CVE-2023-36874_BOF

CVE-2023-36874 Windows Error Reporting LPE BOF Introduction This is a mature and operational CobaltStrike BOF implementation of Filip Dragovic's @filipdragovic CVE-2023-36874 Windows Error Reporting LPE exploit. He did the heavy lifting in terms of creating a working exploit by reversing the...

CVE-2026-0603 — Updated!

CVE-2026-0603 Hibernate ORM Injection / Second-Order SQL Injection ★ CVE-2026-0603 Hibernate SQL Injection PoC ★ https://github.com/user-attachments/assets/2e7c3a89-e26f-48cd-af0b-8b82d32ce71f Overview CVE-2026-0603 is a Second-Order SQL Injection vulnerability in Hibernate ORM , a widely used Ja...

traitor

Traitor Automatically exploit low-hanging fruit to pop a root shell. Linux privilege escalation made easy! Traitor packages up a bunch of methods to exploit local misconfigurations and vulnerabilities in order to pop a root shell: Nearly all of GTFOBins Writeable docker.sock CVE-2022-0847 Dirty...

CVE-2026-31431-poc

Copy Fail Command PoC Wrapper A small modified proof-of-concept wrapper for Copy Fail / CVE-2026-31431 that allows passing a custom command from the terminal instead of always launching an interactive root shell so it can be ran in an none interactive environment such as a web shell. This project...

lmg

Linux Memory Grabber A script for dumping Linux memory and creating VolatilityTM profiles. Hal Pomeranz [email protected], 2020-02-01 THANKS! "If I have seen further it is by standing on the shoulders of giants." Issac Newton There are a lot of people who deserve thanks for making this simpl...

lmg

Linux Memory Grabber 用于转储 Linux 内存并创建 VolatilityTM 配置文件的脚本。 Hal Pomeranz [email protected], 2020-02-01 致谢 “如果说我看得比别人更远，那是因为我站在巨人的肩膀上。” —— 艾萨克·牛顿 很多人应该为这个简单小工具的实现而获得感谢： —— 微软的优秀团队，感谢他们提供了 AVML —— Joe Sylve，感谢他在 LiME 上的工作 —— 整个 VolatilityTM 开发团队的持续付出。 我尤其要感谢 Andrew Case，他在我开发工具的过程中回答了许多烦人的问题。 ...

sshhipot

Version 2 is under development. Please switch to the v2 branch, build, and run with -h. SSHHiPot High-interaction SSH honeypot ok, it's really a logging ssh proxy. Still more or less a work-in-progress. Feel free to go install this repository if you'd like to try it. Run it with -h to see more...

xortool

xortool.py A tool to do some xor analysis: guess the key length based on count of equal chars guess the key base on knowledge of most frequent char Notice: xortool is now only running on Python 3. The old Python 2 version is accessible at the py2 branch. The pip package has been updated...

tiktok-scraper

TikTok 爬虫与下载器 从 TikTok 抓取并下载有用信息。 无需登录或密码。 这不是官方 API 支持等。这只是一个使用 TikTok Web API 抓取媒体的爬虫。 特性 根据用户名、话题标签或趋势抓取视频帖子 下载并将媒体保存为 ZIP 压缩包 创建包含帖子信息的 JSON/CSV 文件 注意： 如果需要下载所有视频帖子，则将 number 设置为 0 帖子 - JSON/CSV 输出： root@kitploit: id: '6748606789551410438', text:'TEXT', createTime: '1571282470', authorId:...

autoresponder

AutoResponder Carbon Black Response IR tool for hunting threats in an environment What is it? AutoResponder is a tool aimed to help people to carry out their Incident Response tasks WITH the help of Carbon Black Response's awesome capabilities and WITHOUT much bothering IT/System/Network Teams Wh...

manuka

Manuka Description Manuka is an Open-source intelligence OSINT honeypot that monitors reconnaissance attempts by threat actors and generates actionable intelligence for Blue Teamers. It creates a simulated environment consisting of staged OSINT sources, such as social media profiles and leaked...

gustave

c Airbus 2021, sduverger GUSTAVE - Embedded OS kernel fuzzer What is it ? GUSTAVE is a fuzzing platform for embedded OS kernels. It is based on QEMU and AFL and all of its forkserver siblings. It allows to fuzz OS kernels like simple applications. Thanks to QEMU, it is multi-platform. One can see...

ThePhish

ThePhish ThePhish 是一款基于 TheHive、Cortex 和 MISP 的自动化钓鱼邮件分析工具。它是一个用 Python 3 编写、基于 Flask 的 Web 应用程序，能够自动完成从邮件头与正文中提取可观测指标，到最终（多数情况下）得出判定结果的完整分析流程。此外，它还允许分析人员在必要时介入分析过程，获取关于正在分析的邮件的更多详细信息。为了与 TheHive 和 Cortex 交互，它使用了 TheHive4py 和 Cortex4py，它们分别是访问 TheHive 和 Cortex 提供的 REST API 的 Python 客户端。 目录 概述...

CVE-2023-21674

First in-the-wild 0-day of 2023 🔥 CVE-2023-21674 is a vulnerability in Windows Advanced Local Procedure Call ALPC that could lead to a browser sandbox escape and allow attackers to gain SYSTEM privileges discovered by Avast root@kitploit: kd !analyze -v Bugcheck Analysis PAGEFAULTINNONPAGEDAREA 5...

btlejack

BtleJack: a new Bluetooth Low Energy swiss-army knife Btlejack provides everything you need to sniff, jam and hijack Bluetooth Low Energy devices. It relies on one or more BBC Micro:Bit . devices running a dedicated firmware. You may also want to use anAdafruit's Bluefruit LE sniffer or a nRF5182...

webscan

webscan webscan is a browser-based network IP scanner and local IP detector. It detects IPs bound to the user/victim by listening on an RTP data channel via WebRTC and looping back to the port across any live IPs, as well as discovering all live IP addresses on valid subnets by monitoring for...

AMBER-ICI v5.0.0

AMBER ICI v5 AMBER ICI AMBER Investigative Command Interface is a local-first browser interface for investigative and analytical workflows powered by a local Ollama server. It includes: A single-model Analyst Console and multi-model Parallel execution A user-defined agent chain driven from the ma...

printix-CVE-2022-25090

CVE-2022-25090 Instead of printing your homework as a user, print your system security policies as SYSTEM for fun. Explore the docs » View Demo . Report Bug . Request Feature Table Of Contents About the Project Built With Getting Started Prerequisites Installation Usage Roadmap Contributing Licen...

pastego

pastego 使用GO和语法表达式（PEG）抓取/解析Pastebin。 pastego.png 安装 $ go get -u github.com/notdodo/pastego 用法 搜索关键词区分大小写 pastego -s "password,keygen,PASSWORD" 你可以使用布尔运算符来减少误报 pastego -s "quake && earthquake, password && php || sudo || Linux || ''" 此命令将搜索包含 quake 但不包含 earthquake 的粘贴，以及包含 password 但不包含...

pastego

pastego Scrape/Parse Pastebin using GO and grammar expression PEG. pastego.png Installation $ go get -u github.com/notdodo/pastego Usage Search keywords are case sensitive pastego -s "password,keygen,PASSWORD" You can use boolean operators to reduce false positive pastego -s "quake && earthquake,...