OSXAuditor

OS X Auditor OS X Auditor es una herramienta gratuita de análisis forense informático para Mac OS X. OS X Auditor analiza y genera hashes de los siguientes artefactos en el sistema en ejecución o en una copia de un sistema que desee analizar: las extensiones del kernel los agentes y demonios del...

xmap

XMap: The Internet Scanner XMap is a fast network scanner designed for performing Internet-wide IPv6 & IPv4 network research scanning. XMap is reimplemented and improved thoroughly from ZMap and is fully compatible with ZMap, armed with the "5 minutes" probing speed and novel scanning techniques...

RootPipeTester

Table of Contents 1. What is RootPipe Tester? 2. Why should I use RootPipe Tester? 3. How do I use RootPipe Tester? 4. PANIC!!! My system is vulnerable? Are we all going to die? 1. OS X 10.10 Yosemite 2. OS X 10.9 Mavericks 3. OS X 10.8 Mountain Lion 4. OS X 10.7 Lion, Mac OS X 10.6 Snow Leopard,...

macsurf

La web moderna, en un Mac de 25 años. MacSurf es un navegador web para Classic Mac OS 9 PowerPC. CSS3, JavaScript ES5 y PNG con canal alfa: funcionando en un iMac G3. MacSurf es un proyecto a tiempo completo. Si ha devuelto tu viejo Mac a la web, cada dólar ayuda a mantener el desarrollo. Sigue...

chipsec

CHIPSEC: Platform Security Assessment Framework CHIPSEC is a framework for analyzing the security of PC platforms including hardware, system firmware BIOS/UEFI, and platform components. It includes a security test suite, tools for accessing various low level interfaces, and forensic capabilities...

lunar

LUNAR Lockdown UNix Auditing and Reporting Version Current version 15.9.1 Refer to lunar.sh and changelog for more up to date version information License CC BY-SA: https://creativecommons.org/licenses/by-sa/4.0/ Fund me here: https://ko-fi.com/richardatlateralblast NOTICE Run this code in audit...

perl-CVE-2013-1775

CVE-2013-1775 Apple Mac OSX 10.8.4 - Privilege Escalation Perl version of CVE-2013-1775 Apple Mac OSX 10.8.4 - Privelege Escalation exploit. References: https://www.exploit-db.com/exploits/27965/...

hershell

Hershell Simple TCP reverse shell written in Go. It uses TLS to secure the communications, and provide a certificate public key fingerprint pinning feature, preventing from traffic interception. Supported OS are: Windows Linux Mac OS FreeBSD and derivatives Why ? Although meterpreter payloads are...

hershell

Hershell NOTE: the project has been forked on this repo, check there for any other developments. Hershell is a simple TCP reverse shell written in Go. It uses TLS to secure the communications, and provide a certificate public key fingerprint pinning feature, preventing from traffic interception...

Disk-Arbitrator

Introduction Disk Arbitrator is a Mac OS X forensic utility designed to help the user ensure correct forensic procedures are followed during imaging of a disk device. Disk Arbitrator is essentially a user interface to the Disk Arbitration framework, which enables a program to participate in the...

kurukshetra

Kurukshetra Kurukshetra is a web framework that’s developed with the aim of being the first open source framework which provides a solid foundation to host reasonably complex secure coding challenges while still providing the ability to efficiently and dynamically execute each challenge on the...

RootPipe-Demo

RootPipe-Demo Esta es una aplicación Mac de prueba de concepto que demuestra la vulnerabilidad de escalada de privilegios RootPipe CVE-2015-1130 identificada por Emil Kvarnhammar de TrueSec Esta demo fue escrita en Objective-C, adaptada del PoC en Python aquí: RootPipe Uso Para usarla, simplement...

zizzania

zizzania zizzania sniffs wireless traffic listening for WPA handshakes and dumping only those frames suitable to be decrypted one beacon + EAPOL frames + data. In order to speed up the process, zizzania sends IEEE 802.11 DeAuth frames to the stations whose handshake is needed, properly handling...

wafpass

WAFPASS root@kitploit: ██╗ ██╗ █████╗ ███████╗██████╗ █████╗ ███████╗███████╗ ██║ ██║██╔══██╗██╔════╝██╔══██╗██╔══██╗██╔════╝██╔════╝ ██║ █╗ ██║███████║█████╗ ██████╔╝███████║███████╗███████╗ ██║███╗██║██╔══██║██╔══╝ ██╔═══╝ ██╔══██║╚════██║╚════██║ ╚███╔███╔╝██║ ██║██║ ██║ ██║ ██║███████║███████...

phpsploit

Full-featured C2 framework which silently persists on webserver via polymorphic PHP oneliner...

arpy

Arpy Arpy is an easy-to-use ARP spoofing MiTM tool for Mac. It provides 3 targeted functions: Packet Sniffing Visited Domains Visited Domains with Gource Each function will be explained below. Tested OS to date Darwin 14.3.0 Darwin Kernel Version 14.3.0 Mac OS X Requirements Python 2.7 Gource Sca...

KisMac2

POR FAVOR, TENGA EN CUENTA QUE ESTE PROYECTO YA NO SE MANTIENE KisMac2 KisMAC es una herramienta gratuita y de código abierto para la exploración y seguridad inalámbrica en Mac OS X. Seguimiento de incidencias: En adelante, utilice el rastreador...

blackboxprotobuf

Blackbox Protobuf Blackbox Protobuf now has an official package on PyPi under the namebbpb. The blackboxprotobuf package is an older fork Description Blackbox Protobuf is a set of tools for working with encoded Protocol Buffers protobuf without the matching protobuf definition. Protobuf is a bina...

test_struts2_vulnerability_CVE-2017-5638

teststruts2vulnerabilityCVE-2017-5638inMACOSX test struts2 vulnerability CVE-2017-5638 in Mac OS X download test web app and run it in tomcat root@kitploit: install tomcat brew install tomcat confirm where the tomcat installed ls -lF which catalina confirm tomcat home dir ls -lF...

Astra Linux – Vulnerability in WebKit2GTK

A memory corruption issue has been resolved through improved state management. This issue is fixed in macOS Ventura 13.3, Safari 16.4, iOS 16.4, and iPadOS 16.4, as well as iOS 15.7.7 and iPadOS 15.7.7. Processing web content may lead to arbitrary code execution. Apple is aware of a report...