ossem-power-up

OSSEM A tool to assess data quality, built on top of the awesome OSSEM project. Mission Answer the question: I want to start hunting ATT&CK techniques, what log sources and events are more suitable? Create transparency on the strengths and weaknesses of your log sources Provide an easy way to...

SiteBroker

SiteBroker A cross-platform python based utility for information gathering and penetration automation! Output Sitebroker's Full Output Easy way Docker Image You can simply run this docker image to test SiteBroker without installing python packages system-wide or in a virtualenv. root@kitploit:...

SharpGPOAbuse

SharpGPOAbuse SharpGPOAbuse is a .NET application written in C that can be used to take advantage of a user's edit rights on a Group Policy Object GPO in order to compromise the objects that are controlled by that GPO. More details can be found at the following blog post:...

sqliv

SQLiv Massive SQL injection scanner Features 1. multiple domain scanning with SQL injection dork by Bing, Google, or Yahoo 2. targetted scanning by providing specific domain with crawling 3. reverse domain scanning both SQLi scanning and domain info checking are done in multiprocessing so the...

Cloak

Cloak Cloak is an intelligent python backdoor framework. What it exactly does? Cloak generates a python payload via msfvenom and then intelligently injects it into the python script you specify. To evade basic detection, Cloak breaks the payload into several parts and places it in different place...

leviathan

Leviathan is a mass audit toolkit which has wide range service discovery, brute force, SQL injection detection and running custom exploit capabilities. It consists open source tools such masscan, ncrack, dsss and gives you the flexibility of using them with a combination. The main goal of this...

explo

explo explo is a simple tool to describe web security issues in a human and machine readable format. By defining a request/condition workflow, explo is able to exploit security issues without the need of writing a script. This allows to share complex vulnerabilities in a simple readable and...

vulners-scanner

vulners-scanner Description PoC of a host-based vulnerability scanner, which uses vulners.com API. Detects operating system, collects installed packages and checks vulnerabilities in it. Supported OS Currently support collecting packages for these operating systems: Debian-based debian, kali,...

aztarna

This repository has been archived and is not maintained any further. Refer to alurity for future progress on robot footprinting and fingerprinting. aztarna This repository contains Alias Robotics' aztarna, a footprinting tool for robots. Alias Robotics supports original robot manufacturers...

flare-ida

Code Grafter Function Replacements About Code Grafter Code Grafter is an IDA Python script that makes it possible to use IDA Pro's Bochs IDB Mode to emulate code that imports Windows API functions. Emulation environments like Bochs IDB mode do not resolve or emulate imported functions, resulting ...

defense-matrix

Defense Matrix Archived Project This project was an attempt to automate various aspects of Linux security auditing and hardening. As time passed, I K4YT3X found many of the methodologies used in this project to be unideal and obsolete. Therefore, I recommend not continuing using this project but...

riskootext4shell

riskootext4shell text4shell script for text coomons =1.10 CVE-2022-33980 La biblioteca Apache Commons Text es una librería alternativa a las funcionalidades nativas del JDK de Java . Versiones previas a versión 1.10.0 de apache commons Similar a CVE-2022-33980 root@kitploit: python3 text4shell.py...

Perfusion

Perfusion On Windows 7 , Windows Server 2008R2 , Windows 8 , and Windows Server 2012 , the registry key of the RpcEptMapper and DnsCache 7/2008R2 only services is configured with weak permissions. Any local user can create a Performance subkey and then leverage the Windows Performance Counters to...

BlackThrone

BlackThrone PHP BlackThrone Script An open source Alternative to burp collaborator BlackThrone created To detect websockets and HTTP traffic in the main website with provide some server header and client info. BlackThrone is web based tool to run on webservers with PHP . It will detect the visito...

MeterPwrShell

Inactive Tool - Reason : busy with something else root@kitploit: . . . / \ / | \ \ / /| | | | | | \ \ / \ / / \ / \ \ | / / | \ \ | | / | | | | / / / Y \ /| | \ /| | / | \ / | | / | Y \ /| || |/ \ | /\ | \ | || // || / /|| /\ /| \ / / / / / / / MeterPwrShell2 Automated Tool That...

MikroRoot

MikroRoot Versión automatizada de CVE-2018-14847. Buscará en Shodan hosts vulnerables e intentará explotarlos. Cómo usar Ten en cuenta que este script NO funcionará con Python2.x. Usa solo Python 3+ MikroRoot: python3 MikroRoot.py -k SHODANKEY -p page count User: ncss Pass: ncss!@2018 IP: 1.2.3.4...

CVE-2026-18963

CVE-2026-18963 Keycloak Reset-Credentials State Bypass Detector https://github.com/user-attachments/assets/005fab89-339a-4e4e-881c-da6a626f6c9e root@kitploit: python3 kc-resetforge.py -h usage: kc-resetforge.py -h --target TARGET --targets-file TARGETSFILE --port PORT --realm REALM --client-id...

CVE-2023-26209

CVE-2023-26209 Exploit Automation For Educational Purposes 🚨 📌 Description This is a Python script with a graphical interface Tkinter that allows the user to test automated request submissions to a login endpoint. The goal is to simulate how servers respond to different payload sizes and analyze...

tiktok-scraper

TikTok Scraper & Downloader TikTok から有用な情報をスクレイピングおよびダウンロードします。 ログインやパスワードは不要です これは公式 API サポートなどではありません。TikTok Web API を使用してメディアや関連メタ情報をスクレイピングするだけのスクレイパーです。 目次 機能 To Do 貢献 インストール 使用方法 ターミナル ターミナルの例 ダウンロード履歴の管理 バッチでスクレイピングおよびダウンロード 出力ファイルの例 Docker ビルド 実行 モジュール メソッド オプション Promise を使用 イベントを使用...

CFUnmitigate

CFUnmitigate UAM Bypass only by using CloudScraper requests. Install root@kitploit: git clone https://github.com/Mrakovic-ORG/CFUnmitigate cd CFUnmitigate npm install node CFUnmitigate.js Disclaimer We are not responsible for any damage done with this script, its has been made for educational...