tmux

Welcome to tmux! tmux is a terminal multiplexer: it enables a number of terminals to be created, accessed, and controlled from a single screen. tmux may be detached from a screen and continue running in the background, then later reattached. This release runs on OpenBSD, FreeBSD, NetBSD, Linux,...

CVE-2019-9053

Fixed it bcz of https://tryhackme.com/room/easyctf : enjoy Critical Issues Fixed 1. Python 2 to Python 3 Compatibility Old: print "string" New: print"string" Changed all print statements to print functions Updated string formatting to use f-strings 2. Deprecated optparse Library Old: import...

CVE-2021-21341

CVE-2021-21341 XStream DoS XStream Official Announcement CVE-2021-21341 Vulnerability CVE-2021-21341: XStream can cause a Denial of Service. Affected Versions All versions until and including version 1.4.15 are affected, if using the version out of the box. No user is affected, who followed the...

CVE-2020-13457

CVE-2020-13457 CVE-2020-13457 Timeline ================ 2020-05-04: Discovered 2020-05-11: Retest issues on researcher's ecosystem 2020-05-20: PoC exploit on windows 2012 x64 tested 2020-05-25: Vendor notification 2020-05-27: PoC exploit on windows 10 x64 tested 2020-06-01: Awaiting vendor...

CVE-2022-21449-vuln-test

CVE-2022-21449 Vulnerability tester Introduction There's a new CVE-2022-21449 that had bug in ECDSA signature verification. It's one of the algorithms used with JWT for example. Citing the blog post If you have deployed Java 15, Java 16, Java 17, or Java 18 in production then you should stop what...

CVE-2024-4577-checker

CVE-2024-4577 Vulnerability Checker The CVE-2024-4577 Vulnerability Checker is a Bash script designed to scan multiple domains for the CVE-2024-4577 vulnerability in PHP-CGI. This tool allows security researchers and system administrators to quickly assess whether their systems or a list of domai...

CVE-2020-14321

CVE-2020-14321 Course enrolments allowed privilege escalation from teacher role into manager role to RCE Maybe someone needs Python script, therefore, I have written it to exploit. How to use this PoC: root@kitploit: How to use this PoC script Case 1. If you have vaid credentials: python3...

PF_RING

PFRING™ Introduction PFRING™ is a Linux kernel module and user-space framework that allows you to process packets at high-rates while providing you a consistent API for packet processing applications. Who needs PFRING™? Basically everyone who has to handle many packets per second. The term ‘many’...

tailscale

Tailscale https://tailscale.com Redes privadas WireGuard® simplificadas Resumen Este repositorio contiene la mayor parte del código abierto de Tailscale. En particular, incluye el demonio tailscaled y la herramienta CLI tailscale. El demonio tailscaled se ejecuta en Linux, Windows, macOS y, en...

frameworks_base_AOSP10_r33_CVE-2021-0319

This repository does not have a README...

day08-CISCO-fmc-sim

Day08 — Cisco FMC-style Management RCE Simulation This is a minimal, educational simulation that demonstrates the impact class of a management-plane parsing RCE inspired by CVE-2025-20265. It intentionally executes commands from crafted input for local learning only. Quickstart root@kitploit: chm...

CVE-2025-39913

CVE-2025-39913 - Linux Kernel eBPF SOCKMAP UAF Author: Byte Reaper My platform :https://www.bytrep.com/ Description This repository contains a technical proof-of-concept for CVE-2025-39913, a vulnerability in the Linux kernel's tcpbpfsendverdict function. When bpfmsgcorkbytes fails to allocate...

CVE-2023-33817---SQL-Injection-found-in-HotelDruid-3.0.5

CVE-2023-33817 - SQL Injection found in HotelDruid V3.0.5 HotelDruid v3.0.5 are vulnerable to SQL injection. An attacker could issue arbitrary sql command to retrieve data in databases or even execute remote code execution on target database system This is my second repo. Don't beat me if i didn'...

