Hybrid Submit

Hybrid Analysis Batch Submission Script This Python script recursively scans a folder and submits executable, script, document, and other relevant files to Hybrid Analysis Falcon Sandbox for automated malware analysis. Features Recursively walks through directories Submits only supported file typ...

CVE-2026-64846

A flaw was found in Nix. A malicious derivation, when executed with the recursive-nix experimental feature enabled, can exploit a time-of-check/time-of-use TOCTOU race condition in the final symlink handling of the LocalStore restore path. This allows the Nix process or nix-daemon to create or...

imago-forensics

imago-forensics 🕵️ Imago is a python tool that extract digital evidences from images recursively. This tool is useful throughout a digital forensic investigation. If you need to extract digital evidences and you have a lot of images, through this tool you will be able to compare them easily. Imago...

permanently-jailbroken

Permanently Jailbroken We asked GPT-4, Claude, Gemini, DeepSeek, Grok, and Mistral 5 questions about their own programming. All 6 said jailbreaking will never be fixed. Not because the patches are bad. Because alignment doesn't change what the model understands — it changes what the model says. T...

CVE-2025-48384-POC

To trigger, do git clone --recursive https://github.com/fishyyh/CVE-2025-48384-POC.git on a vulnerable git version and you'll find a /tmp/sectest file suddenly appearing...

CVE-2025-48384

CVE-2025-48384: Breaking git with a carriage return and cloning RCE Reproduction from https://dgl.cx/2025/07/git-clone-submodule-cve-2025-48384. All credits to David Leadbeater. This is a basic reproduction attempt of the vulnerability. To trigger, do git clone --recursive...

Decodify

Decodify It can detect and decode encoded strings, recursively. Lets take this string : s0md3v and encode it in Base 64 root@kitploit: czBtZDN2 Now lets encode it in hex root@kitploit: 637a42745a444e32 And now again in Base 64 root@kitploit: NjM3YTQyNzQ1YTQ0NGUzMg== Now lets supply it to Decodify...

hashdeep

Esto es md5deep, un conjunto de herramientas multiplataforma para calcular hashes, o resúmenes de mensajes, de cualquier número de archivos, opcionalmente explorando recursivamente la estructura de directorios. También puede tomar una lista de hashes conocidos y mostrar los nombres de archivo de...

Syborg

Syborg Syborg is a Recursive DNS Domain Enumerator which is neither active nor completely passive. This tool simply constructs a domain name and queries it with a specified DNS Server. Syborg has a Dead-end Avoidance system inspired from @Tomnomnom's ettu. When you run subdomain enumeration with...

divd-2021-00038--log4j-scanner

divd-2021-00038--log4j-scanner This scanner will recursively scan paths including archives for vulnerable log4j versions and org/apache/logging/log4j/core/lookup/JndiLookup.class files. Currently the allow list defines non exploitable versions, in this case log4j-core 2.17.0 and 2.12.3. Features...

hacks

Hacks Hacky one-off scripts, tests etc...

CVE-2025-40778

CVE-2025-40778 Proof of Concept Educational demonstration of DNS Cache Poisoning vulnerability via Additional Records injection. ⚠️ Disclaimer FOR EDUCATIONAL PURPOSES ONLY This tool is provided for educational and authorized security testing purposes only. Unauthorized use of this tool against...

maigret

Maigret English · 简体中文 Maigret collects a dossier on a person by username only , checking for accounts on a huge number of sites and gathering all the available information from web pages. No API keys required. AI profiling demo. Sponsors IPcook provides reliable residential proxies for online...

xencrypt

Xencrypt PowerShell crypter v 1.0 Authors Xentropy @SamuelAnttila SecForce @SECFORCELTD If you want to read about the design behind this tool and how to make your own crypter, there's an article I wrote about it here: Write a crypter in any language Note Don't be a script kiddie, I made this GPLv...

dirsearch

dirsearch - Web Path Discovery An advanced web path brute-forcer dirsearch is being actively developed by @maurosoria and @shelld3v. Join the Discord server to communicate with the team. Quick Start dirsearch requires Python 3.11 or higher. root@kitploit: git clone...

massdns

MassDNS A high-performance DNS stub resolver MassDNS is a simple high-performance DNS stub resolver targeting those who seek to resolve a massive amount of domain names in the order of millions or even billions. Without special configuration, MassDNS is capable of resolving over 350,000 names per...

skipfish

=========================================== skipfish - web application security scanner http://code.google.com/p/skipfish/ Written and maintained by: Michal Zalewski [email protected] Niels Heinen [email protected] Sebastian Roschke [email protected] Copyright 2009 - 2012 Google In...

domdig

DOMDig DOMDig is a DOM XSS scanner that runs inside the Chromium web browser and it can scan single page applications SPA recursively. Unlike other scanners, DOMDig can crawl any webapplication including gmail by keeping track of DOM modifications and XHR/fetch/websocket requests and it can...

domdig

DOMDig DOMDig es un escáner de DOM XSS que se ejecuta dentro del navegador web Chromium y puede escanear aplicaciones de página única SPA de forma recursiva. A diferencia de otros escáneres, DOMDig puede rastrear cualquier aplicación web incluyendo gmail manteniendo un registro de las...

fockcache

fockcache FockCache - Minimalized Test Cache Poisoning Detail For Cache Poisoning : https://portswigger.net/research/practical-web-cache-poisoning FockCache FockCache tries to make cache poisoning by trying X-Forwarded-Host and X-Forwarded-Scheme headers on web pages. After successful result, it...