ASLRay

ASLRay Linux ELF x32/x64 ASLR DEP/NX bypass exploit with stack-spraying Properties: ASLR bypass DEP/NX bypass Cross-platform Minimalistic Simplicity Unpatchable Dependencies: Linux 2.6.12+ - would work on any x86-64 Linux-based OS BASH - the whole script Limitations: Stack needs to be executable...

LARE

LARE L ocal A uto R oot E xploiter is a simple bash script that helps you deploy local root exploits from your attacking machine when your victim machine do not have internet connectivity. The script is useful in a scenario where your victim machine do not have an internet connection eg. while yo...

b4tm4n

B4TM4N PHP WEBSHELL Login Account Default root@kitploit: Username : k4mpr3t Password : k4mpr3t Features root@kitploit: 0 File Manager 1 Sec. Info 2 Simply Database 3 Interactive terminal 4 PHP Reverse Back Connect 5 Run PHP Code 6 Custom Toolz 7 Self Script Encryptor ! 8 Error Handler 9 Themes Se...

OSINT-Search

OSINT-Search Description Script in Python that applies OSINT techniques by searching public data using email addresses, phone numbers, domains, IP addresses or URLs. Create an account at https://pipl.com/api and get the API key. Create an account at https://www.opencnam.com/ and get the Account S...

metasploit_in_termux

Metasploit Framework 6 in Termux How to Install Before In order to have updated Termux: Purge all data of Termux in Android Settings Uninstall and reinstall latest Termux version from F-Droid Version on Play Store is outdated Then launch Termux to initialization, close it force stop, not swap...

Sweet-Pineapple-Builder

Sweet WiFi Pineapple Tetra Builder Sweet Pineapple Builder is a python script that automate the whole process of creating a custom WiFi Pineapple Tetra image. As the WiFi Pineapple Tetra firmware is a custom version of OpenWrt 19.07.2, it is therefore possible to create our own custom firmware...

CredsLeaker

CredsLeaker v4.x A big shoutout to @ApSecDev who took this project to the next level! Kudos! This script used to display a powershell credentials box asked the user for credentials. However, That was highly noticeable. Now it's time to utilize Windows Security popup! Features AD domain...

magicRecon

MagicRecon: Fast, simple and effective MagicRecon is a powerful shell script to maximize the recon and data collection process of an objective and finding common vulnerabilities, all this saving the results obtained in an organized way in directories and with various formats. With Magic Recon you...

ddos

ndbiaw A Python script to DDOS a website using HTTP Flood method, a normal website only needs 5 seconds to completely collapse! Usage: This script can run on both Windows and Android Termux, below is the guide: root@kitploit: pip install -r requirements.txt python ndbiaw.py Important!!! This scri...

apk.sh

🕹️ apk.sh apk.sh는 APK를 가져오기pull, 디코딩decoding, 재빌드rebuilding, 패치patching와 같은 반복 작업을 자동화하여 Android 앱의 리버스 엔지니어링을 더 쉽게 만드는 Bash 스크립트입니다. 기능 apk.sh는 기본적으로 apktool을 사용하여 리소스를 디스어셈블, 디코딩 및 재빌드하고, 일부 bash를 사용하여 frida 가젯 인젝션 프로세스를 자동화합니다. 또한 앱 번들/분할 APK를 지원합니다. 🍄 시작 시 frida-gadget.so를 로드하도록 APK 패치 🆕 디컴파일없...

AutoIt-Ripper

AutoIt-Ripper これは何か これは、PE実行ファイルから「コンパイル済み」AutoItスクリプトを抽出するための短いPythonスクリプトです。 参考情報 このスクリプトは3つのリソースに強く 基づいています。AutoItについてもっと深く掘り下げたい場合は、ぜひチェックしてみてください: http://files.planet-dl.org/Cw2k/MyAutToExe/index.html Github ミラー I Github ミラー II https://github.com/sujuhu/autoit...

goCabrito

goCabrito Super organized and flexible script for sending phishing campaigns. Features Sends to a single email Sends to lists of emails text Sends to lists emails with first, last name csv Supports attachments Splits emails in groups Delays sending emails between each group Support Tags to be...

CVE-2023-25136

OpenSSH Pre-Auth Double Free CVE-2023-25136 POC このリポジトリには、Python の Paramiko ライブラリを使用して OpenSSH Pre-Auth Double Free の脆弱性 CVE-2023-25136 を確認する Proof of Concept POC スクリプトが含まれています。 前提条件 この POC スクリプトを実行する前に、以下の依存関係がインストールされていることを確認してください: Python 3.x Paramiko ライブラリ termcolor ライブラリ argparse ライブラリ...

Chrome-Extractor

Chrome-Extractor Google Chromeのデータベースから保存されたすべてのパスワードを抽出し、chrome.txtに保存するPythonスクリプトです。 注: Windowsのみ対応...

APTSimulator

APT Simulator Important: Don't just ZIP download or clone the repo if you don't plan to develop some test. Use the package in the release which contains a packaged version with encrypted archives that don't contain cleartext samples and tools. APT Simulator is a Windows Batch script that uses a s...

community-scripts

コミュニティスクリプト コミュニティ、つまり皆さんによって提供された ZAP スクリプトのコレクションです : このリポジトリを ZAP で使用する最も簡単な方法は、ZAP Marketplace から「Community Scripts」アドオンをインストールすることです。 !CAUTION すべてのスクリプトに明らかに悪意のある動作がないか確認はしていますが、それでもスクリプトを確認し、注意して使用してください。 このリポジトリに貢献したい場合は、ローカルディレクトリにクローンし、ZAP の Options / Scripts 画面から追加することもできます。...

sudo-snooper

sudo-snooper sudo-snooper acts like the original sudo binary to fool users into entering their passwords. It will show a fake prompt just like the original to the user to enter their sudo password. This can be useful in penetration tests or security evaluations for testing user knowledge...

Invoke-EDRChecker

Invoke-EDRChecker The script will check running processes, process metadata, Dlls loaded into your current process and the each DLLs metadata, common install directories, installed services, the registry and running drivers for the presence of known defensive products such as AV's, EDR's and...

Stracciatella

Stracciatella v0.7 Powershell runspace from within C aka SharpPick technique with AMSI, ETW and Script Block Logging disabled for your pleasure. Nowadays, when Powershell got severly instrumented by use of techniques such as: AMSI ETW Script Block Logging Transcript file Modules logging Constrain...

chomp-scan

Chomp Scan A scripted pipeline of tools to simplify the bug bounty/penetration test reconnaissance phase, so you can focus on chomping bugs. If you've found any bugs using this tool, please let me know! Scope Chomp Scan is a Bash script that chains together the fastest and most effective tools in...