iotmap

IoTMap IoTMap es una herramienta que modela redes IoT utilizando uno o múltiples protocolos simultáneamente. Este es un trabajo en progreso, como parte de una tesis doctoral sobre seguridad de Internet de las Cosas. Este repositorio se actualiza regularmente a medida que se obtienen nuevos...

strelka-ui

Releases | Pull Requests | Issues !Pull...

AirmonGUI

AirmonGUI A local web interface for the aircrack-ng wireless toolkit. Screenshots · Quick start · Features · Roadmap · Contributing !WARNING Use this only on networks you own or have written permission to test. Scanning, deauthenticating, or capturing traffic from networks you don't control is...

ForceAdmin

💪 ForceAdmin 💪 ForceAdmin es un creador de payloads en C que genera infinitos pop-ups de UAC hasta que el usuario permite ejecutar el programa. Los comandos ingresados se ejecutan a través de PowerShell llamando a cmd.exe y deben usar sintaxis de batch. Este ataque fuerza a ejecutar como...

Active-Directory-Exploitation-Cheat-Sheet

Hoja de referencia de explotación de Active Directory Esta hoja de referencia contiene métodos comunes de enumeración y ataque para Active Directory de Windows. ℹ️ Este repositorio fue creado por Nikos Katsiopis y Nikos Vourdas. Esta hoja de referencia está inspirada en el repositorio...

CVE-2024-23897

CVE-2024-23897 Nuclei Template For Exploit CVE-2024-23897 This template serves as a crucial warning to all users if the CVE-2024-23897 local file vulnerability is detected within your system, it is imperative to take. immediate action and patch your systems without delay. This vulnerability poses...

CVE-2024-38063

CVE-2024-38063 - Windows TCP/IP Remote Code Execution Vulnerability. The occurrence of BSOD can lead to RCE while my code only causes BSOD. I am continuously analyzing the patch and testing to lead to the occurrence of RCE in the target system. Star History Overview CVE-2024-38063 is a critical...

CVE-2017-1000117

CVE-2017-1000117 usage root@kitploit: $ git clone --recursive https://github.com/ieee0824/CVE-2017-1000117.git when git has problem, ifconfig is executed...

vphone-cli

🇰🇷한국어 | 🇯🇵日本語 | 🇨🇳中文 | 🇬🇧English vphone-cli Boot a virtual iPhone via Apple's Virtualization.framework using PCC research VM infrastructure. Prerequisites Host: Apple Silicon macOS 15+ Sequoia Xcode + iOS SDK cross-compiles the guest daemon SIP/AMFI relaxation to allow private PV=3 entitlements...

chromium-exploit-dev

Chromium Exploit Development Toolkit A toolkit for weaponizing Chromium vulnerabilities into reliable, cross-platform, full-chain exploits. Overview This project provides a set of powerful helper scripts but requires you to bring your own vulnerabilities. You are responsible for implementing...

krbrelayx

Krbrelayx - Kerberos relaying and unconstrained delegation abuse toolkit Toolkit for abusing Kerberos. Requires impacket, ldap3 and dnspython to function. It is recommended to install impacket from git directly to have the latest version available. More info about this toolkit available in my blo...

Egyscan

EgyScan V3.4 "Ultra": Tu Fortaleza Digital de Invencibilidad 🏰 ¡Saludos, Guardianes del Reino Digital! 🛡️ Prepárate para embarcarte en un viaje extraordinario con EgyScan V3.0 , el centinela definitivo que transforma tus sitios web en fortalezas inexpugnables contra las implacables ciberamenazas...

BruteShark

About What it can do Download Examples Usage BruteSharkDesktop BruteSharkCli Modules Architecture Contributing About BruteShark is a Network Forensic Analysis Tool NFAT that performs deep processing and inspection of network traffic mainly PCAP files, but it also capable of directly live capturin...

pe-sieve

Intro PE-sieve is a tool that helps to detect malware running on the system, as well as to collect the potentially malicious material for further analysis. Recognizes and dumps variety of implants within the scanned process: replaced/injected PEs, shellcodes, hooks, and other in-memory patches...

pe-sieve

Introducción PE-sieve es una herramienta que ayuda a detectar malware en ejecución en el sistema, así como a recolectar el material potencialmente malicioso para su posterior análisis. Reconoce y vuelca una variedad de implantes dentro del proceso escaneado: PE reemplazados/inyectados, shellcodes...

pulse-exploit

pulsexploit Automated script for Pulse Secure SSL VPN exploit CVE-2019-11510 using hosts retrieved from Shodan API. You must have a Shodan account to use this script. Click here if you don't have Shodan account. Installation 1. Install dependencies. root@kitploit: CentOS & Fedora yum install git...

git-hound

🐾 GitHound A pattern-matching, patch-attacking, batch-catching secret snatcher. Overview GitHound hunts down exposed API keys, secrets, and credentials across GitHub by pairing GitHub dorks with pattern matching, contextual detection, and commit-history analysis. Input a GitHub dork into GitHound...

git-hound

🐾 GitHound Un cazador de secretos que combina coincidencia de patrones, ataque de parches y captura por lotes. Resumen GitHound rastrea claves API, secretos y credenciales expuestos en todo GitHub combinando dorks de GitHub con coincidencia de patrones, detección contextual y análisis del histori...

log4j-docker

Log4j Vulnerability - Proof-of-concept This repo has the docker and k8s YAMLs that are needed to recreate the log4j vulnerability seel below. Follow this blog to understand how all of this is tied together. Build Docker Images In case you need to customize the docker images root@kitploit: cd...

reconswarm

ReconSwarm ReconSwarm is a modular reconnaissance automation framework designed for distributed security testing. It provisions cloud infrastructure, executes parallel reconnaissance pipelines, and collects results with minimal configuration overhead. ReconSwarm is suitable for bug bounty hunters...