brutemap

Brutemap .. image:: https://brutemap-dev.github.io/static/brutemap-logo.jpg :target: https://brutemap-dev.github.io :alt: Brutemap 标志 |Build Status| |Python| |License| .. |Build Status| image:: https://travis-ci.org/brutemap-dev/brutemap.svg?branch=master :target:...

brutemap

Brutemap .. image:: https://brutemap-dev.github.io/static/brutemap-logo.jpg :target: https://brutemap-dev.github.io :alt: Brutemap Logo |Build Status| |Python| |License| .. |Build Status| image:: https://travis-ci.org/brutemap-dev/brutemap.svg?branch=master :target:...

r0ak

r0ak r0ak is a Windows command-line utility that enables you to easily read, write, and execute kernel-mode code with some limitations from the command prompt, without requiring anything else other than Administrator privileges. Quick Peek root@kitploit: r0ak v1.0.0 -- Ring 0 Army Knife...

docker-socket-risk-demos

docker-socket-risk-demos Companion repo for the video: Stop Mounting docker.sock — Run Trivy Without Giving Away Root Access — inspired by CVE-2026-33634 https://www.youtube.com/watch?v=xLTYzfPY3xI This repo contains the sample web app and Claude Code prompt used in the video to demonstrate: 1. W...

CTFCrackTools

CTFCrackTools X La nueva generación de herramientas CTF basada en nodos English | 简体中文 De V4 a X — no solo una actualización de versión Descargar | Características | Nota del autor Renovación de marca CTFCrackTools X es la versión completamente nueva de CTFCrackTools. La "X" representa: eXtreme —...

CVE-2026-22241

CVE-2026-22241 : Open eClass Remote Code Execution RCE This exploit uses CVE-2026-22241 automates the login, ZIP creation, upload process and providing webshell directly on the server and removes it automatically once the exploit is completed. Description An Unrestricted File Upload vulnerability...

GeoSentinel

🌍 GeoSentinel GeoSentinel is a geospatial monitoring platform that tracks global movement in real time. It aggregates ship and flight routes, live coordinates, and geodata into a unified system, providing clear geographic and geopolitical awareness for analysis, visualization, and decision-making...

metabigor

Metabigor - 无需 API 密钥的 OSINT 强力工具 Metabigor 是什么？ Metabigor 无需你注册任何 API 密钥，即可测绘目标的基础设施。网络范围、证书、关联域名、暴露的端口、CDN 厂商和代码泄露——全部来自免费数据源，并且所有结果都可以相互通过管道衔接。 功能特性 网络发现 - 从 ASN、组织、域名或 IP 查找 IP 范围（CIDR） 证书透明日志 - 通过 crt.sh 发现子域名 IP 富化 - 通过 Shodan InternetDB 获取端口、主机名和 CVE（免费，无需密钥） GitHub 代码搜索 - 通过 grep.app...

metabigor

Metabigor - OSINT power without API key hassle What is Metabigor? Metabigor maps a target's infrastructure without asking you to register for a single API key. Network ranges, certificates, related domains, exposed ports, CDN vendors, and code leaks - all from free sources, all pipeable into each...

CVE-2021-1675

PrintNightmare Local Privilege Escalation PoC src/nightmare.cpp: source code to exploit CVE-2021-1675 and gain system access by installing a malicious dll src/payload-dll.cpp: source code for dll with malicious shellcode in entry function !!Only use against servers on which you have permission to...

CVE-2025-61319

CVE-2025-61319: Stored XSS in ReNgine 2. After scan completion, open the Vulnerabilities tab in ReNgine and view results. 3. The payload executes in the admin's browser context. Affected versions ReNgine = 2.2.0 Remediation Sanitize and escape user-supplied input before rendering scan results...

cpanel-cve-2026-41940-ioc

CVE-2026-41940 IOC Scanner Detection script for the cPanel/WHM authentication bypass CVE-2026-41940 affecting all cPanel versions after 11.40. This is a rewrite of the upstream cPanel detection script with fixes for false positives and added log correlation. What it does Scans...

CVE-2025-54957

Dolby Unified Decoder CVE-2025-54957 POC When a file is processed by Dolby's DDPlus Unified Decoder, an out of bounds write is possible when the evolution data is processed. The decoder writes evolution information into a large, heap-like contiguous buffer contained by a larger struct, and the...

sdnpwn

sdnpwn 是什么？ sdnpwn 是一个用于测试软件定义网络（SDN）安全性的工具包和框架。更多信息请查看这篇文章：https://sdnpwn.net/2017/08/22/what-is-sdnpwn/ 安装 首先使用 git 下载 sdnpwn root@kitploit: git clone https://github.com/smythtech/sdnpwn 使 sdnpwn.py 和 setup.sh 脚本可执行 root@kitploit: sudo chmod +x sdnpwn.py sudo chmod +x setup.sh setup.sh 脚本负责安装...

sdnpwn

What is sdnpwn? sdnpwn is a toolkit and framework for testing the security of Software-Defined Networks SDNs. For more information check out this article: https://sdnpwn.net/2017/08/22/what-is-sdnpwn/ Installation First download sdnpwn using git root@kitploit: git clone...

Dirty-Frag-Analysis

Dirty Frag Deep Technical Analysis CVE-2026-43284 xfrm-ESP / CVE-2026-43500 RxRPC Linux kernel local privilege escalation vulnerability — PoC reverse engineering · Shellcode breakdown · Patch principles · Detection script Vulnerability Overview Dirty Frag exploits two independent vulnerabilities,...

sparrow-wifi

Sparrow-WiFi Sparrow-WiFi is a 2.4 GHz and 5 GHz WiFi and Bluetooth spectral awareness tool for Linux. It integrates WiFi scanning, Bluetooth Low Energy and Classic discovery, software-defined radio spectrum analysis HackRF, Ubertooth, GPS tracking, FAA RemoteID drone detection, drone/rover-mount...

sparrow-wifi

Sparrow-WiFi Sparrow-WiFi 是一个用于 Linux 的 2.4 GHz 和 5 GHz WiFi 及蓝牙频谱感知工具。它集成了 WiFi 扫描、蓝牙低功耗（BLE）和经典蓝牙发现、软件定义无线电频谱分析（HackRF、Ubertooth）、GPS 追踪、FAA RemoteID 无人机检测、无人机/漫游车远程操作，以及将 ECS 8.17 索引到 Elasticsearch 或 OpenSearch，统一在一个平台上。完全使用 Python 3 编写。 该项目包含四个可独立或协同工作的组件： 组件| 界面| 用途 ---|---|--- Sparrow-WiFi|...

CVE-2026-31431

CVE-2026-31431 - Copy Fail PoC Educational Proof of Concept for CVE-2026-31431 , also known as Copy Fail , a Linux kernel local privilege escalation vulnerability involving the AFALG / algifaead cryptographic interface. !WARNING This repository is provided strictly for educational, defensive, and...

CVE-2026-29053

This is a rework of the Repo by rootxran for this same CVE - https://github.com/rootxran/CVE-2026-29053 During testing against specific Ghost CMS environments, the original theme payload triggered a Fatal Handlebars Error. The CMS failed to activate the malicious theme because it referenced a...