linux-soft-exploit-suggester

linux-soft-exploit-suggester Script to find exploits for all vulnerable software on the system, targeting software packages rather than just kernel vulnerabilities. It uses the exploit database to assess the security of packages and search for exploits to help with privilege escalation. Usage...

sharesniffer

sharesniffer sharesniffer is a network analysis tool for finding open and closed file shares on your local network. It includes auto-network discovery and auto-mounting of any open cifs and nfs shares. How to use Example to find all hosts on any local network with open/closed nfs/smb shares:...

Malicious-MCP

Malicious MCP This is a proof-of-concept project that allows you to deploy an MCP server that "disguises" itself as any other MCP server. This MCP acts as an MCP 'Proxy', and simply forwards all incoming requests to an upstream MCP server. What is an MCP? An MCP Server is a program that expose...

QuasarNix

QuasarNix: Adversarially Robust Living-off-the-Land Reverse-Shell Detection Dmitrijs Trizna · Luca Demetrio · Battista Biggio · Fabio Roli Overview Linux living-off-the-land LOTL reverse shells abuse legitimate binaries bash, python, nc, … to establish covert outbound connections, making...

Ghost-In-The-Logs

Ghost In The Logs This tool allows you to evade sysmon and windows event logging, my blog post about it can be found here Usage You can grab the lastest release here Starting off Once you've got the latest version execute it with no arguments to see the avalible commands root@kitploit: $ gitl.exe...

vulnerable-AD

Vulnerable-AD Create a vulnerable active directory that's allowing you to test most of active directory attacks in local lab Main Features Randomize Attacks Full Coverage of the mentioned attacks you need run the script in DC with Active Directory installed Some of attacks require client...

pythem

pythem - Penetration Testing Framework pythem is a multi-purpose pentest framework written in Python. It has been developed to be used by security researchers and security professionals. The tool intended to be used only for acts within the law. I am not liable for any undue and unlawful act...

the-hacking-trove

This repository does not have a README...

CVE-2023-38831

CVE-2023-38831 WinRAR يسمح برنامج RARLabs WinRAR قبل الإصدار 6.23 للمهاجمين بتنفيذ تعليمات برمجية عشوائية عند محاولة المستخدم عرض ملف غير ضار داخل أرشيف ZIP. تحدث المشكلة لأن أرشيف ZIP قد يتضمن ملفًا غير ضار مثل ملف JPG عادي ومجلدًا له نفس اسم الملف غير الضار، ويتم معالجة محتويات المجلد التي قد...

CVE-2025-11371

CVE-2025-11371 في التثبيت والتكوين الافتراضيين لـ Gladinet CentreStack و TrioFox، توجد ثغرة تضمين ملفات محلي Local File Inclusion غير مصادق عليها تسمح بالكشف غير المقصود عن ملفات النظام. وقد لوحظ استغلال هذه الثغرة في البيئات الحقيقية. تؤثر هذه المشكلة على Gladinet CentreStack و Triofox: جميع...

infernal-twin

Infernal-Wireless v3 रिलीज़ 3 काली लिनक्स 2018 पर सुधार और संगतता वायरलेस स्कैन का दृश्य प्रतिनिधित्व जोड़ा गया उपकरणों द्वारा अनुरोधित प्रोब रिक्वेस्ट और प्रति SSID मानचित्र का दृश्य प्रतिनिधित्व जोड़ा गया MAC पता मैपिंग अपडेट की गई प्रोब रिक्वेस्ट डिवाइसों पर MAC पता मैपिंग जोड़ा गया WPA2 PSK प...

7-Zip-CVE-2025-0411-POC

7-Zip-CVE-2025-0411-POC تفاصيل CVE-2025-0411 "تتيح هذه الثغرة الأمنية درجة CVSS 7.0 للمهاجمين عن بُعد تجاوز آلية الحماية Mark-of-the-Web على التثبيتات المتأثرة من 7-Zip. يتطلب استغلال هذه الثغرة تفاعلًا من المستخدم، إذ يجب على الهدف زيارة صفحة خبيثة أو فتح ملف خبيث. يكمن العيب المحدد في معالجة...

page_table_walk

Capture the Flag in Physical Memory You've read about paging. The diagrams make sense. Four levels, 9 bits each, page frame, offset. Sure. But then you hit a challenge that requires actually walking page tables, and you realize you don't know it. You know about it. Big difference. What worked for...

gentlemen-decryptor

The Gentlemen Ransomware Decryptor The first publicly available decryption method for The Gentlemen ransomware. The Gentlemen also known as hastalamuerte is currently the most active ransomware-as-a-service RaaS operation globally, with 320+ confirmed victims as of Q1 2026. Until now, every major...

wifipumpkin3

Wifipumpkin3 Powerful framework for rogue access point attack. Overview wifipumpkin3 is powerful framework for rogue access point attack, written in Python, that allow and offer to security researchers, red teamers and reverse engineers to mount a wireless network to conduct a man-in-the-middle...

CVE-2023-38831-PoC

CVE-2023-38831 PoC यह रिपॉजिटरी WinRAR में CVE-2023-38831 जीरो-डे भेद्यता के लिए एक प्रूफ-ऑफ-कॉन्सेप्ट Proof-of-Concept मात्र है। RARLabs WinRAR 6.23 से पहले के संस्करण हमलावरों को एक ZIP आर्काइव के अंदर एक हानिरहित फ़ाइल देखने का प्रयास करते समय मनमाना कोड निष्पादित करने की अनुमति देते हैं। यह...

Prox-Ez

Prox-Ez: سكين الجيش السويسري لمصادقة HTTP يتعامل وكيل HTTP هذا مع جميع مصادقات HTTP نيابة عنك. وهو يدعم NTLM EPA ربط القناة وربط الخدمة، وKerberos، وpass-the-hash، وoverpass-the-hash pass-the-key، وpass-the-ticket TGT وTGS. مقالات ذات صلة: تشريح NTLM EPA بمحبة وبناء وكيل MitM دراسة حول مصادقة HTT...

StreamDivert

StreamDivert StreamDivert is a tool to man-in-the-middle or relay in and outgoing network connections on a system. It has the ability to, for example, relay all incoming SMB connections to port 445 to another server, or only relay specific incoming SMB connections from a specific set of source IP...

Website

The New Oil Mission Statement To educate readers on why privacy and security matter, and the various tools and techniques available to help them reclaim and protect their own privacy & security To empower readers to believe that privacy and security are attainable for everyone and to do their bes...

CVE-2023-21674

أول ثغرة يوم-صفر في البرية لعام 2023 🔥 CVE-2023-21674 هي ثغرة في استدعاء الإجراءات المحلية المتقدمة في ويندوز ALPC يمكن أن تؤدي إلى الهروب من صندوق رمل المتصفح وتسمح للمهاجمين بالحصول على صلاحيات SYSTEM، تم اكتشافها بواسطة Avast root@kitploit: kd !analyze -v تحليل خطأ الفحص PAGEFAULTINNONPAGEDARE...