gtfocli

GTFOcli GTFOcli 是一个命令行界面工具，用于轻松搜索那些可用于绕过配置错误系统中本地安全限制的二进制命令。 目录 目录 安装 使用方法 搜索 Unix 二进制文件 搜索 Windows 二进制文件 使用 Docker 化解决方案进行搜索 CTF 致谢 贡献 安装 使用 go： root@kitploit: go install github.com/cmd-tools/gtfocli@latest 使用 homebrew： root@kitploit: brew tap cmd-tools/homebrew-tap brew install gtfocli 使用 docke...

shard

shard A command line tool to detect shared passwords Usage List options: root@kitploit: Shard 1.5 can run in 3 modes: 1 Single user single password - Use -u and -p 2 Single user multiple passwords - Use -u and -f 3 Multiple users and multple passwords - Use -f only For more detailed usage example...

Interlace

Interlace Easily turn single threaded command line applications into a fast, multi-threaded application with CIDR and glob support. Reviews / Howto Guides Interlace: A Tool to Easily Automate and Multithread Your Pentesting & Bug Bounty Workflow Without Any Coding Table of Contents Setup Usage -...

OpenRedireX

OpenRedireX A fuzzer for detecting open redirect vulnerabilities 🏗️ Install ⛏️ Usage 📚 Dependencies Install root@kitploit: git clone https://github.com/devanshbatham/openredirex cd openredirex sudo chmod +x setup.sh ./setup.sh Usage The script is executed from the command line and has the following...

xsubfind3r

xsubfind3r xsubfind3r 是一个命令行工具，旨在以简单高效的方式发现给定域名的子域名。它通过收集来自多种被动数据源的信息来工作（即不直接与目标交互，而是收集已公开可用的数据）。这使得 xsubfind3r 成为安全研究人员、IT 专业人士以及任何希望深入了解域名关联子域名的用户的强大工具。 目录 功能特性 安装 安装预编译二进制（无需 Go 环境） 从源码安装（需 Go 环境） go install ... go build ... 开发版 通过 Docker 安装（需 Docker 环境） 安装后配置 使用方法 贡献 许可证 功能特性...

sleuthkit

The Sleuth Kit INTRODUCTION The Sleuth Kit is an open source forensic toolkit for analyzing Microsoft and UNIX file systems and disks. The Sleuth Kit enables investigators to identify and recover evidence from images acquired during incident response or from live systems. The Sleuth Kit is open...

sandmap

sandmap Description • How To Use • Command Line • Configuration • Requirements • Other • Contributing • License • Wiki Description sandmap is a tool supporting network and system reconnaissance using the massive Nmap engine. It provides a user-friendly interface, automates and speeds up scanning...

ics-forensics-tools

ICSpector: Microsoft ICS Forensics Framework Microsoft ICS Forensics Tools framework is an open-source forensics framework that enables the analysis of Industrial PLC metadata and project files. The framework provides investigators with a convenient way to scan for PLCs and identify any suspiciou...

CVE-2014-160

CVE-2014-160 exploit Use like this: ./cve-2014-160 dvwa.local https && strings datadump.bin...

decoder-plus-plus

Decoder++ Decoder++ is an extensible application designed for penetration testers, software developers, and anyone in between looking to effortlessly decode and encode data across various formats. It includes a wide range of preinstalled scripts and codecs, smart decoding and format identificatio...

Bcrypt-forcer

Bcrypt-forcer sqlmap Bcrypt decryption tool Bcrypt hash cracker...

shepard

SHEPARD BITS This is a persistance tool using Windows Background Intelligent Transfer Service BITS. Functionality File Download, File Exfiltration, File Download + Persistent Execution Usage Run shepard.exe as Administrator with the following command line arguments: -d : regular file download to ...

truegaze

truegaze A static analysis tool for Android and iOS applications focusing on security issues outside the source code such as resource strings, third party libraries and configuration files. Requirements Python 3 is required and you can find all required modules in the requirements.txt file. Only...

AtomShields-cli

AtomShields Cli AtomShields Cli is a Command-Line Interface to use the software AtomShields .. raw:: html Installation .. code-block:: shell pip install atomshieldscli Basic usage .. code-block:: shell ascli --target --name The allowed action values are: install : To install a checker or a...

rdpscan-BlueKeep

rdpscan for CVE-2019-0708 bluekeep vuln This is a quick-and-dirty scanner for the CVE-2019-0708 vulnerability in Microsoft Remote Desktop. Right now, there are about 900,000 machines on the public Internet vulnerable to this vulnerability, so many are expect a worm soon like WannaCry and notPetya...

pysqli

PySQLi - Python SQL injection framework 1. Overview PySQLi is a python framework designed to exploit complex SQL injection vulnerabilities. It provides dedicated bricks that can be used to build advanced exploits or easily extended/improved to fit the case. 2. Why another SQLi framework ? Simple...

CVE-2018-8639-EXP

CVE-2018-8639-EXP CVE-2018-8639 EXP Usage: CVE-2018-8639-EXP.exe command etc 1. Most open-source samples may no longer be capable of bypassing antivirus; modifications are required. 2. I believe that open-sourcing the core code can help those who want to learn. 3. I have learned a lot from the...

evillimiter-windows

Evil Limiter for Windows A tool to limit the bandwidth upload/download of devices connected to your network without physical or administrative access. evillimiter employs ARP spoofing and traffic shaping to throttle the bandwidth of hosts on the network. This is explained in detail below. This to...

whatportis

whatportis .. image:: https://github.com/opencve/opencve/workflows/Tests/badge.svg :target: https://github.com/ncrocfer/whatportis/actions/workflows/tests.yml .. image:: https://badge.fury.io/py/whatportis.svg :target: https://pypi.python.org/pypi/whatportis/ .. image::...

amcache-evilhunter

AmCache-EvilHunter AmCache-EvilHunter is a command-line tool to parse and analyze Windows Amcache.hve registry hives, identify evidence of execution, suspicious executables, and integrate VirusTotal/OpenTIP lookups for enhanced threat intelligence...