scallion

2020 Project Update Scallion was a hobby project to learn OpenCL and RSA. We are not currently maintaining scallion. It has bitrotted in two important ways: 1. Tor has moved on to v3 Onion addresses, which scallion does not support. Old v2 addresses will stop working in October of 2021. The new...

avoidz

Avoidz v 1.3 root@kitploit: Author: Mascerano Bachir dev-labs Legal Disclamer: root@kitploit: The author does not hold any responsibility for the bad use of this tool, remember this is only for educational purpose. Description: root@kitploit: This tool Generate encoded powershell with metasploit...

WSC2

WSC2 LAST/CURRENT VERSION: 0.1 Author: Arno0x0x - @Arno0x0x WSC2 is a PoC of using the WebSockets and a browser process to serve as a C2 communication channel between an agent, running on the target system, and a controller acting as the actuel C2 server. The tool is distributed under the terms o...

uDork

uDork - Google Hacking Tool Author: M3n0sD0n4ld Twitter: @DavidUton News 11/06/2022 I have some bad news to give, last week Facebook withdrew the service by which the tool made the requests, unfortunately the tool no longer works. Sorry, thank you very much to all the users who have been using it...

asadbg

asadbg 予備的な注意：これは asatools の一部として使用することをお勧めしますが、単体で使用することもできます。 asadbg は、Cisco ASA デバイスのライブデバッグを自動化し、シリアル/SSH を介した Cisco CLI との対話を自動化して反復的なタスクを迅速に実行するためのツールフレームワークです。 gdb をラップします asadbg.cfg 設定ファイルをサポートし、異なるバージョンのデバッグを容易にします 実機と GNS3 の両方をサポートします 任意で ret-sync を使用して、IDA Pro からのデバッグ体験を向上させます 起動時に追加の...

CVE-2023-50465

MonicaHQ XSS MonicaHQ XSS の悪用 アカウントを作成する 連絡先を作成する Documents で悪意のある SVG ファイルをアップロードする root@kitploit: alert"Monicahq XSS Poc"; アップロードしたファイルにアクセスする...

cuckooautoinstall

About CuckooAutoinstall Cuckoo Sandbox . 자동 설치 스크립트 What is Cuckoo Sandbox? Cuckoo Sandbox는 악성코드 분석 시스템입니다. What does that mean? 즉, 의심스러운 파일을 던져 넣으면 격리된 환경에서 해당 파일의 동작에 대한 상세 보고서를 받을 수 있습니다. 우리는 처음에 Buguroo Offensive Security 에서 이 스크립트를 만들어 고통스러운 cuckoo 설치 과정을 더 빠르고, 쉽고, 간편하게 만들었습니다. Supported...

tabi

Advanced example This example demonstrates how to use the tabi module in order to detect all possible BGP hijacks seen from a BGP collector. Requirements WARNING : Before trying this example make sure you have at least 2GB of free memory on your computer The installation procedure is described in...

detaped

Detaped はじめに Detaped は Duktape GitHub 向けの Python 製ディスアセンブラおよびデコンパイラです。ブラックボックス評価など、コンパイル済みの Duktape バイトコードバイナリしか入手できない状況でのソースコードレビューと解析を目的としています。 特徴 JSE ファイル形式を解析 JSE バイナリ、またはバイナリのディレクトリをディスアセンブル ASM スタイルの命令を生成（バイトコードとの一対一対応） 低レベルの JavaScript「風」出力を生成 デコンパイラは基本的な高レベルの JavaScript「風」出力を生成 対応バージョン...

easyda

EasyDA - Easy Windows Domain Access Script 간편한 Windows 도메인 접근 스크립트 NCC Group Plc가 오픈소스로 공개 - http://www.nccgroup.com/ Daniel Compton 개발, daniel dot compton at nccgroup dot com https://github.com/nccgroup/easyda AGPL 라이선스로 공개, 자세한 내용은 LICENSE 참조 설치 root@kitploit: git clone...

