Royal_APT

RoyalAPT Royal APT - APT15 - Related Information from NCC Group Cyber Defense Operations Research Sharepoint tool Among the tools developed by the group for the victim, APT15 created a .net tool to enumerate the victim's sharepoint database. Below is an screen-shot from the decompiled binary...

aws_pwn

AWS pwn 摘要 这组脚本写得很烂，用于执行与AWS渗透测试相关的各种任务。如果它对您不起作用，请不要难过。可能是因为自编写以来AWS已经发生了变化，或者代码本身就很烂。无论如何，欢迎贡献。 这些垃圾大部分由Daniel Grzelak编写，但也有很多贡献，最著名的是Mike Fuller。 需求 root@kitploit: pip install -r requirements.txt 请确保还在 /.aws/credentials 中设置好您的AWS凭证。 侦察 用于前期信息收集的任务。 validateiamaccesskeys.py -...

algo

Algo VPN Algo VPN 是一组 Ansible 脚本，用于简化个人 WireGuard 和 IPsec VPN 的设置。它使用了最安全的默认配置，并支持主流云服务提供商。 更多信息请查看我们的发布公告。 特性 仅支持 IKEv2，采用强加密（AES-GCM、SHA2 和 P-256），适用于 iOS、macOS 和 Linux 支持 WireGuard，适用于上述所有平台，以及 Android 和 Windows 11 为 iOS、macOS、Android 和 Windows 的 WireGuard 客户端生成 .conf 文件和 QR 码 生成 Apple 配置文件，自动...

PT-ToolKit

PT-ToolKit Exploits, Powershell Scripts, Executables that are useful during Penetration-Testing or Red Team engagement Most of the Tools and Script are aimed to Active-Directory environment and windows platfform Table of Contents Exploits PowerShell-Scripts Windows-Binary Exploits: Some exploits...

fastfluxanalysis

DNS Analysis Scripts A collection of scripts used to detect Fast-Flux domains and DGA domains. Based on research conducted for MSc thesis, related research papers are available from the following locations: ISSA 2011 ISSA 2012 Botconf 2013 Basic Usage To analyse a single domain: python FFAnalyse....

JavaUnserializeExploits

JavaUnserializeExploits Python scripts and HTTP request referenced in the blog post What Do WebLogic, WebSphere, JBoss, Jenkins, OpenNMS, and Your Application Have in Common? This Vulnerability at http://foxglovesecurity.com...

boko

boko Application Hijack Scanner for macOS boko.py is an application scanner for macOS that searches for and identifies potential dylib hijacking and weak dylib vulnerabilities for application executables, as well as scripts an application may use that have the potential to be backdoored. The tool...

RFC-Security-Research

RFC-Security-Research Original paper and helper scripts to help analyse security aspects of Internet RFCs. Overview This repository hosts a review of RFC security written in the syle of an RFC, in addition to various python helper scripts that were used to obtain the data necessary for the...

Winstrument

Winstrument Winstrument is a framework of modular scripts to aid in instrumenting Windows software using Frida for reverse engineering and attack surface analysis. Contents Installation Usage Project Structure Modules CLI Troubleshooting Copyright Installation This project supports python 3.7...

refinery

Binary Refinery root@kitploit: High Octane Triage Analysis || || || || || | / / / \ || ==||=====|| | / |/ \ /==| / \ ===| '======|| | \ | | \ | \ /| | || || /||/ / | | | || =========''====/=========/ /==||=====||======' \ / / Binary Refinery™ es una colección de scripts de Python que...

AD_Enumeration_Hunt

ADEnumerationHunt Description Welcome to the AD Pentesting Toolkit! This repository contains a collection of PowerShell scripts and commands that can be used for Active Directory AD penetration testing and security assessment. The scripts cover various aspects of AD enumeration, user and group...

WMIExec

WMIexec Set of python scripts which perform different ways of command execution via WMI protocol. Blog Post https://whiteknightlabs.com/2023/06/26/navigating-stealthy-wmi-lateral-movement/ Usage wmiexecscheduledjob.py Is a python script which authenticates to a remote WMI instance and execute...

ca-clone

CA Cloning Scripts Scripts to clone CA certificates for use in HTTPS client attacks. Currently includes scripts to clone a root Comodo CA, and a Digicert CA, both of which are fairly widely trusted in IoT devices. Usage Run either script in place to automatically generate a key and certificate. I...

ezsploit

ezsploit Alt text Linux bash 脚本自动化用于 metasploit 用于自动化 metasploit 功能的命令行脚本 检查 metasploit 服务，如果不存在则启动 轻松为 Windows、Linux、Android 和 Mac 制作 meterpreter reversetcp 载荷 启动多个 meterpreter reversetcp 监听器 帮助构建基本持久化选项和脚本 Armitage 启动器 进入 Msfconsole 一些其他有趣的东西 : 待办事项 为载荷/监听器添加更多功能，java、php、tomcat 等 改进整体功能 截图 Alt...

ezsploit

ezsploit Alt text Linux bash script automation for metasploit Command line script for automating metasploit functions Checks for metasploit service and starts if not present Easily craft meterpreter reversetcp payloads for Windows, Linux, Android and Mac Start multiple meterpreter reversetcp...

CVE-2026-19975

cve-id Donar...

CVE-2026-67401

cve-id Donar...

jsteg

jsteg root@kitploit: go get lukechampine.com/jsteg jsteg is a package for hiding data inside jpeg files, a technique known as steganography. This is accomplished by copying each bit of the data into the least-significant bits of the image. The amount of data that can be hidden depends on the...

CSSG

CSSG Cobalt Strike Shellcode Generator Ryan Stephenson RCStep Adds Shellcode - Shellcode Generator to the Cobalt Strike top menu bar CSSG is aggressor, .NET, and python scripts used to more easily generate and format beacon shellcode Generates beacon stageless shellcode with exposed exit method,...

CVE-2021-41773-exercise

Ejercicio CVE-2021-41773 Se encontró una falla en un cambio realizado en la normalización de rutas en Apache HTTP Server 2.4.49. Un atacante podría usar un ataque de path traversal para mapear URLs a archivos fuera de los directorios configurados mediante directivas similares a Alias. Si los...