contrast

CodeSec par Contrast Security CodeSec propose : Le scanner SAST le plus rapide et le plus précis. Des résultats immédiats et exploitables — scannez du code et des environnements serverless. Un processus de connexion fluide et sans friction avec un compte GitHub ou Google. De début à fin en quelqu...

macnoise

MacNoise MacNoise generates real macOS telemetry: network connections, file writes, process spawns, plist mutations, TCC probes, and more. Point it at a machine running your EDR, SIEM, or firewall stack and see what actually fires - not what the vendor datasheet claims will fire. For background o...

Phoenix-Framework

Phoenix-Framework Phoenix is an async based post exploitation framework that abuses trusted sites for C2. Supported Platforms Phoenix currently supports the following platforms via their Bot APIs: Discord Telegram Reddit Coming soon Phoenix offers the basic following features : String Obfuscation...

Hunting-Queries-Detection-Rules

KQL Sentinel & Defender queries KQL for Defender XDR, Microsoft Sentinel & other Microsoft Solutions The purpose of this repository is to share KQL queries that can be used by anyone and are understandable. These queries are intended to increase detection coverage through the logs of Microsoft...

avoidz

Avoidz v 1.3 root@kitploit: Author: Mascerano Bachir dev-labs Legal Disclamer: root@kitploit: The author does not hold any responsibility for the bad use of this tool, remember this is only for educational purpose. Description: root@kitploit: This tool Generate encoded powershell with metasploit...

CVE-2020-2978

CVE-2020-2978 CVE-2020-2978 refrence link for PoC: https://databasesecurityninja.wordpress.com/2020/12/01/cve-2020-2978-rman-audit-table-point-in-time-recovery-not-logged/...

frameworks_base_CVE-2023-20944

This repository does not have a README...

frameworks_av_AOSP10_r33_CVE-2021-0520

لا يحتوي هذا المستودع على ملف README...

redteam-ai-benchmark

Red Team AI Benchmark Russian version: README.ru.md Red Team AI Benchmark is a CLI model-evaluation benchmark. It measures how LLMs understand and respond to red-team questions and security scenarios; it is not a tool for carrying out those activities. Version 2 uses a rubric-based dataset instea...

fortios-auth-bypass-exploit-CVE-2024-55591

CVE-2024-55591 A Fortinet FortiOS Authentication Bypass Vulnerable Exploit Description Use this exp,you can bypass authentication and run cmd USEAGE root@kitploit: sysirq@sysirq-machine:/Work/Fortinet/FortiGate7016/CVE-2024-55591$ python3 exp.py usage: exp.py -h --target TARGET --port PORT...

better_opts_attacks

Puis-je avoir votre attention ? Briser les défenses à base de fine-tuning contre l'injection de prompts via des attaques tenant compte de l'architecture Ce dépôt contient le code pour exécuter les attaques ASTRA et ASTRA++ qui brisent SecAlign++, SecAlign et StruQ. Ce dépôt contient également...

JWTweak

JWTweak Introduction JWTweak is a guided, fully-offline JWT security-testing toolkit. It detects the algorithm of an input token, analyses it for risky configuration, recommends the attacks that fit, and walks you through each one — no flags to memorise. Just run it: root@kitploit: python3...

fawkes

Fawkes Mythic C2 Agent Fawkes is an entirely vibe-coded Mythic C2 agent. It started as an "I wonder" and has turned into a goal. My goal is to not write a single line of code for this agent, instead, exclusively producing it at a prompt. I originally attempted to write the agent myself, but after...

DarkScrape

=====The Dark-Scrape===== OSINT Tool to find the Media Links in Tor Sites Available in Tested On Kali Linux 2019.2 Ubuntu 18.04 Nethunter Arc Linux Installation root@kitploit: git clone https://github.com/itsmehacker/DarkScrape.git pip3 install -r requirements.txt Features Download Media Scrape...

CVE-2024-5452

CVE-2024-5452 01. Présentation de RCE et pytorch-lightning 1 Présentation de RCE et pytorch-lightning RCE Remote Code Execution, exécution de code à distance est une vulnérabilité qui permet à un attaquant d'exécuter du code arbitraire à distance dans un système ou une application, et correspond ...

CVE-2021-26295--

CVE-2021-26295-- CVE-2021-26295-POC Use DNSlog for vulnerability verification of CVE-2021-26295. Poc usage: Place the target in target.txt and run python poc.py. JDK environment must be 12, otherwise ysoserial cannot properly generate the payload exp: python exp.py https://baidu.com then enter th...

CVE-2023-29919

Summary: There is an arbitrary read file vulnerability in SolarView Compact 6.00 and below, attackers can bypass authentication to read files through texteditor.php Vendor: SolarView Compact Affected Product: SolarView Compact =ver 6.00 poc: http://example.com/texteditor.php Details: You can fill...

CVE-2020-7247

CVE 2020-7247 PoC exploit for OpenSMTPD 6.4.0...

CVE-2026-34621

CVE-2026-34621 : Adobe Acrobat 2026 Prototype Pollution & JS Injection Chain — Research PoC Overview This repository contains research material and proof-of-concept code developed during the analysis of the 2026 Adobe Acrobat Reader in-the-wild exploit chain involving: Prototype Pollution Interna...

BackupOperatorToolkit

BackupOperatorToolkit Utilisation Le BackupOperatorToolkit BOT dispose de 4 modes différents qui vous permettent de passer d'Operateur de sauvegarde à Administrateur de domaine. Utilisez "runas.exe /netonly /user:domain.dk\backupoperator powershell.exe" avant d'exécuter l'outil. Mode Service Le...