JCS

JCS Joomla Component Scanner conçu à des fins de test de pénétration sur Joomla CMS JCS peut vous aider avec les dernières vulnérabilités et exploits de composants. La base de données peut être mise à jour à partir de plusieurs ressources et un Crawler a été implémenté pour trouver les composants...

ZEROScan

ZEROScan مقدمة ZEROScan هو إطار عمل للكشف عن الثغرات الأمنية متعدد الخيوط، يمكن من خلاله بسهولة الحصول على أو تطوير مكونات إضافية للكشف عن الثغرات لاستهداف الاختراق. تم استلهام الواجهة وطريقة الاستخدام من إطار عمل metasploit-framework، مما يجعله سهل الاستخدام وتطوير المكونات الإضافية. الميزات يدع...

mongoaudit

mongoaudit is a CLI tool for auditing MongoDB servers, detecting poor security settings and performing automated penetration testing. Installing Clone this repository and run the setup: root@kitploit: git clone https://github.com/stampery/mongoaudit.git cd mongoaudit python setup.py install...

moonwalk

moonwalk Cover your tracks during Linux Exploitation / Penetration Testing by leaving zero traces on system logs and filesystem timestamps. 📖 Table of Contents Introduction Features Installation Usage Contribution License ℹ️ Introduction moonwalk is a 400 KB single-binary executable that can clear...

ADLab

AD Penetration Testing Lab Laboratório de Testes de Penetração em AD Author: @browninfosecguy Version: 1.0 Usage: This Script can be used to configure both Domain Controller and Workstation. Este script pode ser usado para configurar tanto o Controlador de Domínio quanto a Estação de Trabalho...

Apache-HTTP-Server-Vulnerabilities-CVE-2021-41773-and-CVE-2021-42013

Reconhecimento e Exploração: Vulnerabilidades do Servidor Apache HTTP - CVE-2021-41773 e CVE-2021-42013 Neste projeto, documentei um processo detalhado de teste de penetração visando vulnerabilidades do servidor Apache HTTP, especificamente CVE-2021-41773 e CVE-2021-42013, que envolvem Path...

WP-Ateck

WP-Ateck Com este programa você pode penetrar em sites WordPress. O que é um CMS? Um sistema de gerenciamento de conteúdo CMS gerencia a criação e modificação de conteúdo digital. Ele geralmente suporta múltiplos usuários em um ambiente colaborativo. Alguns exemplos notáveis são: WordPress, Jooml...

redherd-framework

...

leprechaun

Leprechaun root@kitploit: .-----. / V \ |...| |.....| .-' '-. .-. .-./ .--. |\ /| .-;.-"-.-;;-, =/ . -;,-;, . .-.-. . / ||'-'|| \ ,'--;.\ .;--' // o \ // --.. o '';,//| || : || |\ ;' \ '.\--' |"""""""|// / ':.// ,/\ | '---'| ||| ; Leprechaun ; ;""|""; \ / | '. vonahisec .' .' / \ '. '-,...

s3sec

s3sec Test AWS S3 buckets for read/write/delete access This tool was developed to quickly test a list of s3 buckets for public read, write and delete access for the purposes of penetration testing on bug bounty programs. Screenshot Found a bug bounty using this tool? Feel free to add me as a...

fuxploider

fuxploider Fuxploider is an open source penetration testing tool that automates the process of detecting and exploiting file upload forms flaws. This tool is able to detect the file types allowed to be uploaded and is able to detect which technique will work best to upload web shells or any...

creepy

creepy Current Version 1.1 Author Yiannis Kakavas Homepage http://www.geocreepy.com Installation Instructions See http://www.geocreepy.com Description Geolocation OSINT tool. Creepy is a geolocation OSINT tool. Gathers geolocation related information from online sources, and allows for presentati...

Pegasus---Forbidden-Buster

Pegasus - Forbidden Buster Autor: Letda Kes dr. Sobri, S.Kom. Uma ferramenta de teste de penetração para contornar respostas HTTP 401/403 usando várias técnicas de manipulação de cabeçalhos e fuzzing de caminhos. Funcionalidades Testa várias manipulações de cabeçalhos X-Forwarded-For,...

dockernymous

SCROLL DOWN FOR REQUIREMENTS AND INSTRUCTIONS IT JUST WON'T WORK IF YOU DON'T FOLLOW THEM Warning: Dockernymous is in a very early state of development. Only use it for educational purposes. DON'T use it if you rely on strong anonymity! News 13.10.2018 I completely changed the overall function...

JCEzploit-CVE-2026-48907

JCEzploit Joomla JCE सुरक्षा परीक्षण फ्रेमवर्क अधिकृत पेनेट्रेशन परीक्षण, नियंत्रित भेद्यता अनुसंधान और रक्षात्मक सत्यापन के लिए एक पेशेवर कमांड-लाइन उपयोगिता। केवल अधिकृत उपयोग। इस प्रोजेक्ट को विशेष रूप से केवल उन्हीं प्रणालियों के विरुद्ध चलाएँ जिनके स्वामी आप हैं या जिनके परीक्षण की आपको स्पष...

ranger

ranger A tool to support security professionals access and interact with remote Microsoft Windows based systems. This project was conceptualized with the thought process, we did not invent the bow or the arrow, just a more efficient way of using it. Ranger is a command-line driven attack and...

network-security-lab

🔬 Laboratório de Segurança de Rede Um ambiente virtual controlado simulando cenários reais de ataque e defesa 📋 Visão Geral Este laboratório simula um teste de penetração e um exercício de hardening defensivo do mundo real em um ambiente virtual totalmente isolado. Demonstra todo o ciclo de vida ...

commix

Commix short for command injection exploiter is an open source penetration testing tool, written by Anastasios Stasinopoulos @ancst, that automates the detection and exploitation of command injection vulnerabilities. You can visit the collection of screenshots demonstrating some of the features o...

airbash

airba.sh Airbash é um script POSIX-compatível, totalmente automatizado, de captura de WPA PSK PMKID e handshake, destinado a testes de penetração. É compatível com Bash e Android Shell testado no Kali Linux e Cyanogenmod 10.2 e usa o aircrack-ng para escanear clientes atualmente conectados a pont...

malicious-pdf

Malicious PDF Generator ☠️ Generate 67 malicious PDF test files for testing phone-home callbacks, SSRF, XSS, XXE, NTLM credential theft, and data exfiltration in PDF viewers, converters, and web applications. Can be used with Burp Collaborator or Interact.sh Used for penetration testing, bug bount...