83565 matches found
emba
EMBA The security analyzer for firmware of embedded devices EMBA is designed as the central firmware analysis and SBOM tool for penetration testers, product security teams, developers and responsible product managers. It supports the complete security analysis process starting with firmware...
Arecibo
Arecibo Endpoint for Out-of-Band Exfiltration DNS & HTTP Authors Juan Manuel FernΓ‘ndez @TheXC3LL & Pablo Martinez @Xassiz DNS Exfiltration Create a new token: root@kitploit: curl localhost:5000/generatedns "htoken": "c008b5dd22817c50441522f917c66743" Now you can use this identificative token to d...
Bastillion
Bastillion A modern, web-based SSH console and SSH key management tool. Bastillion gives you a clean, browser-based way to manage SSH access across all your systems β like a bastion host with a friendly dashboard. It does two things: 1. Web-based SSH terminal β once a host is registered, authoriz...
red-kube
Red Team K8S Adversary Emulation Based on kubectl Red Kube is a collection of kubectl commands written to evaluate the security posture of Kubernetes clusters from the attacker's perspective. The commands are either passive for data collection and information disclosure or active for performing...
mssqli-duet
MSSQLi-DUET - MSSQL Injection-based Domain User Enumeration Tool SQL injection script for MSSQL that extracts domain users from an Active Directory environment based on RID bruteforcing. Supports various forms of WAF bypass techniques through the implementation of SQLmap tamper functions...
Atlas
Atlas - Quick SQLMap Tamper Suggester v1.0 Atlas is an open source tool that can suggest sqlmap tampers to bypass WAF/IDS/IPS, the tool is based on returned status code. Screen Installation root@kitploit: $ git clone https://github.com/m4ll0k/Atlas.git atlas $ cd atlas $ python atlas.py python3+...
expliot
EXPLIoT Noun: /ΙkΛsplΚΙͺΙti:/ A Framework for security testing and exploiting IoT products and IoT infrastructure. It provides a set of plugins test cases which are used to perform the assessment and can be extended easily with new ones. The name EXPLIoT pronounced expl-aa-yo-tee is a pun on the...
medusa
Sponsored by: MEDUSA A modular automation framework and script repository for runtime testing and investigating Android and iOS apps, designed for penetration testers and malware analysts. It lets you plug in modules to bypass protections like SSL pinning, inspect network/WebView activity, trace...
webscan
webscan webscan is a browser-based network IP scanner and local IP detector. It detects IPs bound to the user/victim by listening on an RTP data channel via WebRTC and looping back to the port across any live IPs, as well as discovering all live IP addresses on valid subnets by monitoring for...
gdbgui
A browser-based frontend to gdb gnu debugger Documentation : https://gdbgui.com Source Code : https://github.com/cs01/gdbgui/...
antipwny
antipwny Authors: Rohan Vazarkar, David Bitner A host based IDS/IPS written in C, targeted at Metasploit Payloads. Instructions AntiPwny requires .NET Framework 4.5, which can be acquired here. An offline installer is available here http://www.microsoft.com/en-us/download/details.aspx?id=40779...
firmware-mod-kit
Disclaimer Automatically exported from code.google.com/p/firmware-mod-kit Firmware Modification Kit This kit is a collection of scripts and utilities to extract and rebuild linux based firmware images. root@kitploit: Extract a firmware image into its component parts User makes desired modificatio...
ossec-hids
OSSEC v4.3.0 Information about OSSEC OSSEC is a full platform to monitor and control your systems. It mixes together all the aspects of HIDS host-based intrusion detection, log monitoring and SIM/SIEM together in a simple, powerful and open source solution. Visit our website for the latest...
AdvPhishing
Check For Mp4: https://www.instagram.com/tukbuck/reel/DTBBBknj-nd/ Note: If you want to activate this tool or want same project with working condition then first pay: ETHERC20 wallet address: 0xe48df3c0e1713518096c7d2d0a2dce70aa85cd33 Follow on Social Media Platforms Contribute us Want to Learn t...
Detect-It-Easy
Detect It Easy DiE is a powerful tool for file type identification, popular among malware analysts , cybersecurity experts , and reverse engineers worldwide. Supporting both signature-based and heuristic analysis , DiE enables efficient file inspections across a broad range of platforms, includin...
authz0
Authz0 is an automated authorization test tool. Unauthorized access can be identified based on URLs and Roles & Credentials. URLs and Roles are managed as YAML-based templates, which can be automatically created and added through authz0. You can also test based on multiple authentication headers...
fpicker
fpicker fpicker is a Frida-based fuzzing suite that offers a variety of fuzzing modes for in-process fuzzing, such as an AFL++ mode or a passive tracing mode. It should run on all platforms that are supported by Frida. Installation Instructions Building and Running Creating a Fuzzing Harness Mode...
Mr.SIP
SIP Security, Attack and Audit Framework Mr.SIP is...
weakpass
Weakpass Here, you can find the list of tools and example of API server from weakpass.com for password and hash cracking in one place. π Folder Structure tools A collection of password and hash cracking tools. Check them out: Kraker-js Lookup Passcheck Passgen libs Links to the libraries used in...