CVE-2021-39172-RCE

CVE-2021-39172 Cachet 2.4: Code Execution via Laravel Configuration Injection blog post about the vulnerability https://blog.sonarsource.com/cachet-code-execution-via-laravel-configuration-injection/ you can use this for ctf or just for learning have fun and May God bless you all...

drupal-openai-provider-ssrf-cve-2026-13233

Drupal OpenAI Provider — SSRF / local file read via response URL CVE-2026-13233 Untrusted upstream: the provider that fetched the URL its response told it to. Drupal OpenAI Provider aiprovideropenai · SSRF CWE-918 · CVE-2026-13233 · SA-CONTRIB-2026-053 Status: Coordinated disclosure complete...

CVE-2025-70849-Podinfo

CVE-2025-70849: XSS Almacenado en Podinfo Resumen Se identificó una vulnerabilidad de seguridad CWE-79 en Podinfo , una aplicación web para demostrar microservicios en Kubernetes. La funcionalidad /store permite a usuarios no autenticados cargar contenido arbitrario en HTML/JS, lo que provoca XSS...

llm-circuit-finder

llm-circuit-finder I replicated Ng's RYS method and found that duplicating 3 specific layers in Qwen2.5-32B boosts reasoning by 17% and duplicating layers 12-14 in Devstral-24B improves logical deduction from 0.22→0.76 on BBH — no training, no weight changes, just routing hidden states through th...

LiquidSnake

Liquid Snake Liquid Snake is a program aimed at performing lateral movement against Windows systems without touching the disk. The tool relies on WMI Event Subscription in order to execute a .NET assembly in memory, the .NET assembly will listen for a shellcode on a named pipe and then execute it...

Magento-CVE-2019-7139-SQLi-PoC

CVE-2019-7139 PoC: Magento SQL Injection This repository contains a proof-of-concept PoC exploit for CVE-2019-7139 PRODSECBUG-2198, an unauthenticated SQL injection vulnerability in Magento, discovered by Charles Fol of Ambionics Security. Vulnerability Details CVE ID : CVE-2019-7139 Affected...

CobraAudit

CobraAudit Bug bounty audit framework — three focused modules for common vulnerability classes. root@kitploit: ╔═╗╔═╗╔╗ ╦═╗╔═╗ ╔═╗╦ ╦╔╦╗╦╔╦╗ ║ ║ ║╠╩╗╠╦╝╠═╣ ╠═╣║ ║ ║║║ ║ ╚═╝╚═╝╚═╝╩╚═╩ ╩ ╩ ╩╚═╝═╩╝╩ ╩ Modules...

kexkill

The kexkill utility connects to an SSH server and sends a stream of KEXINIT packets. This may cause certain versions of OpenSSH to consume significant amounts of memory. See CVE-2016-8858 for additional details. The latest version of the source code is available from Github:...

MegaQuagga_Pentesting_Report

MegaQuagga Pentesting Report This repository contains a full web application penetration test performed against a WordPress environment. The assessment includes vulnerability discovery, exploitation, post-exploitation, and documentation of real-world attack impact. 🔍 Project Overview Target:...

awesome-reverse-engineering-and-malware-analysis

Awesome Reverse Engineering & Malware Analysis A map of reverse engineering and malware analysis that's actually been read. Every link was opened and checked before it went in, and it gets pulled the moment it rots - no dead pages, no one-word notes, no "great resource!" filler. unpacked covers a...

dcipher

dcipher Decipher hashes using online rainbow & lookup table attack services. Install root@kitploit: ❯❯❯ npm install dcipher Usage root@kitploit: const dcipher = require'dcipher'; dcipher'21232f297a57a5a743894a0e4a801fc3'.thenplaintext = console.logplaintext; //= 'admin' ;...

