#1Tools for analyzing, monitoring, and securing network infrastructure and protocols.
Kitploit recommended
saadahla/anti-sandboxC++ tool for detecting AnyRun sandbox environments, enabling malware to evade dynamic analysis and automated sandboxing systems.
esnet-security/cve-2020-16898Detects CVE-2020-16898: "Bad Neighbor"
epi052/cve-2018-15473Multi-threaded, IPv6 aware, wordlists/single-user username enumeration via CVE-2018-15473
ensimag-security/cve-2018-10933Academic exploit implementation for CVE-2018-10933, a libssh authentication bypass vulnerability, with a detailed report and Shodan search…
encrypter15/cve-2025-50165-x64-exploitGenerates weaponized JPEG files exploiting CVE-2025-50165 (Windows Graphics RCE) with custom x64 shellcode, heap spray, ROP chain, and AV/EDR evasion…
ejpir/cve-2025-55182-bypassHeader bypass for CVE-2025-55182 (React Server Components RCE).
ehabhussein/snmpvlanSNMP scanner and brute-forcer targeting Cisco Nexus switches (5000/6000) to exploit CVE-2014-3341, enumerate VLANs, crack SNMP community strings, and…
efchatz/quic-attacksEducational scripts demonstrating QUIC protocol attacks including CVE-2022-30591 exploitation, flooding, and slowloris techniques against major…
dweger-scripts/cve-2024-38063-remediationPowerShell audit script to detect missing patches for CVE-2024-38063, an IPv6 vulnerability in Windows systems, enabling rapid remediation…
dubfr33/cve-2019-1653NSE script to detect Cisco routers vulnerable to CVE-2019-1653 via nmap scanning on port 443.
droptables/ccs-evalUsed for evaluating hosts for CVE-2014-0224
drbothen/go-rpcbombCVE-2017-8779 aka RPCBomb
drackyjr/cve-2025-9784Bash script to test for CVE-2025-9784 HTTP/2 DoS vulnerability in Undertow servers. Measures baseline response times, simulates rapid stream resets,…
dolutech/patch-manual-cve-2025-26465-e-cve-2025-26466Patch Manual para a correção das CVE-2025-26465-e-CVE-2025-26466, para sistemas sem update do OpenSSH
digitalshadows/cve-2019-19781_iocsCurated indicators of compromise (IOCs) for CVE-2019-19781, including IP addresses and whois data from honeypot logs to aid threat detection and…
hwbp/lazyhookEvade behavioral analysis by executing malicious code within trusted Microsoft call stacks, patchless hooking library IAT/EAT.
mattiaalessi/phantom-keyloggerPhantom Keylogger is an advanced, stealth-enabled keystroke and visual intelligence gathering system.
diegovargasj/cve-2025-32407Proof-of-concept exploit for CVE-2025-32407: TLS certificate validation bypass in Samsung Internet for Galaxy Watch, enabling Man-in-the-Middle…
