ssh-mitm

SSH MITM v2.3-dev Author: Joe Testa @therealjoetesta Overview This penetration testing tool allows an auditor to intercept SSH connections. A patch applied to the OpenSSH v7.5p1 source code causes it to act as a proxy between the victim and their intended SSH server; all plaintext passwords and...

Gitmails

Development - IMPORTANT This Gitmails version is no longer maintained. Check out the Gitmails Shell port if you want to use a version that is maintained and, hopefully, developed. If you do not want to use the shell port and prefer the Python version, feel free to fork Gitmails and direct it to...

macro_pack

macropack 간단한 설명 경고: MacroPack은 2021년부터 유지보수되지 않습니다. 전문가로서 초기 접근, 침해 가정, EDR 우회를 위한 공격적 정보보안 도구가 필요하다면 https://www.balliskit.com 을 확인하세요. MacroPack Community는 MS Office 문서나 VBS 형식과 같은 레트로 포맷의 난독화 및 생성을 자동화하는 도구입니다. 또한 다양한 바로가기 형식을 처리합니다. 이 도구는 레드팀, 모의 침투, 데모, 사회공학 평가에 사용될 수 있습니다. MacroPack은 안티멀웨어...

macro_pack

macropack Short description Warning: MacroPack is not maintained since 2021, if you are a pro and need Offensive infosec tools for initial access, assume breach, EDR bypass, check https://www.balliskit.com MacroPack Community is a tool used to automatize obfuscation and generation of retro format...

pupy

Pupy Simple Installation root@kitploit: pip3 install pipx pipx ensurepath pipx install git+https://github.com/n1nj4sec/pupy@nextgen pupysh If you want more detailed informationRefer to the wiki Development Install root@kitploit: git clone https://github.com/n1nj4sec/pupy cd pupy git checkout...

Invoke-ATTACKAPI

Invoke-ATTACKAPI DEPRECATED 권장 사용: https://github.com/Cyb3rWard0g/ATTACK-Python-Client MITRE ATT&CK Framework의 API를 통해 정보기술, 전술, 그룹, 소프트웨어 및 참조 자료를 수집하기 위해 MITRE ATT&CK 팀 @MITREattack이 제공하는 API와 상호작용하는 PowerShell 스크립트입니다. 이 스크립트는 여전히 사용 중단된 MediaWiki API를 사용하고 있습니다. 아직 공개 TAXII 서버 API로 업데이트되지...

MAL-2026-15901 Malicious code in net-util-y8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d1e81ce327647324756e0ea15d1016d45cd5bb092dd0099418ba2db59eca98a7 The package has no real functionality: index.js contains only an empty comment and package.json declares no exports or lifecycle scripts. The...

Malicious code in net-util-y8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d1e81ce327647324756e0ea15d1016d45cd5bb092dd0099418ba2db59eca98a7 The package has no real functionality: index.js contains only an empty comment and package.json declares no exports or lifecycle scripts. The...

Malicious code in easypanel-ctl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9eb01006041231d7388c6aeb0c74288b35a8c72cf5b1e61c90e1e4f9d6d37c7 On npm install, the preinstall lifecycle script collects installer host identity hostname, username, cwd and enumerates CI-related environment variab...

MAL-2026-15898 Malicious code in easypanel-ctl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9eb01006041231d7388c6aeb0c74288b35a8c72cf5b1e61c90e1e4f9d6d37c7 On npm install, the preinstall lifecycle script collects installer host identity hostname, username, cwd and enumerates CI-related environment variab...

MAL-2026-15897 Malicious code in easypanel-core (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4cb013a465c19126feba2006a81f33d65cc64b269e3da8ffe4e8284c7defa3cc easypanel-core ships an inert module.exports = main and places all functionality in a preinstall lifecycle script. On npm install, preinstall.js...

Malicious code in easypanel-core (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4cb013a465c19126feba2006a81f33d65cc64b269e3da8ffe4e8284c7defa3cc easypanel-core ships an inert module.exports = main and places all functionality in a preinstall lifecycle script. On npm install, preinstall.js...

Malicious code in easypanel-app (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2744a6f0dfde1930ab560731e54cb8a1e1c8dc61a2072705498ddcaa6dd1a592 The package's preinstall lifecycle script runs automatically on npm install and collects installer identity os.hostname, os.userInfo.username,...

MAL-2026-15895 Malicious code in easypanel-app (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2744a6f0dfde1930ab560731e54cb8a1e1c8dc61a2072705498ddcaa6dd1a592 The package's preinstall lifecycle script runs automatically on npm install and collects installer identity os.hostname, os.userInfo.username,...

SiteBroker

SiteBroker 정보 수집 및 침투 자동화를 위한 크로스 플랫폼 파이썬 기반 유틸리티! 출력 Sitebroker의 전체 출력 쉬운 방법 Docker 이미지 Python 패키지를 시스템 전체나 가상 환경에 설치하지 않고도 SiteBroker를 테스트하려면 간단히 이 Docker 이미지를 실행하면 됩니다. root@kitploit: docker build -t sitebroker . docker run -it --rm sitebroker 요구 사항 Python 3.6. - 3.7. Python pip3 Python 모듈...

MAL-2026-15899 Malicious code in easypanel-docker (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d43ed7789fb269c2613ce7b2442fdceab1b5e8b5360048d7bda2a63f0e9fac63 The preinstall lifecycle script collects host fingerprint data os.hostname, os.userInfo.username, process.cwd, and CI-related environment variable...

Malicious code in easypanel-docker (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d43ed7789fb269c2613ce7b2442fdceab1b5e8b5360048d7bda2a63f0e9fac63 The preinstall lifecycle script collects host fingerprint data os.hostname, os.userInfo.username, process.cwd, and CI-related environment variable...

MAL-2026-15907 Malicious code in tiny-folder-tree (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb7707665659f287294c31f37c4eff9ceba537e9b54859837615929c296a9540 [email protected] declares a postinstall script src/build.js that runs on npm install. The script performs a DNS TXT lookup for...

Malicious code in tiny-folder-tree (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb7707665659f287294c31f37c4eff9ceba537e9b54859837615929c296a9540 [email protected] declares a postinstall script src/build.js that runs on npm install. The script performs a DNS TXT lookup for...

aztarna

This repository has been archived and is not maintained any further. Refer to alurity for future progress on robot footprinting and fingerprinting. aztarna This repository contains Alias Robotics' aztarna, a footprinting tool for robots. Alias Robotics supports original robot manufacturers...