116 matches found
zelos
Zelos Zelos Z eropoint E mulated L ightweight O perating S ystem is a python-based binary emulation platform. One use of zelos is to quickly assess the dynamic behavior of binaries via command-line or python scripts. All syscalls are emulated to isolate the target binary. Linux x8664 32- and...
overlord
Overlord – Red Teaming Automation Overlord provides a python-based console CLI which is used to build Red Teaming infrastructure in an automated way. The user has to provide inputs by using the tool’s modules e.g. C2, Email Server, HTTP web delivery server, Phishing server etc. and the full infra...
domainhunter
Domain Hunter Authors Joe Vest @joevest & Andrew Chiles @andrewchiles Domain name selection is an important aspect of preparation for penetration tests and especially Red Team engagements. Commonly, domains that were used previously for benign purposes and were properly categorized can be purchas...
bt2
bt2: Blaze Telegram Backdoor Toolkit bt2 is a Python-based backdoor in form of a IM bot that uses the infrastructure and the feature-rich bot API provided by Telegram, slightly repurposing its communication platform to act as a C&C. Dependencies Telepot requests Installation root@kitploit: $ sudo...
avet
AntiVirus Evasion Tool AVET is not being further developed due to technical development and time constraints. AVET is an AntiVirus Evasion Tool, which was developed for making life easier for pentesters and for experimenting with antivirus evasion techniques, as well as other methods used by...
pycrypt
pycrypt Python Based Crypter That Can Bypass Any Kinds Of Antivirus Products Note: root@kitploit: If the stub being detected then plz use the following obfuscations:- 1. https://github.com/machine1337/fudcrypt 2. https://github.com/machine1337/pyobfuscate Important: root@kitploit: 1. Make Sure yo...
RedRoot
🔴 RedRoot Lite – Mark X Offensive Security Framework Lite Edition | CLI-Based "약한 힘. 같은 훈련." RedRoot Lite 은 고급 모듈을 잠금 상태로 유지하면서 핵심 레드팀 기능을 제공하도록 설계된 RedRoot의 제한 버전 입니다. 동일한 아키텍처, 동일한 CLI 스타일, 동일한 사고방식을 사용하지만 제한된 액세스 를 제공합니다. 참고:- RedRoot는 필수 레드팀 도구를 하나의 통합 터미널 환경으로 모아주는 Python 기반의 CLI 중심 공격 보안...
full-60-ddos-tools
Full 60 Ddos Tools Yoo, es una colección de 60 herramientas ddos más populares y potentes ahora. Las herramientas DDOS más potentes necesitan Python para ejecutarse. Este es un lenguaje de programación altamente personal y optimizado. Ampliamente usado, fácil de aprender y con una sintaxis...
isf
Industrial Exploitation Framework ISF Industrial Exploitation Framework — это фреймворк для эксплуатации, основанный на Python, похожий на metasploit framework. ISF основан на проекте с открытым исходным кодом routersploit. Читать на других языках:English, 简体中文, Disclaimer Использование ISF для...
flare-qdb
FireEye Labs Query-Oriented Debugger flare-qdb is a command-line and scriptable Python-based tool for evaluating and manipulating native program state. It uses Vivisect to set a breakpoint on each queried instruction and executes Python code when hit. flare-qdb frees the analyst to take a nonline...
HIROO
HIROO HIROO is an FUD Remote Administration Tool RAT Generator and Controller HOW TO USE its really easy to use just do this in your terminal root@kitploit: git clone https://github.com/E-RROR/HIROO cd HIROO python HIROO.py RUN ON WINDOWS the shell output will be python format you can make it .ex...
The vulnerability of the Python programming language-based UltraJSON package lies in the lack of memory release after the effective lifespan, which allows a malicious actor to trigger a service failure.
The vulnerability of the Python programming language-based UltraJSON package is related to the lack of memory release after the effective lifespan of the package. Exploiting this vulnerability can allow a remote attacker to cause a service failure...
SPIP Ultimate Auditor – Comprehensive Security Assessment Script
SPIP Ultimate Auditor is a Python-based security assessment script designed to perform a multi-phase audit against a SPIP CMS installation. The tool automates reconnaissance and misconfiguration detection tasks to identify potential security weaknesses in a target deployment...
webguard-scanner
webguard-scanner COMPANY: CODETECH IT SOLUTIONS NAME: KA...
ShadowV2 Botnet Exploits Misconfigured AWS Docker Containers for DDoS-for-Hire Service
Cybersecurity researchers have disclosed details of a new botnet that customers can rent access to conduct distributed denial-of-service DDoS attacks against targets of interest. The ShadowV2 botnet, according to Darktrace, predominantly targets misconfigured Docker containers on Amazon Web...
CVE-2025-57804
CVE-2025-57804 affects the Python package h2 (HTTP/2 protocol stack). Prior to version 4.3.0, it allows HTTP/2 request splitting via CRLF injection in headers when servers downgrade HTTP/2 requests to HTTP/1.1 without validating header names/values. This can enable attackers to manipulate request...
New Malware Campaign Uses Cloudflare Tunnels to Deliver RATs via Phishing Chains
A new campaign is making use of Cloudflare Tunnel subdomains to host malicious payloads and deliver them via malicious attachments embedded in phishing emails. The ongoing campaign has been codenamed SERPENTINECLOUD by Securonix. It leverages "the Cloudflare Tunnel infrastructure and Python-based...
CMU CERT/CC VINCE v2.0.6 Stored XSS
Summary VINCE is the Vulnerability Information and Coordination Environment developed and used by the CERT Coordination Center to improve coordinated vulnerability disclosure. VINCE is a Python-based web platform. Description The framework suffers from an authenticated stored cross-site scripting...
Important: Red Hat Security Advisory: rhc-worker-playbook security update
An update for rhc-worker-playbook is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...