#1Tools for acquiring, preserving, and analyzing digital evidence for legal or investigative purposes.
Kitploit recommended
rat5ak/cve-2026-3805-curl-smb-uafCVE-2026-3805: Use-After-Free in curl SMB connection reuse - heap info disclosure
muhammedhussein17/libheif-cve-2026-50142CVE-2026-50142 — Heap allocation vulnerability in libheif HEIF sequence parser
deividasterechovas/soc335-cve-2024-49138-exploitation-detectedDocumented incident response case for CVE-2024-49138 exploitation, featuring log analysis, hash validation, C2 detection, and containment procedures…
cyprianatsyor/toolshell-cve-2025-53770-sharepoint-exploit-lab-letsdefendStep-by-step walkthrough of exploiting CVE-2025-53770 (ToolShell) in a LetsDefend lab, covering RCE, web shell deployment, and incident response…
uthrasri/openssl_g2.5_cve-2014-8275General-purpose cryptography library and SSL/TLS toolkit implementing ciphers, digests, public key algorithms, and X.509 certificates for secure…
uname1able/cve-2025-21333Proof-of-concept exploit for CVE-2025-21333, a heap-based buffer overflow in Hyper-V's vkrnlintvsp.sys leading to local privilege escalation via I/O…
pwndorei/cve-2024-22532Proof-of-concept exploit for CVE-2024-22532: heap-based buffer overflow in XnView Classic 2.51.5 and NConvert 7.163 via crafted .xwd file, enabling…
jedai47/cve-2017-16994Linux kernel local privilege escalation exploit for CVE-2017-16994, leveraging null pointer dereference and mmap_min_addr bypass to achieve root…
iqbaalilmii/acropalypse-reconstructorA lightweight CLI tool to detect and reconstruct cropped images vulnerable to Acropalypse (CVE-2023-21036 and CVE-2023-28303) written in Python.
areebashoaib42/keepass-cve-2023-32784-exploitation-and-defenseExploitation and defense-in-depth mitigation strategies for the KeePass memory leakage vulnerability (CVE-2023-32784).
nongiach/sudo_inject[Linux] Two Privilege Escalation techniques abusing sudo token
joeavanzato/trawlerPowerShell script helping Incident Responders discover potential adversary persistence mechanisms.
antoniococo/malseclogonA little tool to play with the Seclogon service
korben00/no-gdidRead, understand and silence the Windows GDID device identifier (the ID that tracked a hacker through a VPN). Verified on a real Win11 VM. Honest: it…
leesh3288/cve-2025-32023PoC & Exploit for CVE-2025-32023 / PlaidCTF 2025 "Zerodeo"
fortra/cve-2022-37969Proof-of-concept exploit for CVE-2022-37969, a Windows Common Log File System driver local privilege escalation. Demonstrates heap spray, token…
zerozenxlabs/cve-2023-36424Windows Kernel Pool (clfs.sys) Corruption Privilege Escalation
maldiohead/cve-2019-6207xnu kernel heap info leak
