dcrawl

dcrawl dcrawl is a simple, but smart, multi-threaded web crawler for randomly gathering huge lists of unique domain names. How it works? dcrawl takes one site URL as input and detects all links in the site's body. Each found link is put into the queue. Successively, each queued link is crawled in...

sshprank

Description A fast SSH mass-scanner, login cracker, banner grabber and password auth checker tool using the python-masscan and shodan module. Usage root@kitploit: hacker@blackarch $ sshprank -H / / / / / / / / / / / / /// | / / / // / / / // / / / / , opts | mode options -h - single host, cidr,...

httpx

...

jadx

JADX jadx - Dex to Java decompiler Command line and GUI tools for producing Java source code from Android Dex and Apk files !WARNING Please note that in most cases jadx can't decompile all 100% of the code, so errors will occur. Check Troubleshooting guide for workarounds. Main features: decompil...

subjack

subjack DNS Takeover Scanner Subjack is a DNS takeover scanner written in Go designed to scan a list of domains concurrently and identify ones that are able to be hijacked. With Go's speed and efficiency, this tool really stands out when it comes to mass-testing. Always double check the results...

s3enum

s3enum s3enum is a fast and stealthy Amazon S3 bucket enumeration tool. It leverages DNS instead of HTTP, which means that requests are not logged in S3 server access logs. It was originally built back in 2016 to target GitHub. Installation root@kitploit: go install github.com/koenrh/s3enum@lates...

gdb-dashboard

GDB dashboard GDB dashboard is a standalone .gdbinit file written using the Python API that enables a modular interface showing relevant information about the program being debugged. Its main goal is to reduce the number of GDB commands needed to inspect the status of current program thus allowin...

cansina

Cansina Cansina is a Web Content Discovery Application. It is well known Web applications don't publish all their resources or public links, so the only way to discover these resources is requesting for them and check the response. Cansina duty is to help you making requests and filtering and...

domain

Info Recon-ng and Alt-DNS are awesome. This script combines the power of these tools with the ability to run multiple domains within the same session. TLDR; I just want to do my subdomain discovery via ONE command and be done with it. Only 1 module needs an api key /api/googlesite find instructio...

hakoriginfinder

hakoriginfinder Tool for discovering the origin host behind a reverse proxy. Useful for bypassing WAFs and other reverse proxies. How does it work? This tool will first make a HTTP request to the hostname/URL that you provide and store the response, then it will make a request to every IP address...

waf-bypass

WAF Bypass Tool WAF Bypass Tool is an open source tool to analyze the security of any WAF for False Positives and False Negatives using predefined and customizable payloads. Check your WAF before an attacker does. WAF Bypass Tool is developed by Nemesida WAF team with the participation of...

Q-DDOS-GUI

Q-DDOS-GUI DDOS WRITTEN IN C TCP/HTTP/HTTPS ddos written in c . Attack on tcp, http and https protocol. Attack with ddos choosing a random TIMEOUT between a range of seconds or with a defined Timeout. Select the number of threads you want to use. check the stop all box to stop all threads and...

http-mcp-bridge

HTTP MCP Bridge 이 프로젝트는 mcp 파이썬 라이브러리GitHub를 사용하여 HTTP/1.1 요청과 원격 MCP 서버 간의 브리지 역할을 하는 HTTP 서버를 구현합니다. 이 이니셔티브의 주요 목적은 원격 전송 메커니즘HTTP+SSE 또는 Streamable HTTP을 사용하는 원격 MCP 서버를 테스트하기 위해 HTTP 보안 도구를 사용할 수 있게 하는 것입니다. 중요 참고 사항! 동일한 id를 가진 JSON-RPC-V2 메시지를 동시 스레드로 전송할 때 응답이 병합될 수 있다는 것이 관찰되었습니다. 평가 시 도...

CWFF

CWFF - Custom wordlists for fuzzing CWFF is a tool that creates a special High quality fuzzing/content discovery wordlist for you at the highest speed possible using concurrency and it's heavily inspired by @tomnomnom's Who, What, Where, When, Wordlist NahamCon2020. Usage root@kitploit: CWFF -h...

Fiber

Описание Fiber волокно — это единица выполнения, которая должна планироваться вручную приложением, а не полагаться на механизм планирования на основе приоритетов, встроенный в Windows. Fibers часто называют легковесными потоками. Для получения более подробной информации о том, что такое fibers и...

f5_scanner

f5scanner F5 대량 스캐너 및 CVE-2020-5902 체커 이 도구는 30개의 스레드가 하드코딩된 대량 스캐너입니다. 주의하여 사용하세요. 설정 방법 root@kitploit: $ python3 -m venv venv $ source venv/bin/activate $ python3 -m pip install -r requirements.txt 실행 방법 단일 IP python3 f5scanner.py --ip 192.168.1.1 CIDR python3 f5scanner.py --cidr 192.168.0.0/24...

CallStackMasker

CallStackMasker 该仓库演示了一种使用计时器动态伪造调用栈的 PoC 技术。在我们的植入体进入睡眠之前，我们可以排队计时器，用伪造的调用栈覆盖其调用栈，然后在恢复执行之前还原原始调用栈。因此，就像我们可以在睡眠期间屏蔽属于植入体的内存一样，我们也可以屏蔽主线程的调用栈。 有关完整的技术详解，请参阅随附的博客文章：https://www.cobaltstrike.com/blog/behind-the-mask-spoofing-call-stacks-dynamically-with-timers/。 默认情况下，该 PoC 会模仿取自 spoolsv.exe 的静态调用栈...

Hunt-Weird-ImageLoads

Hunt-Weird-ImageLoads This project was created to play with different IOCs caused by ImageLoad events. It leverages ETW to monitor for ImageLoad events and walks the callstack to identify some possible IOCs, such as: RWX page in callstack Stomped module in callstack Module proxying ntdll -...

httpdoom

HttpDoom - HTTP Attack surface analyser Validate large HTTP-based attack surfaces in a very fast and reliable way. Inspired by Aquatone. Installing You must have dotnet SDK at version 6+: root@kitploit: $ dotnet pack -c Release -o nupkg $ dotnet tool install --global --add-source .\nupkg...

gau

getallurls gau getallurls gau fetches known URLs from AlienVault's Open Threat Exchange, the Wayback Machine, Common Crawl, and URLScan for any given domain. Inspired by Tomnomnom's waybackurls. Resources Usage Installation ohmyzsh note Usage: Examples: root@kitploit: $ printf example.com | gau $...