Ghost

Ghost Framework Ghost Framework is an Android post-exploitation framework that exploits the Android Debug Bridge to remotely access an Android device. Installation pip3 install git+https://github.com/EntySec/Ghost...

MasterHttpRelayVPN

MasterHttpRelayVPN Youtube safe search and live streaming are now Bypassed & Working by default. so you don't need youtubeviarelay or Cloudflare / VPS exitnode for it. Language: English | Persian / فارسی نسخه فارسی با AI ایجاد شده. ترجیحا از نسخه انگلیسی استفاده کنید. Telegram Channel 📣:...

XSSight

WARNING: This page is only for education, every malicious purpose from the users that are using it, will be punished with law rules! XSSight Cross-site Scripting XSS Cross-site Scripting XSS is an attack technique that involves echoing attacker-supplied code into a user's browser instance. A...

aether

Aether v6.0 — Smart Contract Security Analysis Framework Version 6.0 | What's New in v6.0 | Changelog Aether is a Python-based framework for analyzing Solidity smart contracts, generating vulnerability findings, producing Foundry-based proof-of-concept PoC tests, and validating exploits on mainne...

mmiotic

mmiotic An exploratory tool for MMIO timing — time any physical address, and dissect the hardware off the latency. Unexpectedly useful for hardware reverse-engineering, hypervisor fingerprinting, side-channelling device activity, register characterization, calibrating malicious triggers, and...

Andromeda

Andromeda makes initial reverse engineering work of Android applications bit faster and easier. Compared to other alternatives, it's written in C/C++ and has a noticeable performance advantage. DEMO The tool is in the early development stage Building Requirements clang: apt install clang libzip:...

zk-xml-probe

zk-xml-probe Static XML fixtures for authorized bug bounty testing of XML parser behaviour CVE-2026-45071...

hashdeep

This is md5deep, a set of cross-platform tools to compute hashes, or message digests, for any number of files while optionally recursively digging through the directory structure. It can also take a list of known hashes and display the filenames of input files whose hashes either do or do not mat...

waidps

waidps Sistema de Auditoría Inalámbrica, Detección y Prevención de Intrusiones Depende de PyCrypto, ejecuta pip install pycrypto para instalar. Eliminado - Característica de cifrado Lista de reproducción de YouTube -...

SOC335-CVE-2024-49138-Investigation

SOC335 – CVE-2024-49138 Exploitation Investigation Overview This project documents a SOC investigation of a CVE-2024-49138 exploitation alert using the LetsDefend platform. The investigation involved analyzing network logs, researching indicators of compromise, determining whether suspicious...

klar

Klar Integración de Clair y Docker Registry soporta tanto API v1 como v3 de Clair Klar es una herramienta sencilla para analizar imágenes almacenadas en un registro Docker privado o público en busca de vulnerabilidades de seguridad usando Clair https://github.com/coreos/clair. Klar está diseñado...

klar

Klar Integration of Clair and Docker Registry supports both Clair API v1 and v3 Klar is a simple tool to analyze images stored in a private or public Docker registry for security vulnerabilities using Clair https://github.com/coreos/clair. Klar is designed to be used as an integration tool so it...

boopkit

root@kitploit: ================================================================ ██████╗ ██████╗ ██████╗ ██████╗ ██╗ ██╗██╗████████╗ ██╔══██╗██╔═══██╗██╔═══██╗██╔══██╗██║ ██╔╝██║╚══██╔══╝ ██████╔╝██║ ██║██║ ██║██████╔╝█████╔╝ ██║ ██║ ██╔══██╗██║ ██║██║ ██║██╔═══╝ ██╔═██╗ ██║ ██║...

CF-Hero

CF-Hero CF-Hero What's it? • Features • Background • Installation • Usage • Running cf-hero • ZoomEye Sponsor • To Do What's it? CF-Hero is a comprehensive reconnaissance tool developed to discover the real IP addresses of web applications protected by Cloudflare. It performs multi-source...

CVE-2025-24893-RCE-PoC

Información Este PoC primero prueba la SSTI y, si funciona, entra en un bucle y te permite ejecutar comandos remotamente. Los comandos exec y shell hacen lo mismo actualmente. Instalación root@kitploit: python3 -m pip install requirements.txt Uso Conexión root@kitploit: python3 poc.py Ejemplo Con...

Embarcadero-Workaround

¿Qué es Embarcadero Workaround? Esta es una "corrección" no oficial para el "Desbordamiento de Pila/Montón de la Biblioteca VCL de Embarcadero" CVE-2014-0993 y CVE-2014-0994. ¿Qué versiones de software admite este workaround? Software de 32 bits compilado con Delphi y C++ Builder donde se incluyó...

CVE-2023-26360

Uso Usage: python3 script.py endpoint proxyurl Lectura de archivos...

CVE-2022-26159-Ametys-Autocompletion-XML

CVE-2022-26159-Ametys-Autocompletion-XML A python exploit to automatically dump all the data stored by the auto-completion plugin of Ametys CMS to a local sqlite database file. Features Automatic detection of maximum results returned by the autocompletion plugin. Depth first search to dump all th...

CVE-2026-0776

CVE-2026-0776 - Elemento de Ruta de Búsqueda No Controlado en el Cliente de Discord Resumen Este repositorio documenta CVE-2026-0776, un problema de ejecución local de código que afecta al Cliente de Escritorio de Discord en Windows. La vulnerabilidad está relacionada con un comportamiento insegu...

BreakEscape

BreakEscape Rails Engine Cybersecurity training escape room game as a mountable Rails Engine. Features 24+ cybersecurity escape room scenarios Server-side progress tracking with 2-table schema Randomized passwords per game instance via ERB JIT Ink script compilation for NPC dialogue Polymorphic...