ComfyEngine

ComfyEngine Qt-based memory scanner / watchlist playground inspired by Cheat Engine but built natively for Linux and tuned for my workflow: clean docks, pointer graphs, fast patching, and zero fear of losing context when you bounce between scanner, scripts, and notes. ComfyEngine gives you a clea...

certstreamcatcher

Certstreamcatcher Catching phishing by observing certificate transparency logs. This tool is based on regex with effective standards for detecting phishing sites in real time using certstream and can also detect punycode IDNA attacks such as https://www.ṁyetḣerwallet.com. Phishing Phishing...

peniot

PENIOT: Penetration Testing Tool for IoT Table of Contents Project Description What is PENIOT? Why is PENIOT required? What does PENIOT provide? Build Instructions Documentation Testing Contributors Developer's Note Project Poster Project Description What is PENIOT? PENIOT is a penetration testin...

CVE-2019-11043

CVE-2019-11043 php-fpm+Nginx RCE 0x01 instalar phuip-fpizdam-Mac go get github.com/neex/phuip-fpizdam go install github.com/neex/phuip-fpizdam root@kitploit: ale@Pentest /go go get github.com/neex/phuip-fpizdam ale@Pentest /go go install github.com/neex/phuip-fpizdam ale@Pentest /go ls bin src...

CVE-2026-30862

CVE-2026-30862 PoC - Privilege Escalation in Appsmith Proof-of-Concept for Privilege Escalation in Appsmith via Stored XSS Disclosure: Originally reported by me via GHSA-5hw4-whxv-6794 ⚠️ Authorized pentesting/research use only. Vulnerability Information Field| Value ---|--- CVE ID| CVE-2026-30862...

openwisp-controller

openwisp-controller .. image:: https://github.com/openwisp/openwisp-controller/actions/workflows/ci.yml/badge.svg :target: https://github.com/openwisp/openwisp-controller/actions/workflows/ci.yml :alt: CI build status .. image:: https://coveralls.io/repos/openwisp/openwisp-controller/badge.svg...

mtr

WHAT IS MTR? mtr combines the functionality of the 'traceroute' and 'ping' programs in a single network diagnostic tool. As mtr starts, it investigates the network connection between the host mtr runs on and a user-specified destination host. It sends probes to the destination with successively...

toothpicker

ToothPicker ToothPicker is an in-process, coverage-guided fuzzer for iOS. It was developed to specifically targets iOS's Bluetooth daemon bluetoothd and to analyze various Bluetooth protocols on iOS. As it is built using FRIDA, it can be adapted to target any platform that runs FRIDA. This...

toothpicker

ToothPicker ToothPicker es un fuzzer en proceso, guiado por cobertura para iOS. Se desarrolló para atacar específicamente el demonio de Bluetooth de iOS bluetoothd y analizar varios protocolos de Bluetooth en iOS. Como está construido usando FRIDA, se puede adaptar para atacar cualquier plataform...

ida-pro-mcp

IDA Pro MCP Simple MCP Server to allow vibe reversing in IDA Pro. https://github.com/user-attachments/assets/6ebeaa92-a9db-43fa-b756-eececce2aca0 The binaries and prompt for the video are available in the mcp-reversing-dataset repository. Prerequisites Python 3.11 or higher Use idapyswitch to...

authelia

!OpenSSF Best...

CVE-2021-3129-Script

CVE-2021-3129 Laravel = v8.4.2 调试模式：远程代码执行（CVE-2021-3129） 使用： root@kitploit: python3 exp.py http://127.0.0.1:8888 Try to use Laravel/RCE1 for exploitation. +exploit: Laravel/RCE1 Result: Try to use Laravel/RCE2 for exploitation. +exploit: Laravel/RCE2 Result: Try to use Laravel/RCE3 for...

fprobe

FProbe FProbe - Fast HTTP Probe Installation root@kitploit: GO111MODULE=on go get -u github.com/theblackturtle/fprobe Features Take a list of domains/subdomains and probe for working http/https server. Optimize RAM and CPU in runtime. Support special ports for each domain Verbose in JSON format...

pbscan

SUMMARY polarbearscan is an attempt to do faster and more efficient banner grabbing and port scanning. It combines two different ideas which hopefully will make it somewhat worthy of your attention and time. The first of these ideas is to use stateless SYN scanning using cryptographically protect...

xsssniper

XSSSNIPER xsssniper is an handy xss discovery tool with mass scanning functionalities. Usage: root@kitploit: Usage: xsssniper.py options Options: -h, --help show this help message and exit -u URL, --url=URL target URL --post try a post request to target url --data=POSTDATA post data to use...

xsssniper

XSSSNIPER xsssniper es una práctica herramienta de descubrimiento de XSS con funcionalidades de escaneo masivo. Uso: root@kitploit: Usage: xsssniper.py options Options: -h, --help show this help message and exit -u URL, --url=URL target URL --post try a post request to target url --data=POSTDATA...

TheLastBundleMismatch

Mysterious patch Let's start this time with the patch that appeared as fix for CVE-2023-45777 in Android Security Bulletin: root@kitploit: diff --git a/services/core/java/com/android/server/accounts/AccountManagerService.java...

ResourcePoison

Fix for this issue has appeared as CVE-2025-22441: bulletin patch follow up Passing ApplicationInfo around ApplicationInfo is structure defining various information about installed app, most notably path to apk file from which resources and code are loaded Usually it is passed from system to...

ReparcelBug2

CVE-2021-0928, writeToParcel/createFromParcel serialization mismatch in android.hardware.camera2.params.OutputConfiguration This is exploit using that vulnerability for privilege escalation from installed Android app into Android Settings app or any other app installed app could send to declared ...

OrganizerTransaction

This is PoC for CVE-2021-39749, which allows starting activities of other apps on Android 12L Beta regardless of their permission and exported settings In Android 12L TaskFragmentOrganizer access intentionally no longer requires MANAGEACTIVITYTASKS permission Using app provided here requires...