Lucene search
+L
KitploitRecent

44557 matches found

Kitploit
Kitploit
added 2026/09/10 6:51 p.m.7 views

Aurora

Aurora RAT About Aurora RAT or Remote Administration Tool is written in Go. This project was started to learn networking in go and get myself started in the security field. Usage Compile and run Main.go then run the stub on whatever computer you wish to control. Stub The stub can be found here...

5.9AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/10 6:51 p.m.5 views

Crystal-Loaders

Crystal Loaders This repo contains a couple of PIC loaders and a custom sleepmask COFF for use with Cobalt Strike. They are basic implementations where custom evasion tradecraft must be weaved in using Crystal Palace. Usage 1. Download the Crystal Palace Release distrubtion. 2. Extract the tar...

5.9AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/10 6:51 p.m.7 views

Windows10Exploits

Windows10Exploits Download a single CVE The variable is only for example ; you can make your own SVN script for downloading a single folder = CVE = BR @nu11secur1ty $CVE = CVE-2018-0833 root@kitploit: svn checkout https://github.com/nu11secur1ty/Windows10Exploits/trunk/Undefined/$CVE Link table o...

6.3CVSS6.6AI score0.39897EPSS
SaveExploits11References1
Kitploit
Kitploit
added 2026/09/10 6:51 p.m.8 views

ricerca-tesi

thesis-research research resources for cve-2026-7228 Tools VirtualBox installation VirtualBox installation: https://www.virtualbox.org/wiki/Downloads Windows 11 ISO installation https://www.microsoft.com/it-it/software-download/windows11 Linux distro installation: lubuntu...

7.5CVSS7.3AI score0.00254EPSS
SaveExploits0
Kitploit
Kitploit
added 2026/09/10 6:51 p.m.13 views

USB Spy

USB SPY usb-spy is a USB Mass Storage traffic analyzer built around a WiFi or Ethernet-enabled microcontroller. The board exposes a disk image FAT or any filesystem as a fake USB Mass Storage device to a target system, while the actual storage data is provided by a remote server over WiFi or...

5.9AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/10 6:51 p.m.5 views

h0neytr4p

Ajustado para T-Pot Este fork de h0neytr4p fue revisado para T-Pot con las siguientes características: Añadir soporte Docker Dockerfile, docker-compose.yml Usar un solo archivo de registro en lugar de dos Registrar en JSON en lugar de CSV Enriquecer el archivo de registro JSON con información...

5.9AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/10 6:50 p.m.9 views

white-deface

Author WHITE-DEFACE This is a simple tool to automatically deface vulnerable websites. Tutorial video link at last of this page ⚠️ It uses WebDav vulnerability to exploit. This script sends a PUT requests to the websites given in the targets.txt file. Unauthenticated requests will be accepted and...

5.8AI score
SaveExploits0References2
Kitploit
Kitploit
added 2026/09/10 6:50 p.m.9 views

MsfMania

MsfMania MsfMania es un avanzado framework de ofuscación de payloads basado en Python, diseñado para evadir la detección de EDR/AV en sistemas Windows. Genera ejecutables altamente polimórficos mediante generación dinámica de código, cifrado multicapa RC4 y suplantación de metadatos binarios. ⚠️...

6.1AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/10 6:50 p.m.6 views

BLUESPAWN

BLUESPAWN Estado del Código...

6.1AI score
SaveExploits0References2
Kitploit
Kitploit
added 2026/09/10 6:50 p.m.7 views

sparta

SPARTA v2.0 http://sparta.secforce.com Autores: SECFORCE Antonio Quina @st3r30byt3 Leonidas Stavliotis @lstavliotis Descripción SPARTA es una aplicación GUI de Python que simplifica las pruebas de penetración de infraestructura de red ayudando al probador de penetración en la fase de escaneo y...

6AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/10 6:50 p.m.5 views

CVE-2024-24919

CVE-2024-24919 Exploit script for CVE-2024-24919. Shodan: "Server: Check Point SVN" "X-UA-Compatible: IE=EmulateIE7" FOFA: title="Check Point SSL Network Extender" I am not responsible for any misuse or damage caused by this script...

