#1Tools for extracting sensitive data from compromised systems without detection.
Kitploit recommended
spiralbl0ck/cve-2023-1206-cve-2025-40040-cve-2024-498823 linux kernel bugs chains to do secure comm app using side channel to establish key and establish covert channe;
shadowbq/pastenumPastenum is a text dump enumeration tool.
vognik/cve-2026-26980Unauthenticated SQL injection exploit for Ghost CMS Content API (CVE-2026-26980); dumps database tables from SQLite/MySQL with active/passive checks…
gradiant/faroFARO - Document Sensitivity Detector
acheong08/cve-2026-65400Apple MacOS Screen Sharing Arbitrary File read/write -> RCE
sobri3195/pegasus-gramPython-based keylogger and surveillance tool with Telegram C2, capturing keystrokes, screenshots, webcam, audio, clipboard, and system activity for…
aniqfakhrul/sharpdnsexfilC# tool for exfiltrating files over DNS using XOR and asymmetric encryption, designed for red team engagements with restricted outbound connections.
ynsmroztas/gitlabsniperSingle-file Python scanner and exploit for CVE-2026-85706, an unauthenticated arbitrary file read in self-managed GitLab CE/EE, with project…
absholi7ly/apache-ofbiz-directory-traversal-exploitExploit for Apache OFBiz CVE-2024-32113 path traversal via crafted XML-RPC requests, enabling arbitrary file read and potential command execution on…
kaandemir993/lumma-stealer-dllhost-hollowing-c2-domains-payload-extraction-analysisIn-depth reverse engineering analysis of Lumma Stealer, an info-stealer using process hollowing, Native API calls, and C2 communication. Includes…
corelight/callstranger-detectorZeek plugin detecting CallStranger (CVE-2020-12695) exploitation via UPnP SUBSCRIBE/NOTIFY analysis, identifying DDoS amplification, data…
vulncheck-oss/jupyter-notebooksExample Jupyter notebooks that query VulnCheck APIs to chart exploitation timelines, Known Exploited Vulnerabilities, and botnet data for threat…
zjuicsr/deeptrapSecurity benchmark for evaluating OpenClaw agents against adversarial execution contexts including poisoned files, injected skills, misleading tool…
p0dalirius/cve-2022-26159-ametys-autocompletion-xmlA python exploit to automatically dump all the data stored by the auto-completion plugin of Ametys CMS to a local sqlite database file.
vikasudasi/exfil-scanScan LLM outputs and AI-generated content for data exfiltration signals (EchoLeak, CVE-2025-32711) before they reach users or downstream systems
asset-group/ghostspliceGhostsplice repository: PoC for Cross-Channel Trust Fragmentation Attack
ooafa/bucketbusterScans public cloud object-storage endpoints across Yandex, VK, Selectel, Sber, Alibaba, Tencent, Huawei, and Baidu to find listable buckets and…
chasingimpact/cve-2025-66516-writeup-pocCVE-2025-66516 working exploit, scanner, explanation.
