vsaudit

vsaudit This is an opensource tool to perform attacks to general voip services It allows to scans the whole network or single host to do the gathering phase, then it is able to search for most known vulnerabilities on the founds alive hosts and try to exploit them. Install dependencies To start...

drovorub-hunt

Dispatches from Drovorub: Network Threat Hunting for Russia GRU GTsSS' Malware at Scale Recently, the National Security Agency and Federal Bureau of Investigation released a report outlining command and control capabilities leveraged by the Russian General Staff Main Intelligence Directorate GRU...

A-xex

A-xex This project is part of a school work focusing on network security. Author not responsable for malicious use. The project is always updating About A-xex Framework root@kitploit: A-xex is a simple and intuitive tool, it joins many important tools that can help in a hack action. The goal is t...

ike-scan

ike-scan 发现并识别 IKE 主机（IPsec VPN 服务器） 目录 构建与安装 概述 使用说明 实现细节 主机输入与内存需求 速率限制 Cookie 生成与远程主机识别 IKE 数据包细节 后退指纹识别 程序输出 示例 支持的平台 进一步阅读与 RFC 联系方式 构建与安装 ike-scan 使用标准的 GNU autoconf 和 automake 工具，因此安装过程如下： 运行 git clone https://github.com/royhills/ike-scan.git 获取项目源码 运行 cd ike-scan 进入源码目录 运行 autoreconf...

CorelightForSentinelOne

Paneles de SentinelOne para Singularity Operations Center Descripción general Esta guía le ayudará a configurar y utilizar los paneles de SentinelOne, que ofrecen potentes perspectivas de datos para monitorear y analizar el tráfico de su red. Ya sea que sea un analista de seguridad, administrador...

op4

op4 — Secure Terminal Messenger Op4 is a terminal-based encrypted messaging application written in Rust. It provides end-to-end encrypted private messaging with post-quantum cryptography, routed entirely through the Tor network so that neither the content of your messages nor your IP address is...

phantomprint

PHANTOMPRINT Passive Hybrid ANalysis Tool for Os-agnostic Multiprotocol PRofiling & INTelligence Fingerprint hosts on your network without sending a single packet. PHANTOMPRINT correlates multiple passive signals TCP/IP stack, TLS/JA4, DHCP Option 55, HTTP/2 HPACK, DNS behavior to identify...

WonderShell

WonderShell - CVE - 2021-44595 | CVE - 2021-44596 Descubierto por Netanel Cohen y Tomer Peled, investigadores de seguridad de BugSec. Descripción Ejemplo de POC para explotar Wondershare Dr.Fone . Dr.Fone es un kit de herramientas para teléfonos desarrollado por Wondershare, y es vulnerable a RCE...

sunsetscan

SunsetScan Network security auditing for humans — powered by nmap, built for everyone. Website: sunsetscan.com SunsetScan is a local-network security auditing tool for home network owners and IT staff who want the depth of nmap without learning nmap syntax. Point it at your network and it finds...

fcn-

fcn conecta tu red privada desde cualquier lugar de forma gratuita 1. Qué es fcn fcnfree connect es una herramienta sencilla de acceso con un clic a redes privadas, compuesta por un servidor de cliente y un cliente fcn utiliza el servidor público de datos de fcn y tecnología de cifrado de datos...

SharkTooth

SharkTooth In Development SharkTooth is a port scanner with TCP and UDP support. Suitable for basic network auditing and training. What does “In Development” mean: New features are being added while existing ones are refactored or removed. New features: SYN-Scan, sniffer Manual Packet Assembly:...

maltrail

Maltrail Maltrail 是一个网络流量检测系统，用于识别与已知恶意基础设施的通信，并报告选定的流量异常。它将网络上观察到的域名、URL、IP 地址、IP:port 对以及 User-Agent 值与一组称为 trails 的指标进行匹配。 一次检测被记录为单个事件，包含源、目标、协议、匹配的 trail、分类以及 trail 来源：text "2026-08-07 09:14:22.117034" gw 10.13.13.2 57809 1.1.1.1 53 UDP DNS malware.bakewithdavid.com "asyncrat malware" static...

CVE-2026-23005-Matter-Commissioning-Code-Brute-Force-Without-Rate-Limit

CVE-2026-23005 – Fuerza Bruta del Código de Comisionado de Matter Sin Límite de Velocidad Código del programa simulación de Matter en Python root@kitploit: mattercommissioningsim.py import random realcode = random.randint10000000, 99999999 def attemptjoincodeattempt: Simulate joining: no delay, n...

CVE-2020-6308-PoC

CVE-2020-6308 SAP POC SAP BusinessObjects Business Intelligence Platform Web Services, versiones 410, 420 y 430, permite a un atacante no autenticado inyectar valores arbitrarios como parámetros CMS para realizar búsquedas en la red interna que de otro modo no es accesible externamente. Sígueme e...

RomBuster

RomBuster RomBuster is a router exploitation tool that allows to disclosure network router admin password. Features Exploits vulnerabilities in most popular routers such as D-Link, Zyxel, TP-Link, Cisco and Huawei. Optimized to exploit multiple routers at one time from list. Simple CLI and API...

DetectPacket-CVE-2017-8464

Building a Vulnerability Detection Application for CVE-2017-8464 Source click here CONTENTS: PART 1: OVERVIEW OF CVE-2017-8464 1. CONCEPT OF LNK FILE 2. CREATING A SYSTEM VULNERABLE TO CVE-2017-8464 3. TOOLS FOR EXPLOITING CVE-2017-8464 PART 2: USING METASPLOIT TO EXPLOIT CVE-2017-8464 2.1...

ODIN

ODIN Observe, Detect, and Investigate Networks Current version: v2.0.0 "Huginn" ODIN is Python tool for automating intelligence gathering, asset discovery, and reporting. Remember, check the dev branch for the bleeding edge, and feedback is welcome! See the GitHub wiki for details and installatio...

LocalNet_Attacker

LocalNetAttacker This is a java based local network attacking tool. By using this tool you can attack or gather information about the target Windows Systems thats are connected with you in the same Network. Features Fetch IP details Fetch system details Web attacks Directory discovery Download an...

dnspeep

dnspeep dnspeep 可以让你监控你的计算机正在发出的DNS查询。 以下是一些示例输出： root@kitploit: $ sudo dnspeep query name server IP response A incoming.telemetry.mozilla.org 192.168.1.1 CNAME: telemetry-incoming.r53-2.services.mozilla.com, CNAME: pipeline-incoming-prod-elb-149169523.us-west-2.elb.amazonaws.com, A: 52.39.144.18...

psudohash

psudohash Cool New Features of v1.1.0 Special thanks to DavidAngelos: ▶️ Added a progress bar in every step to track execution. ▶️ Added options: In-order joins -i / --inorder: join keywords only in the original order e.g. foo,bar,baz → foo, bar, baz, foobar, foobaz, barbaz, foobarbaz. All-order...