HERCULES

HERCULES HERCULES is a customizable payload generator that can bypass antivirus software. root@kitploit: VERSION 3.0.5 INSTALLATION SUPPORTED PLATFORMS:...

Kage

Kage Kage ka-geh is a tool inspired by AhMyth designed for Metasploit RPC Server to interact with meterpreter sessions and generate payloads. For now it only supports windows/meterpreter & android/meterpreter. Getting Started Please follow these instructions to get a copy of Kage running on your...

Enigma

Enigma Multiplatform payload dropper. VIDEO DEMO CLONE root@kitploit: git clone https://github.com/UndeadSec/Enigma.git RUNNING root@kitploit: cd Enigma root@kitploit: python enigma.py or python3 enigma3.py DISCLAIMER TO BE USED FOR EDUCATIONAL PURPOSES ONLY The use of the Enigma is COMPLETE...

Veil-Evasion

Veil-Evasion Veil-Evasion is a tool designed to generate metasploit payloads that bypass common anti-virus solutions. NOTE: ./setup/setup.sh should be re-run on every major version update. If you receive any major errors on running Veil-Evasion, first try re-running this script to install any...

macro_pack

macropack 简短描述 警告：MacroPack自2021年起不再维护，如果您是专业人士，需要用于初始访问、假设入侵、EDR绕过等进攻性信息安全工具，请查看https://www.balliskit.com MacroPack Community 是一款用于自动化混淆和生成旧格式（如MS Office文档或VBS类格式）的工具。它还处理各种快捷方式格式。该工具可用于红队演练、渗透测试、演示和社会工程评估。MacroPack将简化反恶意软件解决方案的绕过，并自动化从VB源码到最终Office文档或其他载荷类型的过程。使用非常简单： 无需配置 一切都可以通过单行代码完成...

pupy

Pupy Simple Installation root@kitploit: pip3 install pipx pipx ensurepath pipx install git+https://github.com/n1nj4sec/pupy@nextgen pupysh If you want more detailed informationRefer to the wiki Development Install root@kitploit: git clone https://github.com/n1nj4sec/pupy cd pupy git checkout...

Cloak

Cloak Cloak is an intelligent python backdoor framework. What it exactly does? Cloak generates a python payload via msfvenom and then intelligently injects it into the python script you specify. To evade basic detection, Cloak breaks the payload into several parts and places it in different place...

Veil

Veil Veil Logo Veil is a tool designed to generate metasploit payloads that bypass common anti-virus solutions. Veil is current under support by @ChrisTruncer Software Requirements: The following OSs are officially supported: Debian 8+ Kali Linux Rolling 2018.1+ The following OSs are likely able ...

firefox_tunnel

firefoxtunnel The way to use firefox to make a tunnel to remote communication. For I/O of payloads uses cookie.sqlite and html with javascript to auto submit, the browser runs in hidden mode. Read the docs: https://medium.com/code-fighters/firefox-tunnel-to-bypass-any-firewall-bc6f8b432980 Step b...

CVE-2023-26209

CVE-2023-26209 Exploit Automation For Educational Purposes 🚨 📌 Description This is a Python script with a graphical interface Tkinter that allows the user to test automated request submissions to a login endpoint. The goal is to simulate how servers respond to different payload sizes and analyze...

ScareCrow

THIS REPOSITORY HAS BEEN ARCHIVED To view the latest version of ScareCrow or to submit an issue, reference https://github.com/Tylous/ScareCrow. ScareCrow More Information If you want to learn more about the techniques utilized in this framework please take a look at Part 1 and Part 2 Description...

LAZYPARIAH

LAZYPARIAH A low-dependency command-line tool for generating reverse shell payloads on the fly. Description LAZYPARIAH is a simple and easily installable command-line tool written in pure Ruby that can be used during penetration tests and capture-the-flag CTF competitions to generate a range of...

WEASEL

WEASEL: A Stealthy DNS Beacon WEASEL is a small in-memory implant using Python 3 with no dependencies. The beacon client sends a small amount of identifying information about its host to a DNS zone you control. WEASEL server can task clients to execute pre-baked or arbitrary commands. WEASEL is a...

Ivy

THIS REPOSITORY HAS BEEN ARCHIVED To view the latest version of Ivy or to submit an issue, reference https://github.com/Tylous/Ivy. More Information If you want to learn more about the techniques utilized in this framework as well as the defensive measure to help defend against it, please take a...

Freeze.rs

THIS REPOSITORY HAS BEEN ARCHIVED To view the latest version of Freeze.rs or to submit an issue, reference https://github.com/Tylous/Freeze.rs. Freeze.rs More Information If you want to learn more about the techniques utilized in this framework, please take a look at SourceZero Blog and the...

CVE-2024-37383_PoC

This is a repository for hands-on practice of the CVE-2024-37383 vulnerability. Analysis Report: blog / pdf CVE-2024-37383 Detail Name : Roundcube Webmail SVG Parsing XSS Target : Roundcube Webmail v1.5.7 or v1.6.x tag into an email, arbitrary scripts are executed in the browser. Exploit...

xss-payload-list

xss-payload-list 🎯 Cross Site Scripting XSS Vulnerability Payload List...

CVE-2025-53770-Scanner

🛡️ CVE-2025-53770 SharePoint Vulnerability Scanner A Python-based tool to detect vulnerable Microsoft SharePoint instances affected by CVE-2025-53770 , an insecure deserialization vulnerability triggered via the ToolPane.aspx endpoint. The scanner sends a crafted, compressed ViewState payload to...

Linux Distros Unpatched Vulnerability : CVE-2026-90220

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ALSA: seq: Don't leak the extension cell pointer in the bounce payload The bounceerrorevent embeds the failed event in the bounce payload by pointing data.ext.p...

Linux Distros Unpatched Vulnerability : CVE-2026-90408

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - wifi: ath12k: fix overreads in ath12kwmiprocesscsaswitchcountevent There is no policy entry for WMITAGPDEVCSASWITCHCOUNTSTATUSEVENT, so the parse infrastructure...