Auto_EAP

AutoEAP Introduction Published Sepetember 15, 2016 AutoEAP.py is a script designed to perform automated brute-force authentication attacks against various types of EAP networks. These types of wireless networks provide an interface to facilitate password guessing of domain credentials as radius...

DigiTrack

DigiTrack In 30 seconds, this attack can learn which networks a MacOS computer has connected to before, and plant a script that tracks the current IP address and Wi-Fi network every 60 seconds. Now includes: Hardtracker - Digispark VPN buster to send the IP address and BSSID/SSID of nearby Wi-Fi...

massdns

MassDNS A high-performance DNS stub resolver MassDNS is a simple high-performance DNS stub resolver targeting those who seek to resolve a massive amount of domain names in the order of millions or even billions. Without special configuration, MassDNS is capable of resolving over 350,000 names per...

Zeus

Zeus AWS Auditing & Hardening Tool Zeus is a powerful tool for AWS EC2 / S3 / CloudTrail / CloudWatch / KMS best hardening practices. It checks security settings according to the profiles the user creates and changes them to recommended settings based on the CIS AWS Benchmark source at request of...

proxychains-ng

ProxyChains-NG ver 4.17 README ProxyChains is a UNIX program, that hooks network-related libc functions in DYNAMICALLY LINKED programs via a preloaded DLL dlsym, LDPRELOAD and redirects the connections through SOCKS4a/5 or HTTP proxies. It supports TCP only no UDP/ICMP etc. The way it works is...

CVE-2021-3441-check

HP CVE Check CVE-2021-3441 の IoC 発見を自動化する Python 製脅威インテリジェンスツールです。ターゲットの侵害指標（IoC）を簡単に検索できます。 root@kitploit: //| ////|| CVE-2021-3441 Check |=== |----| || | | �| || Author: Tyler Butler || �| || @tbutler0x90 | ||/.�---.|| | || |-||/||-. | |� |||==HP===||||/ 概要 CVE-2021-3441 CVE Check は、CVE...

ida_kernelcache

idakernelcache: iOS 커널캐시 분석용 IDA 툴킷 idakernelcache는 iOS 커널캐시를 더 쉽게 다룰 수 있게 해주는 IDA Pro용 IDAPython 모듈입니다. 이 모듈은 다음 작업을 수행하는 함수를 제공합니다: iOS 12의 새로운 정적 태그 포인터tagged pointer를 일반 커널 포인터로 변환합니다. 커널의 PRELINKINFO 세그먼트를 파싱하여 Python 사전dictionary으로 만듭니다. 커널 익스텐션 이름, Mach-O 세그먼트, Mach-O 섹션에 따라 IDA의 세그먼트 이름을...

ida_kernelcache

idakernelcache: An IDA Toolkit for analyzing iOS kernelcaches idakernelcache is an IDAPython module for IDA Pro to make working with iOS kernelcaches easier. The module provides functions to: Convert iOS 12's new static tagged pointers into normal kernel pointers. Parse the kernel's PRELINKINFO...

idahunt

개요 요구 사항 기능 스크립팅 사용법 실행하지 않고 시뮬레이션하기 초기 분석 IDA Python 스크립트 실행 바이너리 diffing 요구 사항 초기 분석 파일 diffing 함수 diffing 필터 아키텍처 감지 대상별 idahunt를 사용하는 알려진 프로젝트 개요 idahunt 는 IDA Pro로 바이너리를 분석하고 IDA Pro에서 다양한 항목을 찾기 위한 프레임워크입니다. 주어진 폴더에서 모든 실행 파일을 재귀적으로 분석하는 명령줄 도구입니다. 각 파일을 수동으로 열 필요 없이 백그라운드에서 IDA를 실행합니다. 외부...

DeepBlueCLI

DeepBlueCLI DeepBlueCLI - a PowerShell Module for Threat Hunting via Windows Event Logs Eric Conrad, Backshore Communications, LLC deepblue at backshore dot net Twitter: @ericconrad http://ericconrad.com Sample EVTX files are in the .\evtx directory Note If your antivirus freaks out after...