insject

Insject insject is a tool for poking at containers. It enables you to run an arbitrary command in a container or any mix of Linux namespaces. It supports three main use-cases: LDPRELOAD-mode using libsetns.so LDPRELOAD=./libsetns.so SETNSARGS="..." Running a host command in a container insject...

idahunt

Descripción general Requisitos Características Scripting Uso Simular sin ejecutar Análisis inicial Ejecutar script de IDA Python Diffing de binarios Requisitos Análisis inicial Diffing de archivos Diffing de una función Filtros Detección de arquitectura Específico del objetivo Proyectos conocidos...

LazyDroid

Lazydroid 0.4 by Dani Martinez @dan1t0 Lazydroid is a tool written as a bash script to facilitate some aspects of an Android Assessment. It provides some common tasks such as: Set the debug flag of an application to true Set the backup flag of an application to true Re-Build the application Re-Si...

libtalloc

libtalloc libtalloc is a python script for use with GDB that can be used to analyse the "trivial allocator" talloc. An introduction is about talloc can be found here: https://talloc.samba.org/talloc/doc/html/index.html libtalloc was inspired by other gdb python scripts for analyzing heaps like...

libmempool

libmempool Preliminary note: we recommend you to use this as part of asatools but it can also be used standalone. libmempool is a python script and GDB analysis tool to aid in the analysis of mempool-related data structuress found inside various heaps on Cisco ASA devices. Normally this informati...

scilla v1.3.4

🏴‍☠️ Information Gathering tool 🏴‍☠️ - DNS / Subdomains / Ports / Directories enumeration Coded with 💙 by edoardottt Share on Twitter! Install • Get Started • Examples • Changelog • Contributing • License Installation 📡 Homebrew root@kitploit: brew install scilla Snap root@kitploit: sudo snap...

mimikatz-detector-condrv

Mimikatz Detector - ConDrv + ConsoleMonitor This project is based on the research that was done for mimikatz detection technique phase 2. It has multiple projects in the solution: ConsoleMonitor - A GUI application in C to sniff console related traffic input output through ConDrv...

OutlookLeakTest

The Outlook HTML Leak Test Project! Blog post: https://www.nccgroup.trust/uk/about-us/newsroom-and-events/blogs/2018/may/smb-hash-hijacking-and-user-tracking-in-ms-outlook/ What's in "./Schemes-List.xlsx"? List of URI schemes that might work in Windows. These schemes/protocols can be useful in...

readable-thrift

Readable Thrift Readable Thrift makes binary Thrift protocol messages easy to work with by converting them to and from a human-friendly format. This makes manual analysis of and tampering with binary format Thrift messages just as easy as working with plaintext protocols like HTTP. The library is...

CVE-2025-40554

CVE-2025-40554 Exploitation Suite A comprehensive security testing tool for detecting and exploiting the authentication bypass vulnerability CVE-2025-40554 / CVE-2025-40536 in SolarWinds Web Help Desk. ⚠️ Disclaimer FOR EDUCATIONAL AND AUTHORIZED SECURITY TESTING PURPOSES ONLY This tool is provide...

Sleipnir

Sleipnir Released as open source by NCC Group Plc - http://www.nccgroup.com/ Developed by Dave Spencer, david dot spencer at nccgroup dot com http://www.github.com/nccgroup/Sleipnir Released under AGPL see LICENSE for more information Description Sleipnir is a small executable designed for quick...

WindowsJobLock

Windows Process Lockdown Using Job Objects A Microsoft Windows Process Lockdown Tool using Job Objects Released as open source by NCC Group Plc - http://www.nccgroup.com/ Developed by Ollie Whitehouse, ollie dot whitehouse at nccgroup dot com https://github.com/nccgroup/WindowsJobLock Released...

WinShareEnum

WinShareEnum Windows Share Enumerator download https://github.com/nccgroup/WinShareEnum/raw/master/Info/WinShareEnum.exe running against a range on my local non-domain network, with a few dummy shares. Please remember this is primarily designed for domain-ed / large networks: options: A few thing...

WindowsFirewallHookDriverEnumeration

Windows Firewall Hook Driver Enumeration Tools to enumerate Windows Firewall Hook Drivers on Windows 2000, XP and 2003. We've seen a malicious code sample which uses this technique. The Hooking Technique The Windows Firewall Hook functionality in XP/2003 technique 12345 uses an IOCTL of...

CVE-2025-21756

CVE-2025-21756 — Exploitation Lab For educational and authorized security research purposes only. Description CVE-2025-21756 is a use-after-free UAF vulnerability in the Linux kernel's vsock Virtual Socket subsystem, disclosed on February 26, 2025. It allows a local attacker to escalate privilege...

CVE-2026-1529-PoC-keycloak-unauthorized-registration-via-improper-invitation-token-validation

CVE-2026-1529 Keycloak Exploit Tool Keycloak: Unauthorized organization registration via improper invitation token validation Disclaimer This tool is for educational and security testing purposes only. Use only on systems you have explicit permission to test. Unauthorized access to computer syste...

IvantiInitrdDecryptor

Here's a quick-and-dirty tool to decrypt the Ivanti device's initrd. It's mostly academic since there are other ways to extract the much more useful LVM keys for the real root device. To use it, copy the kernel file from the Ivanti, and extract the ELF from the bzImage I used binwalk -e. Throw it...

cabir_analysis

description: Bluetooth-Worm:SymbOS/Cabir Analysis Bluetooth-Worm:SymbOS/Cabir Analysis Before you start reading , i have to do this announcement : PLEASE TAKE EVERYTHING YOUR READ WITH A PINCH OF SALT AS I'M NO WHERE A SymbianOS developer or anything familiar with SymbianOS environment But why ev...

HackerLife.exe

HackerLife.exe Write up about an exploit chain failed to be fully weaponised and experience when trying to tryin to sell your first nday. So what this story about ? Our quote on qute "life experience in 2025 as young security researcher trying to make in in a ever changing and compilated...

Learning-History-of-CFF-bug-in-iphone

Learning-History-of-CFF-bug-in-iphone Dive into CFF font and coincidently learn about a bof in cff parsing from some jailbreak. just for fun So.... wtf is CFF ? So from my knowledge it's a file format , but let's try to understad what wikipedia says:"CFF acts as a container to store multiple font...