adidnsdump

Active Directory Integrated DNS dump tool By default any user in Active Directory can enumerate all DNS records in the Domain or Forest DNS zones, similar to a zone transfer. This tool enables enumeration and exporting of all DNS records in the zone for recon purposes of internal networks. For mo...

EDRSandblast

EDRSandBlast EDRSandBlast es una herramienta escrita en C que aprovecha un controlador firmado vulnerable para eludir las detecciones de EDR devoluciones de llamada de rutina de notificación, devoluciones de llamada de objetos y el proveedor ETW TI y las protecciones de LSASS. También se...

nanodump

NanoDump Una herramienta flexible que crea un minidump del proceso LSASS. Tabla de contenidos 1. Uso 2. Características 3. Combinación de técnicas 4. Ejemplos 5. Redirectores HTTPS 1. Uso root@kitploit: usage: Z:\nanodump.x64.exe --write C:\Windows\Temp\doc.docx --valid --duplicate...

Process-Dump

Process Dump Process Dump es una herramienta de línea de comandos de ingeniería inversa para Windows que permite volcar componentes de memoria de malware de vuelta al disco para su análisis. A menudo, los archivos de malware están empaquetados y ofuscados antes de ejecutarse para evitar los...

ntlm_relay_gat

NTLM Relay Gat Descripción NTLM Relay Gat es una herramienta potente diseñada para automatizar la explotación de retransmisiones NTLM utilizando ntlmrelayx.py del conjunto de herramientas Impacket. Al aprovechar las capacidades de ntlmrelayx.py, NTLM Relay Gat simplifica el proceso de explotación...

isr-sqlget

-- ISR - Infobyte Security Research -- | ISR-sqlget | www.infobytesec.com | ..:: DESCRIPTION ISR-sqlget: It's a blind SQL injection tool developed in Perl. It lets you get databases schemas and tables rows. Using a single GET/POST you can access quietly the database structure and using a single...

Awesome-RedTeam-Cheatsheet

Técnicas de Red Team Técnicas de Acceso Inicial próximamente Técnicas de Ejecución de Código próximamente Técnicas de Movimiento Lateral próximamente Técnicas de Evasión próximamente Técnicas de Persistencia próximamente Técnicas de Escalada de Privilegios próximamente Técnicas de Volcado de...

starttls-mitm

starttls-mitm is a mitm proxy that will transparently proxy and dump both plaintext and TLS traffic. It uses a user-provided keyfile and certificate file to impersonate remote servers. The user must explicitly instruct the device being man-in-the-middled to trust this certificate authority -- so...

CVE-2025-49132

CVE-2025-49132 - 10.0 Crítico https://github.com/pterodactyl/panel/security/advisories/GHSA-24wv-6c99-f843 Versiones vulnerables: 1.9.0 .. 1.11.10 Consideraciones de OpSec La explotación de RCE es limitada, pero se puede detectar mediante: cat /var/www/pterodactyl/storage/logs/laravel-2025--.log ...

mscache

mscache una herramienta para manipular dcc credenciales cacheadas de dominio en el registro de Windows, basada principalmente en el trabajo de mimikatz e impacket requisitos python2 pycrypto passlib impacket ejemplo root@kitploit: python mscache.py --security security --system system dumping doma...

atutor-blind-sqli

ATutor v2.2.1 Blind SQL Injection Exploiting CVE-2016-2555 enumerating and dumping the underlying Database. Disclaimer All the information provided in this post is for educational purposes only. You shall not misuse the information to gain unauthorized access and/or write malicious programs. The...

MicroBurst

MicroBurst: A PowerShell Toolkit for Attacking Azure MicroBurst includes functions and scripts that support Azure Services discovery, weak configuration auditing, and post exploitation actions such as credential dumping. It is intended to be used during penetration tests where Azure is in use...

CVE-2016-5639

CVE-2016-5639 Crestron AirMedia AM-100 Traversal and Hashdump Metasploit Modules Two similar modules that take advantage of CVE-2016-5639 to dump hashes and retrieve files through path traversal. I made these modules separate because I wanted experience writing something that could "dump" hashes,...

cmsms-sqli

CMS Made Simple = 2.2.9 SQL Injection CVE-2019-9053 - Python3 Exploit Pure Python3 port of the original Exploit-DB 46635 by Daniele Scanu. Time-based blind SQLi to dump admin credentials from vulnerable CMS Made Simple installations. 🎯 Features: ✅ No external dependencies only requests ✅ Python...

Clutch

Clutch Clutch is a high-speed iOS decryption tool. Clutch supports the iPhone, iPod Touch, and iPad as well as all iOS version, architecture types, and most binaries. Clutch is meant only for educational purposes and security research. Clutch requires a jailbroken iOS device with version 8.0 or...

GarbageMan

GarbageMan What is GarbageMan? GarbageMan is a set of tools designed for .NET heap analysis. These tools offer the following benefits for malware researchers: Ability to extract clear-text payload PE Images etc. from .NET heaps quickly. Easy analysis of encrypted network protocols, signs of data...

BOF_Collection

BOFCollection Vari BOF per Cobalt Strike Requisiti beacon.h Per istruzioni di compilazione e panoramica sui BOF help-bof ActiveDirectory GetDomainInfo.c Restituisce informazioni sul dominio corrente e sul controller di dominio. inline-execute GetDomainInfo.o Raccolta GetClipboard.c Stampa qualsia...

Silhouette

Silhouette Di Gabriel Landau e Mark Mager presso Elastic Security. Da Hide Your Valuables — Mitigating Physical Credential Dumping Attacks presentato allo Shmoocon 2023. Diapositive qui. Tenere i segreti di LSA fuori dalla memoria fisica Silhouette è un POC che mitiga l'uso della memoria fisica p...

poc_salesforce_lightning

PoC per Salesforce lightning Solo a scopo accademico. Questo strumento estrae i dati degli oggetti Salesforce tramite l'endpoint Aura lightning con i privilegi di ospite. Il codice è approssimativo, ma perdonatemi. Requisiti Python3 Utilizzo root@kitploit: $ python3 exploit.py -h usage: exploit.p...

GetLAPSPassword

GetLAPSPassword Un tentativo modesto di scrivere uno strumento di dumping LAPS che supporta sia l'autenticazione NTLM che Kerberos utilizzando la libreria impacket. La struttura iniziale di questo strumento è stata presa dall'esempio impacket GetADUsers.py...