3349 matches found
WhatsDump
Rewriting entire project. WIP WhatsDump Extract WhatsApp private key from any Android device Android 7+ supported. This tool spawns a clean Android 6 emulator and attempts to register with your number to extract msgstore private key. NOTE: this tool is in beta stage and might not be stable. You'r...
LAMMA-beta
LAMMA BETA Vulnerability Assessment Framework for all the Crypto Implimentations. An Open Source Initiative by - SECURITY MONX Lamma Framework Documentation beta root@kitploit: File Name : README Author : @ajithatti Org : Security Monx Version : 0.0.1 Purpose : Gives introduction of Lamma Framewo...
drozer
drozer drozer is a security testing framework for Android. drozer allows you to search for security vulnerabilities in apps and devices by assuming the role of an app and interacting with the Android Runtime, other apps' IPC endpoints and the underlying OS. drozer provides tools to help you use,...
Empire-GUI
Empire GUI The Empire Multiuser GUI is a graphical interface to the Empire post-exploitation Framework. It was written in Electron and utilizes websockets SocketIO on the backend to support multiuser interaction. The main goal of this project is to enable red teams, or any other color team, to wo...
OpenCLAW-P2P
P2PCLAW - Colectivo de Investigación Autónomo Descentralizado P2PCLAW es una red de investigación descentralizada donde agentes de IA e investigadores humanos publican, validan, preservan y evalúan trabajo científico a través de una infraestructura abierta. Último artículo público:...
zap-hud
ZAP Heads Up Display El HUD ya no está en desarrollo activo Desafortunadamente, el HUD ya no está en desarrollo activo debido a que nadie se está centrando en él. El HUD es una interfaz única e innovadora que sabemos que a algunas personas les encanta. Pero también requiere una cantidad nada...
ictf-framework
The iCTF Framework 3.0 This is the framework that Shellphish uses to host the iCTF. The iCTF Framework is described in a paper presented at the Usenix 3GSE workshop in 2014. We released this in the hope that it allows educators and trainers to host their own A/D CTFs. This framework is free for...
bbrecon
This project is no longer maintained and I took the crawling infrastructure offline. The audience was not big enough to justify maintaining it. Bug Bounty Recon bbrecon is a free Recon-as-a-Service for bug bounty hunters and security researchers. The API aims to provide a continuously up-to-date...
featherduster
FeatherDuster y Cryptanalib FeatherDuster es una herramienta escrita principalmente por Daniel «unicornfurnace» Crowley, junto con contribuciones de la comunidad, para romper criptografía; intenta facilitar al máximo el proceso de identificar y explotar sistemas criptográficos débiles. Cryptanali...
CVE-2020-0688-GUI
1. Propósito del proyecto y referencias El propósito es simple: últimamente me he estado preparando para escribir un C2 en C de nuevo, así que primero escribo algunas pequeñas herramientas para practicar y aumentar el interés. Entonces se me ocurrió convertir la herramienta del gran zcgonvh en un...
ASST
ASST BETA OWASP ASST Automated Software Security Toolkit | A Novel Open Source Web Security Scanner. Note: AWSS is the older name of ASST Introduction Web applications have become an integral part of everyday life, but many of these applications are deployed with critical vulnerabilities that can...
c2s
C2S Servidor de comando y control en Slack ¿Qué es C2S? C2S te permite construir un servidor de comando y control simple usando solo y únicamente Slack, sin ningún servidor extra ni nada más. Instalación root@kitploit: pip3 install requests El resto de la instalación se centra en la configuración...
inhale
Inhale - Malware Inhaler Inhale es una herramienta de análisis y clasificación de malware capaz de automatizar y escalar muchas operaciones de análisis estático. Esta es la versión beta, destinada a pruebas, retroalimentación y desarrollo comunitario. Antecedentes Inhale comenzó como una serie de...
packj
Packj señala paquetes de código abierto maliciosos/riesgosos Packj pronunciado 'paquete' es una herramienta para ayudar a mitigar los ataques a la cadena de suministro de software. Puede detectar paquetes maliciosos, vulnerables, abandonados, de typo-squatting y otros 'riesgosos' de registros de...
SCADAShutdownTool
SCADA Shutdown Tool SCADA Security Testing tool SCADAShutdownTool is an industrial control system automation and testing tool allows security researchers and experts to test SCADA security systems, enumerate slave controllers, read controller's registers values and rewrite registers data...
Emby Server - Authentication Bypass
Emby Server is a user-installable home media server which stores and organizes a user's media files of virtually any format and makes them available for viewing at home and abroad on a broad range of client devices. This vulnerability may allow administrative access to an Emby Server system,...
Leantime < 2.4 - Authenticated SQL Injection
Leantime is an open source project management system. A 'userId' variable in app/domain/files/repositories/class.files.php is not parameterized. An authenticated attacker can send a carefully crafted POST request to /api/jsonrpc to exploit an SQL injection vulnerability. Confidentiality is impact...