ExtractedDefender

Just an attempt to group extracted data from Defender for research purposes. Orginal research from commial on LUA/VDM https://github.com/commial/experiments/tree/master/windows-defender WDextract https://github.com/hfiref0x/WDExtract...

turnstile

Turnstile research archive Historical research code and technical notes. Live launchers are disabled. The capture extension records metadata from local fixtures only. FO1 HTTP 400 remains unresolved. Private captures, credentials, the verdict ledger, protected corpus and W15 rig are not included...

Publications

Publications A list of published research documents...

akamai-security-research

Akamai Security Research This repository includes code and IoCs that are the product of research done in Akamai's various security research teams. You can read about our research in Akamai's Security blog. Copyright 2024 Akamai Technologies Inc. Licensed under the Apache License, Version 2.0 the...

gha-lab-83342297e0

Automated research artifact — not the upstream project. This repository is a disposable lab built by an automated harness for a master's thesis at Université Laval on reproducing published GitHub Actions workflow vulnerabilities. It is a verbatim snapshot of monkeytypegame/monkeytype at commit...

dwarf2json

Introduction dwarf2json is a Go utility that processes files containing symbol and type information to generate Volatility3 Intermediate Symbol File ISF JSON output suitable for Linux and macOS analysis. To build Go 1.18+ required: root@kitploit: $ go build To run: root@kitploit: $ ./dwarf2json...

vulnerability-poc

脆弱性PoCリポジトリ 高深刻度CVEに対する厳選された概念実証（PoC）コード、テストラボ、および予防ルール — 許可されたセキュリティテスト、ペネトレーションテスト、CTFチャレンジ、およびセキュリティ研究 のために構築されています。 SeekersLab チームによって管理されています。各エントリには、検出専用のPoCスクリプト、Dockerテストラボ（脆弱版＋パッチ適用版）、バイリンガル（英語 / 한국어）ドキュメント、および即時展開可能な予防ルールが同梱されています。 ⚠️ 免責事項...

CVE-2025-29927

Next.js Middleware Bypass Checker | CVE-2025-29927 Herramienta automatizada en Bash para detectar aplicaciones Next.js vulnerables al bypass de middleware CVE-2025-29927 , según la investigación de Zhero Web Security. Requisitos bash whatweb curl Instálalos en Debian/Ubuntu con: root@kitploit: su...

My-Sigma-Rule-Collection

Colección de Reglas Sigma que Creé a Partir de Investigaciones que Encontré Interesantes Resumen Este repositorio contiene una colección de reglas Sigma personalizadas que he creado/encontrado basadas en vulnerabilidades, informes de amenazas y técnicas que encontré interesantes. Cada regla inclu...

Clutch

Clutch Clutch is a high-speed iOS decryption tool. Clutch supports the iPhone, iPod Touch, and iPad as well as all iOS version, architecture types, and most binaries. Clutch is meant only for educational purposes and security research. Clutch requires a jailbroken iOS device with version 8.0 or...

FastjsonVulns

Este repositorio no tiene un README...

NPMAnalysis

Introduction Recently, security incidents related to NPM poisoning attacks have been emerging one after another. When such incidents occur, the affected NPM packages are often removed or unpublished from the NPM registry, making subsequent security analysis difficult. Based on this situation, a...

cve-2023-43208-poc

Mirth Connect PoC Script Simple Python script for security research related to Mirth Connect vulnerabilities. Important Use this project only on systems you own or have explicit written permission to test. Unauthorized testing is illegal. Files exploit.py — main script Requirements Python 3.9+...

CVE-2026-24118

⚠️ 安全研究与法律免责声明 📌 本仓库的目的 本仓库严格仅用于教育、学术及经授权的网络安全研究目的 。 其旨在帮助理解以下内容： 受控环境中的安全漏洞与利用概念 沙箱隔离机制及其局限性 安全的软件设计与防御性安全实践 🚫 仅限授权使用 本仓库只能在已获得明确许可的环境中使用，例如： 个人或受控虚拟机 Docker 或隔离的实验环境 经授权的渗透测试项目 学术或网络安全培训环境 严禁在授权环境之外使用。 ⚖️ 不承担责任 / 免责声明 本仓库的作者与贡献者不承担 因使用、滥用或分发本项目及其内容而产生的任何误用、损害、损失或法律后果的责任。 使用本仓库即表示您确认：...

NextJS-CVE-2025-29927-Docker-Lab

root@kitploit: 🚨 NextJS-CVE-2025-29927-Docker-Lab This repository contains a Docker-based lab environment to explore and demonstrate the Next.js CVE-2025-29927 vulnerability in a controlled setting. ⚠️ DISCLAIMER: This lab is for educational and security research purposes only. Do not expose it to...

bug-bounty-library

Bug Bounty / Original Findings Library Folders are numbered in the order a hunter actually works - first to last. Start at 00-hunt/00-INDEX. Run the hunt from 00-hunt/ALPHA. This README is only the map. Authorization only. Safe harbor, VDP, GitHub PVR, or coordinated disclosure. No other-customer...

NoiseHound

NoiseHound Detection-aware Active Directory attack-path scoring. DreadHost Research | companion to OffsetInspect PowerShell and OffsetScan Rust BloodHound and PlumHound on top of it finds a path to the objective. NoiseHound ingests the same graph data and re-ranks paths by expected detection cost...

CVE-2017-1000250-PoC

CVE-2017-1000250-PoC Script de prueba de concepto para CVE-2017-1000250. Escrito mientras investigaba para el ensayo en TTM4137...

CVE-2026-39813

cve-id ⚡ Uso sencillo Usa este proyecto solo en entornos seguros y autorizados como: Máquinas virtuales locales Contenedores Docker Entornos de laboratorio aislados Entornos de pruebas de penetración autorizados Ejemplo de configuración: root@kitploit: git clone cd Project use python follow below...

GarbageMan

GarbageMan What is GarbageMan? GarbageMan is a set of tools designed for .NET heap analysis. These tools offer the following benefits for malware researchers: Ability to extract clear-text payload PE Images etc. from .NET heaps quickly. Easy analysis of encrypted network protocols, signs of data...