radio-hackbox

SySS Radio Hack Box The SySS Radio Hack Box is a proof-of-concept software tool to demonstrate the replay and keystroke injection vulnerabilities of the wireless keyboard Cherry B.Unlimited AES. Requirements Raspberry Pi Raspberry Pi Radio Hack Box shield a LCD, some LEDs, and some buttons...

Autorize

Autorize Autorize is an open-source automatic authorization and authentication enforcement detection extension for Burp Suite. It is designed to assist application security engineers and penetration testers in identifying authorization bypasses and authentication weaknesses in web applications—at...

tcpreplay

Tcpreplay Tcpreplay is a suite of GPLv3 licensed utilities for UNIX and Windows under Cygwin for editing and replaying network traffic previously captured by tools like and . It classifies traffic as client or server, rewrites Layer 2/3/4 headers, and replays it back onto the network through...

oproxy

oproxy oproxy es un proxy HTTP, HTTPS y SOCKS5 local para inspeccionar, reproducir y modificar tráfico. Está pensado para desarrolladores que prueban navegadores, CLIs, aplicaciones móviles, clientes de API, servicios y suites de pruebas en su propia máquina o en un contenedor Docker local...

mousejack_transmit

Este código extiende las herramientas mousejack https://github.com/RFStorm/mousejack. Se han añadido herramientas de repetición/transmisión a las herramientas originales. Los paquetes POC basados en un Logitech Wireless Combo MK220 que consiste en un teclado inalámbrico K220 y un ratón inalámbric...

mousejack_transmit

This is code extending the mousejack tools https://github.com/RFStorm/mousejack. Replay/transmit tools have been added to the original tools. POC packets based on a Logitech Wireless Combo MK220 which consists of a K220 wireless keyboard and an M150 wireless mouse are included in the logs folder...

ams-failopen

Fail-Open Signing in AppleMediaServices Zero-Day Disclosure Summary This issue constitutes a live Zero-Day vulnerability and reflects a systemic design flaw in AppleMediaServices.framework, rather than a regression or version-specific bug. A critical fail-open flaw in Apple’s AppleMediaServices...

pacmap

pacmap PacMap es un visualizador de tráfico de red basado en grafos para captura en vivo y reproducción de PCAP que te ayuda a ver qué cambió, qué es ruidoso y qué inspeccionar a continuación. Piénsalo como Git para el comportamiento de red: instantánea, diff y reproducción visual del estado de l...

ESP-RFID-Tool

ESP-RFID-Tool By Corey Harding Official website: www.rfid-tool.com April Brother is currently manufacturing this hardware and it can be purchased direct from China from their Official Store: https://blog.aprbrother.com/product/esp-rfid-tool AliExpress Store:...

CVE-2026-31402

🛡️ CVE-2026-31402 – NFSv4 LOCK Replay Cache Heap Overflow CVE-2026-31402: Linux NFS Bug Hidden for 23 Years 📌 Overview CVE-2026-31402 is a heap overflow vulnerability in the NFSv4.0 LOCK replay cache of the Linux kernel. It arises due to improper handling of responses larger than the fixed buffer...

neo

Neo Convierte cualquier aplicación web en una API. Sin API oficial. Sin automatización del navegador. Neo es una extensión de Chrome que captura pasivamente cada llamada API que realiza tu navegador, aprende los patrones y permite que la IA o tú las reproduzcan directamente. El Problema Los agent...

CVE-2026-23010-CCSDS-Telecommand-Replay-Without-Sequence-Number

CVE-2026-23010 – CCSDS Telecommand Replay Without Sequence Number Program Code Python satellite sim root@kitploit: satellitesim.py - Spacecraft that executes telecommands without checking sequence number class Satellite: def initself: self.executed = set def receivetcself, cmdid, seqnum:...

Ironsquirrel

IRONSQUIRREL This project aims at delivering browser exploits to the victim browser in an encrypted fashion. Ellyptic-curve Diffie-Hellman secp256k1 is used for key agreement and AES is used for encryption. By delivering the exploit code and shellcode to the victim in an encrypted way, the attack...

auth_analyzer

Auth Analyzer Tabla de contenidos ¿Qué es? ¿Por qué debería usar Auth Analyzer? Resumen de la Interfaz Gráfica Extracción de Parámetros Extracción Automática De Cadena a Cadena Valor Estático Solicitar Entrada Reemplazo de Parámetros Ubicación de Reemplazo Eliminación de Parámetros Ejemplos de Us...

agensic

Sepa qué se ejecutó, dónde, cuándo y quién lo ejecutó La capa de observabilidad faltante para flujos de trabajo de terminal impulsados por IA Signed Provenance Tracked Sessions Git Time Travel Replayable Sessions IDE style Tab Autocomplete Agensic actualiza tu flujo de trabajo terminal existente...

Gpt-Agreement-Payment

简体中文 | English Gpt-Agreement-Payment End-to-end replay tool for ChatGPT Plus / Team subscription agreements: reverse-engineered from packet capture the entire chain Stripe Checkout → PayPal / GoPay / QRIS → ChatGPT manual-approval → Codex OAuth + PKCE and implemented as a runnable client. Include...

rep-chrome

rep+ rep+ is a lightweight Chrome DevTools extension inspired by Burp Suite's Repeater, now supercharged with AI. I often need to poke at a few requests without spinning up the full Burp stack, so I built this extension to keep my workflow fast, focused, and intelligent with integrated LLM suppor...

fzy

fzy fozzylang General-purpose systems language and production toolchain with a memory-safe-by-default shipped safe-language surface, verifiable correctness, deterministic execution, and replay-first debugging built in. fzy ships one production CLI, fz, for both compiler workflows and deterministi...

Hermes-Proxy

Hermes Proxy Hermes Proxy es una aplicación de escritorio para interceptar HTTP/HTTPS construida con Electron y Vite. Captura solicitudes/respuestas, permite reproducir solicitudes y exportar/importar archivos HAR. Características Tabla de tráfico en vivo con detalles de solicitudes/respuestas...

RFCrack

/ | | | / | | | | / \ ' - / \ / - | / \ V V / ' / \ || - /||// /| ///|. //, / / |/ | /| | | || | / | | '/ /| / / | || || , | \ root@kitploit: Welcome to RFCrack - A Software Defined Radio Attack Tool Developer: @Ficti0n - http://ConsoleCowboys.com CCLabs: http://cclabs.io Blog:...