Lucene search
+L
KitploitRecent

44506 matches found

Kitploit
Kitploit
added 2026/09/10 1:02 p.m.9 views

netbox

The cornerstone of every automated network NetBox Community | NetBox Cloud | NetBox Enterprise...

5.8AI score
SaveExploits0References5
Kitploit
Kitploit
added 2026/09/10 1:01 p.m.10 views

PasswordsSniffer

PasswordsSniffer Description This module sniff username and password of unprotected protocols. Requirements This package require: python3 python3 Standard Library Scapy Installation root@kitploit: pip install PasswordsSniffer Usages Command line root@kitploit: PasswordsSniffer python3 -m...

6AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/10 1:01 p.m.4 views

CrabLoader

CrabLoader A Cobalt Strike User-Defined Reflective Loader written entirely in Rust. I just wanted to figure out how hard it would be to build this. Turns out it's not that hard. I might add a sleep obfuscation feature at some point. Right now, it is just a basic loader without any special feature...

6AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/10 1:01 p.m.7 views

regenerator2000

Regenerator 2000 A modern, interactive 6502 disassembler for Commodore 8-bit machines. A modern take on Regenerator. 🕹️ Manual Analysis — A fast, keyboard-centric TUI for hands-on exploration: navigate code, define data, label subroutines, add comments, and iteratively refine your disassembly. 🤖...

5.9AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/10 1:01 p.m.33 views

Pwdlyser

Pwdlyser New repo for Public release Pwdlyser P assw ord -Analyser is a multi-functional analysis tool created to provide security professionals and organisations aiming to improve their security posture with the ability to easily review and analyse passwords from Active Directory domain accounts...

5.6AI score
SaveExploits0References9
Kitploit
Kitploit
added 2026/09/10 1:01 p.m.3 views

jdam

jdam - Structure-aware JSON fuzzing jdam is a Radamsa inspired tool for fuzzing arbitrary JSON objects in a structure-aware fashion, which ensures that fuzzing results will always be valid JSON. Many existing fuzzing tools will blindly alter the input and will often cause the result to be invalid...

6AI score
SaveExploits0References6
Kitploit
Kitploit
added 2026/09/10 1:01 p.m.7 views

DarkWidow

DarkWidow A Customizable Dropper Tool targeting Windows. Honourable Mentions: 1. BlackHat Asia, 2024 - Call For Tools 2. BlackHat USA, 2024 - Call For Tools 3. BlackHat SecTor, 2024 - Call For Tools 4. BlackHat Europe, 2024 - Call For Tools 5. Wild West Hacking Fest 2024 - Arsenal Thanks a lot to...

5.9AI score
SaveExploits0References10
Kitploit
Kitploit
added 2026/09/10 1:01 p.m.107 views

maldev-for-dummies

Malware Development for Dummies In the age of EDR, red team operators cannot get away with using pre-compiled payloads anymore. As such, malware development is becoming a vital skill for any operator. Getting started with maldev may seem daunting, but is actually very easy. This workshop will sho...

5.7AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/10 1:01 p.m.7 views

Manalyze

Manalyze Introduction Manalyze is a static analysis tool for PE files that you can use to conduct primary assessment on an executable or set of executables. It collects weak signals that could indicate malicious behavior and displays information that can help a subsequent manual analysis. If you...

5.9AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/10 1:00 p.m.6 views

HELK

HELK The Hunting ELK or simply the HELK is one of the first open source hunt platforms with advanced analytics capabilities such as SQL declarative language, graphing, structured streaming, and even machine learning via Jupyter notebooks and Apache Spark over an ELK stack. This project was...

5.9AI score
SaveExploits0References6
Kitploit
Kitploit
added 2026/09/10 1:00 p.m.43 views

sslyze

SSLyze SSLyze is a fast and powerful SSL/TLS scanning tool and Python library. SSLyze can analyze the SSL/TLS configuration of a server by connecting to it, in order to ensure that it uses strong encryption settings certificate, cipher suites, elliptic curves, etc., and that it is not vulnerable ...

5.6AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/10 1:00 p.m.3 views

CVE-2026-41096-Attack-Surface

CVE-2026-41096 Real World Attack Surface Attack surface in the real-world environment of CVE-2026-41096 Links Detailed analytical article Author: Two Seven One Three...

9.8CVSS8.2AI score0.01932EPSS
SaveExploits4
Kitploit
Kitploit
added 2026/09/10 1:00 p.m.9 views

exifLooter

Exif Looter Blog Post » · Report Bug · Request Feature Table of Contents 1. Getting Started Installation 2. Usage Analyze specific image Analyze specific directory Pipe with other tools Remove metadata from Images Get Open Street Map URL 3. Reports 4. Roadmap 5. Contributing 6. License 7. Contact...

