CVE-2026-42055

cve-id ⚡ Simple Usage Use this project only in safe and authorized environments such as: Local virtual machines Docker containers Isolated lab setups Authorized penetration testing environments Example setup: root@kitploit: git clone cd Project use python follow below Create a virtual environment...

pentestcode

PentestCode AI penetration testing agent in your terminal. Multi-agent architecture • Engagement state tracking • 20+ LLM providers PentestCode is an autonomous pentesting agent for your terminal. Point it at a target and it runs the tools, reads the output, updates its picture of the network, an...

ansible_CVE-2016-5195_check

Description Playbook for testing the dirty cow vulnerability CVE-2016-5195. Dependencies local user on the system with sudo priveleges Run root@kitploit: ansible-playbook -i host, check.yml -u jondoe -k -K Links http://dirtycow.ninja...

CVE-2022-22947

CVE-2022-22947 SpringCloudGatewayRCE Code By:Junsheng @Orange Network Security Lab Orange Network Security Lab https://0range.team/ 0x00 Risk Overview This tool is only for authorized security testing. Unauthorized illegal attacks on sites are prohibited. Read online Cybersecurity Law of the...

pentest-copilot

Pentest Copilot Un agente de pruebas de penetración de código abierto impulsado por IA. Se conecta a una caja de ataque Kali, ejecuta herramientas de forma autónoma, analiza los resultados e itera. Tú describes el objetivo. Él hace el resto. Diseñado para compromisos del mundo real, máquinas...

CVE-2024-32002

CVE-2024-32002 Repo for testing CVE-2024-32002 combined with Hook...

SmartScanner-Source

SmartScanner Un escáner de vulnerabilidades web construido con C++17 y Qt 6, que incluye interfaces gráfica y de línea de comandos. Este repositorio contiene una reconstrucción de SmartScanner 3.0.0 con fines educativos. Combina un motor de rastreo web, módulos de detección de vulnerabilidades y...

DVIA-v2

DVIA-v2 Powered by 8ksec.io DVIA-v2 written in Swift along with additional vulnerabilities Damn Vulnerable iOS App DVIA is an iOS application that is damn vulnerable. Its main goal is to provide a platform to mobile security enthusiasts/professionals or students to test their iOS penetration...

redteamguides.github.io

Red Team Guides RedTeamGuides is a platform that provides red team tutorial and guidance along with cheatsheets. It is aimed at helping security professionals and enthusiasts to learn about red teaming and penetration testing techniques. The platform provides a wide range of resources, including...

burp-vps-proxy

Burp VPS Proxy: Easy Cloud Proxies for Burp Suite Getting Started » Features · Providers · Disclaimers 📖 About Burp VPS Proxy is a Burp Suite extension that allows for the automatic creation and deletion of upstream SOCKS5 proxies on popular cloud providers from within Burp Suite. It automaticall...

OffensiveCpp

OffensiveCpp Offensive C++ is a collection of offensive security snippets written in C++. It includes various tools for penetration testing and exploit development. Table of Contents OffensiveCpp Introduction Why C/C++? Compiling Reference Libraries Contributing License Introduction The purpose o...

auto-repeater

AutoRepeater: Repetición Automatizada de Solicitudes HTTP Con Burp Suite tl;dr Dentro de extender importe AutoRepeater.jar Algunas Instrucciones Breves AutoRepeater solo reenviará las solicitudes que sean modificadas por un reemplazo definido. Cuando AutoRepeater recibe una solicitud que coincide...

Cybersecurity-Books

Cybersecurity-Books Here you will get awesome collection of mostly all well-known and usefull cybersecurity books from beginner level to expert for all cybersecurity positions 1. CyberSecRoadmap 1.pdf 2. 21 days free CCNA complete videos.pdf 3. 101 Labs - CompTIA Linux+.pdf 4. 7839+ Awesome Deep...

COFFLoader

COFF Loader This is a quick and dirty COFF loader AKA Beacon Object Files. Currently can run un-modified BOF's so it can be used for testing without a CS agent running it. The only exception is that the injection related beacon compatibility functions are just empty. The main goal is to provide a...

DirtyCOWTester

Dirty COW Tester...

silica

SILICA An exhaustive comparison of A64 instruction-allocation decisions. Silica checks every one of the 4,294,967,296 possible A64 instruction words. It compares whether Capstone, LLVM, Unicorn, and a table compiled from Arm's XML encoding diagrams accept each word. A decoder and an encoding...

Advisories

Avisos de Seguridad Este repositorio incluye varias vulnerabilidades que fueron descubiertas y reportadas durante pruebas de penetración. Todo el contenido de este repositorio se proporciona únicamente con fines educativos. Enlaces...

MSF-Testing-Scripts

Metasploit Module Testing Scripts This repo contains code required to test some of the Metasploit modules I've helped write. brocadeemulator.py Metasploit Module: auxiliary/scanner/telnet/brocadeenablelogin juniperssg5emulator.py Metasploit Module: auxiliary/scanner/ssh/juniperbackdoor.rb Also se...

CVE-2026-34348

CVE-2026-34348 Donate Support the maintenance of this project with PayPal or by scanning the QR code below. ⚡ Simple Usage Use this project only in safe and authorized environments such as: Local virtual machines Docker containers Isolated lab setups Authorized penetration testing environments...

CVE-2026-62282

OpenCVE , a vulnerability intelligence platform, is affected by a Server-Side Request Forgery (SSRF) in its notification testing feature for Webhook and Slack integrations . Prior to 3.0.0 , user-supplied HTTP/HTTPS destinations are not sufficiently validated, allowing an authenticated user with ...