#1Tools for bypassing Intrusion Detection and Prevention Systems (IDS/IPS) and network security controls.
Kitploit recommended
xaff-xaff/kernel-process-hollowingWindows x64 kernel mode rootkit process hollowing POC.
mandiant/heyserialProgrammatically create hunting rules for deserialization exploitation with multiple keywords, gadget chains, object types, encodings, and rule types
borenstein/yolo-cageAI coding agents that can't exfiltrate secrets or merge their own PRs.
keowu/badrentdrv2A vulnerable driver exploited by me (BYOVD) that is capable of terminating several EDRs and antivirus software in the market, rendering them…
treussart/probemanagerCentralize Management of Intrusion Detection System like Suricata Bro Ossec ...
conviso-archives/firefox_tunnelBrowser-based C2 tunnel that exfiltrates payloads through Firefox's cookie.sqlite and auto-submitting HTML/JS, enabling stealthy firewall bypass for…
duo-labs/mysslstripProof-of-concept tool demonstrating MITM attack to strip SSL/TLS from MySQL connections, exploiting CVE-2015-3152 for network penetration testing.
shiva108/pentestproxyScripts for: How to Build a Covert Pentesting Infrastructure Almost Free
darses/cve-2025-32433Security research on Erlang/OTP SSH CVE-2025-32433.
rastating/modsecurity-cve-2018-6389A ModSecurity ruleset for detecting potential attacks using CVE-2018-6389
insomnisec/detections-cve-2026-23918Detection rules for CVE-2026-23918 Apache http2 RCE - Credit: stringa.ai, isec.pl
