LDAP-Password-Hunter

LDAP Password Hunter It happens that due to legacy services requirements or just bad security practices password are world-readable in the LDAP database by any user who is able to authenticate. LDAP Password Hunter is a tool which wraps features of getTGT.py Impacket and ldapsearch in order to lo...

tenzir

Data Pipelines for Security Teams Collect, transform, enrich, and route your telemetry—all in one place. What is Tenzir? Tenzir is the data pipeline engine for security teams. If you need to collect, parse, shape, normalize, aggregate, store, query, and route security telemetry data at scale,...

ToRat

A Cross Platform Remote Administration tool written in Go using Tor as its transport mechanism currently supporting Windows, Linux, MacOS clients. DISCLAIMER USE FOR EDUCATIONAL PURPOSES ONLY Wiki How to use ToRat Docker Image Preview Client Commands Server Commands Current Features Architecture...

PowerZure

For a list of functions, their usage, and more, check out https://powerzure.readthedocs.io What is PowerZure? PowerZure is a PowerShell project created to assess and exploit resources within Microsoft’s cloud platform, Azure. PowerZure was created out of the need for a framework that can both...

theZoo

theZoo - A Live Malware Repository theZoo is a project created to make the possibility of malware analysis open and available to the public. Since we have found out that almost all versions of malware are very hard to come by in a way which will allow analysis, we have decided to gather all of th...

terrascan

⚠️ Archived This project is no longer maintained. The repository is archived and no further updates, issues, or pull requests will be accepted. Feel free to fork it if you'd like to continue development...

CVE-2022-30526

This repository does not have a README...

CVE-2022-0997

Fidelis Network and Deception - CVE-2022-0997 - Insecure File Permissions Privilege Escalation Releasability and Acknowledgements The exploit was approved for public release by the United States Government. Special thanks to the servicemen and government liaisons tasked with approving the...

exocomp

Exocomp Self-hosted multi-agent environment tailored to Golang. Features Attention, profit-seekers and visionaries! Are organics costing you time, wages, and - worst of all - benefits? Then upgrade your operation today with the all new Exocomp adaptive repair unit, the smartest investment this si...

PSI_BOF

ProcessInspect BOF A CS BOF which can be used to inspect process memory, addresses and symbols! Overview of commands Command| Description ---|--- lm| list all loaded modules along with base address, entry point, and more addr| Print the bytes at a given memory address meminfo| Print information f...

vhosts-sieve

VHosts Sieve Searching for virtual hosts among non-resolvable domains. Installation root@kitploit: git clone https://github.com/dariusztytko/vhosts-sieve.git pip3 install -r vhosts-sieve/requirements.txt Usage Get a list of subdomains e.g. using Amass root@kitploit: $ amass enum -v -passive -o...

bug-bounty-domains

BUG BOUNTY DOMAINS Domains belonging to the most reputed public bug bounty programs. NOT FOR NON-MONETARY OR PRIVATE PROGRAMS !https://assets.kitploit.com/production/public/readmes/6941/7164554a880fd0545e5dc196593b59979d6603d1462460...

CVE-2023-29343

CVE-2023-29343 This is PoC for arbitrary file write bug in Sysmon version 14.14 After last patch Sysmon would check if Archive directory exists and if it exists it would check if archive directory is owned by NT AUTHORITY\SYSTEM and access is only granted to NT AUTHORITY\SYSTEM. If both condition...

depsguard

depsguard root@kitploit: | | | | / |/ \ ' / |/ | | | |/ | '/ | | | | / | \ \ | | || | | | | | | | ,|| ./|/, |,|,|| ,| || |/ Guard your dependencies against supply chain attacks. Single static binary, zero Rust crate dependencies. By arnica Table of contents...

GC2-sheet

GC2 GC2 Google Command and Control is a Command and Control application that allows an attacker to execute commands on the target machine using Google Sheet or Microsoft SharePoint List and exfiltrate files using Google Drive or Microsoft SharePoint Document. Why This project has been developed t...

CVE-2025-50754-PoC

CVE-2025-50754 Stored XSS to Remote Code Execution in a PHP-Based CMS Platform Summary A PHP-based CMS platform version 5 contains a stored Cross-Site Scripting XSS vulnerability in the "Report" feature. When an administrator views a user-submitted report, malicious JavaScript is executed within...

guardd

guardd Machine learning driven behavioral anomaly detection for Linux using eBPF + Isolation Forest Guardd collects low-level system events process execution, network activity, aggregates them into time-windowed feature vectors, and detects anomalous behavior using a machine learning model. Guard...

ThreatPursuit-VM

root@kitploit: / || | / | \ | | \ / \ \ \ | | | Y | | \ / / | | || || || \ || |/ | \ | | \ / | | | \ \ | | | | /| | \ | | | || | | /|/ || / |/|||| || / MANDIANT THREAT INTELLIGENCE VM Version 2020.1 [email protected] root@kitploit: Created by: Dan Kennedy Jake Barteaux @day1player...

OTE

OSINT Template Engine OSINT Template Engine is an experimental tool for OSINT Information gathering & Attack Surface Mapping which uses customizable templates to collect data from sources. It allows for new template creation and modification of existing ones which gives it a competitive advantage...

CVE-2022-41040-metasploit-ProxyNotShell

CVE-2022-41040-metasploit-ProxyNotShell the metasploit scriptPOC about CVE-2022-41040. Microsoft Exchange are vulnerable to a server-side request forgery SSRF attack. An authenticated attacker can use the vulnerability to elevate privileges. preparation POC root@kitploit: git clone...