WordListGen

WordListGen Super Simple Python Word List Generator for Password Cracking Hashcat! I know what your are thinking. Why create another word list generator? Well, I needed something very simple I could modify on the fly to get the exact character generators for the task at hand. This script is fully...

debian-ssh

Debian OpenSSL Predictable PRNG Links Original URL: http://metasploit.com/users/hdm/tools/debian-openssl/ Mirror Exploit: https://www.exploit-db.com/exploits/5622/ Perl https://www.exploit-db.com/exploits/5720/ Python https://www.exploit-db.com/exploits/5632/ Ruby Recommend Tool: Crowbar able to...

rapidscan

🟥 RapidScan v1.2 - The Multi-Tool Web Vulnerability Scanner RapidScan has been ported to Python3 i.e. v1.2. The Python2.7 codebase is available on v1.1 releases section. Download and use it if you still haven't upgraded to Python 3. Kindly note that the v1.1 Python2.7 will not be enhanced further...

NTLMRecon

Overview NTLMRecon is a Golang version of the original NTLMRecon utility written by Sachin Kamath AKA pwnfoo. NTLMRecon can be leveraged to perform brute forcing against a targeted webserver to identify common application endpoints supporting NTLM authentication. This includes endpoints such as t...

MyJWT

MyJWT codebeat badge Introduction This cli is for pentesters, CTF players, or dev. You can modify your jwt, sign, inject ,etc... Check Documentation for more information. If you see problems or enhancement send an issue.I will respond as soon as possible. Enjoy : Documentation Documentation is...

DirDar

DirDar v1.0 Description 🏴‍☠️ bypass forbidden directories - find and identify dir listing - you can use it as directory brute-forcer as well Compatabily This tool is compatible with all kind of operating systems as long as you have GO compiler installed Install You can use this command if you have...

gobuster

Gobuster 💻 Introduction A fast and flexible brute-forcing tool written in Go Gobuster is a high-performance directory/file, DNS and virtual host brute-forcing tool written in Go. It's designed to be fast, reliable, and easy to use for security professionals and penetration testers. ✨ Features 🚀...

patator

Patator Patator was written out of frustration from using Hydra, Medusa, Ncrack, Metasploit modules and Nmap NSE scripts for password guessing attacks. I opted for a different approach in order to not create yet another brute-forcing tool and avoid repeating the same shortcomings. Patator is a...

crithit

crithit Website Directory and file brute forcing at extreme scale. CritHit takes a single wordlist item and tests it one by one over a large collection of hosts before moving onto the next wordlist item. The intention of brute foricng in this manner is to avoid low limit Web Application Firewall...

vbrute

vbrute Virtual hosts brute forcer. Specify file containing domains and file containing IPs and vbrute will attempt to connect to IP with specific domain. Usage: root@kitploit: vbrute --domain-file --ip-file -d, --domain-file Specify file containing a list of domains you want to test -i, --ip-file...

SpringVulScan

SpringVulScan If you like it, give the author a star SpringVulScan -- Burp Suite Plugin Updates 1.1 1. Added custom root path scanning. 2. Right-click to send to SpringVulScan, custom dictionaries, etc. 3. Optimized detection logic. 4. Custom selection can be used not only for detecting route...

haklistgen

haklistgen Turns any junk text into a usable wordlist for brute-forcing. Installation root@kitploit: go install github.com/hakluke/haklistgen@latest Usage Examples Scrape all words out of an HTTP response to build a directory bruteforce wordlist: root@kitploit: curl https://wikipedia.org |...

CVE-2019-17525

CVE-2019-17525 D-LINK ROUTER "MODEL NO: DIR-615" with "FIRMWARE VERSION:20.10" & "HARDWARE VERSION:T1 A vulnerability found on login-in page of D-LINK ROUTER "DIR-615" with "FIRMWARE VERSION:20.10" & "HARDWARE VERSION:T1" which allows attackers to easily bypass CAPTCHA on login page by...

brutespray

Brutespray 创建者：Shane Young/@x90sky && Jacob Robles/@shellfail 灵感来源：Leon Johnson/@sho-luv 描述 Brutespray 自动对发现的服务尝试默认凭据。它接收来自 Nmap（GNMAP/XML）、Nessus、Nexpose、JSON 和列表的扫描输出，然后并行对 40 多种协议进行凭据暴力破解。使用 Go 构建，具有交互式终端界面、内置字典和恢复功能。 快速安装 root@kitploit: go install github.com/x90skysn3k/brutespray/v2@latest...

orbitaldump

OrbitalDump A simple multi-threaded distributed SSH brute-forcing tool written in Python. How it Works When the script is executed without the --proxies switch, it acts just like any other multi-threaded SSH brute-forcing scripts. When the --proxies switch is added, the script pulls a list usuall...

Blazy

Blazy blazy does login bruteforcing Usage root@kitploit: python3 main.py -i url/file Credits Shamelessly stole form parser from guettli...

puredns

快速域名解析与子域名暴力破解工具，支持精准通配符过滤 快速上手 » 用法 · 工作原理 · 赞助 · 常见问题 关于 puredns 是一款快速域名解析与子域名暴力破解工具，能够精准过滤通配符子域名及 DNS 投毒条目。 它基于强大的存根 DNS 解析器 massdns 执行批量查询。在带宽充足且使用良好公共解析器列表的前提下，只需数分钟即可解析数百万条查询。然而，massdns 的结果质量完全取决于公共解析器返回的答案，这些答案常因错误 DNS 响应和通配符子域名的误报而受到污染。 puredns 通过其通配符检测算法解决了这一问题。它能基于从一组可信解析器获取的 DNS...

resolvers

Resolvers The most exhaustive list of reliable DNS resolvers resolvers.txt: A simple list of resolver IP addresses, which you can pass directly to your DNS enumeration tool. resolvers-extended.txt: All of the resolvers in resolvers.txt with additional information about each server, including the...

brutto

brutto Easy brute forcing to whatever you want, Its magic increasing values and direct. Implementation Clone git clone https://github.com/jofpin/brutto.git Download the latest version Install with Python: python setup.py install root@kitploit: So you import the library from bruttoeasy import Brut...

PyLadon

Ladon Scanner For Python PyLadon Currently, the Python version has fewer features and cannot match Ladon.exe in performance or speed on either Windows or Linux systems. Its only advantage is cross-platform support; related features will be added later. The obvious drawback is that the packaged...