CVE-2026-60004

CVE-2026-60004 More: https://github.com/go-gitea/gitea/security/advisories/GHSA-rcr6-4jqh-j84m Donate Support the maintenance of this project with PayPal or by scanning the QR code below. ⚡ Simple Usage Use this project only in safe and authorized environments such as: Local virtual machines Dock...

SCOPE

SCOPE: Security Cloud Ops Purple Engagement SCOPE runs AWS purple-team workflows with deterministic Python inventory and bounded AI agents. It audits AWS resources, validates attack paths, generates review-only exploit playbooks, produces controls, and guides Splunk investigations. How It Works R...

GeoSentinel

🌍 GeoSentinel GeoSentinel is a geospatial monitoring platform that tracks global movement in real time. It aggregates ship and flight routes, live coordinates, and geodata into a unified system, providing clear geographic and geopolitical awareness for analysis, visualization, and decision-making...

NetSpy

NetSpyC2 NetSpyC2 is a Python-based Command & Control C2 server created for educational purposes, security research, and controlled laboratory environments. The project demonstrates how encrypted client-server communication, session management, and secure file transfer can be implemented at the...

lazyrecon

root@kitploit: | | | |/ | /| | | | / / |/ | \ | | | / / | | | | | | / | | | ||\ |/ \ || ||/|| |v2 |/ Lazyrecon v2 is a subdomain discovery tool that finds and resolves valid subdomains then performs SSRF/LFI/SQLi fuzzing, brute-force and port scanning. It has a simple modular architecture and...

exploit-CVE-2020-24815

exploit-CVE-2020-24815.py this is my first exploit for CVE-2020-24815 put the POST path after url !!!! Example: if the script not work change the cookie on script root@kitploit: $ - pip install -r requirements.txt fix probleme pdftotext not installed: root@kitploit: $ - sudo apt-get install...

urless

About - v2.7 This is a tool used to de-clutter a list of URLs. As a starting point, I took the amazing tool uro by Somdev Sangwan. But I wanted to change a few things, make some improvements like deal with GUIDs and make it more customizable. Installation urless supports Python 3. Install urless ...

modelscan

ModelScan: Protection Against Model Serialization Attacks Machine Learning ML models are shared publicly over the internet, within teams and across teams. The rise of Foundation Models have resulted in public ML models being increasingly consumed for further training/fine tuning. ML Models are...

physical-analyzer-scripts

physical-analyzer-scripts Cellebrite Physical Analyzer python scripts to aid analysts with extended functionality...

Argus

A Python-based toolkit for Information Gathering & Reconnaissance About The Project Argus is an all-in-one, Python-powered toolkit designed to streamline the process of information gathering and reconnaissance. It brings together a clean, intuitive interface and a wide range of reliable modules,...

Loki

I wrote a new Open Source YARA scanner called LOKI RS Rust. LOKI Python is now officially deprecated. Important Note This project is now in inactive maintenance mode. This means that while I merge pull requests for bug fixes and straightforward issues, I currently lack the time to add new feature...

shellsum

Shellsum ¿Qué es esto? Una herramienta de defensa - detecta webshells en directorios locales mediante md5sum Características Velocidad rápida Ligero Base de datos grande Salida en tabla Uso Instalación root@kitploit: git clone https://github.com/ManhNho/shellsum.git chmod 755 -R shellsum/ cd...

SSH-Honeypot

SSH-Honeypot Create Basic SSH Honeypot With Python For Info See Our Blog In : http://squnity.com/?p=1437 مجتمع عربي للحماية وامن المعلومات...

SUNBURST

SUNBURST Detection for SUNBURST C2 Stage-1 using Shannon Entropy About: Using Shannon Entropy to detect Domain-Generation Algorithms DGA. It should only be fed FQDNs into the function or read from a CSV file. SYNTAX: Prefixorsubdomain.Domain.TLD Made due to APTs leveraging long-string DGA for Kil...

bluewall

BLUEWALL Bluewall is a firewall framework designed for offensive and defensive cyber professionals. This framework allows Cybersecurity professionals to quickly setup their environment while staying within their scope. Credit Inspired by Andrew Benson's hostfw iptable generation script. Features...

OpenCRE

OpenCRE Go to https://www.opencre.org to see OpenCRE working and more explanation. OpenCRE stands for Open Common Requirement enumeration. It is an interactive content linking platform for uniting security standards and guidelines. It offers easy and robust access to relevant information when...

writehat

WriteHat is a reporting tool which removes Microsoft Word and many hours of suffering from the reporting process. Markdown -- HTML -- PDF. Created by penetration testers, for penetration testers - but can be used to generate any kind of report. Written in Django Python 3. Features: Effortlessly...

writehat

WriteHat es una herramienta de informes que elimina Microsoft Word y muchas horas de sufrimiento del proceso de generación de informes. Markdown -- HTML -- PDF. Creada por probadores de penetración, para probadores de penetración, pero puede usarse para generar cualquier tipo de informe. Escrito...

LetMeFuckIt-Scanner

LetMeFuckIt Scanner AutoPWNED Escáner y Exploit Magento El Escáner explora la vulnerabilidad SQLi Vulnerability 1.9.1.0 CE de Magento. La vulnerabilidad fue corregida en el Patch SUPEE-5344 , sin embargo, el escáner sirve para localizar y probar los sistemas que no aplicaron el parche de segurida...

AllHackingTools

• License • Issues • Project • Wikipedia • AllHackingTools: es un sistema diseñado para automatizar el proceso de descarga e instalar varias herramientas para pruebas de penetración. Hola, si quieres configurar un termux rápidamente, ¡aquí tienes! ¡Más herramientas de hacking con una sola...