opennhp

OpenNHP: Open Source Zero Trust Security Toolkit OpenNHP is a lightweight, cryptography-powered, open-source toolkit implementing Zero Trust security for infrastructure, applications, and data. It is the reference implementation of the Cloud Security Alliance CSA Network-infrastructure Hiding...

faraday_agent_dispatcher

Faraday Agents Dispatcher helps user develop integrations with Faraday written in any language. Installation Just run pip3 install faradayagentdispatcher and you should see the faraday-dispatcher command in your system. To setup a development environment this is, to change code of the dispatcher...

hacker-container

Hacker Container Container with all the list of useful tools/commands while hacking Kubernetes Clusters. Read more about it in the blogpost https://blog.madhuakula.com/hacker-container-for-kubernetes-security-assessments-7d1522e96073 List of the tools/commands/utilities available in container are...

WAF-A-MoLE

WAF-A-MoLE A guided mutation-based fuzzer for ML-based Web Application Firewalls, inspired by AFL and based on the FuzzingBook by Andreas Zeller et al. Given an input SQL injection query, it tries to produce a semantic invariant query that is able to bypass the target WAF. You can use this tool f...

CVE-2022-23940

CVE-2022-23940 PoC para CVE-2022-23940, también conocido como SCRMBT-187 - Ejecución remota de código autenticada a través de informes programados en SuiteCRM = 8.0.0. Defaults to False --help Show this message and exit. https://github.com/manuelz120/CVE-2022-23940...

gdb-frontend

GDBFrontend is an easy, flexible and extensionable gui debugger. Installing Requirements GDB = 8.2 with python3 python3 = 3.6 tmux PIP Package Python Wheel Recommended You can install GDBFrontend with pip. root@kitploit: sudo python3 -m pip install gdbfrontend if it is already installed and you a...

uncover

Quickly discover exposed hosts on the internet using multiple search engines. Features • Installation • Usage • Configuration • Running Uncover • Join Discord uncover is a go wrapper using APIs of well known search engines to quickly discover exposed hosts on the internet. It is built with...

S4UTomato

S4UTomato 通过 Kerberos 将服务账户提升至 LocalSystem。 传统土豆 熟悉“土豆”系列权限提升的朋友应该知道，它可以将服务账户权限提升至本地系统权限。早期的“土豆”利用技术几乎相同：利用 COM 接口的某些特性，欺骗 NT AUTHORITY\SYSTEM 账户连接并认证到攻击者控制的 RPC 服务器。然后，通过一系列 API 调用，在此认证过程中执行中间人（NTLM 中继）攻击，从而在本地系统上生成 NT AUTHORITY\SYSTEM 账户的访问令牌。最后，窃取该令牌，并使用 CreateProcessWithToken 或...

moonwalk

moonwalk Cover your tracks during Linux Exploitation / Penetration Testing by leaving zero traces on system logs and filesystem timestamps. 📖 Table of Contents Introduction Features Installation Usage Contribution License ℹ️ Introduction moonwalk is a 400 KB single-binary executable that can clear...

pyshell2bin

pyshell2bin If you work with exploits and shellcode, you already know what shellcode is and how to deal with it. Sometimes it comes with exploits in C, Perl, Python… It usually looks like: root@kitploit: payload = b"xbfxabxd0x9ax5bxdaxc7xd9x74x24xf4x5ax2bxc9" +...

CVE-2022-1388

CVE-2022-1388 BIG-IP iControl REST vulnerability CVE-2022-1388 Usage This POC is Verified! root@kitploit: curl -i -s -k -X $'POST' \ -H $'Host: localhost' -H $'Connection: keep-alive, X-F5-Auth-Token' -H $'Authorization: Basic YWRtaW46' -H $'X-F5-Auth-Token: a' -H $'Content-Length: 39' ...

proxy.py

Table of Contents Features Install Using PIP Stable version Development version Using Docker Stable version from Docker Hub Development Version from GHCR Build container locally Using HomeBrew Stable version Development version Start proxy.py From command line when installed using PIP Run it...

larac2shell

LaraC2 Shell -- MDE 实时响应交互式 Shell 用于 Microsoft Defender for Endpoint 实时响应的跨平台交互式 Shell。 功能| 详情 ---|--- 平台| PowerShell Core 7.0+（Windows、Linux、macOS） API 模式| 内部（门户，近实时）和官方（公共，无状态） 执行| 任意命令 + 25 个原生 LR 命令 认证| 7 种认证方法，统一菜单，自动刷新 许可证| MIT LaraC2 Shell 通过两个独立的 API 路径连接到 MDE 实时响应——内部门户 API（持久会话，延迟约 2-5...

IRTriage

Incident Response Triage: Scripted collection of system information valuable to a Forensic Analyst. IRTriage will automatically "Run As ADMINISTRATOR" in all Windows versions except WinXP. The original source was Triage-ir v0.851 an Autoit script written by Michael Ahrendt. Unfortunately Michael'...

CVE-2019-16278

CVE-2019-16278 一个简单快速的 Python 脚本，用于利用 CVE-2019-16278（Nostromo 1.9.6）中 httpverify 函数的目录遍历漏洞，通过精心构造的 HTTP 请求实现未授权的远程代码执行（RCE）。必需参数仅为主机和 Web 服务器端口，可选参数为要执行的命令（默认命令为 id）。 用法：nostroxploit.py host port command...

CVE-2022-24816

CVE-2022-24816 脚本使用说明 先决条件 1. 克隆仓库 ： root@kitploit: git clone https://github.com/c1ph3rbyt3/CVE-2022-24816.git cd CVE-2022-24816 2. 安装依赖 ： 请确保已安装 Python 3。然后运行以下命令安装所需依赖： root@kitploit: pip install -r requirements.txt requirements.txt 文件包含以下库： requests urllib3 colorama 如何使用脚本 可用选项 -u 或...

Posh-SSH

Posh-SSH Description Windows Powershell module that leverages a custom version of the SSH.NET Library to provide basic SSH functionality in Powershell. The main purpose of the module is to facilitate automating actions against one or multiple SSH enabled Linux servers from a Windows Host. As of...

sylkie

sylkie A command line tool and library for testing networks for common address spoofing security vulnerabilities in IPv6 networks using the Neighbor Discovery Protocol. Getting Started Note: This project is still in the early phases of development. If you run into any problems, please consider...

draytek-arsenal

Draytek Arsenal: kit de observabilidad y endurecimiento para dispositivos perimetrales Draytek. Los atacantes avanzados eligen cada vez más los dispositivos perimetrales como objetivos. Sin embargo, estos dispositivos están controlados por software de código cerrado conocido como firmware, a menu...

msdat

Quentin HARDY --- [email protected] [email protected] MSDAT MSDAT（M icros oft SQL D atabase A ttacking T ool）是一款开源渗透测试工具，用于远程测试 Microsoft SQL 数据库的安全性。 MSDAT 的使用场景示例： 你有一个远程监听的 Microsoft 数据库，想要查找有效凭据以连接数据库 你有一个有效的 Microsoft SQL 帐户，想要提升权限 你有一个有效的 Microsoft SQL 帐户，想要在托管该数据库的操作系统上执行命令（例如...