linux kernel local privilege escalation vulnerability. This repository contains a working Proof of Concept that allows an unprivileged local user to gain root privileges by exploiting page-cache corruption via clone...
POC
POC For research purposes only! A public collection of POCs & Exploits for the vulnerabilities I discovered. CVE-2022-22583 PackageKit : An application may be able to access restricted files SIP Bypass CVE-2022-26690 PackageKit : A malicious application may be able to modify protected parts of th...
CVE-2026-6875-PoC-Exploit
CVE-2026-6875 - ServiceNow PreβAuth RCE Exploit Framework & PoC Verifier π₯ ServiceNow AI Platform β JavaScript Injection β Sandbox Escape β RCE β Root Privesc Exploit Framework & Safe Verifier For authorized security testing only. βοΈ Legal Disclaimer & Responsible Use This tool is provided for...
So You Want To Build A Nethunter Kernel
So You Want To Build A Nethunter Kernel Introduction The biggest hurdle for most people who want to set up a Nethunter device is the kernel requirement. Unless your device already has a prebuilt and maintained kernel, then you will be told to build one yourself. There is a lot of documentation on...
RtlHijack
RtlHijack A repository with scripts to demonstrate alternative Read and Write primitives using Rtl functions the unintended way. RtlFillMemory.c RtlFillMemory takes three arguments: a pointer to the destination memory, the number of bytes to write, and a single byte value. Writes only a byte into...
CVE-2026-69212
CVE-2025-69212 β OpenSTAManager OS Command Injection RCE Proof-of-concept exploit for CVE-2025-69212 , an OS Command Injection vulnerability in OpenSTAManager = 2.9.8 that allows an authenticated attacker to achieve Remote Code Execution via a maliciously crafted ZIP file upload. Advisory CVE:...
CVE-2026-48908-Joomla-SP-Page-Builder-RCE
π‘οΈ CVE-2026-48908 Analysis Unauthenticated Arbitrary File Upload to RCE in JoomShaper SP Page Builder -critical?style=for-the-badge&logo=alert -black?style=for-the-badge&logo=github A comprehensive technical breakdown of an unauthenticated remote code execution vulnerability. π Executive Summary...
CVE-2024-35250-BOF
CVE-2024-35250-BOF Beacon Object File BOF implementation of CVE-2024-35250 for Cobalt Strike. Compiled with Visual Studio. Acknowledgments All credit for the exploit code goes to the original author varwara. Disclaimer I am not responsible for any crimes against humanity or nuclear war that you m...
tird
π Home π Specification π man page π Input Options π Tutorial β FAQ π₯ Install tird & tirdFS tird /tΙͺrd/ an acronym for "this is random data" is a file encryption tool that minimizes metadata and hides encrypted data. With tird, you can: 1. Create files filled with random data to use as containers ...
CVE-2023-21768
CVE-2023-21768 Windows Ancillary Function Driver for WinSock According to the detailed description of CVE-2023-21768 published by the Microsoft Security Response Center MSRC, the vulnerability exists in the Ancillary Function Driver AFD, whose system file is afd.sys. The AFD module is the kernel...
Pachine
Pachine Python implementation for CVE-2021-42278 Active Directory Privilege Escalation. Installation root@kitploit: $ pip3 install impacket Usage root@kitploit: Impacket v0.9.23 - Copyright 2021 SecureAuth Corporation usage: pachine.py -h -scan -spn SPN -impersonate IMPERSONATE -domain-netbios...
instaloctrack
instaloctrack TL;DR : ascineema, video of the project A tool to scrape geotagged locations on Instagram profiles. Output in JSON & interactive map. requirements root@kitploit: sudo apt install chromium-chromedriver && chmod a+x /usr/bin/chromedriver π οΈ installation root@kitploit: git clone...
stacs
Static Token And Credential Scanner What is it? STACS is a YARA powered static credential scanner which suports binary file formats, analysis of nested archives, composable rulesets and ignore lists, and SARIF reporting. What does STACS support? Currently, STACS supports recursive unpacking of: 7...
Fourteen_Endpoints
The Middlemen Shell Companies Inside Apple's Privacy Relay An anonymous Delaware LLC publishes a Bible prayer app, a daily journal, and a caller ID tool on the App Store. That entity operates encrypted relay infrastructure inside Apple's privacy network. That relay terminates at Taiwan Mobile Co....