WireBug

WireBug WireBug es un conjunto de herramientas para pruebas de penetración de Voz sobre IP. Está diseñado como un asistente que facilita su uso. Las herramientas también están diseñadas para uso individual, por lo que cada herramienta es su propio programa Python o Bash. Instalación Lea la Guía d...

hate_crack

root@kitploit: / | \ / | \ \ | | / \ \ / \ / \ /\ \ \ / | |/ / \ Y // | | \ / \ | | // \ | \ /|| /\ | \ / / // / / / / Installation Installing from source is the only supported path. hatecrack is not distributed on PyPI: pip install hate-crack resolves to a 0.0.0 placeholder that...

Instagram-Brute-Force-2024

Instagram-Brute-Force-2024 Instagram Brute Force compatible con CPU/GPU 2024 Usa la opción 2 mientras ejecutas el script. La opción 1 está en desarrollo Chrome debe estar descargado en el dispositivo. Compatible y probado solo sistemas operativos con soporte de GUI Python 3.13 x64 bit Unix / Linu...

brutas

¡abur ¡adiós ¡agur ¡aleluya ¡chao ¡como ¡eureka ¡hasta ¡hurra a ababa ababol abacá abacera abacería abacero abacial ábaco abacora abacorar abad abada abadejo abadengo abadía abadiato abajadero abajar abajeño abajo abalanzar abalanzarse abalaustrado abaldonar abalear abalizar abalorio abanderado...

cve-2023-37635

CVE-2023-37635 - Exploitation Guide Installation & Setup 1️⃣ Install Dependencies root@kitploit: pip install -r requirements.txt 2️⃣ Run the Exploit With a proxy: root@kitploit: python brutForc.py Without a proxy: root@kitploit: python brutForc.py -n...

tactical-exploitation

tactical-exploitation "The Other Way to Pen-Test" -- HD Moore & Valsmith I've always been a big proponent of a tactical approach to penetration testing that does not focus on exploiting known software vulnerabilities, but relies on old school techniques such as information gathering and brute...

CredMaster

CredMaster Launch a password spray / brute force attach via Amazon AWS passthrough proxies, shifting the requesting IP address for every authentication attempt. This dynamically creates FireProx APIs for more evasive password sprays. Shoutout to @ustayready for his CredKing and FireProx tools,...

CVE-2026-42945

RIFT — Remote Injection & Fault Trigger Author: Michael Sanji Winaya Prawiradibrata AI Co-Author: Varanus — sahabatku Heap buffer overflow exploit framework targeting NGINX's ngxhttprewritemodule. Satu tool untuk reconnaissance + exploitation. Zero external dependencies. Isi Repo File| Deskripsi...

Brute_Force

BruteForce install : root@kitploit: sudo apt install python3 python3-pip pip3 install proxylist pip3 install mechanize Usage: BruteForce Gmail Attack root@kitploit: python3 BruteForce.py -g [email protected] -l Filelist python3 BruteForce.py -g [email protected] -p PasswordSingle...

snmpwn

SNMPwn es una herramienta de enumeración y ataque de usuarios SNMPv3. Es una herramienta de seguridad legítima diseñada para ser utilizada por profesionales de seguridad y testers de penetración contra hosts que tengas permiso de probar. Aprovecha el hecho de que los sistemas SNMPv3 responderán c...

CrackQL

CrackQL CrackQL es una utilidad de fuzzing y fuerza bruta de contraseñas para GraphQL. CrackQL es una herramienta versátil de pruebas de penetración para GraphQL que explota controles deficientes de limitación de velocidad y análisis de costos para realizar ataques de fuerza bruta a credenciales ...

iDictPy

iDictPy A salty-ass 100% verified hacker status python script to turn apple id's into apple crisp nicememe I initially made this as a better alternative to this piece of shit: https://github.com/Pr0x13/iDict/ but then i forgot i'm a little bit drunk and then this happened. prerequisites are...

shuffledns

Wrapper de massDNS para realizar fuerza bruta y resolución de subdominios con soporte para manejo de comodines Características • Instalación • Ejecución • Comodín • Licencia • Discord shuffleDNS es un wrapper alrededor de massdns, escrito en Go, que permite enumerar subdominios válidos mediante...

cerbrutus

Cerbrutus Herramienta de fuerza bruta modular escrita en Python, para rociado de contraseñas muy rápido en SSH y FTP, y en un futuro cercano otros servicios de red. PRÓXIMAMENTE: SMB, HTTPs POST, HTTPs GET, HTTP BASIC AUTH Gracias a @0dayctf, Rondons, Enigma y 001 por las pruebas y contribuciones...

cangibrina

root@kitploit: / | | | | / | ' \ / | | ' | '| | ' \ / | | || | | | | | | | | | | | | | | | | | | \,|| ||, ||./|| ||| ||,| |/ Beta - v0.8.7 Dashboard Finder English Português English Dashboard Finder Cangibrina is a multi platform tool which aims to obtain the admin Dashboard of sites using...

WPForce

WPForce - Wordpress Attack Suite ABOUT: WPForce is a suite of Wordpress Attack tools. Currently this contains 2 scripts - WPForce, which brute forces logins via the API, and Yertle, which uploads shells once admin credentials have been found. Yertle also contains a number of post exploitation...

CVE-2024-39211

CVE-2024-39211 Kaiten User Enumeration Kaiten - a workflow management system, is vulnerable to unrestricted brute force attacks on user logins and email addresses registered in the system via a simple POST request. References: CVE MITRE Description NVD CVE Usage Simple download bash script and ru...

BaRMIe

BaRMIe BaRMIe is a tool for enumerating and attacking Java RMI Remote Method Invocation services. RMI services often expose dangerous functionality without adequate security controls, however RMI services tend to pass under the radar during security assessments due to the lack of effective testin...

wpbf

WPBF - a multithreaded WP brute forcer WPBF usage: python wpbf.py siteslist passwordlist outputfile By default, other settings are: user = 'admin' numthreads = 50 timeout = 3 verbose = True debug = False You can change them by editing the script...

laravel-crypto-killer

Laravel crypto killer A tool designed to exploit bad implementations of decryption mechanisms in Laravel applications. This tool was firstly designed to craft payloads targeting the Laravel decrypt function from the package Illuminate\Encryption. It can also be used to decrypt any data encrypted...