pentmenu

pentmenu 中文说明 A bash select menu for quick and easy network recon and DOS attacks Sudo is implemented where necessary. Tested on Debian and Arch. Contributions and pull requests are most welcome! Requirements: bash sudo curl netcat must support '-k' option, openbsd variant recommended hping3 or...

PwnBox-Kali

PwnBox-Kali Script Bash para automatizar el proceso de configurar una nueva máquina virtual Kali Linux para que se parezca a HTB PwnBox Solo un script para automatizar todo el proceso de ajustar e instalar herramientas en una nueva VM de Kali Linux Fue hecho principalmente para mí pero quizás...

Samurai

Samurai Email Discovery SED is a email discovery framework created 100% in BASH that grabs emails via google dork, company name, or domain name. Requirements apt-install lynx Possibly more features such as an OSINT options, and credential reuse discovery & torsocks implimented - but it does the...

owt

Actualmente inestable, se actualizará eventualmente. Offensive Wifi Toolkit owt creado por Brennan Mccown clu3bot Esta herramienta compila algunas herramientas necesarias para la auditoría wifi en un script bash de Unix con una interfaz amigable. El objetivo de owt es tener el menor tamaño de...

owt

Currently unstable will be updated eventually. Offensive Wifi Toolkit owt created by Brennan Mccown clu3bot This tool compiles some necessary tools for wifi auditing in a unix bash script with a user friendly interface. The goal of owt is to have the smallest file size possible while still...

Log4j-Scanner-Exploit

Log4Shell-Scanner-Exploit Bash script to remotely identify and/or exploit the Log4j vulnerability. This tool performs various tests using LDAP payloads and X-Api-Version, User-Agent, and X-Forwarded-For headers. Always use this script with prior authorization from the owner of the audited...

bypass-403

Bypass-403 Un script simple creado para uso propio para evadir 403 También se puede usar para comparar respuestas en varias condiciones como se muestra en la siguiente captura Uso ./bypass-403.sh https://example.com admin ./bypass-403.sh website-here path-here Características Usa 24 bypasses...

Armor

Armor Armor is a simple Bash script designed to create encrypted macOS payloads capable of evading antivirus scanners. Below is an example gif of Armor being used with a simple Netcat payload. A Netcat listener is started on port 4444. The "payload.txt" file is read and shown to contain a simple...

Shellshock-CVE-2014-6271-Exploitation-and-Analysis

🐚 Shellshock CVE-2014-6271 – Exploitation & Analysis 📌 Overview This is the practical assignment for Vulnerability Assessment and Penetration Testing – II , focusing on the exploitation and analysis of the Shellshock vulnerability CVE-2014-6271. Conducted in a controlled lab environment using...

otseca

Open source security auditing tool to search and dump system configuration. Introduction | Description | Requirements | Output | Parameters | Reports | How it works | Other Introduction...

Auto-Root-Exploit

Auto-Root-Exploit Auto Root Exploit Tool Author : Nilotpal Biswas Facebook : https://www.facebook.com/nilotpal.biswas.73 Twitter : https://twitter.com/nilotpalhacker USAGE : root@kitploit: for kernel version 2.6 all bash autoroot.sh 2 for kernel version 3 all bash autoroot.sh 3 for kernel version...

bashacks

bashacks ¿Qué es? bashacks es una colección de funciones de bash probablemente útiles para programadores, analistas de seguridad y usuarios generales que necesitan operaciones de bajo nivel. De hecho, no hay nada realmente nuevo en bashacks; todas las funciones están escritas usando software...

ASLRay

ASLRay Linux ELF x32/x64 ASLR DEP/NX bypass exploit with stack-spraying Properties: ASLR bypass DEP/NX bypass Cross-platform Minimalistic Simplicity Unpatchable Dependencies: Linux 2.6.12+ - would work on any x86-64 Linux-based OS BASH - the whole script Limitations: Stack needs to be executable...

zphisher

Una herramienta de phishing automatizada y amigable para principiantes con más de 30 plantillas. Descargo de responsabilidad Cualquier acción y/o actividad relacionada conZphisher es únicamente tu responsabilidad. El mal uso de este conjunto de herramientas puede resultar en cargos penales contra...

CVE-2014-6271-SHELLSHOCK

CVE-2014-6271-SHELLSHOCK 🐚 Shellshock Exploitation Script 🎯💻🔍 This Python script exploits the Shellshock vulnerability CVE-2014-6271 to execute commands remotely or establish a reverse shell on a vulnerable target. 🛠️⚠️ ⚠ Disclaimer 🚨❗ This script is intended for educational and authorized...

testssl.sh

Introducción...

CVE-2024-24919

Comprobador CVE-2024-24919 Un script bash sencillo para comprobar la vulnerabilidad CVE-2024-24919. Instalación Clona el repositorio: root@kitploit: git clone https://github.com/satriarizka/CVE-2024-24919.git cd CVE-2024-24919 chmod +x CVE-2024-24919-scan.sh Uso ./CVE-2024-24919-scan.sh -l ips.tx...

Shellshock_vuln_Exploit

🚨 Exploit RCE de Shellshock CVE-2014-6271 Este es un exploit en Python para la vulnerabilidad Shellshock CVE-2014-6271, que afecta a GNU Bash. El exploit apunta a scripts CGI en servidores web vulnerables y establece una shell reversa a la máquina del atacante. ID de CVE CVE-2014-6271 Aviso legal...

ShellShockHunter

ShellShockHunter v1.0 It's a simple tool for test vulnerability shellshock root@kitploit: Autor: MrCl0wn Blog: http://blog.mrcl0wn.com GitHub: https://github.com/MrCl0wnLab Twitter: https://twitter.com/MrCl0wnLab Email: mrcl0wnlab@\gmail.com Shellshock software bug Shellshock, also known as...

CVE-Vulnerability-Information-Downloader

CVE Vulnerability Information Downloader Common Vulnerability Scoring System CVSS is a free and open industry standard for assessing the severity of computer system security vulnerabilities. Exploit Prediction Scoring System EPSS estimates the likelihood that a software vulnerability will be...