CVE-Exploit-Research-Development

🔐 SSH Exploit Tool Educational Use Only 📌 Description This tool demonstrates exploitation of: CVE-2008-0166 CVE-2008-1657 It connects to vulnerable SSH services and provides: Persistent interactive shell Command execution logging Automatic PDF & DOCX report generation ⚙️ Features Persistent shell...

DecryptTeamViewer

DecryptTeamViewer Uses CVE-2019-18988 to enumerate and decrypt TeamViewer credentials from Windows registry. Vulnerability research done by Nic Losby. Blogpost detailing the vulnerability: https://whynotsecurity.com/blog/teamviewer/ Usage .\DecryptTeamViewer.exe...

boopkit

root@kitploit: ================================================================ ██████╗ ██████╗ ██████╗ ██████╗ ██╗ ██╗██╗████████╗ ██╔══██╗██╔═══██╗██╔═══██╗██╔══██╗██║ ██╔╝██║╚══██╔══╝ ██████╔╝██║ ██║██║ ██║██████╔╝█████╔╝ ██║ ██║ ██╔══██╗██║ ██║██║ ██║██╔═══╝ ██╔═██╗ ██║ ██║...

phoneinfoga

Framework de recopilación de información para números de teléfono Documentación • Documentación de la API • Artículo de blog relacionado Acerca de PhoneInfoga es una de las herramientas más avanzadas para escanear números de teléfono internacionales. Permite primero recopilar información básica...

log4stdin

log4stdin — log4shell injection for anything with stdout This repository contains a Java application intentionally vulnerable to CVE-2021-44228, colloquially known as log4shell. log4stdin is quite literally nothing more than an stdin-reader, input of which is fed into a vulnerable log4j instance...

cve-2015-5602

CVE-2015-5602 This is part of Cved: a tool to manage vulnerable docker containers. Cved: https://github.com/git-rep-src/cved Image source: https://github.com/cved-sources/cve-2015-5602 Image author: https://github.com/t0kx/privesc-CVE-2015-5602...

Mysql-Readfile

Introduction This project mainly uses load data local infile to obtain any files of the attacker's host Windows platform, and the files to be visited can be listed in file.txt This will be very meaningful when we can control the connection configuration of Mysql in some cases. Project usage Step...

pidrila

PIDRILA Current Release: v0.1.0 2020.11.08 Overview PIDRILA : P ython I nteractive D eepweb-oriented R apid I ntelligent L ink A nalyzer is really fast async web path scanner prototype developed by BrightSearch team for all ethical netstalkers. Installation & Usage root@kitploit: git clone...

pidrila

PIDRILA Versión actual: v0.1.0 2020.11.08 Resumen PIDRILA : P ython I nteractive D eepweb-oriented R apid I ntelligent L ink A nalyzer es un prototipo de escáner de rutas web asíncrono realmente rápido desarrollado por el equipo de BrightSearch para todos los rastreadores éticos de la red...

cerbrutus

Cerbrutus Modular brute force tool written in Python, for very fast password spraying SSH, and FTP and in the near future other network services. COMING SOON: SMB, HTTPs POST, HTTPs GET, HTTP BASIC AUTH Thanks to @0dayctf, Rondons, Enigma, and 001 for testing and contributing Installation:...

ExtensionSpoofer

ExtensionSpoofer ExtensionSpoofer is a Visual Basic .NET desktop app that demonstrates how file names and icons can be visually manipulated on Windows while the underlying executable file type remains unchanged. It uses the Unicode Right-to-Left Override character U+202E to reverse displayed...

power-pwn

Maintained by: Secure AI Agents Everywhere. Overview Power Pwn is an offensive and defensive security toolset for Microsoft 365 Power Platform and AI services. Key Features, among others: 💾 PowerDump : Comprehensive tenant scanning and data collection 🚪 BackDoor : Deploy backdoor flows for...

age

-man%20page-lightgrey%3E age is a simple, modern and secure file encryption tool, format, and Go library. It features small explicit keys, post-quantum support, no config options, and UNIX-style composability. root@kitploit: $ age-keygen -o key.txt Public key:...

