Recheck

Recheck Recheck Domain tief scannen und alle möglichen Domains für eine Übernahme finden Schnelllinks Demo Installation Funktionen Beispiel Ausführung / Installation Wie ausführen? root@kitploit: git clone https://github.com/tegal1337/Recheck cd Recheck npm install npm start Funktionen Funktion|...

ALYCON-Threat-Landscape

ALYCON: Analisi Avanzata del Panorama delle Minacce Rilevamento di Minacce Multi-Dominio tramite Analisi dello Spazio delle Fasi Information-Theoretic Panoramica Visualizzazione dello spazio delle fasi di ALYCON che mostra il rilevamento di minacce multi-dominio e la classificazione delle anomali...

jackdaw

jackdaw gather gather gather What is this? Jackdaw is here to collect all information in your domain, store it in a SQL database and show you nice graphs on how your domain objects interact with each-other an how a potential attacker may exploit these interactions. It also comes with a handy...

degas

Degas Rilevamento di domini generati da DGA tramite modelli di deep learning Esecuzione Attualmente uso Conda Anaconda/Miniconda per lo sviluppo, ma dovresti essere in grado di usare anche Pipenv o virtualenv con il requirements.txt incluso. conda: root@kitploit: conda env create -f environment.y...

domainhunter

Domain Hunter Authors Joe Vest @joevest & Andrew Chiles @andrewchiles Domain name selection is an important aspect of preparation for penetration tests and especially Red Team engagements. Commonly, domains that were used previously for benign purposes and were properly categorized can be purchas...

CVE-2020-1472

CVE-2020-1472 CVE 2020-1472 Validierungsskript Annahme: WinRM ist zwischen Domänencontrollern aktiviert. Erforderliche Berechtigungen: root@kitploit: Falls untergeordnete Domänen vorhanden sind: Enterprise-Admin Falls einzelner Wald, einzelne Domäne: Domänen-Admin Dieses Skript muss auf einem...

valhalla

valhalla Valhalla trova dispositivi vulnerabili su Shodan, può anche scansionare una lista di domini per trovare vulnerabilità. INSTALLAZIONE git clone https://github.com/gotr00t0day/valhalla.git cd valhalla pip3 install -r requirements.txt chmod +x install.sh ./install.sh UTILIZZO root@kitploit:...

CVE-2020-1472-Easy

CVE-2020-1472-Easy Questa è decisamente una cosa che non vorresti eseguire su nulla a cui tieni. Costruito da un write-up e dal lavoro di @obfuscatee e un'altra fonte Utilizza codice da https://github.com/dirkjanm/CVE-2020-1472 https://github.com/SecuraBV/CVE-2020-1472...

NewMachineAccount

NewMachineAccount Visão Geral NewMachineAccount.exe é uma ferramenta exe autônoma e simples para criar novas contas de máquina com senha personalizada em um domínio especificado. Uso root@kitploit: NewMachineAccount.exe v1.0 by @decoderit -dc -name -domain -password -ou -user -pass -uac Parâmetro...

ridrelay

RidRelay Quick and easy way to get domain usernames while on an internal network. Hit me up: @skorov8 How it works RidRelay combines the NTLM Relay attack, common lsarpc based queries and RID cycling to get a list of domain usernames. It takes these steps: 1. Spins up an SMB and HTTP servers and...

zerologon

zerologon Controlla gli eventi che indicano dispositivi non compatibili - CVE-2020-1472 EventID 5827 EventID 5828 EventID 5829 EventID 5830 EventID 5831 Ad agosto Microsoft ha corretto CVE-2020-1472. Con quella patch c'è un periodo di attesa fino al 9 febbraio 2021 in cui le connessioni non sicur...

dnsenum

README - dnsenum.pl VERSION: 1.2.4 multithreaded perl script to enumerate DNS information of a domain and to discover non-contiguous ip blocks. OPERATIONS: root@kitploit: 1 Get the host's addresse A record. 2 Get the namservers threaded. 3 Get the MX record threaded. 4 Perform axfr queries on...

ZeroLogon-PoC-DC-Pwn

Zerologon CVE-2020-1472 Visão Geral Este projeto é uma implementação da vulnerabilidade Zerologon CVE-2020-1472 , uma das vulnerabilidades de segurança mais críticas do Active Directory. Esta vulnerabilidade permite que um atacante não autenticado comprometa todo o domínio do Active Directory ao...

CVE-2025-10230

CVE-2025-10230: Samba Critical RCE CVSS 10.0 Zusammenfassung der Schwachstelle CVE-2025-10230 ist eine kritische Schwachstelle zur Remote-Codeausführung RCE, die 13 Jahre lang im Code von Samba verborgen blieb. Der Fehler liegt in der Verarbeitung von WINS-Registrierungspaketen Windows Internet...

EITest-tools-scripts-IOCs

IOCs Indicadores de Comprometimento IOCs atualizados a cada 30 minutos relacionados às campanhas do EITest. O domínio stat-dns.com usado no algoritmo DGA do EITestfoi sinkholed. Como resultado, a campanha do EITest aparentemente foi encerrada desde 2018-03-15. backend-decipher.py Decodifica os...

adfly

adfly Active-Directory-Abfragetool, das das LDAP-Protokoll verwendet. Es hilft Red Teamern / Penetrationstestern, Benutzeranmeldeinformationen zu validieren, Informationen über AD-Benutzer und AD-Gruppen abzurufen. AD fly ist ein Tool, das das LDAP-Protokoll für die Benutzerauthentifizierung und...

CVE-2022-3168-adb-unexpected-reverse-forwards

Die Reverse-Tunnel-Funktion in Android Debug Bridge adb war anfällig, da sie es bösartigen adb-Daemons erlaubte, Verbindungen zu beliebigen Hosts/Ports und Unix-Domain-Sockets auf dem Host zu öffnen. Fenster des Angreifers wo der schädliche Daemon läuft: root@kitploit: $ ./adbroguedaemon.py Fenst...

ZeroLogon-Exploit

ZeroLogon - शोषण और उदाहरण परीक्षण PoC को Secura से संशोधित किया गया, CVE-2020-1472, मशीन के पासवर्ड को शून्य करने के लिए। मशीन पर पासवर्ड बदलने के लिए Microsoft के NetrServerPasswordSet2 फ़ंक्शन का उपयोग किया जाता है। यह शोषण Impacket के nrpc.py मॉड्यूल का लाभ उठाता है NetrServerPasswordSet2 को...

buster

Description Buster is an advanced OSINT tool used to: Get social accounts of an email using multiple sourcesgravatar,about.me,myspace,skype,github,linkedin,previous breaches Get links to where the email was found using google,twitter,darksearch and paste sites Get breaches of an email Get domains...

noPac-detection

Informazioni Script di rilevamento per CVE-2021-42278 e CVE-2021-42287 Utilizzo root@kitploit: The detection script uses the domain account credentials to determine the possibility of the vulnerabilities. usage: noPac-detection.py -h -debug -dc-ip -targetUser credentials optional arguments: -h,...