scripts-and-tools

Scripts y herramientas 30backups.sh -- Crea y conserva las últimas 30 copias de seguridad web y SQL adig.sh -- Consultas DNS, inversas y de servidores de nombres, así como cualquier redirección blocklist-submission-forms.html -- Formularios de envío de listas de bloqueo y abusos...

frida

frida 此仓库包含用于Android应用渗透测试的各种Frida脚本。我创建此项目是为了展示Frida动态分析框架的能力。你可以在Medium上阅读我的《Frida简介》博客文章，其中我解释了如何将Frida与Android结合使用。 下载 你可以直接克隆仓库，或前往发布页面下载Frida脚本。 root@kitploit: git clone https://github.com/t0thkr1s/frida 安装 你必须在系统上安装Frida。可以通过以下方式安装： root@kitploit: pip3 install frida-tools 免责声明...

yeti

Yeti Platform Yeti aims to bridge the gap between CTI and DFIR practitioners by providing a Forensics Intelligence platform and pipeline for DFIR teams. It was born out of frustration of having to answer the question "where have I seen this artifact before?" or "how do I search for IOCs related t...

CVE-2021-26700

RCE in NPM VSCode Extension Fixed 10th February 2021 in https://github.com/microsoft/vscode-npm-scripts/commit/cdd5e507564e0cc0f60bcccf184822be3fd73e07 https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-26700 Summary Remote code execution vulnerability in the eg2.vscode-npm-script...

redpill

:octocat: Project Description The redpill project aims to assist reverse tcp shells in post-exploration tasks. Often, on redteam appointments we need to use unconventional ways to access the target system, like reverse tcp shells not metasploit in order to bypass the defenses implemented by the...

kali-arm

Scripts de compilación de Kali-ARM Scripts de compilación ARM de Kali Linux. Estos son los mismos scripts de compilación que usamos para generar las imágenes ARM oficiales pregeneradas de Kali Linux, disponibles aquí: https://www.kali.org/get-kali/ Hay scripts adicionales incluidos en este...

CodeTest

Welcome to CodeTest 👉About This Project The main purpose of this project: to provide a unified execution entry point using a visual interface for Python POC\EXP test scripts collected daily, making it convenient to run. Target audience: penetration testers with a Python foundation the tool comes...

cve-2021-27065

I will continue to add any new code or modify existing code based on searching for stolen data If you have been compromised these scripts will by no means fix it for you! These provide no benifit to you other than you now knowing the extent of what has happened to your system With that being said...

nse-log4shell

nse-log4shell Scripts NSE de Nmap para comprobar vulnerabilidades log4shell o LogJam CVE-2021-44228. Los scripts NSE verifican los servicios expuestos más populares en Internet. Es un script básico donde puedes personalizar el payload. Ejemplos Ten en cuenta que los scripts NSE solo emitirán las...

trellis-cve-2018-6389

trellis-cve-2018-6389 缓解 CVE-2018-6389 WordPress 的 load-scripts / load-styles 攻击。 目标 为什么？ 缓解措施 为什么不？ 要求 安装 Trellis WordPress 常见问题 我可以在托管主机上使用这个吗？ 这看起来很酷。我在哪里可以找到更多这样的好东西？ 这不在 wp.org 上。我在哪里可以给出 ⭐️⭐️⭐️⭐️⭐️ 的评价？ 替代方案 测试 语法检查 作者信息 反馈 更新日志 许可 目标 通过 Nginx 拒绝所有对 wp-admin/load-scripts.php 和...

hacks

root@kitploit: /\ /\ \ /\ \ /\ /\ \ /:// /::\ \ /::\ \ /:/ / /::\ \ /::/\ /:::\ /:/:\ /::-"\ /::\ /::/ / /::/ / :\ // ;:;-",-" ::// /:/ / /:/ / :\ |:| | ::/ / // // // || // Some random scripts. Just trying to be like the cool kids. Place all the scripts under...

nse-exchange

nse-exchange Nmap NSE 脚本，用于检测 Exchange 漏洞（CVE-2022-41082）。 NSE 脚本检查互联网上最常暴露的服务。这是一个基础脚本，用于检查虚拟补丁是否有效。 示例 由于目前尚无补丁——仅检查了主机是否存在可用的临时解决方法。 简单示例： root@kitploit: nmap -sV -T4 -v --script=http-vuln-cve-2022 scanme.nmap.org 更快速的扫描（大型子网）： root@kitploit: nmap -p443 -T4 -v --script=http-vuln-cve-2022...

PowershellKerberos

PowershellKerberos Algunos scripts para abusar de Kerberos usando Powershell. Mira el vídeo de uso Gracias a @BRIPWN YouTube Injector.ps1 Pequeña herramienta para inyectar tickets de Kerberos. Soporta dos modos de trabajo: Puedes leer el ticket desde un archivo kirbi modo 1 Puedes leer el ticket...

sharesniffer

sharesniffer sharesniffer is a network analysis tool for finding open and closed file shares on your local network. It includes auto-network discovery and auto-mounting of any open cifs and nfs shares. How to use Example to find all hosts on any local network with open/closed nfs/smb shares:...

bunitu_tests

bunitutests Scripts para comunicación con el troyano Bunitu y sus C&C ¡Úselo bajo su propio riesgo! Autores: : hasherezade Malwarebytes : Sergei Frankoff Sentrant Archivos: cnc1test.py - registra tu host como un bot proxy en la botnet Bunitu comunica con C&C1 cnc2test.py - verifica si el host dad...

ghidra-scripts

ghidra-scripts "Los humanos estamos mejor adaptados para reconocer comida que para mantener grandes grafos en la cabeza." -- Halvar Flake Una colección de mis scripts de Ghidra para facilitar la ingeniería inversa y la investigación de vulnerabilidades. Entrada del blog...

gowitness

gowitness A golang, web screenshot utility using Chrome Headless. introduction gowitness is a website screenshot utility written in Golang, that uses Chrome Headless to generate screenshots of web interfaces using the command line, with a handy report viewer to process results. Both Linux and mac...

CVE-2021-3438

What is included? CVE-2021-3438detection v2sccm.ps1 is a script to run via sccm to get a small report on the vulnerability of managed devices. CVE-2021-3438detection.ps1 is a script to run manually or remote on a managed device. CVE-2021-3438remediation.ps1 is a script to check and run the...

RTA

Red Team Automation RTA RTA provides a framework of scripts designed to allow blue teams to test their detection capabilities against malicious tradecraft, modeled after MITRE ATT&CK. RTA is composed of python scripts that generate evidence of over 50 different ATT&CK tactics, as well as a compil...

capture-the-flag

Capture The Flag! Remasteriza imágenes de Live CD de Linux con el propósito de crear wargames de seguridad listos para usar con vulnerabilidades preinstaladas para explotar. Requisitos Necesitarás lo siguiente para construir el Live CD con los scripts de este proyecto: Linux, con acceso root...