pyt

.. image:: https://travis-ci.org/python-security/pyt.svg?branch=master :target: https://travis-ci.org/python-security/pyt .. image:: https://readthedocs.org/projects/pyt/badge/?version=latest :target: http://pyt.readthedocs.io/en/latest/?badge=latest .. image::...

cuckooautoinstall

About CuckooAutoinstall Cuckoo Sandbox . auto install script What is Cuckoo Sandbox? Cuckoo Sandbox is a malware analysis system. What does that mean? It means that you can throw any suspicious file at it and get a report with details about the file's behavior inside an isolated environment. We...

simplify

Simplify Generic Android Deobfuscator Simplify virtually executes an app to understand its behavior and then tries to optimize the code so that it behaves identically but is easier for a human to understand. Each optimization type is simple and generic, so it doesn't matter what the specific type...

Pentest-Windows

Pentest-Windows11 v3.2 The First Windows Penetration Testing Environment on Mac M Chips 中文文档 | English README 📖 Project Overview 📝 System Introduction This environment aims to provide a ready-to-use Windows penetration testing environment. Reposting is welcome. Please indicate the original author...

Mini_httpd-CVE-2018-18778

minihttpd Arbitrary File Read Vulnerability CVE-2018-18778 Minihttpd is a miniature HTTP server that can maintain a certain level of performance about 90% of Apache while occupying minimal system resources. Therefore, it is widely used as an embedded server in various IoT devices routers, switche...

libvhdi

libvhdi is a library to access the Virtual Hard Disk VHD image format. Project information: Status: alpha Licence: LGPL-3.0-or-later Read supported formats: Virtual Hard Disk version 1 VHD Virtual Hard Disk version 2 VHDX Supported image types: Fixed-size hard disk image Dynamic-size or sparse ha...

neko

n.eko Bienvenido a Neko, un navegador virtual autogestionado que se ejecuta en Docker y utiliza tecnología WebRTC. Neko es una herramienta potente que te permite ejecutar un navegador completamente funcional en un entorno virtual , brindándote la capacidad de acceder a Internet de forma segura y...

incarcero

Incarcero: The swiss army knife for malware analysis Malware analysis is like defusing bombs. The objective is to disassemble and understand a program that was built to do harm, which, is often obfuscated ie: packed to make the analysis more complicated. Incarcero is a tool that creates Virtual...

Honeyd

Honeyd 1.6d Copyright c 2002 - 2007 Niels Provos [email protected] About Honeyd: Honeyd is a small daemon that creates virtual hosts on a network. The hosts can be configured to run arbitrary services, and their TCP personality can be adapted so that they appear to be running certain version...

pythia

Introduction / tl;dr This tool scans an executable file for Delphi data, including RTTI and virtual function tables. It outputs a JSON file with information about identified classes and functions, which can be used for additional analysis, for example: Generate a class tree. Generate names &...

Androl4b

Androl4b AndroL4b is an android security virtual machine based on ubuntu-mate includes the collection of latest framework, tutorials and labs from different security geeks and researchers for reverse engineering and malware analysis. What's new in Androl4b v.3? Tools are updated New tools and lab...

darling

Darling Darling es un entorno de ejecución para aplicaciones macOS. Tenga en cuenta que la mayoría de las aplicaciones GUI no funcionarán por el momento. Descarga Hay paquetes para algunas distribuciones disponibles para descargar en releases. Instrucciones de compilación Para las instrucciones d...

dot

the Deepfake Offensive Toolkit dot aka Deepfake Offensive Toolkit makes real-time, controllable deepfakes ready for virtual cameras injection. dot is created for performing penetration testing against e.g. identity verification and video conferencing systems, for the use by security analysts, Red...

CVE-2024-7593

CVE-2024-7593 Detection How does this detection method work? This template matches on the following versions, if there is a match then the host is considered vulnerable: root@kitploit: - "22.2" - "22.3" - "22.3R2" - "22.5R1" - "22.6R1" - "22.7R1" To prevent producing any FPs it also matches on th...

CVE-2024-34312

CVE-2024-34312 Description Virtual Programming Lab for Moodle up to v4.2.3 was discovered to contain a Cross-Site Scripting XSS vulnerability via its IDE component. Additional Details The browser connects directly to a websocket running on the jail server. Through the websocket, the jail server c...

CVE-2021-21985

CVE-2021-21985 The vSphere Client HTML5 contains a remote code execution vulnerability due to lack of input validation in the Virtual SAN Health Check plug-in which is enabled by default in vCenter Server. VMware has evaluated the severity of this issue to be in the Critical severity range with a...

ica2tcp

About Ica2Tcp Ica2Tcp is a tool developed in C allowing to proxy any TCP connection inside a Citrix ICA connection. It is to Citrix what ssh -D is to SSH. Additional information can be found here: https://www.sstic.org/2022/presentation/ica2tcp/ Disclaimer This tool was developped as an internshi...

VirtualLockSensorLPE

VirtualLockSensorLPE Description Local privilege escalation PoC exploit for CVE-2025-0886 that targets Elliptic Virtual Lock Sensor version 3.1.60531.2 running on Windows, which is installed by default on certain Lenovo laptop models. Allows execution of a payload in the context of SYSTEM from a...

vbrute

vbrute Virtual hosts brute forcer. Specify file containing domains and file containing IPs and vbrute will attempt to connect to IP with specific domain. Usage: root@kitploit: vbrute --domain-file --ip-file -d, --domain-file Specify file containing a list of domains you want to test -i, --ip-file...

Guide-and-theoretical-code-for-CVE-2023-35674

Guide-and-theoretical-code-for-CVE-2023-35674 Guide and theoretical code for CVE-2023-35674 Because android is out of my skill league please use this as a high overview from my pov on how i would exploit this cve. the code snippets are just skeletons , please help : So first of all u can't exploi...