NyxInvoke

NyxInvoke NyxInvoke is a versatile Rust-based tool designed for executing .NET assemblies, PowerShell commands/scripts, Beacon Object Files BOFs and PE files with built-in Ntdll Unhooking, patchless AMSI and ETW bypass capabilities. It can be compiled as either a standalone executable or a DLL...

Beleth

Beleth Dictionary based SSH cracker root@kitploit: Usage: ./beleth OPTIONS -c payload Execute payload on remote server once logged in -h Display this help -l threads Limit threads to given number. Default: 4 -p port Specify remote port -P password Use single password attempt -t target Attempt...

Hwacha

Hwacha https://www.n00py.io/2017/12/raining-shells-on-linux-environments-with-hwacha/ Hwacha is a tool to quickly execute payloads on Nix based systems. Easily collect artifacts or execute shellcode on an entire subnet of systems for which credentials are obtained. root@kitploit: $python hwacha.p...

drow

drow 説明 TL;DR drow は、ELF 実行可能ファイル（ビルド後）のエントリポイントにコードを注入しフックするためのコマンドラインユーティリティです。未修正の ELF 実行可能ファイルを入力として受け取り、実行時に動作するユーザー提供のペイロードが埋め込まれた修正済み ELF を出力します。 もう少し詳しく ... Drow は以下の手順で新しいパッチ済み ELF を作成します： 1. 未修正のターゲット ELF 実行可能ファイルと、ユーザー提供のペイロード（位置独立なバイナリブロブ）をマッピングする 2. プログラムヘッダを解析して最初の実行可能セグメントを見つける 3...

CVE-2017-11882-metasploit

CVE-2017-11882-metasploit This is a Metasploit module which exploits CVE-2017-11882 using the POC below: https://embedi.com/blog/skeleton-closet-ms-office-vulnerability-you-didnt-know-about. Installation 1. Copy the cve201711882.rb to /usr/share/metasploit-framework/modules/exploits/windows/local...

CVE-2017-9779

Automatic execution Payload From Windows By Path Users :: What is ? Cmder Cmder is a software package created out of pure frustration over the absence of nice console emulators on Windows. It is based on amazing software, and spiced up with the Monokai color scheme and a custom prompt layout,...

trojanizer

TROJANIZER root@kitploit: Version release : v1.1 Stable Author : pedro ubuntu r00t-3xp10it Codename: TroiaRevisited Distros Supported : Ubuntu, Kali, Mint, Parrot OS Suspicious-Shell-Activity SSA RedTeam develop @2017 FRAMEWORK DESCRIPTION root@kitploit: The Trojanizer tool uses WinRAR SFX to...

CVE-2025-48384

PoC for CVE-2025-48384 See CVE-2025-48384 To run: root@kitploit: git -c protocol.file.allow=always clone --recurse-submodules [email protected]:liamg/CVE-2025-48384.git Example output: root@kitploit: git -c protocol.file.allow=always clone --recurse-submodules CVE-2025-48384 test Cloning int...

EXPLOITER

EXPLOITER: Explotación automatizada para CVE-2024-0044 EXPLOITER es una herramienta sofisticada diseñada para la explotación automatizada de vulnerabilidades CVE-2024-0044. Este script simplifica el proceso de explotación de aplicaciones Android vulnerables automatizando el despliegue del payload...

CVE-2024-26169-Detail-1

CVE-2017-11882-metasploit This is a Metasploit module which exploits CVE-2017-11882 using the POC below: https://embedi.com/blog/skeleton-closet-ms-office-vulnerability-you-didnt-know-about. Installation 1. Copy the cve201711882.rb to /usr/share/metasploit-framework/modules/exploits/windows/local...

CVE-2022-1388

CVE-2022-1388 PoC for CVE-2022-1388 affecting F5 BIG-IP. Usage root@kitploit: $ ./poc.sh --help Usage: poc.sh --help --file FILE --scan --exploit --payload PAYLOAD CVE-2022-1388 PoC script. One or multiple IPs can be scanned. Arguments: --help Show this help message and exit. --file FILE File lis...

CVE-2024-25897

parâmetros ip , puerto , ruta saída do exploit Painel de ajuda explicação do exploit Aqui está a explicação do código em Markdown: Explicação do Código Este script foi projetado para explorar uma vulnerabilidade específica no Jenkins CVE-2024-23897. Ele permite baixar um arquivo JAR de um servido...

CVE-2025-8088

CVE-2025-8088 – WinRAR Exploit Questa repository contiene un generatore di file RAR dannosi che sfrutta la vulnerabilità CVE-2025-8088 in WinRAR, consentendo a un file apparentemente legittimo di eseguire un payload quando la vittima lo estrae. Comando consigliato root@kitploit: python3...

CVE-2021-40444--CABless

Versione CABless di CVE-2021-40444 Aggiornamento: Codice modificato in modo da non dover fare affidamento sugli archivi CAB il file "index.html" che attiva l'esecuzione del payload conterrà solo 1 linea di codice, all'interno del tag 'script': È fornito un articolo in formato PDF. Aggiornamento:...

horrors-log4shell

horrors-log4shell Ein Mikro-Labor Spielplatz? für CVE-2021-44228 log4j Kann zum Ausführen von Payloads gegen mehrere Ziele verwendet werden. Zielspezifische Payloads werden zur Laufzeit generiert. Anpassbare Konfiguration und Bypasses. Installation Java-bezogene Voraussetzungen Entwicklung /...

reverse-shell

reverse-shell Reverse Shell come servizio - https://reverse-shell.sh Reverse shell facile da ricordare che dovrebbe funzionare sulla maggior parte dei sistemi Unix-like. Rileva il software disponibile sul target ed esegue un payload appropriato. Utilizzo 1. Mettiti in ascolto Sulla tua macchina,...

pyrdp

PyRDP PyRDP ist ein Python-basiertes Remote Desktop Protocol RDP Monster-in-the-Middle MITM-Tool und eine Bibliothek. Es bietet einige Werkzeuge: RDP Monster-in-the-Middle Protokolliert verwendete Klartext-Anmeldedaten oder NetNTLM-Hashes beim Verbinden Stiehlt Daten, die in die Zwischenablage...

MAL-2026-13301 Malicious code in dolyame-boxy-desktop-bnpl-card-gallery (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e20a9180ff2928b0498496b59c96983db044063b8db7c5e258b6518d5daf00a On require of this package, index.js loads bridge.js which downloads a platform-specific binary from hardcoded Cloudflare Workers hosts...

Malicious code in bigops-telephony-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 98fd12faa59a5e65d0383cfb3be55ccd49beca5c74cb350b62f5717be83bcd65 On require of bigops-telephony-client, index.js loads./runtime.js, which unconditionally downloads a platform-specific binary over HTTPS from...

Malicious code in blocks-sahred-atom-mobile-app-bar-action (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 06fe2a177df3e33a917705f95afeb12c308bc01b65328114e5fa34411b210659 On require of this package, index.js exposes a trivial stub class and then loads bridge.js, which selects a platform-specific endpoint, fetches an...