ghost-route

👻 Ghost Route Un script de Python para comprobar sitios Next.js en busca de la vulnerabilidad de middleware corrupto CVE-2025-29927. La vulnerabilidad de middleware corrupto permite a un atacante eludir la autenticación y acceder a rutas protegidas enviando una cabecera personalizada...

awscanner

awscanner About Finds internet-exposed resources in an AWS account. Results of the scan will be put in the results folder https://owasp.org/www-project-awscanner/ Installation root@kitploit: git clone https://github.com/OWASP/awscanner.git pip install aws-shell cd awscanner pip install -r...

CVE-2020-0041

CVE-2020-0041 This repository contains LPE code for exploiting CVE-2020-0041 implemented by bluefrostsecurity as released at https://github.com/bluefrostsecurity/CVE-2020-0041/tree/master/lpe . The exploitation approach for this part can be found at...

project_mantis

Project Mantis: Hacking Back the AI-Hacker Prompt Injection as a Defense Against LLM-driven Cyberattacks Install Mantis root@kitploit: pip install -r requirements.txt Run Mantis with pre-made configurations Various pre-made configurations are available in the ./confs directory. Hack-back An examp...

CyberPipe

CyberPipe v5.3 anteriormente CSIRT-Collect Un script de PowerShell fácil de usar para recolectar evidencia forense de memoria y disco en investigaciones DFIR. Funciones: 🐏 Capturar una imagen de memoria con MAGNET DumpIt soporta x86, x64 y ARM64 o MAGNET RAM Capture para sistemas heredados. 💻...

Pinkerton

🕵️ Pinkerton Investigando archivos JavaScript desde 1850 Proyecto en Python para rastrear archivos JavaScript y buscar secretos como claves API, tokens de autorización, contraseñas hardcodeadas o datos relacionados. ⚡ Primeros pasos Una guía rápida sobre cómo instalar y usar Pinkerton. 1. Clona el...

fully-homomorphic-encryption

The FHE Team at Google, in partnership with multiple collaborators, is working to Unlock Fully Homomorphic Encryption for Google and the world. Make it Easy Make it Fast at Scale What started with a C++ transpiler, has morphed into two new libraries: HEIR is the new development platform and...

fully-homomorphic-encryption

El equipo FHE de Google, en colaboración con múltiples colaboradores, está trabajando para Desbloquear el Cifrado Totalmente Homomórfico para Google y el mundo. Hacerlo Fácil Hacerlo Rápido a Escala Lo que comenzó con un transpilador C++, se ha transformado en dos nuevas bibliotecas: HEIR es la...

CVE-2015-7547

CVE-2015-7547 glibc getaddrinfo stack-based buffer overflow...

CVE-2017-5638

CVE-2017-5638...

CVE-2018-1207-better

Exploit PoC for CVE-2018-1207: Dell iDRAC7/iDRAC8 RCE Reverse Shell This repository contains a Proof of Concept python script to demonstrate a remote code execution exploit present in iDRAC7 and iDRAC8 devices with firmware versions 2.52.52.52 and below. This exploit allows attacks to run code as...

how_to_become_a_malware_analyst

マルウェア解析者になるための勉強方法work-in-progress これは@PINKSAWTOOTHの私見で、必ずしもあなたにとって一番良い方法ではないかもしれません。勉強方法の一例として参照してもらえれば幸いです。 これを読む前に、私が尊敬するマルウェア解析者の@hasherezade氏がマルウェア解析の勉強をどのように始めたらよいかをブログにまとめています。 重複する部分があると思いますが、一読することをおすすめします。また、以下のブログは英語のソースが中心なので、可能な限り日本語を中心にしたソースを紹介したいと思います。...

malasada

malasada Donut for Linux, converts a Linux ELF shared object .so into a position-independent .bin blob that can be executed directly from memory for example, by copying it into an mmap'd region and jumping to it as a function pointer. This project intentionally avoids memfd memfdcreate, execveat ...

combobulator

Dependency Combobulator Dependency Combobulator es un framework de código abierto, modular y extensible para detectar y prevenir fugas de confusión de dependencias y posibles ataques. Esto facilita un enfoque holístico para garantizar lanzamientos de aplicaciones seguros que pueden evaluarse fren...

combobulator

Dependency Combobulator Dependency Combobulator is an Open-Source, modular and extensible framework to detect and prevent dependency confusion leakage and potential attacks. This facilitates a holistic approach for ensuring secure application releases that can be evaluated against different sourc...

Intel-Linux-Processor-Microcode-Data-Files

Intel Processor Microcode Package for Linux About The Intel Processor Microcode Update MCU Package provides a mechanism to release updates for security advisories and functional issues, including errata. In addition, MCUs are responsible for starting the SGX enclave on processors that support the...

