strafer

Strafer Elasticsearch infections are rising exponentially. The adversaries are exploiting open and exposed Elasticsearch interfaces to trigger infections in the cloud and non-cloud deployments. During this talk, we will release a tool named "STRAFER" to detect potential infections in the...

CVE-2023-24775-and-CVE-2023-24780

CVE-2023-24775-and-CVE-2023-24780 mi PoC en Python para 2023-24780 y CVE-2023-24775, este sqli CVE de funadmin Este es un repositorio con un exploit PoC en Python para el sqli CVE de funadmin. CVE-2023-24774 - https://nvd.nist.gov/vuln/detail/CVE-2023-24780 Versión vulnerable de Funadmin v3.2.0...

MailAccess

root@kitploit: ███╗ ███╗ █████╗ ██╗██╗ █████╗ ██████╗ ██████╗███████╗███████╗███████╗ ████╗ ████║██╔══██╗██║██║ ██╔══██╗██╔════╝██╔════╝██╔════╝██╔════╝██╔════╝ ██╔████╔██║███████║██║██║ ███████║██║ ██║ █████╗ ███████╗███████╗ ██║╚██╔╝██║██╔══██║██║██║ ██╔══██║██║ ██║ ██╔══╝ ╚════██║╚════██║ ██║...

geowifi

📡💘🌎 | geowifi BSSIDとSSIDに基づいてWiFi位置情報データをさまざまな公開データベースで検索します。 💾 データベース Wigle| Apple| Google| Milnikov ---|---|---|--- WifiDB| Combain| Freifunk Carte| ❌ 提供終了OpenWifi ✔️前提条件 Python3。 Windows で絵文字を表示するには、新しいWindowsターミナルをインストールすることをお勧めします。 🔑 APIと設定ファイル このツールにはgwutilsフォルダ内にconfig.yaml...

beagle

Beagle 1. About Beagle 2. Installation 1. Docker 2. Python Package 3. Configuration 3. Web Interface 1. Uploading Data 2. Browsing Existing Graphs 3. Graph Interface 1. Inspecting Nodes and Edges 2. Expanding Neighbours 3. Hiding Nodes 4. Running Mutators 5. Toggling Node and Edge Types 6...

audit_couchdb

Audit CouchDB: The simple, clear, CouchDB security assessment Audit CouchDB is a simple tool with a powerful message. Given an Apache CouchDB URL, it will tell you everything you ever wanted to know about its security. Objective Audit CouchDB will perform the following actions: 1. Learn every...

impacket

Impacket Copyright Fortra, LLC and its affiliated companies. All rights reserved. Impacket was originally created by SecureAuth, and now maintained by Fortra's Core Security. Impacket is a collection of Python classes for working with network protocols. Impacket is focused on providing low-level...

melee

MELEE: A Tool to Detect Ransomware Infections in MySQL Instances Attackers are abusing MySQL instances for conducting nefarious operations on the Internet. The cybercriminals are targeting exposed MySQL instances and triggering infections at scale to exfiltrate data, destruct data, and extort mon...

melee

MELEE: MySQLインスタンスにおけるランサムウェア感染検出ツール...

dorkish

Dorkish During reconaissance phase or when doing OSINT , we often use google dorking and shodan and thus the idea of Dorkish. Dorkish is a Chrome extension tool that facilitates custom dork creation for Google and Shodan using the builder and it offers prebuilt dorks for efficient reconnaissance...

Nosql-Exploitation-Framework

Nosql-Exploitation-Framework 用于NoSQL扫描与利用的框架 NoSQL利用框架 2.02b 已发布 作者 NoSQL利用框架由Francis Alexander编写 Wiki NoSQL利用框架的安装与使用Wiki - https://github.com/torque59/Nosql-Exploitation-Framework/wiki 特性: 首个同时支持Mongo、Couch、Redis、HBase、Cassandra的工具 支持NoSQL Web应用 新增JS注入与Web应用枚举的有效载荷列表 扫描支持Mongo、CouchDB和Redis...

SQLiDetector

SQLiDetector BurpBountyプロファイルをサポートしたシンプルなPythonスクリプト。14のペイロードを使って複数のリクエストを送信し、152の正規表現パターンをチェックすることで、さまざまなデータベースのSQLインジェクション「エラーベース」を検出します。 root@kitploit: +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+- | S|Q|L|i| |D|e|t|e|c|t|o|r| | 作成者: Eslam Akl @eslam3kll & Khaled Nassar...

ma2tl

ma2tl macapt からタイムラインへ これは、macapt の分析結果データベースから macOS フォレンジックタイムラインを生成する DFIR ツールです。 必要条件 Python 3.7.0 以降 pytz tzlocal xlsxwriter インストール root@kitploit: % git clone https://github.com/mnrkbys/ma2tl.git 使用方法 root@kitploit: % python ./ma2tl.py -h usage: ma2tl.py -h -i INPUT -o OUTPUT -ot OUTPUTTYPE ...

username-anarchy

Username Anarchy Version: 0.6 20 September 2024 Author: urbanadventurer Andrew Horton Homepage: https://www.morningstarsecurity.com/research/username-anarchy Source: https://github.com/urbanadventurer/username-anarchy/ License: MIT Description Tools for generating usernames when penetration...

poro

poro Description Scan for publicly accessible assets on your AWS environment Services covered by this tool: AWS ELB API Gateway S3 Buckets RDS Databases EC2 instances Redshift Databases Poro also check if a tag you specify is applied to identified public resources using --tag-key and --tag-value...

detux

Detux: The Multiplatform Linux Sandbox Introduction: Detux is a sandbox developed to do traffic analysis of the Linux malwares and capture the IOCs by doing so. QEMU hypervisor is used to emulate Linux Debian for various CPU architectures. The following CPUs are currently supported: x86 x86-64 AR...

XPL-SEARCH

XPL SEARCH root@kitploit: Search exploits/vulnerabilities in multiple databases online! XPL SEARCH is a multiplatform toolWindows and Linux, which was developed in PHP with the aim of helping the hacker community to find exploits or 'vulnerabilities', using online databases, below is the list of...

noia

Noia Noia is a web-based tool whose main aim is to ease the process of browsing mobile applications sandbox and directly previewing SQLite databases, images, and more. Powered by frida.re. Please note that I'm not a programmer, but I'm probably above the median in code-savyness. Try it out, open ...

ADEL

ADEL - Android Data Extractor Lite Este script de Python vuelca todas las bases de datos SQLite importantes de un smartphone Android conectado al disco local y analiza estos archivos en un flujo de trabajo forense preciso. Si no hay ningún smartphone conectado, puedes especificar un directorio...

ODBParser

| ODBParser ---|--- TL;DR ODBParser 是一款用于搜索开放数据库中暴露的 PII 的工具。 仅用于识别暴露的 PII 并警告服务器所有者其不负责任的数据库维护行为 或查询您有权访问的数据库！ 请负责任地使用 这是什么？ 编写此工具是为了创建一站式 OSINT 工具，用于搜索、解析和分析开放数据库，以识别第三方服务器上的 PII 泄露。其他工具似乎要么只搜索开放数据库，要么在识别后不加区分地转储所有数据。它从一个或两个函数逐渐演变为当前仓库中的内容，因此代码并非尽善尽美。 功能 识别开放数据库的方式： 使用所有可能的参数查询 Shodan 和...