5.8AI score
SaveExploits0References8
Kitploit
Kitploit
added 2026/09/10 1:00 p.m.12 views

tirreno

tirreno tirreno is a security framework. tirreno tir.ˈrɛ.no helps understand, monitor, and protect your product from threats, fraud, and abuse. While classic cybersecurity focuses on infrastructure and network perimeter, most breaches occur through compromised accounts and application logic abuse...

5.9AI score
SaveExploits0References11
Kitploit
Kitploit
added 2026/09/10 12:59 p.m.7 views

lxancephisher

A beginners friendly, Automated phishing tool with 30+ templates. Disclaimer Any actions and or activities related tolxancephisher is solely your responsibility. The misuse of this toolkit can result in criminal charges brought against the persons in question. The contributors will not be held...

5.9AI score
SaveExploits0References2
Kitploit
Kitploit
added 2026/09/10 12:59 p.m.6 views

kernagent

root@kitploit: | | | | | |/ / \ '| ' \ / |/ |/ \ ' | | | / | | | | | | | | | / | | | | ||\|| || ||,|, ||| ||| |/ 🔍 kernagent Turn binaries into conversations — deterministic, auditable, offline-capable. kernagent converts a binary into a portable static snapshot and lets an LLM or your...

5.8AI score
SaveExploits0References3
Kitploit
Kitploit
added 2026/09/10 12:59 p.m.7 views

kuri

Kuri 🌰 Install root@kitploit: curl -fsSL https://kuri.trilok.ai/download | sh macOS arm64/x8664 and Linux x8664/arm64. Single binary, no runtime deps. Direct downloads: macOS arm64 · macOS x8664 · ·...

5.9AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/10 12:59 p.m.10 views

gOSINT

gOSINT Codacy Badge OSINT Swiss Army Knife in Go Take a look at the develop branch for more updates. Introduction gOSINT is a multiplatform OSINT Swiss army knife in Golang. If you want, feel free to contribute and/or leave a feedback! Like my project? Please consider donation : What gOSINT can d...

6.1AI score
SaveExploits0References13
Kitploit
Kitploit
added 2026/09/10 12:59 p.m.9 views

dumper

About Dumper This is a CLI utility for creating backups databases of various types with flexible connection and storage settings. Opportunities: Multiple database systems can be managed. Support PostgreSQL , MySQL , MongoDB and etc. Work with SSH-Keys include passphrase. Custom dump name template...

5.8AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/10 12:59 p.m.157 views

massdns

MassDNS A high-performance DNS stub resolver MassDNS is a simple high-performance DNS stub resolver targeting those who seek to resolve a massive amount of domain names in the order of millions or even billions. Without special configuration, MassDNS is capable of resolving over 350,000 names per...

6.1AI score
SaveExploits0References3
Kitploit
Kitploit
added 2026/09/10 12:59 p.m.9 views

agent-scan

Snyk Agent Scan Discover and scan agent components on your machine for prompt injections and vulnerabilities including agents, MCP servers, skills. Note: CLI output is experimental and subject to change Agent Scan v0.5.x planned for deprecation The raw output of this CLI — including issue codes,...

5.8AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/10 12:58 p.m.4 views

CVE-2017-8759

Exploit tool CVE-2017-8759 Exploit tool CVE-2017-8759 is a handy python script which provides pentesters and security researchers a quick and effective way to test Microsoft .NET Framework RCE. It could generate a malicious RTF file and deliver metasploit / meterpreter / other payload to victim...

9.3CVSS7.3AI score0.88698EPSS
SaveExploits14
Kitploit
Kitploit
added 2026/09/10 12:58 p.m.6 views

hyperhives-macos-infostealer-analysis

HyperHives macOS Infostealer — Full Technical Analysis Threat intelligence: Rust-based macOS universal binary infostealer delivered through a fake job interview pipeline on Wellfound formerly AngelList. The operator persona "Felix" from "HyperHive" lured targets into running a malicious installer...

5.9AI score
SaveExploits0References11
Kitploit
Kitploit
added 2026/09/10 12:58 p.m.5 views

RSC-Detect-CVE-2025-55182

🔎 RSC-Detect - React Server Components Detector Lightweight detection utility for identifying React Server Components and Next.js applications 🎯 Purpose RSC-Detect is a simple, focused tool designed to identify websites using React Server Components RSC and Next.js framework. It's useful for:...

10CVSS7.5AI score0.99802EPSS
SaveExploits390References1
Kitploit
Kitploit
added 2026/09/10 12:58 p.m.53 views

burpsuite-copy-as-xmlhttprequest

Copy as XMLHttpRequest BurpSuite extension The extension adds a context menu to BurpSuite that allows you to copy multiple requests as Javascript's XmlHttpRequest, which simplifies PoC development when exploiting XSS. Installation download the latest JAR from releases or build manually add JAR to...

