CVE-2021-3441-check

HP CVE Check A python threat intelligence tool for automating IoC discovery for CVE-2021-3441. Easily search targets for indicators of compromnise root@kitploit: //| ////|| CVE-2021-3441 Check |=== |----| || | | �| || Author: Tyler Butler || �| || @tbutler0x90 | ||/.�---.|| | || |-||/||-. | |�...

Fortinet-CVE-2022-40684

Fortinet-CVE-2022-40684 Tool Introduction Quick exploitation tool for CVE-2022-40684, beginner code, feel free to submit issues if you find any Usage main -t http://127.0.0.1 -u admin -f path-of-ssh-key.pub Disclaimer This tool is only intended for legally authorized enterprise security practices...

CVE-2024-36104

CVE-2024-36104 Disclaimer This tool is only for personal security research and learning. Any direct or indirect consequences and losses caused by the dissemination or use of this tool are solely the responsibility of the user. The tool author does not assume any responsibility. version = 18.12.14...

faraday_agent_dispatcher

Faraday Agents Dispatcher helps user develop integrations with Faraday written in any language. Installation Just run pip3 install faradayagentdispatcher and you should see the faraday-dispatcher command in your system. To setup a development environment this is, to change code of the dispatcher...

PentestingEverything

PentestingEverything A complete, searchable penetration-testing knowledge base across 23 security domains. Live website: pentesting.m14r41.in Live Website · PentestingChecklist · Contribute · Report an Issue Read it online at pentesting.m14r41.in : fully searchable, with 108 documentation pages,...

CVE-2026-20245

🚨 CVE-2026-20245 - Cisco Catalyst SD-WAN Manager Privilege Escalation Authenticated Privilege Escalation via Crafted File Upload A vulnerability affecting Cisco Catalyst SD-WAN Manager that allows authenticated attackers with administrative privileges to execute arbitrary commands as root. 📖...

CVE-2017-16778-Intercom-DTMF-Injection

Invoking DTMF Tones for Physical Access Grant on Fermax Lift Intercom System CVE-2017-16778 Special Mentions First and foremost, @dizijoyjoy for assisting on the demo set in order for a successful shoot. Special acknowledgement to Fermax for the prompt response to the security bug report on their...

Venom-JWT

Venom-JWT Penetration Tool - JWT Vulnerability and Secret Cracking Service Penetration Testing Solemn Statement: The techniques, ideas, and tools mentioned in this document are for learning and communication purposes only for security. No one shall use them for illegal purposes or for profit,...

PHP-Shell-Detector

Web Shell Detector Web Shell Detector – is a php script that helps you find and identify php/cgiperl/asp/aspx shells. Web Shell Detector has a “web shells” signature database that helps to identify “web shell” up to 99%. By using the latest javascript and css technologies, web shell detector has ...

bitchat

bitchat A decentralized peer-to-peer messaging app with dual transport architecture: local Bluetooth mesh networks for offline communication and internet-based Nostr protocol for global reach. No accounts, no phone numbers, no central servers. It's the side-groupchat. bitchat.free 📲 App Store...

CVE-2023-22047

Description: CVE-2023-22047 is unauthentication read file on oracle-peoplesoft. However, advance exploit attacker can use this vulnerability to execute remote code execution. In the peoplesoft application "Portal.war"," Serlet "WSRP Consumer ResourceProxy" enables the ability to read files and ma...

pythia

Introduction / tl;dr This tool scans an executable file for Delphi data, including RTTI and virtual function tables. It outputs a JSON file with information about identified classes and functions, which can be used for additional analysis, for example: Generate a class tree. Generate names &...

GeoLocation_BOF

GeolocationBOF A Cobalt Strike BOF that attempts to retrieve Windows geolocation coordinates without fork & run. It uses the WinRT Geolocator API first and falls back to the legacy ILocation API. Implementation Simple BOF that uses WinRT geolocation with a legacy ILocation fallback. Will flip the...

poseidon

root@kitploit: ██████╗ ██████╗ ███████╗███████╗██╗██████╗ ██████╗ ███╗ ██╗ ██╔══██╗██╔═══██╗██╔════╝██╔════╝██║██╔══██╗██╔═══██╗████╗ ██║ ██████╔╝██║ ██║███████╗█████╗ ██║██║ ██║██║ ██║██╔██╗ ██║ ██╔═══╝ ██║ ██║╚════██║██╔══╝ ██║██║ ██║██║ ██║██║╚██╗██║ ██║...

tap-ducky

TapDucky - Android USB HID Keystroke Injector TapDucky - Android USB HID Keystroke Injector Open-source DuckyScript runner for rooted Android with USB Gadget ConfigFS support TapDucky lets you create, customize, schedule, and run DuckyScript on Android by emulating a USB keyboard, mouse, or...

CredsHunter

CredsHunter CVE-2026-3609 · Writeup LSASS credential dump proof-of-concept for a PPL-bypassing process-handle leak in Wellbia's XIGNCODE3 anti-cheat driver, xhunter1.sys. The driver exposes an IRPMJWRITE command interface that calls ObOpenObjectByPointer with AccessMode = KernelMode and without...

vercel-april2026-incident-response

Vercel April 2026 Incident Response Guide Last updated: 20 April 2026 @ 12.07 PM AEST/Brisbane - v2 — incorporates Vercel CEO update of 20 April IMPORTANT: This is not legal or official advice. If you think you have been compromised please reach out to an incident response partner. This informati...

CobaltStrikeScan

CobaltStrikeScan Scan files or process memory for Cobalt Strike beacons and parse their configuration. CobaltStrikeScan scans Windows process memory for evidence of DLL injection classic or reflective injection and/or performs a YARA scan on the target process' memory for Cobalt Strike v3 and v4...

CVE-2017-10952

CVE-2017-10952 So this is a high level example of a local code execution attack on Foxit PDF reader. Details of this attack can be found here 1. I've copy pasted the text description of this vulnerability linked in 1 here to preserve the description over time - the description was written by the...

fronthunter

FrontHunter FrontHunter is a tool for testing large lists of domains to identify candidates for domain fronting. Domain Fronting? Really? I know, I know… domain fronting is pretty old. But the truth is, it’s still useful as just another feature to include in your C2 infrastructure. When it comes ...