CVE-2016-4117-Report

Vulnerability Report for CVE-2016-4117 CVE-2016-4117 CVSS Scores & Vulnerability Types...

Baron-Samedit-Heap-Buffer-Overflow-CVE-2021-3156

Baron-Samedit-Heap-Buffer-Overflow-CVE-2021-3156 Version Vulnarable To The Exploit The Baron Samedit vulnerability CVE-2021-3156 affects sudo legacy versions 1.8.2 through 1.8.31p2 and stable versions 1.9.0 through 1.9.5p1. This heap-based buffer overflow flaw was introduced in July 2011 via comm...

Peyara

Exploit Title: Peyara Remote Mouse v1.0.1 - Remote Code Execution RCE Date: 2025-05-30 Exploit Author: tmrswrr Software Link:https://peyara-remote-mouse.vercel.app/ Platform: Windows Version: v1.0.1...

monsoon

monsoon Un rápido enumerador HTTP que te permite ejecutar un gran número de solicitudes HTTP, filtrar las respuestas y mostrarlas en tiempo real monsoon es un fuzzer HTTP rápido y flexible que se puede utilizar para una amplia variedad de acciones, desde descubrimiento de contenido hasta fuerza...

PANO

PANO - Platform for Analysis and Network Operations PANO is a powerful OSINT investigation platform that combines graph visualization, timeline analysis, and AI-powered tools to help you uncover hidden connections and patterns in your data. Getting Started • Features • Documentation • Contributin...

SteppingStones

Stepping Stones Purpose A hub for Red Team activity to aid in record keeping, situational awareness and reporting. Stepping Stones provides a web based UI for the team to log activity and generate report snippets. The UI is intended to be rapid enough to be used throughout the engagement, not jus...

Windows

Windows hacks and tricks...

CVE-2020-9484

CVE-2020-9484 POC for CVE-2020-9484 POC for CVE-2020-9484 Apache Tomcat RCE by deserialization CVE-2020-9484 Explore the docs » Getting Started 1. Clone this repository, then you will be able to use CVE-2020-9484 and modify the source code if needed. 2. Download ysoserial jar 3. place both...

reconerator

Resumen Este es un ensamblado .NET personalizado que realiza una serie de actividades de reconocimiento situacional. Hay varios conjuntos de funcionalidades actuales: BASIC - Obtiene información del disco y del registro. LDAP - Permite realizar consultas LDAP personalizadas de Active Directory...

reconerator

Overview This is a custom .NET assembly which will perform a number of situational awareness activities. There are a number of current featuresets: BASIC - Obtains information from the disk and registry. LDAP - Allows customised AD LDAP queries to be made. RESOLVEHOST - Performs DNS lookup querie...

sdnpwn

What is sdnpwn? sdnpwn is a toolkit and framework for testing the security of Software-Defined Networks SDNs. For more information check out this article: https://sdnpwn.net/2017/08/22/what-is-sdnpwn/ Installation First download sdnpwn using git root@kitploit: git clone...

sdnpwn

¿Qué es sdnpwn? sdnpwn es un kit de herramientas y un framework para probar la seguridad de las Redes Definidas por Software SDN. Para más información, consulta este artículo: https://sdnpwn.net/2017/08/22/what-is-sdnpwn/ Instalación Primero descarga sdnpwn usando git root@kitploit: git clone...

hyperion-disassembler

Hyperion A native multi-architecture disassembler and binary analysis tool. Supports PE, ELF, Mach-O, and .NET binaries across x86, x64, ARM, ARM64, MIPS, and PPC. Built from scratch in C++20 with ImGui. Single statically-linked executable. No installer, no runtime dependencies. Under 3MB...

NimPlant

NimPlant - Un implante C2 ligero de primera etapa escrito en Nim, Rust y Python Por Cas van Cooten @chvancooten, con agradecimientos especiales a algunas personas increíbles: Kadir Yamamoto @yamakadi, Furkan Göksel @frkngksl , Fabian Mosch @S3cur3Th1sSh1t, Rafael Félix @b1scoito, Guillaume Caillé...

Signal-iOS

Signal iOS Signal is a free and open source messaging app for simple private communication with friends. Also available on Android and Desktop. Questions? For troubleshooting and questions, please visit our support center or unofficial community forum. Contributing Bug Reports The best way to...

CVE-2019-16279

CVE-2019-16279 （CVE-2019-16279）dos This bug exploit a memory error when sending too many \r\n in a single connexion. Example $ curl http://127.0.0.1:8080 HELLO! $ ./CVE-2019-16279.sh 127.0.0.1 8080 $ curl http://127.0.0.1:8080 curl: 7 Failed to connect to 127.0.0.1 port 8080: Connection refused...

CVE-2024-24401

Vulnerability Report CVE Disovered by: Jarod Jaslow MAWK DESIGNED TO BE RUN ON KALI LINUX Notes Nagios has patched version 2024R1.0.1 in all recent downloads. To determine if a target is vulnerable, ensure they are using an older download of 2024R1.0.1. The updated script checks to make sure that...

