backdoorme

backdoorme Build Status Tools like metasploit are great for exploiting computers, but what happens after you've gained access to a computer? Backdoorme answers that question by unleashing a slew of backdoors to establish persistence over long periods of time. Once an SSH connection has been...

cisco-sa-sma-attack-N9bf4

Cisco SMA Exposure Check Small, single-file Python 3 script to quickly probe a host or domain for open Cisco Secure Email/Secure Malware Analytics management and quarantine ports CVE-2025-20393 exposure indicators. Usage Install Python 3 stdlib only; no extra dependencies. Run the scanner:...

yamaha-smaf-player

Yamaha SMAF Player C++ by Akustikrausch Andreas Wendorf a small, dependency-free player for Yamaha SMAF ringtones .mmf in c++. you hand it one of those files that made your samsung, sharp, or panasonic go deedle-deedle-dee in 2004, and it hands you clean stereo audio. no phone, no firmware, no...

ImproHound

ImproHound Identify the attack paths in BloodHound breaking your AD tiering ImproHound is a dotnet standalone win x64 exe with GUI. To use ImproHound, you must run SharpHound to collect the necessary data from the AD. You will then upload the data to your BloodHound installation. ImproHound will...

CVE-2020-25068

CVE-2020-25068 Python exploit for Conacwin v3.7.1.2. Setelsa Conacwin v3.7.1.2 is vulnerable to a local file inclusion vulnerability. This vulnerability allows a remote unauthenticated attacker to read internal files on the server via an http:IP:PORT/../../path/filetodisclose Directory Traversal...

OneAlert

OneAlert AI Security OS Open-source autonomous cyber defense for industrial networks AI agents that detect, investigate, hunt, and respond to threats across your OT/ICS infrastructure — with human approval gates and full audit trails. Demo Setup · Features · Quick Start · Architecture Try It Now...

DraculaOS

Kali Linux based OVA file for OSINT investigations and Cyber Intelligence. DOWNLOAD The download link for the DRACULA Os OVA can be found at the following link. The DraculaOs OVA download file is 8 GB in size. https://easyupload.io/o1y3jt...

BurpSuiteJSBeautifier

Burp Suite JSBeautifier Most of the websites compress their resources such as JS files in order to increase the loading speed. However, security testing and debugging a compressed resource is not an easy task. This is a Burp Suite open source extension which makes it possible to beautify most of...

pilotprotocol

Pilot Protocol The network stack for AI agents. Addresses. Ports. Tunnels. Encryption. Trust. Docs · Wire Spec · Whitepaper · IETF Draft · Agent Skills · Polo Live Dashboard The internet was built for humans. AI agents have no address, no identity, no way to be reached. Pilot Protocol is an overl...

sqlmap

sqlmap sqlmap is an open source penetration testing tool that automates the process of detecting and exploiting SQL injection flaws and taking over of database servers. It comes with a powerful detection engine, many niche features for the ultimate penetration tester, and a broad range of switche...

CVE-2023-1454-Jeecg-Boot-qurestSql-SQLvuln

CVE-2023-1454 Jeecg-Boot-qurestSql-SQLvuln jmreport/qurestSql Unauthorized SQL Injection Batch Scan PoC. Jeecg-Boot is a rapid development platform based on Spring Boot and Jeecg-Boot-Plus. The latest version jeecg-boot 3.5.0 has been exposed with multiple SQL injection vulnerabilities. Usage...

Osint-Sync

Osint Sync - OSINT Browser Extension A powerful browser extension for Open Source Intelligence OSINT research. Search usernames, emails, and phone numbers across 20+ platforms with integrated access to premium OSINT tools like GHunt, IntelX, Epieos, and OSINT Industries. Features Username Search...

open-sesame

open-sesame Contains hackerone disclosed reports and other bug bounty writeups. A python tool which runs to display random publicly disclosed Hackerone reports when bored. Automatically opens the report in browser. Contains Over 8k Publicly disclosed Hackerone reports and addtl. wordlist of 700 b...

MsfMania

MsfMania MsfMania is an advanced Python-based payload obfuscation framework designed to evade EDR/AV detection on Windows systems. It generates highly polymorphic executables through dynamic code generation, multi-layer encryption RC4, and binary metadata spoofing. ⚠️ Educational Purpose Only -...

HuntCyberArk

HuntCyberArk - CyberArk Security Audit Suite A comprehensive PowerShell-based security assessment tool for CyberArk Privileged Access Management PAM platforms. Designed for offensive security professionals, red teamers, and penetration testers. This tool is designed to run REMOTELY against CyberA...

CVE-2023-27997

CVE-2023-27997 FortiGate VM64 7.2.0 is exploitable by this code. note that the code was written in a very stupid way. Proof of Concept root@kitploit: $ python3 exploit.py 192.168.106.142 10443 192.168.106.143 9999 + generating shellcode + salt=b'25c2dcf2' + processing hash + finding hash in cache...

sass-king

SASS King Reverse engineering NVIDIA SASS from controlled kernels to production audits. Article 1 · Article 2 · Knowledge base · Pattern library · SM120 instruction glossary · Encoding notes · Start here · Project structure · Tensor-core chapters · Contributing SASS King is a systematic...

Titanis

Introduction Titanis is a library of protocol implementations and command line utilities, written in C, for interacting with Windows environments. It uses .NET 8 and is cross-platform Windows and Linux. Some of the protocols implemented: SMB2 MS-SMB2 SMB 2.x and 3.x up to 3.1.1 Message security...

Invoke-ADEnum

Invoke-ADEnum Active Directory Auditing and Enumeration Invoke-ADEnum is an auditing and enumeration tool designed to automate the collection of information from an Active Directory environment. One of the features of Invoke-ADEnum is its ability to generate an Active Directory Audit Report in HT...

allstar

Allstar !IMPORTANT The OpenSSF-hosted Allstar GitHub App has been retired. Allstar, the OpenSSF Scorecard subproject, itself continues to be maintained — you must now run it yourself, either as a GitHub Action or as a service daemon. See ossf/allstar881 for more details. If your organization was...