Kage

Kage Kage（かげ）は、AhMythに触発されたツールで、Metasploit RPCサーバー用に設計され、meterpreterセッションと対話しペイロードを生成します。 現時点では、windows/meterpreter と android/meterpreter のみをサポートしています。 はじめに 以下の手順に従って、Kageをローカルマシンで問題なく動作させるためのコピーを入手してください。 前提条件 Metasploit-framework がインストールされ、PATH に含まれている必要があります。 Msfrpcd Msfvenom Msfdb インストール...

Veil-Evasion

Veil-Evasion Veil-Evasion 是一款旨在生成绕过常见杀毒软件的 Metasploit 有效载荷的工具。 注意：每次主要版本更新后，都应重新运行 ./setup/setup.sh。如果在运行 Veil-Evasion 时遇到任何重大错误，请首先尝试重新运行此脚本以安装额外的包并更新公共配置文件。 Veil-Evasion 目前由 @ChrisTruncer、@TheMightyShiv、@HarmJ0y 积极维护。 感谢： @jasonjfrank @mjmaley @davidpmcguire 软件要求： Linux 1. 使用 Kali x86 系统，所有依赖项已...

pupy

Pupy Simple Installation root@kitploit: pip3 install pipx pipx ensurepath pipx install git+https://github.com/n1nj4sec/pupy@nextgen pupysh If you want more detailed informationRefer to the wiki Development Install root@kitploit: git clone https://github.com/n1nj4sec/pupy cd pupy git checkout...

Veil

Veil Veil Logo Veil 是一款旨在生成能绕过常见防病毒解决方案的 Metasploit 载荷的工具。 Veil 当前由 @ChrisTruncer 维护 软件要求： 官方支持的以下操作系统： Debian 8+ Kali Linux Rolling 2018.1+ 以下操作系统可能能够运行 Veil： Arch Linux Manjaro Linux BlackArch Linux Deepin 15+ Elementary Fedora 22+ Linux Mint Parrot Security Ubuntu 15.10+ Void Linux 安装 Kali 快速安...

ysonet

YSoNet 是原始 YSoSerial.Net 的一个分支，目前由 @irsdl 维护。 网站：ysonet.net 或 ysonet.com（两者均指向本仓库）。 一个用于生成利用不安全 .NET 对象反序列化漏洞的 payload 的概念验证工具。 什么是 YSoNet YSoNet（原名 ysoserial.net）是一个工具集合，包含在常见 .NET 库中发现的实用程序及面向属性编程（property-oriented programming）“gadget 链”。在适当条件下，这些 gadget 链可以利用执行不安全对象反序列化的 .NET 应用程序。你提供一条命令和一个...

SpringPeace

SpringPeace SpringPeace là GUI/CLI GPL-3.0-or-later để tạo payload candidate từ Android boot.img cho CVE-2026-43499. Ứng dụng Windows dùng giao diện SpringPeace, tự kiểm tra ADB, đọc boot.img, build các candidate payload.so, rồi thử qua ADB theo thứ tự manifest. SpringPeace is a GPL-3.0-or-later...

ysoserial

A proof-of-concept tool for generating payloads that exploit unsafe Java object deserialization...

SpringPeace

SpringPeace SpringPeace ist eine GUI/CLI unter GPL-3.0-or-later zur Erstellung von Payload-Kandidaten aus Android boot.img für CVE-2026-43499. Die Windows-App prüft ADB, liest boot.img, erstellt payload.so-Kandidaten und testet sie über ADB in Manifest-Reihenfolge. SpringPeace ist eine GUI/CLI...

sqlicat

sqlicat Framework de SQL Injection em Python puro stdlib...

exploit-development-framework

Exploit Development Framework EDF A modular, educational ex...

AI-for-fastjson-1.2.83-RCE-skill

fastjson-1.2.83-RCEskill AI agent skill for detecting and exp...

Exploit for Code Injection in Exiftool_Project Exiftool

CVE-2021-22204 - ExifTool Arbitrary Code Execution An upgrade...

📄 HTTP/2 Multi-Server HPACK Exhaustion

This code implements a multi-target HTTP/2 resource exhaustion framework designed to stress or overwhelm server implementations through protocol-level amplification techniques. It includes server-specific payload generation for multiple platforms, automated connection orchestration, stream scalin...

Data Agents under Attack: Vulnerabilities in LLM-Driven Analytical Systems

Data agents integrate LLM-driven reasoning with relational data access, executable analytical tools, and multi-step workflow orchestration, making them increasingly central to enterprise analytics. This integration introduces new security vulnerabilities across data resources, database execution,...

Exploit for CVE-2025-66478

CVE-2025-66478-Research-Proof-of-Concept Overview This re...

The Infinite Mutation Engine? Measuring Polymorphism in LLM-Generated Offensive Code

Malware authors have traditionally relied on polymorphic techniques to produce variants in the same malware family, complicating signature-based detection. Integrating generative AI into offensive toolchains enables attackers to synthesize structurally diverse payloads with identical behavior,...

Exploit for Deserialization of Untrusted Data in Facebook React

markdown Summary CVE-2025-55182 Scanner is a high-perfor...

lightweight-msf

Lightweight-MSF !License: MIThttps://img.shields.io/badge...

linux-security-tools

Linux Security Tools Linux security tools, scanners, crackers...

📄 Jinja 2 1.4.0 Tactical RMM SSTI Detection

This proof of concept script detects potential server-side template injection vulnerabilities in web applications using template engines such as Jinja. The script sends a dynamically generated mathematical expression within a template payload to a target URL parameter. If the server evaluates the...