Kitploit is temporarily under maintenance. We’ll be back shortly with improvements.

Dozens of U.S. government websites appear to contain a flaw enabling anyone to generate URLs with their domains that redirect users to external sites, a handy tool for criminals hoping to infect users with malware or fool them into surrendering personal information.

Profiling RDP Clients with JA3 and RDFP

This is "The Art Of Warez" by oliver payne on Vimeo, the home for high quality videos and the people who love them.

How roleplaying games and fantasy fiction confounded the FBI, confronted the law, and led to a more open web

Reversing Cisco IOS Raw Binary Firmware Images with Ghidra - 01-reversing-cisco-ios-raw-binary-firmware-images-with-ghidra.md

Unauthenticated RCE at Woody Ad Snippets / CVE-2019-15858 (PoC) - GeneralEG/CVE-2019-15858

RDP monster-in-the-middle (mitm) and library for Python with the ability to watch connections live or after the fact - GoSecure/pyrdp

Let me open this with a few questions Do you have your own penetration testing lab? Have you installed Windows Server 2016 before? Do you have Active Directory at home? What version of PowerShell a…

Just got done researching how access token manipulation can be leveraged to impersonate SYSTEM from local admin! I dig into alternatives to winlogon.exe that can also be leveraged to impersonate SYSTEM. Detections for access token manipulation included 💜…

Zeek is a powerful network analysis framework that is much different from the typical IDS you may know. - zeek/zeek

TLDR: You can now inject .NET Assemblies into Windows processes using this repo: https://github.com/TheWover/donut/