5.5AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/10 12:58 p.m.8 views

RTSPbrute

RTSPBrute Inspired by Cameradar Features Find accessible RTSP streams on any target Brute-force stream routes Brute-force credentials Make screenshots on accessible streams Generate user-friendly report of the results: .txt file with each found stream on new line .html file with screenshot of eac...

6AI score
SaveExploits0References2
Kitploit
Kitploit
added 2026/09/10 12:57 p.m.7 views

hackEmbedded

hackebds 🔗中文 readme Overview hackebds is a toolkit for embedded-device payload generation, encrypted shell workflows, SOCKS5 proxy tunneling, and device information lookup. The current branch uses a pure ELF workflow for encrypted shell and proxy features: reverseshellfile + encryptedshellserver ...

6AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/10 12:57 p.m.40 views

xc

XC Netcat like reverse shell for Linux & Windows. Features Windows root@kitploit: Usage: └ Shared Commands: !exit !upload uploads a file to the target !download downloads a file from the target !lfwd local portforwarding like ssh -L !rfwd remote portforwarding like ssh -R !lsfwd lists active...

5.7AI score
SaveExploits0References2
Kitploit
Kitploit
added 2026/09/10 12:57 p.m.6 views

KubeArmor

KubeArmor is a cloud-native runtime security enforcement system that restricts the behavior such as process execution, file access, and networking operations of pods, containers, and nodes VMs at the system level. KubeArmor leverag...

7.4AI score
SaveExploits0References34
Kitploit
Kitploit
added 2026/09/10 12:57 p.m.16 views

claude-code-guardrails

We have since built a dedicated product to help developers manage AI permissions better, which we intend to make open source. Check it out atstoplight.ai. Claude Code Guardrails settings.json works if: You're fine editing JSON and killing Claude Code sessions every time policy changes Your securi...

5.8AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/10 12:57 p.m.25 views

custom-bytecode-analyzer

custom-bytecode-analyzer Java bytecode analyzer customizable via JSON rules. It is a command-line tool that receives a path containing one or more Jar or War files, analyzes them using the provided rules and generates HTML reports with the results. Usage root@kitploit: usage: java -jar cba-cli.ja...

5.6AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/10 12:57 p.m.4 views

The-Axer

The axer will replace the manual procedure of creating your payloads with msfvenom , making it easier and a lot quicker Contact The Owner THE AXER WILL LET YOU CHOOSE THE PLATFOR , FORMAT , ENCODER , Bind with another file and alot of other features...

5.8AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/10 12:57 p.m.3 views

F-Scrack

To prevent this script from being maliciously used, this project has been deleted...

5.8AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/10 12:57 p.m.10 views

ESP32-DIV

📖 Explore the ESP32-DIV Wiki Complete project story, in-depth tutorials, and all the features in Wiki! From Wi-Fi deauthentication attacks to Sub-GHz signal replay, the Wiki covers everything you need to get started. Click here to explore now! ⚡ Skip the IDE — flash directly from your browser at...

5.8AI score
SaveExploits0References4
Kitploit
Kitploit
added 2026/09/10 12:56 p.m.6 views

phishcollector

PhishCollector PhishCollector is a research framework for collecting, analysing, and tracking phishing sites. It is intentionally designed as a starting point — the detection rules, technology signatures, wordlists, and plugins are all plain data structures that researchers are expected to read,...

5.9AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/10 12:56 p.m.34 views

whonow

Whonow DNS Server A malicious DNS server for executing DNS Rebinding attacks on the fly. whonow lets you specify DNS responses and rebind rules dynamically using domain requests themselves. root@kitploit: respond to DNS queries for this domain with 34.192.228.43 the first time it is requested and...

5.6AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/10 12:56 p.m.6 views

CloudScraper

CloudScraper is a Tool to spider and scrape targets in search of cloud resources. Plug in a URL and it will spider and search the source of spidered pages for strings such as 's3.amazonaws.com', 'windows.net' and 'digitaloceanspaces'. AWS, Azure, Digital Ocean resources are currently supported...

5.8AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/10 12:56 p.m.7 views

Reverse_DNS_Shell

DNShell v1.7 Description: A Python Reverse Shell that uses DNS as the C2 channel. Requires: dnslib dnspython pycrypto Gotchyas: don't forget to change your HOST don't forget to change your SECRET key run server first Moar Info: http://lockboxx.blogspot.com/2015/01/python-reverse-dns-shell.html...