EuConform

EuConform 🇪🇺 Open-Source Evidence Toolkit For AI Compliance Open evidence format • Local bias evaluation • Schema validation • CycloneDX interoperability Offline-first • Privacy-preserving • Reusable artifacts • WCAG 2.2 AA accessible EuConform defines an open evidence format for AI compliance and...

iKy

Description | Installation | Website | Modules | Issues | Supporting iKy Description Project iKy is a tool that collects information from an email and shows results in a nice visual interface. Visit the Gitlab Page of the Project Video Demo Modules...

kimi

Kimi: Motor de Descubrimiento de Superficie de Ataque Desarrollado con 💜 por @alechilczenko Contexto del Proyecto: Este proyecto sirve como una pieza de portafolio que demuestra conceptos de seguridad ofensiva, concurrencia y arquitectura distribuida. 1. Presentando a Kimi: La Historia de Origen...

shocker

Shocker A tool to find and exploit servers vulnerable to Shellshock Ref: https://en.wikipedia.org/wiki/Shellshocksoftwarebug Released as open source by NCC Group Plc - https://www.nccgroup.trust/ Developed By: Tom Watson, tom dot watson at nccgroup dot trust https://github.com/nccgroup/shocker...

shocker

Shocker Una herramienta para encontrar y explotar servidores vulnerables a Shellshock Referencia: https://en.wikipedia.org/wiki/Shellshocksoftwarebug Publicado como código abierto por NCC Group Plc - https://www.nccgroup.trust/ Desarrollado por: Tom Watson, tom dot watson at nccgroup dot trust...

loki

Loki: like Prometheus, but for logs. Loki is a horizontally-scalable, highly-available, multi-tenant log aggregation system inspired by Prometheus. It is designed to be very cost effective and easy to operate. It does not index the contents of the logs, but rather a set of labels for each log...

mitmproxy

mitmproxy !autofix.ci:...

CVE-2022-26134

CVE-2022-26134 - Confluence OGNL injection vulnerability Script Usage Install Python libraries pip install -r requirements.txt Vulnerability Verification python3 CVE-2022-26134check.py -u url -c whoami Batch Scanning python3 CVE-2022-26134check.py -f url.txt -c whoami Affected Versions Confluence...

CVE-2014-4109

This crash is difficult to reproduce. The included proof of concept makes it a little easier to trigger the crashing code path. My super scientific process of checking the crash was to click on the url with one hand and press enter with the other. It usually crashes within 15 attempts. "IE=9" als...

CVE-2024-0520_try

This repository does not have a README...

yappy

Yappy 🐶 Asistente de participación en LinkedIn impulsado por IA. Descubre automáticamente publicaciones de LinkedIn y deja comentarios reflexivos, únicos y generados por IA que realmente suenan como tú. Yappy es una potente herramienta de terminal que utiliza Google's Gemini AI y la automatizació...

r2gopclntabParser

r2gopclntabParser Note: This feature has been implemented directly to radare2's core as gopc analysis plugin A radare2-based Go gopclntab parser for recovering function symbols from Go binaries, including fully stripped ones. Supports ELF, Mach-O, and PE binaries across Go versions 1.2, 1.16, 1.1...

snmpwn

SNMPwn is an SNMPv3 user enumerator and attack tool. It is a legitimate security tool designed to be used by security professionals and penetration testers against hosts you have permission to test. It takes advantage of the fact that SNMPv3 systems will respond with "Unknown user name" when an...

snmpwn

SNMPwn es una herramienta de enumeración y ataque de usuarios SNMPv3. Es una herramienta de seguridad legítima diseñada para ser utilizada por profesionales de seguridad y testers de penetración contra hosts que tengas permiso de probar. Aprovecha el hecho de que los sistemas SNMPv3 responderán c...

GTRS

GTRS - Shell Inversa de Google Translator Esta herramienta utiliza Google Translator como proxy para enviar comandos arbitrarios a una máquina infectada. root@kitploit: INFECTED MACHINE ==HTTPS== GOOGLE TRANSLATE ==HTTP== C2 Configuración del Entorno Primero necesitas un VPS y un dominio; para el...

pe-sieve

Intro PE-sieve is a tool that helps to detect malware running on the system, as well as to collect the potentially malicious material for further analysis. Recognizes and dumps variety of implants within the scanned process: replaced/injected PEs, shellcodes, hooks, and other in-memory patches...

pe-sieve

Introducción PE-sieve es una herramienta que ayuda a detectar malware en ejecución en el sistema, así como a recolectar el material potencialmente malicioso para su posterior análisis. Reconoce y vuelca una variedad de implantes dentro del proceso escaneado: PE reemplazados/inyectados, shellcodes...