214972 matches found
syncord
Syncord root@kitploit: $$\ $$ | $$$$$$$\ $$\ $$\ $$$$$$$\ $$$$$$$\ $$$$$$\ $$$$$$\ $$$$$$$ | $$ |$$ | $$ |$$ $$\ $$ |$$ $$\ $$ $$\ $$ $$ | $$$$$$\ $$ | $$ |$$ | $$ |$$ / $$ / $$ |$$ | |$$ / $$ | $$\ $$ | $$ |$$ | $$ |$$ | $$ | $$ |$$ | $$ | $$ | $$$$$$$ |$$$$$$$ |$$ | $$ |$$$$$$$\ $$$$$$ |$$...
device-modeling-language
Device Modeling Language The Device Modeling Language DML is a domain-specific language for writing fast functional or transaction-level device models for virtual platforms. DML provides high-level abstractions suitable for functional device models, including constructs like register banks,...
CVE-2024-48990-Automatic-Exploit
CVE-2024-48990 PYTHONPATH Hijack - Privilege Escalation Exploit This tool automates the exploitation of a privilege escalation vulnerability in needrestart version 3.7, identified as CVE-2024-48990. It achieves root execution by leveraging the insecure use of the PYTHONPATH environment variable...
deREferencing
deREferencing deReferencing is an IDA Pro plugin that implements new registers and stack views. Adds dereferenced pointers, colors and other useful information, similar to some GDB plugins e.g: PEDA, GEF, pwndbg, etc. Supports following architectures: x86, x86-64, ARM, ARM64, MIPS32 and MIPS64...
ProcDump-for-Linux
ProcDump ProcDump is a Linux and Mac reimagining of the classic ProcDump tool from the Sysinternals suite of tools for Windows. ProcDump provides a convenient way for Linux and Mac developers to create core dumps of their application based on performance triggers. ProcDump for Linux and Mac is pa...
DSP
DockerSecurityPlayground Docker Security Playground is an application that allows you to: Create network and network security scenarios , in order to understand network protocols, rules, and security issues by installing DSP in your PC. Learn penetration testing techniques by simulating...
openvpn-install
openvpn-install OpenVPN installer for Debian, Ubuntu, Fedora, openSUSE, CentOS, Amazon Linux, Arch Linux, Oracle Linux, Rocky Linux and AlmaLinux. This script will let you setup and manage your own secure VPN server in just a few seconds. What is this? This script is meant to be run on your own...
credactor
Credactor Find the secret. Fix it. Commit clean. Secret scanners are good at sounding the alarm and not much help putting it out. They hand you a list of leaked credentials and leave the cleanup to you. Credactor closes the loop: it finds a hardcoded secret and rewrites it in place, so a leak goe...
mass3
Quickly enumerate through a pre-compiled list of AWS S3 buckets using DNS instead of HTTP with a list of DNS resolvers and multi-threading. Warning: Be aware that this is really shitty golang code. I wrote it without any prior knowledge of Go Lang but it seems to do the job. Feel free to contribu...
waldo
Waldo is a lightweight and multithreaded directory and subdomain bruteforcer implemented in Python. It can be used to locate hidden web resources and undiscovered subdomains of the specified target. Key Features Quickly and easily generate a list of all subdomains of target domain Discover hidden...
wtf
what the fuzz A distributed, code-coverage guided, cross-platform snapshot-based fuzzer designed for attacking user and or kernel-mode targets running on Microsoft Windows and Linux user-mode experimental!. Overview what the fuzz or wtf is a distributed, code-coverage guided, customizable,...
dockerized-android
Dockerized Android Dockerized Android is a container-based framework that allows to execute and Android Emulator inside Docker and control it through a browser. This project has been developed in order to provide a starting point for integrating mobile security components into Cyber Ranges but it...
conjur
Conjur Maintainability Test Coverage Conjur provides secrets management and application identity for modern infrastructure: Machine Authorization Markup Language "MAML" , a role-based access policy language to define system components & their roles, privileges and metadata A REST web service to:...
fwknop
fwknop - Single Packet Authorization Introduction fwknop implements an authorization scheme known as Single Packet Authorization SPA for strong service concealment. SPA requires only a single packet which is encrypted, non-replayable, and authenticated via an HMAC in order to communicate desired...
CVE_2023_20198_Detector
CVE202320198Detector This script can identify if Cisco IOS XE devices are vulnerable to CVE-2023-20198. The script takes as input a csv file with all the device IP addresses that you want to check. By default the script looks for a file named "devices.csv"; you can name the file something differe...
CVE-2026-48732-poc
CVE-2026-48732: Warp Remote SSH cwd Command Injection PoC Description This repository contains a Proof of Concept PoC for CVE-2026-48732 , a high severity OS Command Injection vulnerability in Warp legacy SSH background command handling. Affected Warp versions used the remote working directory cw...
h2csmuggler
h2cSmuggler Description h2cSmuggler smuggles HTTP traffic past insecure edge-server proxypass configurations by establishing HTTP/2 cleartext h2c communications with h2c-compatible back-end servers, allowing a bypass of proxy rules and access controls. See my detailed write-up below for: Technica...
CVE-2020-9934
CVE-2020-9934 This Proof of Concept is a simple Swift program that will give itself and Terminal every kTCCService entitlement pulled from tccd and then do four things: Create a file named "" in the TCC-protected directory Read the data from said file from within the TCC-protected directory List...
uncover
Quickly discover exposed hosts on the internet using multiple search engines. Features • Installation • Usage • Configuration • Running Uncover • Join Discord uncover is a go wrapper using APIs of well known search engines to quickly discover exposed hosts on the internet. It is built with...