8.6CVSS7.7AI score0.99978EPSS
SaveExploits53
Kitploit
Kitploit
added 2026/09/10 6:50 p.m.7 views

CVE-2024-41640

Description AML Surety Eco up to version 3.5 is affected by an un-authenticated reflected cross-site scripting. The target web application handles error in a dedicated error page accessible without any authentication containing a URL parameter that is not sanitizing user input. The provided...

6.1CVSS6.2AI score0.00624EPSS
SaveExploits0
Kitploit
Kitploit
added 2026/09/10 6:50 p.m.6 views

CVE-2021-23017

CVE-2021-23017 CVE-2021-23017-PoC root@kitploit: python3 poc.py --target 172.1.16.100 --dnsserver 172.1.16.1 This software has been created purely for the purposes of academic research and for the development of effective defensive techniques, and is not intended to be used to attack systems exce...

7.7CVSS7.5AI score0.53461EPSS
SaveExploits10
Kitploit
Kitploit
added 2026/09/10 6:50 p.m.8 views

iOSForensic

iOSForensic iosForensic is a python tool to help in forensics analysis on iOS. It get files, logs, extract sqlite3 databases and uncompress .plist files in xml. Installation Simply clone this git repository and install dependencies. Dependencies Linux OpenSSH sshpass sqlite3 python = 2.6...

5.9AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/10 6:50 p.m.7 views

Exihibitor-RCE

Exhibitor-RCE Exhibitor Web Ui 1.7.1 RCE, CVE-2019-5029 Step 1: $ git clone https://github.com/thehunt1s0n/Exihibitor-RCE/ Step 2: $ cd Exihibitor-RCE/ Step 3 optional: You might need to edit json data payload in the script. To do that simply capture the request using burpsuite when comiting the...

10CVSS8.2AI score0.5715EPSS
SaveExploits2References1
Kitploit
Kitploit
added 2026/09/10 6:50 p.m.5 views

LiberationPlay-CVE-2025-24132-AirBourne-POC

LiberationPlay! CVE-2025-24132 AirBourne POC POC for CVE-2025-24132 AirBourne. Currently just triggers the overflow and causes a crash In an effort to try and gain root access to my car's head unit, I have researched and compiled everything I have learned about the Airplay Exploit CVE-2025-24132...

6.5CVSS7.5AI score0.03151EPSS
SaveExploits4References1
Kitploit
Kitploit
added 2026/09/10 6:50 p.m.6 views

CVE-2026-1337-AI-Coding-Assistant-Prompt-Injection-to-Sandbox-Escape

CVE-2026-1337 – AI Coding Assistant Prompt Injection to RCE 📖 Overview A prompt injection vulnerability in an AI-powered code review bot allows an attacker to inject arbitrary shell commands by manipulating the bot’s “fix” suggestion. The sanitizer uses a simple blacklist that is bypassed using...

5.4CVSS5.9AI score0.00232EPSS
SaveExploits4
Kitploit
Kitploit
added 2026/09/10 6:50 p.m.7 views

Solr-GRAB

Solr-GRAB Roba consultas de instancias de Apache Solr con o sin nombre de usuario y contraseña. DESCARGO DE RESPONSABILIDAD : Este proyecto debe usarse solo para pruebas autorizadas y fines educativos. Descarga root@kitploit: git clone https://github.com/GnosticPlayers/Solr-GRAB Uso Puedes buscar...

6AI score
SaveExploits0References2
Kitploit
Kitploit
added 2026/09/10 6:50 p.m.8 views

arkime

Arkime Arkime es un sistema de análisis de red y captura de paquetes de código abierto a gran escala. Arkime aumenta tu infraestructura de seguridad actual para almacenar e indexar el tráfico de red en formato PCAP estándar, proporcionando acceso indexado rápido. Se proporciona una interfaz web...

5.8AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/10 6:50 p.m.8 views

usernamer

usernamer usernamer is a penetration testing tool to generate a list of possible usernames/logins for determined name ex: John Doe Doeson for user enumeration or bruteforcing. This tool also supports text-files with one name per line as input. Features usernamer has a plugin structure that enable...

6AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/10 6:50 p.m.7 views

gost

GO Simple Tunnel Túnel seguro implementado en Go English README Características Escucha en múltiples puertos Se puede configurar proxy de reenvío, soporta reenvío multinivel cadena de proxies Soporta protocolos proxy estándar HTTP/HTTPS/HTTP2/SOCKS4A/SOCKS5 Soporte de defensa contra sondeo en pro...

6AI score
SaveExploits0References11
Kitploit
Kitploit
added 2026/09/10 6:50 p.m.5 views

tlsenum

tlsenum tlsenum is a command-line TLS enumeration tool that attempts to enumerate what TLS cipher suites a server supports and list them in order of priority. It works by sending out sending out TLS ClientHello messages and parsing the ServerHello responses from the server. tlsenum assumes that t...

6AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/10 6:50 p.m.5 views

M-Botnet

M-Botnet Disclaimer1: This tool is used for educational purposes ONLY! Disclaimer2: I wrote this a long time ago, so do not judge my coding skills :D A basic botnet project. It's a C2 that controls a worm. The worm can self-propagate to spread around the network using MS17-010 vuln. To defeat thi...

5.9AI score
SaveExploits0References2
Kitploit
Kitploit
added 2026/09/10 6:50 p.m.6 views

google_socks

This script is used to allow two sockets to communicate while relaying data through Google Drive. Check out this blog post for more details. Setup Process Install needed python modules see below Run "python2 ./googlesocks.py --setup" and follow the instructions Create a Google API Project Create...

6AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/10 6:50 p.m.6 views

young-domain-guard

🛡️ Young Domain Guard Una extensión de navegador que te alerta cuando visitas sitios web con nombres de dominio registrados recientemente. 🤔 ¿Por qué? Los dominios de phishing y estafa se crean y abandonan constantemente: la mayoría vive menos de un mes antes de ser eliminados y reemplazados. Las...

5.7AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/10 6:49 p.m.4 views

Hipcam-RTSP-Format-Validation-Vulnerability

Hipcam RealServer/V1.0 RTSP Format Validation Vulnerability Proof-of-Concept | CVE-2023-50685 Proof-of-Concept for RTSP Service Format Validation Vulnerability in Hipcam RealServer/V1.0. Description This POC exploits a format validation vulnerability in the Real Time Streaming Protocol RTSP servi...

7.5CVSS6AI score0.01219EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/10 6:49 p.m.4 views

oni-framework

Oni-Framework Oni framework is a platform for embedded device software development. It is used in order to remotely debug/add functionality to an embedded device. As of right now, the main concepts are a fully modular plugin system, with local and remote rpc. This was designed to run at ring-0...

6AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/10 6:49 p.m.6 views

appsec-agent

AppSec Agent AI-powered security agents for code review, PR scanning, threat modeling, fix generation, and more. You can use AppSec Agent in three ways:...

5.9AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/10 6:49 p.m.8 views

keeper

keeper Keeper es un almacén criptográfico de secretos para Go. Cifra cargas útiles de bytes arbitrarios en reposo usando derivación de clave Argon2id y cifrado autenticado XChaCha20-Poly1305 predeterminado, y las almacena en una base de datos bbolt integrada. Se distribuye como tres cosas que...

6AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/10 6:49 p.m.9 views

BackupOperatorToolkit

BackupOperatorToolkit Uso El BackupOperatorToolkit BOT tiene 4 modos diferentes que permiten escalar de Operador de Respaldo a Administrador de Dominio. Ejecute "runas.exe /netonly /user:domain.dk\backupoperator powershell.exe" antes de ejecutar la herramienta. Modo Servicio El modo SERVICIO crea...

6AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/10 6:49 p.m.8 views

killcast

Manipula dispositivos Chromecast en tu Red Disponible en Inspiración - Miles de dispositivos Google Chromecast secuestrados para promocionar a PewDiePie Esta herramienta es una Prueba de Concepto y solo tiene fines de Investigación. killcast muestra cómo los dispositivos Chromecast pueden ser...

