EvilOSX

EvilOSX An evil RAT Remote Administration Tool for macOS / OS X. Marco Generator by Cedric Owens This project is no longer active Features Emulate a terminal instance Simple extendable module system No bot dependencies pure python Undetected by anti-virus OpenSSL AES-256 encrypted payloads...

Impost3r

Impost3r Impost3r is a tool that aim to steal many kinds of linux passwordsincluding ssh,su,sudo written by C Attackers can use Impost3r to make a trap to steal the legal user's passwords XD This tool is limited to security research and teaching, and the user bears all legal and related...

cuddlephish

CuddlePhish Weaponized multi-user browser-in-the-middle BitM for penetration testers. This attack can be used to bypass multi-factor authentication on many high-value web applications. It even works for applications that do not use session tokens, and therefore would not be exploitable using...

WiFi-password-stealer

WiFi password stealer Have you ever seen a movie where a hacker plugs a seemingly ordinary USB drive into a computer and instantly steals data? Today, you'll be building a device that does exactly that. ⚠️ Disclaimer : All content in this project is intended for security research purposes only...

CamRaptor

CamRaptor CamRaptor is a tool that exploits several vulnerabilities in popular DVR cameras to obtain network camera credentials. Features Exploits vulnerabilities in most popular camera models such as Novo, CeNova and QSee. Optimized to exploit multiple cameras at one time from list with threadin...

sshLooter

DON'T USE THIS There's a C version which is much better sshLooterC sshLooter Script to steal passwords from ssh. Install root@kitploit: git clone https://github.com/mthbernardes/sshLooter.git cd sshLooter Configuration root@kitploit: Edit the script on install.sh, and add your telegram bot api, a...

lockphish

Lockphish v2.0 Lockphish es la primera herramienta 07/04/2020 para ataques de phishing en la pantalla de bloqueo, diseñada para obtener credenciales de Windows, PIN de Android y Passcode de iPhone utilizando un enlace https. Tutorial de LockPhish: https://www.kalilinux.in/2020/05/lockphish.html...

createdump

Volcado de LSASS de Windows App - Prueba de concepto Este proyecto demuestra cómo volcar el proceso LSASS utilizando la herramienta createdump.exe, un ejecutable firmado por Microsoft, desde la Windows App, aprovechando un hook personalizado para habilitar el acceso del proceso a LSASS...

chromepass

Chromepass - 破解Chrome保存的密码和Cookie 查看演示 · 报告Bug · 请求功能 目录 关于项目 AV检测 快速开始 先决条件 安装 使用方法 电子邮件 错误、Bug和功能请求 了解更多 许可证 演示 关于项目 Chromepass 是一个基于 Python 的控制台应用程序，可生成一个具有以下功能的 Windows 可执行文件： 解密 Google Chrome、Chromium、Edge、Brave、Opera 和 Vivaldi 保存的密码和 Cookie 远程发送包含登录名/密码组合和 Cookie 的文件（通过 HTTP 服务器或电子邮件）...

ntlm_theft

ntlmtheft 一款用于生成多种类型 NTLMv2 哈希窃取文件的工具。 ntlmtheft 是一个开源的 Python3 工具，可生成 21 种不同类型的哈希窃取文档。这些文档可用于钓鱼攻击，前提是目标允许外部网络的 SMB 流量，或者你已经处于内部网络中。 这些文件类型相较于基于宏的文档或漏洞利用文档的优势在于，它们全部基于“预期功能”构建。2020 年 6 月，Windows Defender 防病毒软件未对其中任何一个进行标记，并且在完全修补的 Windows 10 主机上，21 种攻击中有 17 种成功实施。 ntlmtheft 支持以下攻击类型： 浏览包含文件的文件夹...

VindicateTool

Vindicate -brightgreen An LLMNR/NBNS/mDNS Spoofing Detection Toolkit for network administrators What is Vindicate? Vindicate is a tool which detects name service spoofing, often used by IT network attackers to steal credentials e.g. Windows Active Directory passwords from users. It's designed to...

macphish

macphish Office for Mac 宏负载生成器 攻击向量 共有4种攻击向量可供选择： beacon creds meterpreter meterpreter-grant 对于 'creds' 方法，macphish 可以直接生成 Applescript 脚本，方便你在 shell 中运行。 beacon 执行此负载后，它会向我们的监听主机发送信号，并提供受害者的基本系统信息。生成 beacon 负载的最简单方式是： root@kitploit: $./macphish.py -lh 默认情况下使用 curl，但可以通过修改命令模板来使用其他工具（wget、nslookup...

KslKatzBof

KslKatzBOF A Beacon Object File BOF in-line LSASS credential extraction from C2 using the KslD.sys BYOVD technique. This project is based on the blog post: https://avantguard.io/blog/erfahrungsbericht-ki-gest%C3%BCtzte-bof-entwicklung-im-red-team Attribution This BOF is based on KslKatz Maximilia...

DumpChromeSecrets

!IMPORTANT This project is no longer maintained. Please useDumpBrowserSecrets instead, which supports Chrome, Edge, Brave, Firefox, Opera, Opera GX, and Vivaldi. DumpChromeSecrets Extract data from modern Chrome versions, including refresh tokens, cookies, saved credentials, autofill data, browsi...

zerologon

CVE-2020-1472 aka Zerologon Exploit POC ¿Qué es? NetLogon MS-NRPC puede establecer un canal de seguridad vulnerable para el control interdominio. Es posible poner a cero la contraseña de la cuenta de máquina en los controladores de dominio. Notas: El DC quedará semi-roto mientras la contraseña es...

redsnarf

root@kitploit: . \ \ | / / / \ | // \ / |\ \ / \ \ \ \ | | \ // // |/ \ | / | | /| | || /\ / /| /| || / / / / / / [email protected] @redsnarf RedSnarf 是一款渗透测试/红队工具，由 Ed Williams 编写，用于使用 OpSec 安全技术从 Windows 工作站、服务器和域控制器中检索哈希和凭据。 观看我们的 YouTube 频道上的视频...

siemframework

SIEMS FRAMEWORK MultiSIEM Modular Python3 Attack Framework By ElevenPaths https://www.elevenpaths.com/ Usage: python3 ./siemsframework.py INTRODUCTION SIEMs are defensive tools increasingly used in the field of cybersecurity, especially by major companies and companies intended to monitor highly...

DumpBrowserSecrets

DumpBrowserSecrets Extracts browser-stored data such as refresh tokens, cookies, saved credentials, credit cards, autofill entries, browsing history, and bookmarks from modern Chromium-based and Gecko-based browsers Chrome, Microsoft Edge, Firefox, Opera, Opera GX, and Vivaldi. Quick Links Maldev...

CVE-2023-23397

Un PoC simple en PowerShell para CVE-2023-23397 CVE-2023-23397 es una vulnerabilidad en MS Outlook que permite a un atacante potencialmente exfiltrar detalles de autenticación del usuario. La vulnerabilidad se relaciona con la capacidad de un atacante de especificar una ruta UNC en la propiedad...

SharpHook

SharpHook SharpHook is inspired by the SharpRDPThief project, It uses various API hooks in order to give us the desired credentials. In the background it uses the EasyHook project, Once the desired process is up and running SharpHook will automatically inject its dependencies into the target...