116 matches found
pycrypt
pycrypt Python Based Crypter That Can Bypass Any Kinds Of Antivirus Products Note: root@kitploit: If the stub being detected then plz use the following obfuscations:- 1. https://github.com/machine1337/fudcrypt 2. https://github.com/machine1337/pyobfuscate Important: root@kitploit: 1. Make Sure yo...
domainhunter
Domain Hunter Authors Joe Vest @joevest & Andrew Chiles @andrewchiles Domain name selection is an important aspect of preparation for penetration tests and especially Red Team engagements. Commonly, domains that were used previously for benign purposes and were properly categorized can be purchas...
bt2
bt2: Blaze Telegram Backdoor Toolkit bt2 is a Python-based backdoor in form of a IM bot that uses the infrastructure and the feature-rich bot API provided by Telegram, slightly repurposing its communication platform to act as a C&C. Dependencies Telepot requests Installation root@kitploit: $ sudo...
avet
AntiVirus Evasion Tool AVET is not being further developed due to technical development and time constraints. AVET is an AntiVirus Evasion Tool, which was developed for making life easier for pentesters and for experimenting with antivirus evasion techniques, as well as other methods used by...
RedRoot
🔴 RedRoot Lite – Mark X Marco de Seguridad Ofensiva Edición Lite | Basado en CLI “Menos poder. La misma disciplina.” RedRoot Lite es la edición restringida de RedRoot , diseñada para ofrecer funcionalidad básica de red teaming mientras mantiene los módulos avanzados bloqueados. Usa la misma...
zelos
Zelos Zelos Z eropoint E mulated L ightweight O perating S ystem is a python-based binary emulation platform. One use of zelos is to quickly assess the dynamic behavior of binaries via command-line or python scripts. All syscalls are emulated to isolate the target binary. Linux x8664 32- and...
full-60-ddos-tools
60のDDoSツール完全版 やあ、これは現在最も人気があり強力な60のDDoSツールのコレクションです。 最も強力なDDoSツールは動作にPythonを必要とします。Pythonは非常に個人的で最適化されたプログラミング言語です。広く使われ、学習が容易で、よりシンプルで最適化された構文を持っています。また、ネットワークセキュリティテストのためにサーバーをテストするTool DDOS Pythonの記述にも使用されます。...
overlord
Overlord – Red Teaming Automation Overlord provides a python-based console CLI which is used to build Red Teaming infrastructure in an automated way. The user has to provide inputs by using the tool’s modules e.g. C2, Email Server, HTTP web delivery server, Phishing server etc. and the full infra...
isf
産業用エクスプロイテーションフレームワーク ISF（Industrial Exploitation Framework）はPythonベースのエクスプロイテーションフレームワークで、metasploitフレームワークと類似しています。 ISFはオープンソースプロジェクト routersploit に基づいています。 他の言語で読む:English, 简体中文, 免責事項 事前の相互同意なしにターゲットを攻撃するためにISFを使用することは違法です。エンドユーザーは、該当するすべての地域、州、連邦法を遵守する責任を負います。...
flare-qdb
FireEye Labs Query-Oriented Debugger flare-qdb is a command-line and scriptable Python-based tool for evaluating and manipulating native program state. It uses Vivisect to set a breakpoint on each queried instruction and executes Python code when hit. flare-qdb frees the analyst to take a nonline...
HIROO
HIROO HIROO 是一款 FUD 远程管理工具 RAT 生成器与控制器 使用方法 使用起来非常简单，只需在终端中执行以下命令 root@kitploit: git clone https://github.com/E-RROR/HIROO cd HIROO python HIROO.py 在 WINDOWS 上运行 shell 输出将是 python 格式，你可以使用 pyinstaller 将其制作成 .exe 文件 在 MAC 上运行 mac 系统已经预装了 python，你无需转换 shell，可以将格式改为 .pyc 以在无终端的情况下运行 在 LINUX 上运行 与 ma...
The vulnerability of the Python programming language-based UltraJSON package lies in the lack of memory release after the effective lifespan, which allows a malicious actor to trigger a service failure.
The vulnerability of the Python programming language-based UltraJSON package is related to the lack of memory release after the effective lifespan of the package. Exploiting this vulnerability can allow a remote attacker to cause a service failure...
SPIP Ultimate Auditor – Comprehensive Security Assessment Script
SPIP Ultimate Auditor is a Python-based security assessment script designed to perform a multi-phase audit against a SPIP CMS installation. The tool automates reconnaissance and misconfiguration detection tasks to identify potential security weaknesses in a target deployment...
webguard-scanner
webguard-scanner COMPANY: CODETECH IT SOLUTIONS NAME: KA...
ShadowV2 Botnet Exploits Misconfigured AWS Docker Containers for DDoS-for-Hire Service
Cybersecurity researchers have disclosed details of a new botnet that customers can rent access to conduct distributed denial-of-service DDoS attacks against targets of interest. The ShadowV2 botnet, according to Darktrace, predominantly targets misconfigured Docker containers on Amazon Web...
CVE-2025-57804
CVE-2025-57804 affects the Python package h2 (HTTP/2 protocol stack). Prior to version 4.3.0, it allows HTTP/2 request splitting via CRLF injection in headers when servers downgrade HTTP/2 requests to HTTP/1.1 without validating header names/values. This can enable attackers to manipulate request...
New Malware Campaign Uses Cloudflare Tunnels to Deliver RATs via Phishing Chains
A new campaign is making use of Cloudflare Tunnel subdomains to host malicious payloads and deliver them via malicious attachments embedded in phishing emails. The ongoing campaign has been codenamed SERPENTINECLOUD by Securonix. It leverages "the Cloudflare Tunnel infrastructure and Python-based...
CMU CERT/CC VINCE v2.0.6 Stored XSS
Summary VINCE is the Vulnerability Information and Coordination Environment developed and used by the CERT Coordination Center to improve coordinated vulnerability disclosure. VINCE is a Python-based web platform. Description The framework suffers from an authenticated stored cross-site scripting...
Important: Red Hat Security Advisory: rhc-worker-playbook security update
An update for rhc-worker-playbook is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...