PhoneSploit-Pro

PhoneSploit Pro The Swiss Army knife for Android. An all-in-one hacking tool written in Python to remotely take over Android devices using ADB, scrcpy, Nmap, and Metasploit-Framework. Table of contents Overview Screenshots Features Requirements Installing dependencies Getting started Device setup...

TCLtools

TCL scripts for Cisco IOS penetration testing With TCLtools you can transform any Cisco IOS hardware into a pivoting station. It's easy to set up and use! Features TCLmap — Port scanner implementation nmap TCLproxy — Proxy server implementation TCLproxy TCLproxy is a tool for pivoting through Cis...

penta

penta PENTest + semi-Automation tool Penta is is Pentest semi-automation tool using Python3. It provides advanced features to extract vuln info found on specific servers. I'm now developing a scanning system using vuln-db. Installation Install requirements...

nibble

Nibble is a CLI tool for local network scanning that focuses on speed and ease of use. Select a network interface, and it scans your local subnet. Lists hosts, hardware manufacturer, open ports and their services. ⚡ Lightning fast, scans using lightweight threads 🔒 Safe, does not need admin acces...

CVE-2015-5374-DoS-PoC

CVE-2015-5374 Siemens SIPROTEC 4 and SIPROTEC Compact EN100 Ethernet Module CVE-2015-5374 Siemens SIPROTEC 4 and SIPROTEC Compact EN100 Ethernet Module ... Done, say goodbye! Metasploit Module This module sends a specially crafted packet to Port 50000/UDP could cause a denial of service of the...

sshprank

Description A fast SSH mass-scanner, login cracker, banner grabber and password auth checker tool using the python-masscan and shodan module. Usage root@kitploit: hacker@blackarch $ sshprank -H / / / / / / / / / / / / /// | / / / // / / / // / / / / , opts | mode options -h - single host, cidr,...

RustScan

➡️ Discord | Installation Guide | Usage Guide ⬅️ Fast, smart, effective. 🤔 What is this? The Modern Port Scanner. Find ports quickly 3 seconds at its fastest. Run scripts through our scripting engine Python, Lua, Shell supported. 🛠️ Installation You can install RustScan's binary from our releases...

mouseserver-exploit

Mobile Mouse 3.6.0.4 RCE - Fix A corrected version of the Mobile Mouse 3.6.0.4 remote code execution exploit published as EDB-51010. Vulnerability CVE: CVE-2023-31902 Affected version: Mobile Mouse 3.6.0.4 Default port: TCP/9099 What Was Fixed The original exploit successfully downloads the paylo...

autonmap

autonmap I use this script for HTB Nmap Scan :...

nmap-farewell

nmap-farewell This tool aims to demonstrate the capabilities of the nfnetlinkqueue feature of the Linux kernel. For more in-depth information, you can read this article. Before packets are being dropped by the kernel, they are sent to this tool for further processing. If a remote peer tries to...

cve-2016-7255_x86_x64

cve-2016-7255 x86, x64 porting CVE-2016-7255 to x86 for educational purposes. reference code https://github.com/rlarabee/exploits/tree/master/cve-2016-7255...

CVE-2025-0108

Save this script as paloaltocve20250108.nse, then run the following Nmap command: nmap --script paloaltocve20250108.nse -p 80,443 or for a list of targets: nmap --script paloaltocve20250108.nse -p 80,443 -iL targets.txt...

cornershot

What is CornerShot In warfare, CornerShot is a weapon that allows a soldier to look past a corner and possibly take a shot, without risking exposure. Similarly, the CornerShot package allows one to look at a remote host’s network access without the need to have any special privileges on that host...

cornershot

¿Qué es CornerShot? En la guerra, CornerShot es un arma que permite a un soldado mirar más allá de una esquina y posiblemente disparar sin arriesgarse a ser expuesto. De manera similar, el paquete CornerShot permite observar el acceso de red de un host remoto sin necesidad de tener privilegios...

Commvault-CVE-2025-34028

CVE-2025-34028 Commvault Remote Code Execution CVE-2025-34028 NSE How to run in Nmap: nmap -p443 --script CVE-2025-34028 --script-args='https-ports=443'...

WebKit-NavigationAPI-SOP-Bypass

WebKit-NavigationAPI-SOP-Bypass WebKit Navigation API — Same-Origin Policy bypass via cross-port interception CVE-2026-20643...

CVE-2026-72530-TrueConf-Sandbox-Escape-

CVE-2026-72530: TrueConf Server Sandbox Escape - Mitigation & Detection PoC 📌 General Description This repository contains an educational demonstration of mitigation and detection for CVE-2026-72530 , a critical Code Injection and Sandbox Escape vulnerability in TrueConf Server. Vulnerability...

teletunnel

TeleTunnel v2 A Telegram-based remote access tool for Windows. Disclaimer: For authorized use on systems you own only ! Please 🙇 Features Remote administration via a Telegram bot. Secure control only accepts commands from your specified Telegram user ID. The bot have these features: root@kitploit...

Nostromo_Python3

Nostrom RCE Python3 Exploit Code: Usage: root@kitploit: $ python3 ./exp.py vulnerable.host 8080 id uid=65534 gid=65534...

lazyrecon

root@kitploit: / \ / / \ /// / // Y / \ /| | | | / | / / \ / | /|| \ | / | / || |\ || | |/| |-||/ / / / | /| / | | /|| | || // |/// /\\|// | Uso ./lazyrecon.sh -d domain.com Para excluir subdominios específicos: ./lazyrecon.sh -d domain.com -e...