mallory

mallory HTTP/HTTPS proxy over SSH. Installation Local machine: go install github.com/justmao945/mallory/cmd/mallory@latest Remote server: need our old friend sshd Configuration Config file Default path is $HOME/.config/mallory.json, can be set when start program root@kitploit: mallory -config...

403bypasser

403bypasser Türkçe 403bypasser , hedef sayfalardaki erişim kontrolü kısıtlamalarını aşmak için kullanılan teknikleri otomatikleştirir. Bu araç geliştirilmeye devam edecektir, katkılara açıktır. English 403bypasser hedef sayfalardaki erişim kontrolü kısıtlamalarını aşmak için kullanılan teknikleri...

Mass-Assigner

Mass Assigner Mass Assigner is a powerful tool designed to identify and exploit mass assignment vulnerabilities in web applications. It achieves this by first retrieving data from a specified request, such as fetching user profile data. Then, it systematically attempts to apply each parameter...

flashlight

Automated Information Gathering Tool for Penetration Testers Videos : https://www.youtube.com/watch?v=EUMKffaAxzs&list=PL1BVM6VWlmWZOv9Hv8TV2v-kAlUmvA5g7&index=4 https://www.youtube.com/watch?v=qCgW-SfYl1c&list=PL1BVM6VWlmWZOv9Hv8TV2v-kAlUmvA5g7&index=5...

Nerv0usR4bbit

ɴᴇʀᴠ0ᴜs ʀ4ʙʙɪᴛ Automated Pᴏsᴛ Exᴘʟᴏɪᴛᴀᴛɪᴏɴ Eɴᴜᴍᴇʀᴀᴛɪᴏɴ ᴛᴏᴏʟ for Windows target Author : @34zY /!\ NEW PORTABLE VERSION AVAILABLE SOON. root@kitploit: ---------------------------------------------------------------------------- | .--, \ 🐰 | \ / | \ / | | / ,/ /\ \ 💙 | \ 2.0 Windows ' . ' -. | | . ...

authz0

Authz0는 자동화된 권한 부여 테스트 도구입니다. URL과 역할Role 및 자격 증명Credentials을 기반으로 인가되지 않은 접근을 식별할 수 있습니다. URL과 역할은 YAML 기반 템플릿으로 관리되며, authz0를 통해 자동으로 생성 및 추가할 수 있습니다. 한 번 생성/작성된 템플릿 파일을 사용하여 여러 인증 헤더와 쿠키를 기반으로 테스트할 수도 있습니다...

Log4JHunt

Log4JHunt An automated, reliable scanner for the Log4Shell CVE-2021-44228 vulnerability. Video demo: Usage Here the help usage: root@kitploit: $ python3 log4jhunt.py +--------------+ Log4JHunt +--------------+ + Log4jHunt by RedHunt Labs - A Modern Attack Surface ASM Management Company + Author:...

metateta

Metateta Metateta Automated Tool For Scanning And Exploiting Network Protocols Using Metasploit For faster pen testing for large networks What You Can Do Scanning with all metasploit modules for specific network Protocol like smb,smtp,snmp Run all Auxiliary modules against specific network Protoc...

cuckoo-droid

CuckooDroid - 자동화된 Android 악성코드 분석. Check Point Software Technologies LTD. 제공 CuckooDroid는 의심스러운 파일 분석을 자동화하는 오픈 소스 소프트웨어인 Cuckoo Sandbox의 확장입니다. CuckooDroid는 Android 애플리케이션의 실행 및 분석 기능을 Cuckoo에 제공합니다. 설치 - 쉬운 통합 스크립트: root@kitploit: git config --global user.email "[email protected]" git...

instarecon

InstaRecon Automated basic digital reconnaissance. Great for getting an initial footprint of your targets and discovering additional subdomains. InstaRecon will do: DNS lookups A, PTR, MX, NS DNS lookups recursively on all hosts discovered Whois on domain and IP lookups Google dorks looking for...

CVE-2023-4220

RCE for Chamilo LMS CVE-2023-4220 Using a Web Shell This project automates the exploitation of the remote code execution vulnerability CVE-2023-4220 found in Chamilo LMS. Using a web shell, the tool facilitates the automated exploitation of the vulnerability to gain control over affected Chamilo...

pulsexploit

pulsexploit Automated script for Pulse Secure SSL VPN exploit CVE-2019-11510 using hosts retrieved from Shodan API. You must have a Shodan account to use this script. Click here if you don't have Shodan account. Installation 1. Install dependencies. root@kitploit: CentOS & Fedora yum install git...

Fast-Google-Dorks-Scan

Fast Google Dorks Scan The OSINT project, the main idea of which is to collect all the possible Google dorks search combinations and to find the information about the specific web-site: common admin panels, the widespread file types and path traversal. The 100% automated. Usage example:...

slicer

Slicer A tool to automate the recon process on an APK file. Slicer accepts a path to an extracted APK file and then returns all the activities, receivers, and services which are exported and have null permissions and can be externally provoked. Note : The APK has to be extracted via jadx or...

sgxray

SGXRay: Automating Vulnerability Detection for SGX Apps Intel SGX protects isolated application logic and sensitive data inside an enclave with hardware-based memory encryption. To use such hardware-based security mechanism requires a strict programming model on memory usage， with complex APIs in...

AcuAutomate

AcuAutomate AcuAutomate is an unofficial Acunetix CLI tool that simplifies automated pentesting and bug hunting across extensive targets. It's a valuable aid during large-scale pentests, enabling the easy launch or stoppage of multiple Acunetix scans simultaneously. Additionally, its versatile...

barf-project

BARF : Binary Analysis and Reverse engineering Framework The analysis of binary code is a crucial activity in many areas of the computer sciences and software engineering disciplines ranging from software security and program analysis to reverse engineering. Manual binary analysis is a difficult...

nodexp

NodeXP - Node.js サービス向け検出・悪用ツール! NodeXP は Python 2.7 で書かれた統合ツールであり、ServerSideJavascriptInjection 攻撃に基づいて、Node.js サービス上の潜在的な脆弱性を検出 し、自動的に悪用 することができます。 はじめに - インストールと使用方法 Git リポジトリをクローンして NodeXP をダウンロードします: root@kitploit: git clone https://github.com/esmog/nodexp すべてのオプションのリストを表示するには、以下を実行します:...

pulledpork

PulledPork PulledPork for Snort and Suricata rule management from Google code Find us on Libera.Chat IRC pulledpork Copyright C 2009-2021 JJ Cummings, Michael Shirk and the PulledPork Team! Thank you for choosing to use PulledPork! This file provides some basic guidance on the usage of PulledPork...

mongoaudit

mongoaudit 은 MongoDB 서버를 감사하고, 취약한 보안 설정을 탐지하며, 자동화된 침투 테스트를 수행하는 CLI 도구입니다. 설치 이 저장소를 클론하고 셋업을 실행하세요: root@kitploit: git clone https://github.com/stampery/mongoaudit.git cd mongoaudit python setup.py install mongoaudit 은 MIT 라이선스 하에 배포됩니다...