rmiscout

Descripción RMIScout permite ataques de lista de palabras y fuerza bruta contra interfaces Java RMI expuestas para adivinar de forma segura firmas de métodos sin invocación. Soporta múltiples protocolos Java RMI, invocación de métodos y explotación. Resumen de características Soporta múltiples...

icebreaker

icebreaker Rompe el hielo con ese adorable entorno de Active Directory que tienes ahí. Cuando estás frío y solo mirando a una fiesta de Active Directory pero no posees ni una sola credencial de AD para unirte a la diversión, esta herramienta es para ti. Automatiza secuencialmente 5 ataques de red...

bkcrack

bkcrack Crack legacy zip encryption with Biham and Kocher's known plaintext attack. Overview A ZIP archive may contain many entries whose content can be compressed and/or encrypted. In particular, entries can be encrypted with a password-based symmetric encryption algorithm referred to as...

geo-recon

Geo-Recon An OSINT CLI tool desgined to fast track IP Reputation and Geo-locaton look up for Security Analysts. Pre-requirements for Linux Python3 bash sudo apt install python3 Pip3 bash sudo apt install python3-pip If you don't use Debian or Ubuntu, search for their respective platforms like yum...

knockpy

🔍 Knockpy Subdomain Scan v9.0 ✅ Rápido y Async • 🔐 Recon + Fuerza Bruta • 🔧 Fácil de Extender KnockPy es una herramienta modular de Python 3 para enumerar subdominios mediante reconocimiento pasivo y fuerza bruta, ahora con soporte async/await , rendimiento mejorado y manejo moderno de HTTP/TLS. ...

pown

Pown Pown.js is a security testing and exploitation toolkit built on top of Node.js and NPM. Unlike traditional security tools, notably Metasploits, Pown.js considers frameworks to be an anti-pattern. Therefore, each feature in Pown is in fact a standalone NPM module allowing greater degree of...

doona

Doona - Network fuzzing tool .:: About ::. Doona is a fork of the Bruteforce Exploit Detector Tool BED. BED is a program which is designed to check daemons for potential buffer overflows, format string bugs etc. Doona is Australian for duvet. It adds a significant enough number of features/change...

bluemonday

bluemonday bluemonday is a HTML sanitizer implemented in Go. It is fast and highly configurable. bluemonday takes untrusted user generated content as an input, and will return HTML that has been sanitised against an allowlist of approved HTML elements and attributes so that you can safely include...

domi-owned

Domi-Owned Summary Domi-Owned is a tool used for compromising IBM/Lotus Domino servers. Tested on IBM/Lotus Domino 8.5.2, 8.5.3, 9.0.0, and 9.0.1 running on Windows and Linux. Requirements Domi-Owned uses Python 3, which can be install through your distribution's package manager apt, yum, etc...

wpscan

WPScan WordPress Security Scanner WPScan WordPress Vulnerability Database - WordPress Security Plugin INSTALL Prerequisites Optional but highly recommended: rbenv Ruby = 3.3 - Recommended: latest stable Curl = 7.72 - Recommended: latest stable The 7.29 has a segfault The 7.72 could result in...

shuffledns

massDNS wrapper to bruteforce and resolve the subdomains with wildcard handling support Feature • Install • Run • Wildcard • License • Discord shuffleDNS is a wrapper around massdns, written in go, that allows you to enumerate valid subdomains using active bruteforce, as well as resolve subdomain...

lazybee

ABOUT TOOL : Lazybee tool is a python based script from which you can generate random wordlist for brutefocre attacks. This tool has a unique features like wordlist generating time calculation and direct .txt saving in current directory. This tool works on both rooted Android device and Non-roote...

HostileSubBruteforcer

HostileSubBruteforcer Esta aplicación realizará un ataque de fuerza bruta para encontrar subdominios existentes y proporcionará la siguiente información: Dirección IP Host si el host de terceros se ha configurado correctamente. por ejemplo, si site.example.com apunta a un subdominio inexistente d...

mass-bruter

Mass Bruter Mass bruteforce network protocols Info Simple POC to quickly mass bruteforce common services in a large scale of network. It will check for default credentials on ftp, ssh, mysql, mssql...etc. This was made for authorized penetration testing purpose only. How it works 1. Use...

ninjasworkout

Damn Vulnerable NodeJS Application Quick Start root@kitploit: Download the Repo = run npm i Afer Installing all dependency just run the application root@kitploit: node app.js or nodemon app.js ADDED BUGS Prototype Pollution ✅1 No SQL Injection ✅2 Cross site Scripting ✅3 Broken Access Control ✅4...

SocialBox

SocialBox SocialBox es un marco de ataque de fuerza bruta Facebook, Gmail, Instagram, Twitter, codificado por Belahsan Ouerghi Instalación root@kitploit: sudo apt-get install git git clone https://github.com/TunisianEagles/SocialBox.git cd SocialBox chmod +x SocialBox.sh chmod +x install-sb.sh...

PoC-ubuntutouch-pin-privesc

ACTUALIZACIÓN 09.09.2022 Obtuve un nuevo CVE para esta vulnerabilidad: CVE-2022-40297. Prueba de Concepto: Escalada de privilegios en Ubuntu Touch 16.04 - mediante fuerza bruta de código de acceso Ubuntu Touch permite "proteger" los dispositivos con un código de acceso de 4 dígitos. Dicho código ...

punk.py

punk.py unix SSH post-exploitation 1337 tool how it works punk.py is a post-exploitation tool meant to help network pivoting from a compromised unix box. It collect usernames, ssh keys and known hosts from a unix system, then it tries to connect via ssh to all the combinations found. punk.py is...

hashcracker

hashcracker Algoritmos de hash compatibles: SHA512, SHA256, SHA384, SHA1, MD5, SHA224 Características: detección automática del algoritmo de hash basada en la longitud no recomendado, fuerza bruta, lista de contraseñas Argumentos: type: algoritmo de hash debe ser uno de los algoritmos de hash...

autocrack

AUTOCRACK.py This python script is a Hashcat https://hashcat.net wrapper to help automate the cracking process. The script includes multiple functions to select a set of wordlists and rules, as well as the ability to run a bruteforce attack, with custom masks, before the wordlist/rule attacks...