featherduster

FeatherDuster and Cryptanalib FeatherDuster is a tool written primarily by Daniel "unicornfurnace" Crowley, along with community contributions, for breaking crypto; It tries to make the process of identifying and exploiting weak cryptosystems as easy as possible. Cryptanalib is the moving parts...

cloudlist

Características • Instalación • Uso • Configuración • Ejecutar cloudlist • Proveedores compatibles • Biblioteca • Únete a Discord Cloudlist es una herramienta multinube para obtener Assets de Proveedores Cloud. Está pensada para ser utilizada por el equipo azul para aumentar los esfuerzos de...

cloudlist

Features • Installation • Usage • Configuration • Running cloudlist • Supported providers • Library • Join Discord Cloudlist is a multi-cloud tool for getting Assets from Cloud Providers. This is intended to be used by the blue team to augment Attack Surface Management efforts by maintaining a...

CVE-2015-6668

CVE-2015-6668 Title: CV filename disclosure on Job-Manager WP Plugin...

noPac-detection

About Detection script for CVE-2021-42278 and CVE-2021-42287 Usage root@kitploit: The detection script uses the domain account credentials to determine the possibility of the vulnerabilities. usage: noPac-detection.py -h -debug -dc-ip -targetUser credentials optional arguments: -h, --help show th...

CVE-2017-5638_struts

I extended Scott Campbell's script further, made it more complicated : While "HTTPStrutsAttack" will stop 100% of the recon, there was still miniscule chance that if a scanner hits a vulnerable system, even though we'd block the scanner, vulnerable system might still do the wget included in the...

S1EM

Objetivos Hoy en día, los ciberataques son más numerosos y causan daños en las empresas. No obstante, existen muchos productos de software para detectar amenazas cibernéticas. La solución S1EM se basa en el principio de reunir los mejores productos en su campo, de forma gratuita, y hacerlos...

phishery

phishery Phishery is a Simple SSL Enabled HTTP server with the primary purpose of phishing credentials via Basic Authentication. Phishery also provides the ability easily to inject the URL into a .docx Word document. The power of phishery is best demonstrated by setting a Word document's template...

Starkiller

...

CVE-2025-55188-7z-exploit

CVE-2025-55188-7z-exploit 7-Zip Symlink Arbitrary File Write PoC CVE-2025-55188 Description This proof-of-concept demonstrates CVE-2025-55188 , a vulnerability in 7-Zip versions prior to 25.01. The flaw occurs because 7-Zip does not properly handle symbolic links during extraction, allowing a...

log4j-log4shell-affected

log4j-log4shell-affected Lists of affected components and affected apps/vendors by CVE-2021-44228 aka Log4shell or Log4j RCE for security responders. We believe it is important to classify the vendors and products between: 1. Internal risk - what you need to patch first to remove risk internally ...

knocker

Knocker is a self-hosted service that provides an HTTP based "knock-knock" single-packet authorization SPA gateway for your Homelab with web, cli + gnome and android clients. it can be used as authentication for your reverse proxy like Caddy, or even on the firewall level using the FirewallD...

GPOHound

GPOHound GPOHound is a tool for dumping and analysing Group Policy Objects GPOs extracted from the SYSVOL share. It provides a structured, formalized format to help uncover misconfigurations, insecure settings, and privilege escalation paths in Active Directory environments. The tool integrates...

HomePWN

HomePwn - Swiss Army Knife for Pentesting of IoT Devices root@kitploit: . | | \ \ | | \ / \ / / | /\ / / / \ | Y Y Y \ /| | \ / | \ || //||| /\ | //|| / / / / / ☠ HomePwn - IoT Pentesting & Ethical Hacking ☠ Created with ♥ by: 'Ideas Locas CDO Telefonica' HomePwn is a framework that...

Metabase_CVE-2021-41277

MetabaseCVE-2021-41277 Description Metabase is an open source data analytics platform. In affected versions a security issue has been discovered with the custom GeoJSON map admin-settings-maps-custom maps-add a map support and potential local file inclusion including environment variables. URLs...

exploit-CVE-2016-8016-25

McAfee Virus Scan for Linux multiple remote flaws THIS EXPLOIT AND ALL THE CODE IN THIS REPO WERE REMOVED TO AVOID ANY PROBLEMS REGARDING VIOLATING ANY MCAFEE LICENSE McAfee VirusScan Enterprise for Linux is a enterprise antivirus solution by Mcafee. Its unique, Linux-based on- access scanner...

CVE-2025-55182

React2Shell PoC This repository provides a minimal intentionally vulnerable environment to test security scanners against the recent critical RCE vulnerability React2Shell affecting React Server Components and Next.js. CVE-2025-55182 : A pre-authentication remote code execution vulnerability exis...

firemark

🌐 Language English | 简体中文 | 繁體中文 | 日本語 | 한국어 | हिन्दी | ไทย | Français | Deutsch | Español | Italiano | Русский | Português | Nederlands | Polski | العربية | فارسی | Türkçe | | |...

vallumd

vallumd This program allows you to centralize and distribute IP blacklists. If you maintain a server on the Internet, it's very likely you encountered one or more brute force attacks. Not a problem, just install fail2ban. Done. But if you're running multiple servers, each of them running their...

meta-ai-support-prompt

Meta AI Support Assistant System Prompt Extracted system prompt from Meta's AI Support Assistant on June 1, 2026. Files system-prompt.md — Extracted system prompt ⚠️ Disclaimer & Legal Notice Purpose This repository is published strictly for educational and authorized security research purposes...