415118 matches found
binbloom
소개 이 프로젝트의 목적은 원시 바이너리 펌웨어를 분석하여 일부 특징을 자동으로 결정하는 것입니다. 이 도구는 기본적으로 단순한 통계를 수행하므로 모든 아키텍처와 호환됩니다. 주요 기능: 로딩 주소Loading address : binbloom은 원시 바이너리 펌웨어를 구문 분석하여 로딩 주소를 결정할 수 있습니다. 엔디언Endianness : binbloom은 휴리스틱을 사용하여 펌웨어의 엔디언을 결정할 수 있습니다. UDS 데이터베이스 : binbloom은 원시 바이너리 펌웨어를 구문 분석하여 UDS 명령 ID가 포함된 배...
binbloom
About The purpose of this project is to analyse a raw binary firmware and determine automatically some of its features. This tool is compatible with all architectures as basically, it just does simple statistics on it. Main features: Loading address : binbloom can parse a raw binary firmware and...
GPT_Vuln-analyzer
GPTVuln-analyzer This is a Proof Of Concept application that demostrates how AI can be used to generate accurate results for vulnerability analysis and also allows further utilization of the already super useful ChatGPT made using openai-api, python-nmap, dnsresolver python modules and also use...
GraphQLmap
GraphQLmap GraphQLmap is a scripting engine to interact with a graphql endpoint for pentesting purposes. Install Features and examples Dump a GraphQL schema Interact with a GraphQL endpoint Execute GraphQL queries Autocomplete queries GraphQL field fuzzing Example 1 - Bruteforce a character Examp...
python-hacklib
hacklib Toolkit for hacking enthusiasts using Python. hacklib is a Python module for hacking enthusiasts interested in network security. It is no longer in active development. Installation To get hacklib, simply run in command line: root@kitploit: pip install hacklib hacklib also has a user...
Super-UEFIinSecureBoot-Disk
Super UEFIinSecureBoot Disk Super UEFIinSecureBoot Disk is a proof-of-concept not actively maintained or enhanced bootable image with GRUB2 bootloader designed to be used as a base for recovery USB flash drives. Key feature: disk is fully functional with UEFI Secure Boot mode activated. It can...
LTESniffer
LTESniffer - An Open-source LTE Downlink/Uplink Eavesdropper LTESniffer is An Open-source LTE Downlink/Uplink Eavesdropper It first decodes the Physical Downlink Control Channel PDCCH to obtain the Downlink Control Informations DCIs and Radio Network Temporary Identifiers RNTIs of all active user...
Check-LocalAdminHash
Check-LocalAdminHash Check-LocalAdminHash is a PowerShell tool that attempts to authenticate to multiple hosts over either WMI or SMB using a password hash to determine if the provided credential is a local administrator. It's useful if you obtain a password hash for a user and want to see where...
stego-toolkit
Steganography Toolkit This project is a Docker image useful for solving Steganography challenges as those you can find at CTF platforms like hackthebox.eu. The image comes pre-installed with many popular tools see list below and several screening scripts you can use check simple things for...
web-brutator
Web Brutator Быстрый модульный брутфорсер веб-интерфейсов 📥 Установка root@kitploit: python3 -m pip install -r requirements.txt ⏩ Использование root@kitploit: $ python3 web-brutator.py -h . / \ / \ \ | \ \ / | / | \ // // | \ | | /\ \ | \ \ \ \ / \ \ \ /\ /| \ \ // | | \ | | / | /| | / | | |...
web-brutator
Web Brutator Fast Modular Web Interfaces Bruteforcer 📥 Install root@kitploit: python3 -m pip install -r requirements.txt ⏩ Usage root@kitploit: $ python3 web-brutator.py -h . / \ / \ \ | \ \ / | / | \ // // | \ | | /\ \ | \ \ \ \ / \ \ \ /\ /| \ \ // | | \ | | / | /| | / | | | / /\ / \ / |...
Internal-Monologue
Internal Monologue Attack: Retrieving NTLM Hashes without Touching LSASS Introduction Mimikatz, developed by Benjamin Delpy @gentilkiwi, is a well-regarded post-exploitation tool, which allows adversaries to extract plain text passwords, NTLM hashes and Kerberos tickets from memory, as well as...
So You Want To Build A Nethunter Kernel
So You Want To Build A Nethunter Kernel Introduction The biggest hurdle for most people who want to set up a Nethunter device is the kernel requirement. Unless your device already has a prebuilt and maintained kernel, then you will be told to build one yourself. There is a lot of documentation on...
hashdeep
This is md5deep, a set of cross-platform tools to compute hashes, or message digests, for any number of files while optionally recursively digging through the directory structure. It can also take a list of known hashes and display the filenames of input files whose hashes either do or do not mat...
SharpDPAPI
SharpDPAPI SharpDPAPI is a C port of some DPAPI functionality from @gentilkiwi's Mimikatz project. I did not come up with this logic, it is simply a port from Mimikatz in order to better understand the process and operationalize it to fit our workflow. The SharpChrome subproject is an adaptation ...
Rogue-Framework
Rogue Framework "Make it rain. " Rogue Amendiares The best intel-broker in night city Rogue Framework is a desktop workbench for AFL++, cross-architecture QEMU fuzzing, harness development, lightweight Ghidra headless analysis, custom mutators, and patch comparison. It is intentionally an auditab...
pocsuite3
pocsuite3 Legal Disclaimer Usage of pocsuite3 for attacking targets without prior mutual consent is illegal. pocsuite3 is for security testing purposes only 法律免责声明 未经事先双方同意，使用 pocsuite3 攻击目标是非法的。 pocsuite3 仅用于安全测试目的 Overview pocsuite3 is an open-sourced remote vulnerability testing and...
automatic-api-attack-tool
Automatic API Attack Tool Imperva's customizable API attack tool takes an API specification as an input, and generates and runs attacks that are based on it as an output. The tool is able to parse an API specification and create fuzzing attack scenarios based on what is defined in the API...
automatic-api-attack-tool
자동 API 공격 도구 Imperva의 사용자 정의 가능한 API 공격 도구는 API 사양을 입력으로 받아 이를 기반으로 한 공격을 생성하고 실행합니다. 이 도구는 API 사양을 파싱하고, API 사양에 정의된 내용을 기반으로 퍼징 공격 시나리오를 생성할 수 있습니다. 각 엔드포인트에는 사양에 정의된 경계 내에서 그리고 그 외부에서 영리하게 생성된 값이 주입되며, 적절한 요청이 전송되고 성공 또는 실패 여부가 상세히 보고됩니다. 또한 불법 리소스 접근, XSS, SQLi, RFI와 같은 다양한 보안 공격 벡터를 실행하도록 확장...