Apache-couchdb-CVE-2017-12635

CouchDB Vertical Privilege Escalation Vulnerability CVE-2017-12635 Apache CouchDB is an open-source database that focuses on ease of use and being a "fully web-embracing database." It is a NoSQL database that uses JSON as the storage format, JavaScript as the query language, and MapReduce and HTT...

CVE-2022-33980-Apache-Commons-Configuration-RCE

CVE-2022-33980-Apache-Commons-Configuration-RCE...

OverlayFS-LPE-Exploit

OverlayFS-LPE-Exploit OverlayFS Local Privilege Escalation CVE-2021-3493 Project Overview This repository contains documentation and exploit code for a Local Privilege Escalation LPE vulnerability found in the Ubuntu Linux kernel. This was tested in a TryHackMe lab environment. Lab Highlights...

unicorn-bios

unicorn-bios About Basic BIOS emulator/debugger for Unicorn Engine. Written to debug the XEOS Operating System boot sequence. Usage: root@kitploit: Usage: unicorn-bios OPTIONS BOOTIMG Options: --help / -h: Displays help. --memory / -m: The amount of memory to allocate for the virtual machine in...

-CVE-2019-9053

-CVE-2019-9053 CMS Simple CVE Recode Script Python 3...

djangohunter

Djangohunter Tool designed to help identify incorrectly configured Django applications that are exposing sensitive information. https://www.reddit.com/r/django/comments/87qcf4/28165thousanddjangorunningserversareexposed/ https://twitter.com/6ix7ine/status/978598496658960384?lang=en Usage...

soc-analyst-hub

🛡️ SOC Analyst Hub — Tier 1 Toolkit A free, fully offline interactive toolkit for Tier 1 SOC analysts — covering incident response, alert triage, threat hunting, and analyst onboarding. Zero dependencies. Single HTML file. Open in any browser. 🚀 Live Demo → 📦 What's Inside ⚡ Incident Response...

AV-EDR-Killer

AV/EDR Killer https://github.com/user-attachments/assets/1eda3340-2af2-4136-b74e-be7a3f4b3924 This project demonstartes how a legit, and signed driver can be weponized to gain kernel level access. 🚨 The vulnerable driver: wsftprm.sys , signed by TPZ SOLUCOES DIGITAIS LTDA, and previously exposed ...

CVE-2026-25769

CVE-2026-25769 what is CVE-2026-25769 ? CVE-2026-25769 is a critical Remote Code Execution RCE vulnerability in Wazuh, the open-source security platform used for threat prevention, detection, and response. what is wazuh ? Wazuh is a free and open-source security platform used for threat preventio...

RecoverPy

RecoverPy Scan raw partitions and recover data by inspecting disk blocks directly. 🎬 Demo 🔎 Overview When a file is deleted, its metadata disappears first. The underlying disk blocks often remain intact until they are reused. RecoverPy scans raw partition data directly and searches for byte...

dod-blue-team-network-lab

DoD Blue Team Network Security & Hardening Lab Executive Summary High fidelity defensive security lab simulating a DoD aligned enterprise network. This project demonstrates structured network segmentation, system hardening, centralized telemetry ingestion, detection engineering, adversary...

reaver-wps-fork-t6x

Resumen Reaver implementa un ataque de fuerza bruta contra los PINs del registrador de Wifi Protected Setup WPS para recuperar contraseñas WPA/WPA2 , como se describe en Fuerza bruta a Wi-Fi Protected Setup: cuando un mal diseño se encuentra con una mala implementación. por Stefan Viehböck. Reave...

reaver-wps-fork-t6x

Overview Reaver implements a brute force attack against Wifi Protected Setup WPS registrar PINs in order to recover WPA/WPA2 passphrases , as described in Brute forcing Wi-Fi Protected Setup When poor design meets poor implementation. by Stefan Viehböck. Reaver has been designed to be a robust an...