scriptkiddi3

Streamline your recon and vulnerability detection process with SCRIPTKIDDI3, A recon and initial vulnerability detection tool built using shell script and open source tools. How it works • Installation • Install with Docker • Usage • MODES • Important Notes | Webhook configurations • For Develope...

sshhipot

Version 2 is under development. Please switch to the v2 branch, build, and run with -h. SSHHiPot High-interaction SSH honeypot ok, it's really a logging ssh proxy. Still more or less a work-in-progress. Feel free to go install this repository if you'd like to try it. Run it with -h to see more...

aws_public_ips

awspublicips...

gattacker

A Node.js package for BLE Bluetooth Low Energy Man-in-the-Middle & more. Prerequisites see: https://github.com/sandeepmistry/noble https://github.com/sandeepmistry/bleno Install root@kitploit: npm install gattacker Usage Configure Running both components Set up variables in config.env:...

CVE-2021-40373

CVE-playsms C'è una vulnerabilità in playsms 1.4.3 che consente a potenziali aggressori di eseguire codice in remoto. come riprodurre l'RCE shell: https://playsms.org/ docker pull playsms/playsms:1.4.3 docker run -d -p 80:80 playsms/playsms effettuare il login con admin:admin...

fortigate-belsen-leak

╔═════════════════════════════════════════════════════════════════════════════╗ ║ ███████╗ ██████╗ ██████╗ ████████╗██╗ ██████╗ █████╗ ████████╗███████╗ ║ ║ ██╔════╝██╔═══██╗██╔══██╗╚══██╔══╝██║██╔════╝ ██╔══██╗╚══██╔══╝██╔════╝ ║ ║ █████╗ ██║ ██║██████╔╝ ██║ ██║██║ ███╗███████║ ██║ █████╗ ║ ║...

truegaze

truegaze A static analysis tool for Android and iOS applications focusing on security issues outside the source code such as resource strings, third party libraries and configuration files. Requirements Python 3 is required and you can find all required modules in the requirements.txt file. Only...

truegaze

truegaze Ein statisches Analysewerkzeug für Android- und iOS-Anwendungen, das sich auf Sicherheitsprobleme außerhalb des Quellcodes konzentriert, wie z. B. Ressourcenstrings, Drittanbieterbibliotheken und Konfigurationsdateien. Voraussetzungen Python 3 wird benötigt, und alle erforderlichen Modul...

bluewall

BLUEWALL Bluewall is a firewall framework designed for offensive and defensive cyber professionals. This framework allows Cybersecurity professionals to quickly setup their environment while staying within their scope. Credit Inspired by Andrew Benson's hostfw iptable generation script. Features...

ritm

Ruby In The Middle HTTP/HTTPS interception proxy Ruby in the middle RITM is an HTTP/HTTPS interception proxy with on-the-fly certificate generation and signing, which leaves the user with the full power of the Ruby language to intercept and even modify requests and responses as she pleases...

gftrace

gftrace A command line Windows API tracing tool for Golang binaries. Note: This tool is a PoC and a work-in-progress prototype so please treat it as such. Feedbacks are always welcome! How it works? Although Golang programs contains a lot of nuances regarding the way they are built and their...

subcrawl

SubCrawl SubCrawl is a framework developed by Patrick Schläpfer, Josh Stroschein and Alex Holland of HP Inc’s Threat Research team. SubCrawl is designed to find, scan and analyze open directories. The framework is modular, consisting of four components: input modules, processing modules, output...

DbDat

DbDat Strumento di valutazione del database Db DbDat esegue numerosi controlli su un database per valutarne la sicurezza. Le categorie di controllo sono: configurazione, privilegi, utenti e informazioni. I controlli vengono eseguiti lanciando query o leggendo i file di configurazione del database...

hostintel

hostintel This tool is used to collect various intelligence sources for hosts. Hostintel is written in a modular fashion so new intelligence sources can be easily added. Hosts are identified by FQDN host name, Domain, or IP address. This tool only supports IPv4 at the moment. The output is in CSV...

slowloris

slowloris.py - Simple slowloris in Python What is Slowloris? Slowloris is basically an HTTP Denial of Service attack that affects threaded servers. It works like this: 1. We start making lots of HTTP requests. 2. We send headers periodically every 15 seconds to keep the connections open. 3. We...

ir-rescue

ir-rescue ir-rescue is composed of two sister scripts that collect a myriad of forensic data from 32-bit and 64-bit Windows systems ir-rescue-win and from Unix systems ir-rescue-nix. The scripts respect the order of volatility and artifacts that are changed with the execution e.g. , prefetch file...

RATDecoders

RATDecoders Malconf ist eine Python3-Bibliothek, die verwendet werden kann, um bestimmte Malware-Familien statisch zu analysieren und die Konfigurationsdaten zu extrahieren, die von Incident Respondern während eines Vorfalls verwendet werden können. Als Bibliothek kann es auch in automatisierte...

CVE-2023-33246_RocketMQ_RCE_EXPLOIT

CVE-2023-33246 RocketMQ Exploit di Remote Code Execution CVE-2023-33246 RocketMQ Exploit di Remote Code Execution Panoramica RocketMQ è una piattaforma distribuita di messaggistica e streaming. Le versioni di RocketMQ 5.1.0 e precedenti sono vulnerabili all'iniezione arbitraria di codice. Il...

pentest-guide

Guida al Test di Penetrazione basata su OWASP + Extra Questa guida è pensata per i penetration tester che cercano i casi di test appropriati necessari durante un progetto di test di penetrazione. Ho riorganizzato la OWASP Testing Guide v4 dal mio punto di vista, includendo 9 Classi di Test e ogni...

kalitorify

Transparent Proxy through Tor for Kali Linux About kalitorify kalitorify is a shell script for Kali Linux which use iptables settings to create a Transparent Proxy through the Tor Network , the program also allows you to perform various checks like checking the Tor Exit Node i.e. your public IP...