lulzbuster

Description A multithreaded, very fast and smart HTTPS directory and file bruteforcer written in C on top of libcurl. Given a target URL and a wordlist, it enumerates valid paths by firing concurrent HTTP requests and reporting back the responses that look like real hits i.e. status codes the use...

wpscan

WPScan WordPress Security Scanner WPScan WordPress Vulnerability Database - WordPress Security Plugin INSTALL Prerequisites Optional but highly recommended: rbenv Ruby = 3.3 - Recommended: latest stable Curl = 7.72 - Recommended: latest stable The 7.29 has a segfault The 7.72 could result in...

wordlistctl

Description Script to fetch, install, update and search wordlist archives from websites offering wordlists with more than 6400 wordlists available. In the latest version of the Blackarch Linux it has been added to /usr/share/wordlists/ directory. Installation pacman -S wordlistctl Usage...

httpgrep

Description A fast, asynchronous Python tool that scans HTTPS servers and greps for strings or regex patterns in HTTP response bodies and headers. It takes single hosts, URLs, CIDR ranges, IP ranges or files; scans multiple ports per target single, comma-lists or ranges, auto-detecting TLS vs pla...

FinalRecon

Twitter - Telegram - thewhiteh4t's Blog FinalRecon is an all in one automatic web reconnaissance tool written in python. Goal of FinalRecon is to provide an overview of the target in a short amount of time while maintaining the accuracy of results. Instead of executing several tools one after...

jsql-injection

Description jSQL Injection is a lightweight application used to find database information from a server. It's free , open source and cross-platform for Windows, Linux and Mac, and it works with Java from version 21 to 25. jSQL Injection is also part of the official penetration testing distributio...

tor-router

TOR Router Tor Router te permite usar TOR como un proxy transparente y enviar todo tu tráfico a través de TOR INCLUYENDO SOLICITUDES DNS , lo único que necesitas es: un sistema que use systemd si quieres usar el servicio y tor. TOR router no modifica archivos del sistema como hacen otras...

sploitctl

Descripción Script para obtener, instalar, actualizar y buscar archivos de exploits de sitios conocidos como packetstormsecurity.org y exploit-db.com. En la última versión de Blackarch Linux se ha añadido al directorio /usr/share/exploits. Instalación pacman -S sploitctl Uso root@kitploit:...

flashsploit

Exploitation Framework for ATtiny85 HID Attacks Twitter - Telegram - Blog Available in Flashsploit is an Exploitation Framework for Attacks using ATtiny85 HID Devices such as Digispark USB Development Board, flashsploit generates Arduino IDE Compatible .ino Scripts based on User Input and then...

webshells

Various webshells. Please send add more via pull requests. : ⚠ Usage Warning ⚠ These webshells are not vetted by BlackArch team and may contain backdoors! Always read the source before using any webshells in this repository. Installation On BlackArch you can install a package that will provide...

cansina

Cansina Cansina es una aplicación de descubrimiento de contenido web. Es bien sabido que las aplicaciones web no publican todos sus recursos o enlaces públicos, por lo que la única forma de descubrir estos recursos es solicitarlos y verificar la respuesta. El deber de Cansina es ayudarte a hacer...

bopscrk

bopscrk Generate smart and powerful wordlists for targeted attacks Explore the docs » View Demo · Report Bug · Request Feature Table of contents 1. About the Project What's new Built with 2. Getting started Installation Run interactive mode 3. Usage How it works Tips Advanced usage Lyricpass 4...

backcookie

backcookie Small backdoor using cookie. ========== root@kitploit: root@kitploit: Example one: python backcookie.py -u http://target.com/shell.php -c namecookie root@kitploit: Example two: python backcookie.py --url http://target.com/shell.php --cookie namecookie Custom command binfo, You get...

TheFatRat

TheFatRat Una Herramienta Masiva de Explotación TheFatRat es una herramienta de explotación que compila un malware con un payload famoso, y luego el malware compilado puede ejecutarse en Linux, Windows, Mac y Android. proporciona una forma fácil de crear backdoors y payloads que pueden eludir la...

climber

Climber Automated auditing tool to check UNIX/Linux systems misconfigurations which may allow local privilege escalation. Dependencies python = 2.7 python-crypto python-mako python-paramiko Note Climber needs Exscript, a Python module and a template processor for automating network connections ov...

truehunter

Truehunter El objetivo de Truehunter es detectar contenedores cifrados mediante un enfoque rápido y eficiente en memoria, sin dependencias externas para facilitar la portabilidad. Fue diseñado para detectar contenedores de Truecrypt y Veracrypt, aunque puede detectar cualquier archivo cifrado cuy...

nexfil

NExfil は、ユーザー名でプロフィールを検索するための OSINT ツールで、Python で書かれています。指定されたユーザー名は、数秒以内に350以上のウェブサイトでチェックされます。このツールの目標は、誤検出（false positives）を低く抑えながら、迅速に結果を得ることです。 利用可能な環境 紹介 The Privacy, Security, and OSINT Show https://soundcloud.com/user-98066669/237-the-huge-osint-show Hakin9 Magazine...

sandmap

sandmap Descripción • Cómo Usar • Línea de Comandos • Configuración • Requisitos • Otros • Contribuir • Licencia • Wiki Descripción sandmap es una herramienta que apoya el reconocimiento de redes y sistemas utilizando el masivo motor de Nmap. Proporciona una interfaz amigable, automatiza y aceler...

creepy

creepy Current Version 1.1 Author Yiannis Kakavas Homepage http://www.geocreepy.com Installation Instructions See http://www.geocreepy.com Description Geolocation OSINT tool. Creepy is a geolocation OSINT tool. Gathers geolocation related information from online sources, and allows for presentati...

NTLMRecon - Enumerate Information From NTLM Authentication Enabled Web Endpoints

A fast and flexible NTLM reconnaissance tool without external dependencies. Useful to find out information about NTLM endpoints when working with a large set of potential IP addresses and domains. NTLMRecon is built with flexibilty in mind. Need to run recon on a single URL, an IP address, an...