5.9AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/10 6:49 p.m.7 views

Grafiki

Grafiki Grafiki es un proyecto de Django sobre Sysmon y gráficos, por ahora. En mi opinión, EventViewer, Elastic e incluso Kibana no son lo suficientemente gráficos. Las amenazas actuales son complicadas y si los atacantes piensan en gráficos, los defensores también deben hacerlo. Esto es una...

5.9AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/10 6:49 p.m.3 views

android-forensics

android-forensics AFLogical OSE: Open source Android Forensics app and framework The Open Source Edition has been released for use by non-law enforcement personnel, Android aficionados, and forensics gurus alike. It allows an examiner to extract CallLog Calls, Contacts Phones, MMS messages,...

6AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/10 6:49 p.m.11 views

DoHC2

⚠️ NOTE: This tool is no longer under active maintenance. DoHC2 DoHC2 allows the ExternalC2 library from Ryan Hanson https://github.com/ryhanson/ExternalC2 to be leveraged for command and control C2 via DNS over HTTPS DoH. This is built for the popular Adversary Simulation and Red Team Operations...

5.8AI score
SaveExploits0References2
Kitploit
Kitploit
added 2026/09/10 6:49 p.m.4 views

msspray

Note: This repository is no longer being developed msspray.py MSSpray is used to conduct password spray attacks against Azure AD as well as validate the implementation of MFA on Azure and Office 365 endpoints root@kitploit: ------------------------------------------------------------ | ;--- Check...

5.9AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/10 6:49 p.m.4 views

CVE-2026-43499-root-KernelSU

CVE-2026-43499-root-KernelSU A local privilege escalation adaptation based on kernel vulnerability CVE-2026-43499, with embedded KernelSU integrated. It compiles to produce preload.so; upon successful exploitation, KernelSU will be started in late-load mode jailbreak mode. Supports generating...

7.8CVSS6.9AI score0.00789EPSS
SaveExploits83References4
Kitploit
Kitploit
added 2026/09/10 6:49 p.m.6 views

slides

slides A collection of slides. 2025 A tale of challenging MTE: Rooting Google Pixel with kernel MTE enabled in one shot Conference: POC 2025 2024 Simple bug but not easy exploit: Rooting Android devices in one shot Conference: Cansecwest 2024 Almost same with POC 2023, except for MTE 2023 Simple...

6.1AI score
SaveExploits0References14
Kitploit
Kitploit
added 2026/09/10 6:49 p.m.5 views

yara-rules

yara-rules Collection of YARA signatures from recent malware research Ruleset Dacls Trojan Rule: DaclsLinux.yara Rule: DaclsWindows.yara Reference: https://blog.netlab.360.com/dacls-the-dual-platform-rat/ APT32 KerrDown Rule: APT32KerrDown.yara Reference:...

10CVSS7.2AI score0.98326EPSS
SaveExploits4References23
Kitploit
Kitploit
added 2026/09/10 6:49 p.m.10 views

cirro

Cirro es una plataforma extensible de investigación en seguridad que permite a investigadores y testers de penetración recolectar, analizar y visualizar entornos en la nube y relaciones de identidad a través de bases de datos de grafos. Construida con una arquitectura modular, Cirro puede...

6AI score
SaveExploits0References4
Kitploit
Kitploit
added 2026/09/10 6:49 p.m.4 views

bad_io_uring

Bad IOuring https://www.blackhat.com/us-23/briefings/schedule/index.htmlbad-iouring-a-new-era-of-rooting-for-android-32243 Build the exploit Make sure the Android NDK is installed. For pixel 6, root@kitploit: make pixel For samsung s22, root@kitploit: make s22 How to use the exploit The exploit i...

5.8AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/10 6:49 p.m.12 views

cnappgoat

CNAPPgoat CNAPPgoat es una herramienta de despliegue de entornos multinube diseñados intencionalmente vulnerables – específicamente creada para facilitar áreas de práctica para defensores y pentesters. Su función principal es desplegar entornos intencionalmente vulnerables en múltiples proveedore...

