ShodanHat

Dependencies You need to install shodan with pip install shodan or easyinstall shodan. You need to install python-nmap with pip install python-nmap. You need to set your API Key in the 'constantes.py' file. Options -h, --help show this help message and exit -i IP, --ip=IP info about one host -l...

CVE-2018-4407

CVE-2018-4407 IOS/macOS kernel crash Usage: python CVE20184407.py IP/CIDR python CVE-20184407.py 192.168.1.1 python CVE20184407.py 192.168.1.0/24 1. find iphone nmap -sS -p 62078 --open 192.168.1.0/24 2. attack python CVE20184407.py iphoneip...

unimap

Unimap Scan only once by IP address and reduce scan times with Nmap for large amounts of data. Unimap is an abbreviation of "Unique Nmap Scan ". The tool can run in Linux, OSX, Windows or Android Termux without problems. Why? If you have plans to run a Nmap to a whole organization you need to...

CVE-2019-0708-generate-hosts

CVE-2019-0708-generate-hosts This program uses nmap to scan the CIDR addresses listed in the 3389cidrs file one per line and generates a 3389hosts file containing IP addresses of machines that are likely Windows machines with RDP 3389 enabled. This can significantly reduce the number of IPs that...

SearchOrg

SearchOrg By entering a company's email domain, information is obtained using DNS, NMAP and Shodan Keep in mind NMAP must be installed on the machine to use the command You must have a Shodan account and load the APIKey where the script indicates Configure the required libraries listed in the...

sharingan

Sharingan Sharingan es una multiherramienta de reconocimiento para seguridad ofensiva / bug bounty WIP, ¿alguna vez lo terminaré? Quién sabe Clonación para desarrollo Fuera de tu gopath git clone https://github.com/leobeosab/sharingan Instalación go get...

Exploitivator

Exploitivator V2.0 - modified to use Python 3 Prerequisites This has only been tested on Kali. It depends on the pymetasploit3 module for Python, described in detail here: https://coalfire.com/the-coalfire-blog/pymetasploit3-metasploit-automation-library Install the necessary Kali packages and th...

autoenum

root@kitploit: / / / // / / // // \ / \ / \ / / / // \ / // // // // / / // // // / / // // // / / / / / ,/ ,/ / / /// // ,/// // // Summary Autoenum is a recon tool which performs automatic enumeration of services discovered. I built this to save some time during CTFs and pen testing...

ccs-eval

Evaluates hosts for CVE-2014-0224 vulnerability https://vulners.com/cve/CVE-2014-0224 Usage: ccs-eval.py list-of-hosts.txt -Takes in a list of hosts, line seperated. Checks the host for common SSL ports using nmap. Peforms PoC injection test supplied by RedHat fake-client-early-ccs.pl. Writes...

port-scan-automation

LazyMap - Auto NMAP Scanning Script Automate NMAP scans and custom Nessus polices. Released as open source by NCC Group Plc - http://www.nccgroup.com/ Developed by Daniel Compton, daniel dot compton at nccgroup dot com https://github.com/nccgroup/port-scan-automation Released under AGPL see LICEN...

LHF

Codacy Badge This has been only tested on the newest Kali Linux Distro LHF: Low Hanging Fruit a recon tool for penetration testing To install dependencies: ./Install.sh To start: ./LHF.py root@kitploit: + Checking permissions - Rockyou wordlist is missing trying to decompress... + Rockyou wordlis...

Nmap-API

Nmap API Uses python3.10, Debian, python-Nmap, and flask framework to create an Nmap API that can do scans with a good speed online and is easy to deploy. This is an implementation for our college PCL project which is still under development and constantly updating. API Reference Get all items...

domain_analyzer

Domain Analyzer v0.8.3 What Domain analyzer is a security analysis tool that automatically discovers and reports information about a given domain. Its main purpose is to analyze domains in an unattended way. It has many crazy features, such as getting more domains from DNS zones, automatic nmap,...

domain_analyzer

Domain Analyzer v0.8.3 Qué es Domain analyzer es una herramienta de análisis de seguridad que descubre e informa automáticamente información sobre un dominio dado. Su propósito principal es analizar dominios de manera desatendida. Tiene muchas características locas, como obtener más dominios de...

CVE-2023-4596-OpenSSH-Multi-Checker

CVE-2024-6387-OpenSSH-Multi-Checker The CVE-2024-6387-checker.sh script is a tool designed to check multiple targets IPs or hostnames at once for the CVE-2024-6387 vulnerability. This script performs a local OpenSSH version check, scans remote servers for SSH banners, and determines whether they...

port-scan-automation

LazyMap - Script de Escaneo Automático con NMAP Automatiza escaneos de NMAP y políticas personalizadas de Nessus. Desarrollado por Daniel Compton https://github.com/commonexploits/port-scan-automation.git Publicado bajo AGPL, consulta LICENSE para más información Instalación root@kitploit: git...

w12scan-client

w12scan-client Network asset search and discovery engine, large-scale asset identification, graduation project, w12scan client program Design Philosophy The client's philosophy is to only process the data url, ip it receives, without automatically following 301 redirects based on URLs, nor scanni...

autoblue

AUTOBLUE: Automated EternalBlue Exploit Tool AUTOBLUE is an automation tool designed to exploit the EternalBlue vulnerability CVE-2017-0144 on Windows machines. The tool integrates the power of Nmap for vulnerability scanning and Metasploit's msfconsole for exploitation, enabling users to...

VULNEXPO

🔥 VULNEXPO — Vulnerability Detection & Exploitation Framework...

A Deep Dive into Reversing CODESYS

Industrial Control System ICS networking stacks are often the go-to bogeyman for infosec and cybersecurity professionals, and doubly so for offensive, red-team style security folks. How often have you been new on site, all ready to run a bog-standard nmap scan across the internal address space,...