5.9AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/10 12:56 p.m.11 views

yj_nearbyglasses

yjnearbyglasses attempting to detect smart glasses nearby and warn you. ⚠ WARNING! ⚠ nearby-glasses-alert.pages.dev is NOT RELATED TO MY PROJECT. Many apps in Play Store and App Store look or are even called very similar to Nearby Glasses. They seem to hijack the name and try to make a quick prof...

6AI score
SaveExploits0References9
Kitploit
Kitploit
added 2026/09/10 12:56 p.m.8 views

hedgehog-tools

hedgehog-tools Repo of smaller scripts for malware analysis, deobfuscation and configuration extraction. See README.md files within the folders for more details. Overview of generic tools...

5.9AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/10 12:56 p.m.9 views

sandbox

Concave AI Sandbox Run AI code safely, fast, untrusted A self-hostable code execution sandbox platform built with Firecracker microVMs. Sub-200ms startup times with snapshot-based warm pooling. About Concave provides secure, isolated code execution environments for running untrusted code. Built...

5.8AI score
SaveExploits0References6
Kitploit
Kitploit
added 2026/09/10 12:56 p.m.5 views

FruityWifi

FruityWiFi Wireless network auditing tool http://www.fruitywifi.com/ Important Note Debian 11 Bullseye: Please use Use Debian 11 Bullseye based systems. The Installer has been updated for resolving issues with old version. Note : Some modules will not work until they are upgraded to Python3...

5.9AI score
SaveExploits0References2
Kitploit
Kitploit
added 2026/09/10 12:56 p.m.8 views

awesome-web-hacking

awesome-web-hacking This list is for anyone wishing to learn about web application security but do not have a starting point. You can help by sending Pull Requests to add more information. If you're not inclined to make PRs you can tweet me at @infoslack Table of Contents Books Documentation Tool...

7.5CVSS7.2AI score0.99999EPSS
SaveExploits94References19
Kitploit
Kitploit
added 2026/09/10 12:55 p.m.7 views

Dos-exploit-

Dos-exploit- CVE-2025-31650 Exploit Title: Apache Tomcat 10.1.39 - Denial of Service DOS Author: Abdualhadi khalifa CVE: CVE-2025-31650 import httpx import asyncio import random import urllib.parse import sys import socket from colorama import init, Fore, Style init class TomcatKiller: def...

7.5CVSS7.5AI score0.5992EPSS
SaveExploits5
Kitploit
Kitploit
added 2026/09/10 12:55 p.m.6 views

CVE-2025-66628

CVE-2025-66628: Integer Overflow in ImageMagick TIM Parser...

7.5CVSS7.3AI score0.0051EPSS
SaveExploits0
Kitploit
Kitploit
added 2026/09/10 12:55 p.m.10 views

DiscoRape

DiscoRape DiscoRape is a selfbot for Discord written in python3.8 The original repository I forked this from can be found here made by EC-discord Preview 📝 Install/Run pip3 install -r requirements.txt Add your token in data/config.json run by doing python3 selfbot.py...

5.8AI score
SaveExploits0References2
Kitploit
Kitploit
added 2026/09/10 12:55 p.m.6 views

OmniScan

OmniScan Comprehensive Vulnerability Scanner OmniScan is a lightweight, multi-engine vulnerability scanner based on Python, designed for red team operations and security research. It integrates a lightweight Nuclei engine Lite and Afrog engine, and provides powerful asset collection and result...

6AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/10 12:55 p.m.4 views

SparkAltBatteryBoard

SparkAltBatteryBoard A custom research-oriented battery interface and telemetry board for the DJI Spark platform, built around a standard 3S LiPo battery pack instead of the discontinued, hard-to-find OEM Smart Battery. This project documents a reverse-engineered I2C/SMBus smart-battery...

6AI score
SaveExploits0References11
Kitploit
Kitploit
added 2026/09/10 12:55 p.m.9 views

SUID3NUM

SUID3NUM A standalone python2/3 script which utilizes python's built-in modules to find SUID bins, separate default bins from custom bins, cross-match those with bins in GTFO Bin's repository & auto-exploit those, all with colors! ͡ʘ ͜ʖ ͡ʘ Description A standalone script supporting both python2 &...

6AI score
SaveExploits0References5
Kitploit
Kitploit
added 2026/09/10 12:55 p.m.8 views

arduino-pico

Arduino-Pico Raspberry Pi Pico Arduino core, for all RP2040 and RP2350 boards This is a port of Arduino to the RP2040 Raspberry Pi Pico processor and RP2350 Raspberry Pi Pico 2 processor. It uses the bare Raspberry Pi Pico SDK and a custom GCC 14.3/Newlib 4.5 toolchain and supports ARM and RISC-V...

6AI score
SaveExploits0References16
Total number of security vulnerabilities44506