hershell

Hershell NOTE: the project has been forked on this repo, check there for any other developments. Hershell is a simple TCP reverse shell written in Go. It uses TLS to secure the communications, and provide a certificate public key fingerprint pinning feature, preventing from traffic interception...

xmap

XMap: The Internet Scanner XMap is a fast network scanner designed for performing Internet-wide IPv6 & IPv4 network research scanning. XMap is reimplemented and improved thoroughly from ZMap and is fully compatible with ZMap, armed with the "5 minutes" probing speed and novel scanning techniques...

Disk-Arbitrator

Introducción Disk Arbitrator es una utilidad forense para Mac OS X diseñada para ayudar al usuario a garantizar que se sigan los procedimientos forenses correctos durante la creación de imágenes de un dispositivo de disco. Disk Arbitrator es esencialmente una interfaz de usuario para el framework...

kurukshetra

Kurukshetra Kurukshetra is a web framework that’s developed with the aim of being the first open source framework which provides a solid foundation to host reasonably complex secure coding challenges while still providing the ability to efficiently and dynamically execute each challenge on the...

chipsec

CHIPSEC: Platform Security Assessment Framework CHIPSEC is a framework for analyzing the security of PC platforms including hardware, system firmware BIOS/UEFI, and platform components. It includes a security test suite, tools for accessing various low level interfaces, and forensic capabilities...

macsurf

La web moderna, en un Mac de 25 años. MacSurf es un navegador web para Classic Mac OS 9 PowerPC. CSS3, JavaScript ES5 y PNG con canal alfa: funcionando en un iMac G3. MacSurf es un proyecto a tiempo completo. Si ha devuelto tu viejo Mac a la web, cada dólar ayuda a mantener el desarrollo. Sigue...

lunar

LUNAR Lockdown UNix Auditing and Reporting Version Current version 15.9.1 Refer to lunar.sh and changelog for more up to date version information License CC BY-SA: https://creativecommons.org/licenses/by-sa/4.0/ Fund me here: https://ko-fi.com/richardatlateralblast NOTICE Run this code in audit...

RootPipe-Demo

RootPipe-Demo This is a Proof-of-Concept Mac Application that demonstrates the RootPipe Privilege Escalation Vulnerability CVE-2015-1130 identified by Emil Kvarnhammar from TrueSec This demo was written in Objective-C, ported from the Python PoC here: RootPipe Usage To use, simply give a path to ...

zizzania

zizzania zizzania sniffs wireless traffic listening for WPA handshakes and dumping only those frames suitable to be decrypted one beacon + EAPOL frames + data. In order to speed up the process, zizzania sends IEEE 802.11 DeAuth frames to the stations whose handshake is needed, properly handling...

wafpass

WAFPASS root@kitploit: ██╗ ██╗ █████╗ ███████╗██████╗ █████╗ ███████╗███████╗ ██║ ██║██╔══██╗██╔════╝██╔══██╗██╔══██╗██╔════╝██╔════╝ ██║ █╗ ██║███████║█████╗ ██████╔╝███████║███████╗███████╗ ██║███╗██║██╔══██║██╔══╝ ██╔═══╝ ██╔══██║╚════██║╚════██║ ╚███╔███╔╝██║ ██║██║ ██║ ██║ ██║███████║███████...

RootPipeTester

Tabla de Contenidos 1. ¿Qué es RootPipe Tester? 2. ¿Por qué debería usar RootPipe Tester? 3. ¿Cómo uso RootPipe Tester? 4. ¡¡¡PÁNICO!!! ¿Mi sistema es vulnerable? ¿Vamos a morir todos? 1. OS X 10.10 Yosemite 2. OS X 10.9 Mavericks 3. OS X 10.8 Mountain Lion 4. OS X 10.7 Lion, Mac OS X 10.6 Snow...

phpsploit

Full-featured C2 framework which silently persists on webserver via polymorphic PHP oneliner...

OSXAuditor

OS X Auditor OS X Auditor es una herramienta gratuita de análisis forense informático para Mac OS X. OS X Auditor analiza y genera hashes de los siguientes artefactos en el sistema en ejecución o en una copia de un sistema que desee analizar: las extensiones del kernel los agentes y demonios del...

hershell

Hershell Simple TCP reverse shell written in Go. It uses TLS to secure the communications, and provide a certificate public key fingerprint pinning feature, preventing from traffic interception. Supported OS are: Windows Linux Mac OS FreeBSD and derivatives Why ? Although meterpreter payloads are...

perl-CVE-2013-1775

CVE-2013-1775 Apple Mac OSX 10.8.4 - Privilege Escalation Perl version of CVE-2013-1775 Apple Mac OSX 10.8.4 - Privelege Escalation exploit. References: https://www.exploit-db.com/exploits/27965/...

arpy

Arpy Arpy is an easy-to-use ARP spoofing MiTM tool for Mac. It provides 3 targeted functions: Packet Sniffing Visited Domains Visited Domains with Gource Each function will be explained below. Tested OS to date Darwin 14.3.0 Darwin Kernel Version 14.3.0 Mac OS X Requirements Python 2.7 Gource Sca...

KisMac2

POR FAVOR, TENGA EN CUENTA QUE ESTE PROYECTO YA NO SE MANTIENE KisMac2 KisMAC es una herramienta gratuita y de código abierto para la exploración y seguridad inalámbrica en Mac OS X. Seguimiento de incidencias: En adelante, utilice el rastreador...

blackboxprotobuf

Blackbox Protobuf Blackbox Protobuf now has an official package on PyPi under the namebbpb. The blackboxprotobuf package is an older fork Description Blackbox Protobuf is a set of tools for working with encoded Protocol Buffers protobuf without the matching protobuf definition. Protobuf is a bina...

test_struts2_vulnerability_CVE-2017-5638

teststruts2vulnerabilityCVE-2017-5638inMACOSX Prueba de la vulnerabilidad Struts2 CVE-2017-5638 en Mac OS X descargar aplicación web de prueba y ejecutarla en tomcat root@kitploit: install tomcat brew install tomcat confirm where the tomcat installed ls -lF which catalina confirm tomcat home dir ...

Astra Linux – Vulnerability in WebKit2GTK

A memory corruption issue has been resolved through improved state management. This issue is fixed in macOS Ventura 13.3, Safari 16.4, iOS 16.4, and iPadOS 16.4, as well as iOS 15.7.7 and iPadOS 15.7.7. Processing web content may lead to arbitrary code execution. Apple is aware of a report...