OMLASP

OMLASP root@kitploit: | | | | | | || | | || | | | | | | | | OMLASP - Open Machine Learning Application Security Project is intended to become a standard for auditing Machine Learning algorithms. It will not only focus on the security of the algorithms but also on their biases. Typically, when...

ghost-checker

ghost-checker Test wether you're exposed to ghost CVE-2015-0235. All kudos go to Qualys Security Usage root@kitploit: /tmp/ghost-checker master$ make cc -o ghost ghost.c /tmp/ghost-checker master$ ./ghost not vulnerable /tmp/ghost-checker master$ make clean rm ghost Credits Qualys Security Team...

CVE-2019-14287

CVE-2019-14287...

cookie_crimes

Chrome Cookie Extraction Without Root This will print out a user's Chrome cookies. You don't need to have their password or be root to use it. nice nice nice nice nice. If you are not the kind of person who regularly gets the ability to execute code on other people's computers, you probably don't...

crowdsec

CrowdSec is an open-source and participative security solution offering crowdsourced server detection and protection against malicious IPs. Detect and block with our Security Engine, contribute to the network, and enjoy our real-time community blocklist. Features & Advantages Versatile Security...

flopz

Flopz - Firmware Liberation on Python Flopz is an assembler toolkit written in pure python. Use it to: Create shellcode for embedded systems Dynamically patch large collections of binaries Instrument firmware images, for debugging and fuzzing Currently, Flopz supports: ARM: Thumb Mode PPC: VLE,...

sdnpwn

Что такое sdnpwn? sdnpwn — это набор инструментов и фреймворк для тестирования безопасности программно-конфигурируемых сетей SDN. Для получения дополнительной информации ознакомьтесь с этой статьей: https://sdnpwn.net/2017/08/22/what-is-sdnpwn/ Установка Сначала скачайте sdnpwn с помощью git...

hetty

Hetty — это HTTP‑инструментарий для исследований в области безопасности. Он стремится стать открытой альтернативой коммерческому ПО, такому как Burp Suite Pro, и предлагает мощные функции, ориентированные на потребности сообщества инфосека и bug bounty. Возможности Прокси‑сервер HTTP типа «челове...

hetty

Hetty is an HTTP toolkit for security research. It aims to become an open source alternative to commercial software like Burp Suite Pro, with powerful features tailored to the needs of the infosec and bug bounty community. Features Machine-in-the-middle MITM HTTP proxy, with logs and advanced...

Vajra

Vajra - Your Weapon To Cloud About Vajra Vajra is a UI based tool with multiple techniques for attacking and enumerating in target's Azure environment. The term Vajra refers to the Weapon of God Indra in Indian mythology God of Thunder & Storms. Its connection to the cloud makes it a perfect name...

Malicious-URL-Detection-Open-Source

Malicious-URL-Detection-Open-Source We collected existing open source code for malicious URL detection...

simple-maven

Damn Vulnerable C Application API Only Getting Started Note: This is a deliberately vulnerable app, please do not host it on production or Internet/public facing servers. Use with caution. kk Docker test root@kitploit: docker-compose up tets Manual Install .NET Core 2.x SDK Microsoft .NET Core SD...

contrast

CodeSec от Contrast Security CodeSec предоставляет: Самый быстрый и точный SAST-сканер. Немедленные и практичные результаты — сканирование кода и serverless-окружений. Простой и бесшовный процесс входа с помощью GitHub или Google Account. От начала до конца за считанные минуты. Запустив...

DockerENT

...

concealed_position

Concealed Position Concealed Position is a local privilege escalation attack against Windows using the concept of "Bring Your Own Vulnerability". Specifically, Concealed Position CP uses the as designed package point and print logic in Windows that allows a low privilege user to stage and install...

uafuzz

UAFuzz: Binary-level Directed Fuzzing for Use-After-Free Vulnerabilities Directed Greybox Fuzzing DGF like AFLGo aims to perform stress testing on pre-selected potentially vulnerable target locations, with applications to different security contexts: 1 bug reproduction, 2 patch testing or 3 stati...

libsrtp

Introduction to libSRTP This package provides an implementation of the Secure Real-time Transport Protocol SRTP, the Universal Security Transform UST, and a supporting cryptographic kernel. The SRTP API is documented in include/srtp.h, and the library is in libsrtp2.a after compilation. This...

CVE-2024-38077-notes

CVE-2024-38077-notes...

CVE-2022-3518

CVE-2022-3518...

msticpy

MSTIC Jupyter and Python Security Tools Microsoft Threat Intelligence Python Security Tools. msticpy is a library for InfoSec investigation and hunting in Jupyter Notebooks. It includes functionality to: query log data from multiple sources enrich the data with Threat Intelligence, geolocations a...