truffleproc

truffleproc — hunt secrets in process memory Usage Run truffleproc.sh against your current Bash shell e.g. $$: root@kitploit: $ ./truffleproc.sh $$ coredumping pid 6174 Reading symbols from od... Reading symbols from /usr/lib/systemd/systemd... Reading symbols from...

BOF_Collection

BOFCollection Various Cobalt Strike BOFs Requirements beacon.h For compilation instructions and BOF overview help-bof ActiveDirectory GetDomainInfo.c Returns information on the current domain and domain controller. inline-execute GetDomainInfo.o Collection GetClipboard.c Prints any text on the...

burp-text4shell

Text4Shell scanner for Burp Suite Detailed description can be found in our blog post about this plugin. Note about detection capabilities: this plugin will only supply the built-in active scanner with payloads, thus for optimal coverage vs. performance, you'll have to configure your scan properly...

text4shell-tools

commons-text-tools Quick links Click to find: Find commons-text .jar files and their versions Calls to commons-text vulnerable functions Hot patch on commons-text .jar files to disable the vulnerable behaviors Scan and patch example Overview CVE-2022-42889 may pose a serious threat to a wide rang...

scanner-for-CVE-2025-55182-vulnerability

🛡️ GitHub Vulnerability Scanner for CVE-2025-55182 React/Next.js RCE This Python script is designed to scan all your public and private GitHub repositories for dependencies that are potentially vulnerable to CVE-2025-55182 a critical Remote Code Execution affecting specific versions of React Serve...

CanaryHunter

Canary Hunter Summary While executing multiple red team engagements over the past few years there have been multiple times where I have run up against Canary Tokens which could potentially alert the SOC to actions taken. As such I spent some time running down the rabbit hole discovering if there...

fuzzing-templates

模糊测试模板 由社区维护的模糊测试模板列表，用于 nuclei 引擎发现未知安全漏洞。 文档 • 贡献 • 讨论 • 社区 !Caution 此仓库已归档并合并到 nuclei-templates 项目的 /dast 目录下。 模糊测试模板与 nuclei 扫描器配合使用，后者驱动实际的扫描引擎。本仓库包含我们团队提供以及社区贡献的各种模糊测试模板。 我们欢迎社区通过拉取请求或 issue 贡献，以扩大安全测试的覆盖面。与专注于已知漏洞的 nuclei-templates 项目不同，模糊测试模板专门用于。...

socgholish_finder

SocGholish Finder Simple script to scan website for SocGholish inject. It checks for and display inject if found, and it deonfuscates and display a shadowing URL domains root@kitploit: usage: finder.py -h -url URL -ua USERAGENT -f FILENAME -p PROXY -s SocGholish finder options: -h, --help show th...

TimeException

Disclaimer This tool is provided for educational purposes only. Any actions and activities related to the material contained within this repository are solely your responsibility. Misusing this tool can result in criminal charges against the persons in question. The author will not be held...

Amsi-Killer

Lifetime AMSI bypass Opcode Scan we get the exact address of the jump instruction by searching for the first byte of each instruction this technique is effective even in the face of updates or modifications to the target data set. for example : | 48:85D2 | test rdx, rdx | | 74 3F | je...

recon-ninja

recon-ninja The tool is a GitHub repository that provides a recon tool that lets you upload your domain discovery through an upload option. The tool utilizes HTTPX, which is a tool that scans for alive domains. The tool also has an integrated MongoDB Atlas database, which is a cloud-based databas...

qscan

Quick Network Scanner Quick Network Scanner project includes: qscan: a rust library for asynchronous network ports scanning see README. qsc: a command line utility built on top of qscan library for quick network scanning activities see README. NOTE: in order to properly use the library and the...

tpm-vuln-checker

TPM 2.0 Vulnerability Scanning Tool This is a tool written in Golang designed to scan for multiple TPM vulnerabilities using the Immune Security tpm-vuln-checker library. Requirements To use this tool, you will need the following: TPM device driver Windows Vista+ or Linux operating system...

FwHunt

FwHunt The Binarly Firmware Hunt FwHunt rule format was designed to scan for known vulnerabilities in UEFI firmware. Usage FwHunt rules are designed to be used with Binarly's FwHunt Community Scanner; full installation instructions and usage information can be found in its README...

pesieve-go

pesieve-go Golang bindings for PE-sieve. Requires pe-sieve32.dll, pe-sieve64.dll of a supported version to be present in the project directory, or in a path pointed by the environment variable: PESIEVEDIR. API Exposes the following wrappers for PE-sieve API: root@kitploit: PESieveVersion uint32...

loldrivers-client

LOLDrivers-client The OG, blazingly fast , zero dependencies client for LOLDrivers by MagicSword. Scan your Windows computer for known vulnerable or malicious drivers. Installation Command Line Copy and paste the command below into a PowerShell terminal. This does not require an elevated...

CVE-2017-5689

Detection Script for CVE-2017-5689 Usage: CVE-2017-5689detector.py Example: CVE-2017-5689detector.py 192.168.1.253-255 Advisory: https://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00075...

CVE-2012-5321

Badges License MIT Installation 1. Install Python3 and pip Instructions Here If you can't figure this out, you shouldn't really be using this Install via pip root@kitploit: pip install CVE-2012-5321 Run bellow command to check CVE-2012-5321 -h Configurations 2. We integrated with the Telegram API...

sap_bo_launchpad-ssrf-timing_attack

SAP BusinessObjects Launchpad SSRF & Timing Attack PoC This Python script is a proof-of-concept PoC for executing SSRF Server-Side Request Forgery and Timing Attacks against SAP BusinessObjects Launchpad. It is designed to help security researchers and professionals identify open ports on a targe...

RAGSieve

RAGSieve Reference implementation for “RAGSieve: Self-Referenced Local Contrast for Knowledge-Poison Detection in Retrieval-Augmented Generation.” RAGSieve detects knowledge-poisoning documents at two control points in a retrieval-augmented generation RAG system. RAGSieve-Query RSQ is an online...