adwsdomaindump

ADWSDomainDump 通过ADWS（Active Directory Web Services）进行Active Directory信息转储。 安装 推荐安装方式： root@kitploit: pipx install git+https://github.com/mverschu/adwsdomaindump 或 pipx install . 使用 root@kitploit: adwsdomaindump -u 'corp.local\jsmith' -p 'password' -n 10.0.0.1 dc01.corp.local 正在连接ADWS主机... +...

gladius

Gladius Easy mode from Responder to Credentials Author: Cory Duplantis @ctfhacker / blog Blog post on Gladius asciicast Gladius provides an automated method for cracking credentials from various sources during an engagement. We currently crack hashes from Responder, secretsdump.py, and...

arpy

Arpy Arpy 是一款易于使用的 macOS ARP 欺骗中间人攻击（MiTM）工具。 它提供 3 个特定功能： 数据包嗅探 访问过的域名 通过 Gource 查看访问过的域名 每个功能将在下文详细说明。 已测试的操作系统（截至当前） Darwin 14.3.0 Darwin Kernel Version 14.3.0（Mac OS X） 依赖 Python 2.7 Gource Scapy libdnet 安装 Gource root@kitploit: brew install gource Scapy root@kitploit: pip install scapy libdn...

gallia

Gallia Gallia is an extendable pentesting framework with the focus on the automotive domain. The scope of the toolchain is conducting penetration tests from a single ECU up to whole cars. Currently, the main focus lies on the UDS interface. Acting as a generic interface, the logging functionality...

DNSnitch

DNSnitch Aviso legal Lo uso para mí mismo, pero está aquí por si alguien lo necesita. ¡No dudes en abrir un issue si encuentras errores! El Cortafuegos DNS Interactivo de Terminal DNSnitch es un servidor DNS local, centrado en la privacidad, que te otorga control total sobre tu tráfico de red. A...

paskto

Paskto - Passive Web Scanner Paskto will passively scan the web using the Common Crawl internet index either by downloading the indexes on request or parsing data from your local system. URLs are then processed through Nikto and known URL lists to identify interesting content. Hash signatures are...

destroylist

Destroylist: Lista Negra de Dominios de Phishing y Estafas...

cngo

cngo v1 Fast Golang Tool take a filename with domains and get cname for every domain s Install root@kitploit: $ go get -u github.com/yghonem14/cngo Basic Usage cngo accepts only text files: root@kitploit: $ cngo -f /targets/spotify.txt creativeservice.spotify.com -...

Dumb

Dumb - Dumain Bruteforcer A tool to bruteforce dumains! How DUMB works: Dumb works with a masked dumain for substitution. The dumain can have as many masks as you want as long as you pass the according wordlists. For example: Bruteforcing subdumains: Using the mask DUMB.dumain.com and the followi...

goddi

ARCHIVE NOTE Project is no longer actively maintained. goddi - Go dump domain info Based on work from Scott Sutherland @nullbind, Antti Rantasaari, Eric Gruber @egru, Will Schroeder @harmj0y, and the PowerView authors. Install Use the executables in the releases section. If you want to build it...

sqliv

SQLiv Massive SQL injection scanner Features 1. multiple domain scanning with SQL injection dork by Bing, Google, or Yahoo 2. targetted scanning by providing specific domain with crawling 3. reverse domain scanning both SQLi scanning and domain info checking are done in multiprocessing so the...

antisquat

AntiSquat AntiSquat 利用AI技术，如自然语言处理（NLP）、大型语言模型（ChatGPT）等，增强对域名抢注和钓鱼域的检测。 如何使用 通过 git clone https://github.com/redhuntlabs/antisquat 克隆项目。 输入 pip install -r requirements.txt 安装所有依赖。 在 https://platform.openai.com/account/api-keys 获取 ChatGPT API 密钥。 创建一个名为 .openai-key 的文件，并将你的 ChatGPT API 密钥粘贴进去。 可选...

dirkjanm-CVE-2020-1472

CVE-2020-1472 POC 需要从 GitHub 获取最新的 impacket，并添加了 netlogon 结构。 请注意，此脚本默认会修改域控制器账户的密码。是的，这允许你进行 DCSync，但也会中断与其他域控制器的通信，请谨慎操作！ 更多信息及原始研究见 此处 安装 仅适用于 Python 3.6 及以上版本 ！如果你的操作系统已预装 impacket（如 Kali），请先卸载所有现有安装。如果此后仍然出现导入错误，请在 virtualenv 或 pipenv 中运行。 利用步骤 阅读上方的博客/白皮书，了解你在做什么 使用 DC 的 IP 和 NetBIOS 名称运行...

pyhunter

pyhunter Tool to search possible emails indexed throught API's Hunter.io https://hunter.io Instalation You can download the latest version of pyhunter by cloning the GitHub repository: root@kitploit: git clone https://github.com/n4xh4ck5/pyhunter.git Install the dependencies via pip: root@kitploi...

ad-autopwn

AD AutoPwn 从零认证到域管理员 — 自动化Active Directory攻击链 一个完全自动化的渗透测试工具，串连25+种攻击技术以入侵Active Directory环境。专为授权的安全评估而设计。 root@kitploit: /\ | \ /\ | | | \ / | | | / \ || | / \ /\ V V / ' \ // \/ // \,|\/| //|||| ⚡ Zero-Auth to Domain Admin — Attack Chain Discover | Sniff | ARP | WPAD | WSUS | PXE | AD CS |...

MetaFinder

MetaFinder Search for documents in a domain through Search Engines. The objective is to extract metadata. Installation: root@kitploit: pip3 install metafinder Upgrades are also available using: root@kitploit: pip3 install metafinder --upgrade Usage MetaFinder can be used in 2 ways: CLI...

ShadowSpray

ShadowSpray A tool to spray Shadow Credentials across an entire domain in hopes of abusing long forgotten GenericWrite/GenericAll DACLs over other objects in the domain. Why this tool In a lot of engagements I see in BloodHound that the group "Everyone" / "Authenticated Users" / "Domain Users" or...

waymore

About - v8.9 The idea behind waymore is to find even more links from the Wayback Machine plus other sources than other existing tools. 👉 The biggest difference between waymore and other tools is that it can also download the archived responses for URLs on wayback machine and URLScan so that you c...

jfscan

!CAUTION ⚠️ Project Deprecated This project has been rewritten in Go for better performance and features. Please use the new version here: nullt3r/massmap Description Killing features Unleash the power of Nmap with Masscan for large-scale scans Scan targets using domain names and other formats...

domain-locker

Domain Locker The Central Hub for all your Domain Names 🌐domain-locker.com Contents About Screenshot Features Live Demo Get Started Domain-Locker.com Self-Hosting Developing App Setup Architecture Contributing Attributions License About The aim of Domain Locker, is to give you complete visibility...