ida-pro-mcp

IDA Pro MCP Simple MCP Server to allow vibe reversing in IDA Pro. https://github.com/user-attachments/assets/6ebeaa92-a9db-43fa-b756-eececce2aca0 The binaries and prompt for the video are available in the mcp-reversing-dataset repository. Prerequisites Python 3.11 or higher Use idapyswitch to...

reconpal

ReconPal: استخدام البرمجة اللغوية العصبية لأمن المعلومات يعد الاستطلاع من أهم المراحل التي قد تبدو سهلة ولكنها تتطلب الكثير من الجهد والمهارة لتنفيذها بشكل صحيح. يحتاج المرء إلى معرفة الأدوات المناسبة والاستعلامات/الصياغات الصحيحة وتشغيل تلك الاستعلامات وربط المعلومات وتنقية المخرجات. قد يكون كل...

qark

Quick Android Review Kit This tool is designed to look for several security related Android application vulnerabilities, either in source code or packaged APKs. The tool is also capable of creating "Proof-of-Concept" deployable APKs and/or ADB commands, capable of exploiting many of the...

mssqlproxy

mssqlproxy mssqlproxy is a toolkit aimed to perform lateral movement in restricted environments through a compromised Microsoft SQL Server via socket reuse. The client requires impacket and sysadmin privileges on the SQL server. Please read this article carefully before continuing. It consists of...

impacket

Impacket Copyright Fortra, LLC and its affiliated companies. All rights reserved. Impacket was originally created by SecureAuth, and now maintained by Fortra's Core Security. Impacket is a collection of Python classes for working with network protocols. Impacket is focused on providing low-level...

odat

Quentin HARDY --- [email protected] [email protected] ODAT ODAT Oracle Database Attacking Tool is an open source penetration testing tool that tests the security of Oracle Databases remotely. Usage examples of ODAT: You have an Oracle database listening remotely and want to find valid...

Priv2Admin

L'idée est de « traduire » les privilèges du système d'exploitation Windows en un chemin menant à : 1. administrateur, 2. menace pour l'intégrité et/ou la confidentialité, 3. menace pour la disponibilité, 4. juste un désordre. Les privilèges sont listés et expliqués sur :...

tor-rootkit

tor-rootkit A Python 3 standalone Windows 10 / Linux Rootkit. The networking communication get's established over the tor network. This rootkit is WIP. Disclaimer Use for educational purposes only. How to use 1. Clone the repo and change directory: root@kitploit: git clone...

Shitrix-CVE-2019-19781

Shitrix-CVE-2019-19781 Мой рабочий подход к эксплуатации Shitrix Обновлено 21 июля 2020 г. — теперь поддерживаются многословные команды и прямые слеши Вам нужен curl = 7.42.0 Вызов, например: ./shitrix.sh target port ls -al...

bettercap

Join the project community on our server!...

terra

Terra : Terra needs an Active Maintainer I'm searching for an active maintainer for Terra. I have some exciting ideas for new features and other things possible with Terra / OSINT. Would love to hear from interested folks. Mail me at [email protected] Terra : Recon tool on Social Media...

red-kube

Red Team K8S Adversary Emulation Based on kubectl Red Kube is a collection of kubectl commands written to evaluate the security posture of Kubernetes clusters from the attacker's perspective. The commands are either passive for data collection and information disclosure or active for performing...

rakkess

rakkess Review Access - kubectl plugin to show an access matrix for server resources Intro Have you ever wondered what access rights you have on a provided kubernetes cluster? For single resources you can use kubectl auth can-i list deployments, but maybe you are looking for a complete overview?...

mose

MOSE Master Of SErvers...

magescan

Mage Scan The idea behind this is to evaluate the quality and security of a Magento site you don't have access to. The scenario when you're interviewing a potential developer or vetting a new client and want to have an idea of what you're getting into. Installation .phar Download the magescan.pha...

pict

PICT - Post-Infection Collection Toolkit This set of scripts is designed to collect a variety of data from an endpoint thought to be infected, to facilitate the incident response process. This data should not be considered to be a full forensic data collection, but does capture a lot of useful...

cypherhound

CypherHound A Python3 terminal application that contains Neo4j cyphers for BloodHound data sets with a script to automate importing them into BloodHound CE. Output Samples Terminal HTML Report HTML Report continued Why? BloodHound is a staple tool for every penetration tester. However, there are...

punk.py

punk.py unix SSH post-exploitation 1337 tool how it works punk.py is a post-exploitation tool meant to help network pivoting from a compromised unix box. It collect usernames, ssh keys and known hosts from a unix system, then it tries to connect via ssh to all the combinations found. punk.py is...

pyradm

🔮 pyradm Remote administration crossplatfrom tool via telegram Coded with ❤️ python3 + aiogram3 https://t.me/whlab Screenshots Disclaimer All information contained in this repository is provided for educational and research purposes only The author is not responsible for any illegal use of this...

cobaltstrike-headless

Headless Strike سكربت Aggressor يحوّل عميل aggressor بدون واجهة إلى عميل Cobalt Strike فعّال في معظمه. الاستخدام اتصل بخادم فريقك عبر أداة aggressor المدمجة بدون واجهة ./agscript root@kitploit: ./agscript host port user password حمّل ملف .cna root@kitploit: aggressor load headless-strike.cna + Lo...