5.8AI score
SaveExploits0References3
Kitploit
Kitploit
added 2026/09/10 6:49 p.m.7 views

ADB-Toolkit

!made-with-bashhttps://img.shields.io/badge/-Made%20with%20Bash-1f425f.svg?logo=image/png;base64,iVBORw0KGgoAAAANSUhEUgAAABgAAAAYCAYAAADgdz34AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZSBJbWFnZVJlYWR5ccllPAAAAyZpVFh0WE1MOmNvbS5hZG9iZS54bXAAAAAAADw/eHBhY2tldCBiZWdpbj0i77u/IiBpZD0iVzVNME1wQ2VoaUh6cmVTek5UY3prYzlk...

5.8AI score
SaveExploits0References2
Kitploit
Kitploit
added 2026/09/10 6:48 p.m.8 views

Certitude

Certitude is a Python package to perform supervised malicious URL classification using a joint set of lexicographic and certificate features. All COSSAS projects are hosted onGitLab with a push mirror to GitHub. For issues/contributions check CONTRIBUTING.md Getting Started Certitude requires...

6AI score
SaveExploits0References4
Kitploit
Kitploit
added 2026/09/10 6:48 p.m.10 views

CVE-2024-0044

CVE-2024-0044- CVE-2024-0044: a "run-as any app" high-severity vulnerability affecting Android versions 12 and 13 CVE-2024-0044 Exploit Script This Bash script demonstrates how to exploit CVE-2024-0044. For educational and testing purposes only. Prerequisites ADB Android Debug Bridge installed an...

7.8CVSS7.6AI score0.0146EPSS
SaveExploits17
Kitploit
Kitploit
added 2026/09/10 6:48 p.m.6 views

vulnerability_advisories

Onapsis Security Advisories This repository contains Security Advisories for vulnerabilities reported by the Onapsis Research Labs team Advisories Summary The following table is a summary of the vulnerabilties described in this repository:...

5.9AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/10 6:48 p.m.5 views

eden

Eden Eden loader es un PoC UDRL para Cobalt Strike construido con Crystal Palace que combina la técnica de page streaming de Raphael Mudge con una puerta de llamada modular actualmente una versión PIC del BOF de llamada Draugr de Sleepmask-VS. El objetivo de Eden loader es: Demostrar el poder de...

6AI score
SaveExploits0References3
Kitploit
Kitploit
added 2026/09/10 6:48 p.m.9 views

url-cheatsheet-data

URL validation bypass cheat sheet data This is the data that powers the PortSwigger URL validation bypass cheat sheet. We have put this data on Github so the community can contribute vectors via pull requests. Contributing To contribute, please create a pull request with changes to the JSON data...

6AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/10 6:48 p.m.7 views

Cobra

Cobra 该项目设计已无法实现当前白盒扫描要求,已不在维护,仅做研究使用,请勿在生产环境使用 Introduction(介绍) Cobra是一款源代码安全审计 工具,支持检测多种开发语言源代码中的大部分显著 的安全问题和漏洞。 Features(特点) Multi-language Supported(支持多种开发语言) 支持PHP、Java等开发语言,并支持数十种类型文件。...

5.9AI score
SaveExploits0References3
Kitploit
Kitploit
added 2026/09/10 6:48 p.m.4 views

burp-rest-api

burp-rest-api ⚠️ WARNING: This project is no longer actively maintained. While the repository will remain available for reference, no further updates, bug fixes, or support will be provided. Overview A REST/JSON API to the Burp Suite security tool. Since the first commit back in 2016, burp-rest-ap...

6AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/10 6:48 p.m.2 views

IoT-Security-Verification-Standard-ISVS

IoT Security Verification Standard ISVS ⚠️ Release Candidate —1.0.0-RC2. This is a release candidate under community review and may change before the final release. It is not yet a finalized standard. Please review and share feedback via GitHub Discussions. The OWASP Internet of Things Security...

5.9AI score
SaveExploits0References14
Total number of security vulnerabilities44557