27575 matches found
LsassReflectDumping
LsassReflectDumping This tool leverages the Process Forking technique using the RtlCreateProcessReflection API to clone the lsass.exe process. Once the clone is created, it utilizes MINIDUMPCALLBACKINFORMATION callbacks to generate a memory dump of the cloned process. Steps Getting the handle of...
ChromeKatz
ChromeKatz ChromeKatz is a solution for dumping sensitive information from memory of Chromium based browsers. As for now, ChromeKatz consists of three projects: 1. CookieKatz - The cookie dumper 2. CredentialKatz - Deprecated.. for now 3. ElevationKatz - Get the decryption key from the elevation...
CVE-2026-11102-OAuth2-Implicit-Grant-Fragment-Hijacking
CVE-2026-11102 – OAuth2 Implicit Grant Fragment Hijacking Program Code Node.js + Exploit root@kitploit: // oauthserver.js - OAuth2 provider issuing tokens in fragment const express = require'express'; const app = express; app.get'/authorize', req, res = const redirectUri = req.query.redirecturi;...
Moniker-Link-Lab-Setup
Moniker Link Lab Setup - CVE-2024-21413 🎯 Project Overview Hands-on penetration testing lab demonstrating CVE-2024-21413 moniker link exploitation for NTLM credential theft. This project documents the complete attack chain from setup to credential compromise, including real-world challenges and...
CVE-2024-42009-PoC
CVE-2024-42009 PoC: Email Capture Listener & XSS Exploit in Roundcube Webmail Overview This repository contains a proof-of-concept PoC exploit for CVE-2024-42009 a stored Cross-Site Scripting XSS vulnerability in Roundcube Webmail version 1.6.7 and other several versions. The exploit demonstrates...
CVE-2024-21413-Vulnerabilidad-Outlook-LAB
CVE-2024-21413 – Outlook LAB Vulnerability Vulnerability Description CVE-2024-21413 is a critical vulnerability discovered in Microsoft Outlook that allows a remote attacker to execute malicious links via a carefully crafted email. This exploit uses the file:// protocol to redirect victims to...
Ustealer
Ustealer Robo para Ubuntu, roba información de Ubuntu en la PC local ideal con llave USB Requisitos G++ sudo apt-get install g++ libsqlite3 sudo apt-get install libsqlite3-dev Compilación Ve a la carpeta Ustealer/ y ejecuta el makefile make Uso ./ustealer...
e013
e013 A little VBScript that steal Wifi passwords from Windows Into the file WifiName.txt you can see the password of every saved wifi available on every windows computer that support VBscript ⚠️ Don't modify the script with notepad, use text editor like GNU Emacs, Vim, Atom, Vscode, Sublime text...
BlackNET
BlackNET 😈 Free advanced and modern Windows botnet with a nice and secure PHP panel developed using VB.NET. About BlackNET 🤓 Free advanced and modern Windows botnet with a nice and secure PHP panel built using VB.NET. this botnet controller comes with a lot of features and the most secure panel f...
CVE-2025-22381
CVE-2025-22381: Host Header Injection in Aggie Detailed analysis and Proof-of-Concept for CVE-2025-22381, a Host Header Injection vulnerability discovered in the Aggie Open-Source Project. Vulnerability Overview+ CVE ID: CVE-2025-22381 Published: October 2025 MITRE assignment Disclosed publicly:...
CVE-2023-24055
Disclaimer This script is for educational and demonstration purposes only. The author does not endorse or condone the use of this script for any criminal or malicious activities and it should only be used where explicitly allowed with proper permission. This script should be used with caution, as...
gethspoit
Gethsploit gethsploit es un conjunto de scripts en python para enumerar pares de ethereum que tengan puertos RPC habilitados. Requisitos previos Asegúrate de tener geth instalado, preferiblemente la última versión, que incluye algunas correcciones relacionadas con la conexión a otras instancias...
REALITY_SMASHER
REALITYSMASHER vRealize RCE + Privesc CVE-2021-21975, CVE-2021-21983, CVE-0DAY-????? "As easy to stop as it is to comprehend." What is it? "Reality Smasher" is an exploit for vRealize leveraging the security issues addressed in VMSA-2021-0004 CVE-2021-21975, CVE-2021-21983 in addition to a...
siemframework
SIEMS FRAMEWORK Framework de ataque modular MultiSIEM en Python3 Por ElevenPaths https://www.elevenpaths.com/ Uso: python3 ./siemsframework.py INTRODUCCIÓN Los SIEM son herramientas defensivas cada vez más utilizadas en el ámbito de la ciberseguridad, especialmente por grandes empresas y compañía...
VindicateTool
Vindicate -brightgreen Un kit de detección de suplantación LLMNR/NBNS/mDNS para administradores de redes ¿Qué es Vindicate? Vindicate es una herramienta que detecta la suplantación de servicios de nombres, utilizada a menudo por atacantes de redes informáticas para robar credenciales por ejemplo,...
sshLooter
NO UTILICES ESTO Hay una versión en C que es mucho mejor sshLooterC sshLooter Script para robar contraseñas de ssh. Instalación root@kitploit: git clone https://github.com/mthbernardes/sshLooter.git cd sshLooter Configuración root@kitploit: Edita el script en install.sh, y añade tu api de bot de...
CVE-2023-23397
A Simple PoC in PowerShell for CVE-2023-23397 CVE-2023-23397 is a vulnerability in MS Outlook that allows an attacker to potentially exfil user authentication details. The vulnerability relates to the the ability for an attacker to specify a UNC path in the "ReminderSoundFile" property within an...
lockphish
Lockphish v2.0 Lockphish es la primera herramienta 07/04/2020 para ataques de phishing en la pantalla de bloqueo, diseñada para obtener credenciales de Windows, PIN de Android y Passcode de iPhone utilizando un enlace https. Tutorial de LockPhish: https://www.kalilinux.in/2020/05/lockphish.html...
thingsboard
Open-source IoT platform for data collection, processing, visualization, and device management. 💡 Get started • 🌐 Website • 📚 Documentation • 📔 Blog • 🔗 LinkedIn 🚀 Installation options Install ThingsBoard on-premises or use ThingsBoard Cloud. 💡 Getting started with ThingsBoard Check out our Getti...