CVE-2018-11235-Git-Submodule-CE

CVE-2018-11235-Git-Submodule-CE CVE-2018-11235-Git PoC Pull from Docker docker pull qweraqq/cve-2018-11235-git-submodule-rce Start Git Http Server docker run -d -p 8080:80 qweraqq/cve-2018-11235-git-submodule-rce PoC git clone --recurse-submodules http://git.gitserver/malicious.git...

puredns

Fast domain resolver and subdomain bruteforcing with accurate wildcard filtering Getting Started » Usage · How it works · Sponsorship · FAQ About puredns is a fast domain resolver and subdomain bruteforcing tool that can accurately filter out wildcard subdomains and DNS poisoned entries. It uses...

ShadowSpray

ShadowSpray A tool to spray Shadow Credentials across an entire domain in hopes of abusing long forgotten GenericWrite/GenericAll DACLs over other objects in the domain. Why this tool In a lot of engagements I see in BloodHound that the group "Everyone" / "Authenticated Users" / "Domain Users" or...

Invoke-Stealth

Invoke-Stealth is a Simple & Powerful PowerShell Script Obfuscator. This tool helps you to automate the obfuscation process of any script written in PowerShell with different techniques. You can use any of them separately, together or all of them sequentially with ease, from Windows or Linux...

UltraViolet

UltraViolet Self-hosted network discovery & search — your own Shodan, on your hardware. TCP/UDP scanning · 100 protocol probes · TLS/JARM fingerprints · CVE matching · full-text search · delta tracking · alerts Quick start · Features · Architecture · Documentation · Production Important. Scan onl...

CVE-2025-43529

CVE-2025-43529 TL; DR Apple recently shipped iOS 26.2 and iPadOS 26.2, along with a security advisory that includes fixes for WebKit vulnerabilities. One bug in the DFG JIT compiler CVE-2025-43529 stood out, so I decided to dig into it. The JIT compiler correctly recognized that a Phi node where...

duckLogger

DuckLogger DuckLogger is an ESP32-S3–based USB Key Logger. It logs keystrokes in a text file, and provides wireless access to download logs through a built-in Wi-Fi access point. Recreating this project doesn't require any custom PCB. Hardware used here is less than $10 in total on places like...

gtfobins-cli

🚀 GTFOBins CLI Overview GTFOBins CLI is a command-line interface for GTFOBins, providing instant access to Unix binary exploitation techniques. This tool helps security professionals and system administrators identify and understand how legitimate Unix binaries can be misused to bypass security...

fb-sleep-stats

fb-sleep-stats: Using Facebook to track your friends' sleep A small tool to show the potential privacy implications modern social media have. By tracking online/offline status of people on Facebook, it is possible to get an accurate image of their sleep pattern. Read the blog post:...

CVE-2021-27850_POC

CVE-2021-27850 Exploit Overview CVE-2021-27850 is a critical unauthenticated remote code execution vulnerability that was found in all recent versions of Apache Tapestry, by downloading the AppModule.class file we can leak the HMAC Secret key used to sign all the serialized objects in apache...

GiveMeSecrets

GiveMeSecrets Use regular expressions to get sensitive information from a given repository GitHub, pip or npm. Dependencies You only need to have python 3.6 or higher installed to launch this script. In addition you must have installed in the system git, pip and npm. How to use It's very easy to...

wa-crypt-tools

WhatsApp Crypt Tools Decrypt and encrypt WhatsApp and WA Business' .crypt12, .crypt14 and .crypt15 files with ease! For decryption, you NEED the key file or the 64-characters long key. The key file is named "key" if the backup is crypt14 or "encryptedbackup.key" if the backup is crypt15 encrypted...

CVE-2024-5522

EN A PoC exploit scanner for CVE-2024-5522 vulnerability in WordPress websites. This tool helps identify and exploit the vulnerability by scanning a list of target URLs and attempting a specific payload to determine if the site is vulnerable. Features Automatic Vulnerability Scanning : Scans targ...

cracken

Cracken Cracken is a fast password wordlist generator, Smartlist creation and password hybrid-mask analysis tool written in pure safe Rust more on talk/. Inspired by great tools like maskprocessor, hashcat, Crunch and 🤗 HuggingFace's tokenizers. What? Why? Woot?? At DeepSec2021 we presented a new...

logdata-anomaly-miner

logdata-anomaly-miner This tool parses log data and allows to define analysis pipelines for anomaly detection. It was designed to run the analysis with limited resources and lowest possible permissions to make it suitable for production server use. Requirements In order to install...

CVE-2021-44228-Apache-Log4j-Rce

CVE-2021-44228Apache Log4j Remote Code Execution） all log4j-core versions =2.0-beta9 and =2.14.1 The version of 1.x have other vulnerabilities, we recommend that you update the latest version. Security Advisories / Bulletins linked to Log4Shell CVE-2021-44228 Usage: download this project, compile...

QuadraInspect

QuadraInspect root@kitploit: / /\ \ / / / / / / / / / / / / / / / / // // / / / / / / / // / // / // / // / / / // // // / / // / / // / \\,/,/,// ,/// /// .//// // The security of mobile devices has become a critical concern due to the increasing amount of sensitive data being stored on...

SocialFish

SocialFish v3.0 Modern Dynamic Phishing Toolkit SocialFish v3.0 brings powerful new features for cloning modern login pages, capturing cookies, and intercepting 2FA codes with a live operator panel. 🆕 What's New in v3.0 Playwright Browser Automation — Clone modern JS-heavy login pages Full Cookie...

HolyGrail

HolyGrail A BYOVD hunter for finding the HolyGrail driver - Windows drivers suitable for BYOVD. Install root@kitploit: git clone https://github.com/BlackSnufkin/HolyGrail cd HolyGrail cargo build --release Quick start root@kitploit: HolyGrail.exe -d "C:\path\to\driver.sys" Add JSON output, custom...

PersistBOF

PersistBOF A tool to help automate common persistence mechanisms. Currently supports Print Monitor SYSTEM, Time Provider Network Service, Start folder shortcut hijacking User, Junction Folder User, Xll Add-In User. Usage Clone, run make, add .cna to Cobalt Strike client. run: help persist-ice in ...