postshell

PostShell PostShell is a post-exploitation shell that includes both a bind and a back connect shell. It creates a fully interactive TTY which allows for job control. The stub size is around 14kb and can be compiled on any Unix like system. ScreenShots Banner and interaction with shell after a...

BabyShark

INTRO This is a basic C2 generic server written in Python and Flask. This code has based ideia to GTRS, which uses Google Translator as a proxy for sending commands to the infected host. The BabyShark project aims to centralize reverse connections with agents, creating a way to centralize several...

chisel

Chisel Chisel is a fast TCP/UDP tunnel, transported over HTTP, secured via SSH. Single executable including both client and server. Written in Go golang. Chisel is mainly useful for passing through firewalls, though it can also be used to provide a secure endpoint into your network. Table of...

PowerProxy

PowerProxy PowerShell SOCKS proxy with reverse proxy capabilities. PowerProxy is written with penetration testers in mind. Reverse proxy functionality is a priority, for traversing networks that block inbound connections. Reverse proxy connections are encrypted by default. Username/Password...

HacApt

HacApt HacApt is a package manager for hackers built by hackers that focuses on the installation of information security tools. HacApt is built with security in mind so everything is done over Tor connections. First look Here's the first demo video of HacApt Helpful links Homepage User Manual...

caronte

caronte$ Caronte is a tool to analyze the network flow during capture the flag events of type attack/defence. It reassembles TCP packets captured in pcap files to rebuild TCP connections, and analyzes each connection to find user-defined patterns. The patterns can be defined as regex or using...

systeminformer

System Informer A free, powerful, multi-purpose tool that helps you monitor system resources, debug software and detect malware. Brought to you by Winsider Seminars & Solutions, Inc...

urlbuster

root@kitploit: ██╗ ██╗██████╗ ██╗ ██████╗ ██╗ ██╗███████╗████████╗███████╗██████╗ ██║ ██║██╔══██╗██║ ██╔══██╗██║ ██║██╔════╝╚══██╔══╝██╔════╝██╔══██╗ ██║ ██║██████╔╝██║ ██████╔╝██║ ██║███████╗ ██║ █████╗ ██████╔╝ ██║ ██║██╔══██╗██║ ██╔══██╗██║ ██║╚════██║ ██║ ██╔══╝ ██╔══██╗ ╚██████╔╝██║...

gundog

gundog gundog - PowerShell based guided hunting in Microsoft 365 Defender Gundog provides you with guided hunting in Microsoft 365 Defender. Especially if not only for Email and Endpoint Alerts at the moment. Functionality You provide an AlertID you might received via Email notification and gundo...

ketshash

Ketshash A little tool for detecting suspicious privileged NTLM connections, in particular Pass-The-Hash attack, based on event viewer logs. The tool was published as part of the "Pass-The-Hash detection" research - more details on "Pass-The-Hash detection" are in the blog post:...

zeek-long-connections

긴 연결 Zeek는 일반적으로 연결 종료 시점에 연결을 기록하지만, 이로 인해 매우 오래 지속되는 연결이 방어자에게 너무 늦을 때까지 알려지지 않게 되어 사고 대응자에게 문제를 일으킬 수 있습니다. 이 패키지는 connlong이라는 새 로그를 제공하며, 이 로그는 긴 연결에 대한 "중간" conn 로그를 기록합니다. 일반적인 Zeek conn 로그는 사용자가 "완료된" 연결만 포함한다고 가정할 수 있으므로, 이와의 의미를 혼동하지 않도록 별도의 로그 스트림으로 기록됩니다. 이 스크립트는 긴 연결을 발견할 때마다...

hget

hget Этот проект — мой личный проект для изучения golang, чтобы создать что-то полезное. Статус сборки : Установка root@kitploit: $ go get -d github.com/huydx/hget $ cd $GOPATH/src/github.com/huydx/hget $ make clean install Бинарный файл будет собран в ./bin/hget, вы можете скопировать его в...

CVE-2022-3168-adb-unexpected-reverse-forwards

Android Debug Bridge adb のリバーストンネル機能には、悪意のある adb デーモンがホスト上の任意のホスト/ポートおよび Unix ドメインソケットへの接続を開くことができる脆弱性がありました。 攻撃者ウィンドウ 不正なデーモンが実行されている場所: root@kitploit: $ ./adbroguedaemon.py 被害者ウィンドウ この例では GCE VM: root@kitploit: $ adb connect serverip:5556 connected to 8.tcp.ngrok.io:19076 攻撃者ウィンドウ: root@kitploi...

sslx

sslx openssl, но не нужно гуглить флаги. Один бинарник, который управляет сертификатами, TLS-соединениями и всем тем, для чего обычно нужно три разных вызова openssl. Написан на Rust с использованием rustls, не требует системного OpenSSL. Установка root@kitploit: cargo install sslx Собранные...

winevt_logs_analysis

Winevt logs analysis Remote connections Simple script for the purpose of finding remote connections to Windows machine and ideally some public IPs. It checks for some EventIDs regarding remote logins and sessions. You should pip install -r requirements.txt so the script can work and parse some of...

winevt_logs_analysis

Анализ журналов Winevt Удаленные подключения Простой скрипт для поиска удаленных подключений к машине Windows и, в идеале, некоторых публичных IP-адресов. Он проверяет некоторые EventIDs, связанные с удаленными входами и сеансами. Вам следует выполнить pip install -r requirements.txt , чтобы скри...

PortForwarder

Перенаправление TCP-портов для Windows Высокопроизводительный перенаправитель TCP-портов для Windows с возможностью IP-фильтрации и подробным логированием. Возможности ✅ Перенаправление TCP-трафика с локального порта на любой удаленный хост:порт ✅ Опциональная IP-фильтрация для повышенной...

tproxy

tproxy 영어 | 简体中文 | 日本語 이 도구를 만든 이유 백엔드 서비스를 개발하고 go-zero를 작성할 때, 네트워크 트래픽을 모니터링해야 하는 경우가 자주 있습니다. 예를 들어: 1. gRPC 연결 모니터링, 언제 연결하고 언제 다시 연결하는지 2. MySQL 연결 풀 모니터링, 연결 수와 수명 정책 파악 3. 실시간으로 모든 TCP 연결 모니터링 설치 root@kitploit: $ go install github.com/kevwan/tproxy@latest 또는 docker 이미지를 사용할 수 있습니다:...

thc-hydra

H Y D R A root@kitploit: c 2001-2023 by van Hauser / THC https://github.com/vanhauser-thc/thc-hydra Many modules were written by David dot Maciejak @ gmail dot com BFG code by Jan Dlabal Licensed under AGPLv3 see LICENSE file Please do not use in military or secret service organizations, or for...

avml

AVML Acquire Volatile Memory for Linux Summary A portable volatile memory acquisition tool for Linux. AVML is an X8664 userland volatile memory acquisition tool written in Rust, intended to be deployed as a static binary. AVML can be used to acquire memory without knowing the target OS distributi...