602856 matches found
sif
install Β· usage Β· modules Β· docs Β· contribute fast, concurrent recon to exploitation in one binary. every scanner shares one connection-pooled http client. what is sif? sif is a recon and exploitation scanner that runs the whole chain in one binary: subdomain enum, port scan, crawler, nuclei,...
Loki
I wrote a new Open Source YARA scanner called LOKI RS Rust. LOKI Python is now officially deprecated. Important Note This project is now in inactive maintenance mode. This means that while I merge pull requests for bug fixes and straightforward issues, I currently lack the time to add new feature...
sshimpanzee
Sshimpanzee Sshimpanzee allows you to build a static reverse ssh server. Instead of listening on a port and waiting for connections, the ssh server will initiate a reverse connect to attacker's ip, just like a regular reverse shell. Sshimpanzee allows you to take advantage of every features of a...
lazyrecon
root@kitploit: | | | |/ | /| | | | / / |/ | \ | | | / / | | | | | | / | | | ||\ |/ \ || ||/|| |v2 |/ Lazyrecon v2 is a subdomain discovery tool that finds and resolves valid subdomains then performs SSRF/LFI/SQLi fuzzing, brute-force and port scanning. It has a simple modular architecture and...
SXDork
SXDork v1.0 SXDork is a powerful tool that utilizes the technique of google dorking to search for specific information on the internet. Google dorking is a method of using advanced search operators and keywords to uncover sensitive information that is publicly available on the internet. SXDork...
heapinfo
HeapInfo As pwn lovers, while playing CTF with heap exploitation, we always need a debugger e.g. gdb for tracking memory layout. But we don't really need gdb if we want to see whether the heap layout same as our imagination or not. Hope this small tool helps us exploit easier ;. Why HeapInfo is...
filtron
Filtron Reverse HTTP proxy to filter requests by different rules. Can be used between production webserver and the application server to prevent abuse of the application backend. The original purpose of this program was to defend searx, but it can be used to guard any web application. Installatio...
CVE-2022-21587-POC
CVE-2022-21587-POC- CVE-2022-21587 POC root@kitploit: file exploit.py will overwrite to file .pl not recommended for use, will affect the system file EBS not overwrite, will create a new shell file install slipit: git clone https://github.com/usdAG/slipit root@kitploit: cd slipit python3 setup.py...
porterminal
Hand a computer to an agent, full control, and watch it. One command, one URL. Also a slick terminal for your own phone. 1. uvx ptn 2. Hand the URL to an AI agent, or scan the QR yourself 3. Watch it work in any browser, and take over anytime !WARNING That complete URL is full access to this...
RustHound
This version is only compatible withBloodHound Legacy 4.x Version compatible withBloodHound Community Edition CE can be found here RustHound-CE. Summary Limitation Description How to compile it? Using Makefile Using Dockerfile Using Cargo Linux x8664 static version Windows static version from Lin...
nmlinux
NMLinux Β· v1.7.12 A unified network toolkit for Linux and macOS β inspect, connect, diagnose. NMLinux is a single, unified GUI that brings together 29 network modules in one window: interface monitoring, Wi-Fi, DNS, SSH terminal, firewall viewer, topology map, traceroute, and more. Built from...
osint-scraper
Social Recon This application locates and compiles information about online personalities, given a username and/or email address. Use this to investigate your own online presence, summarize the digital footprint of someone you know, or uncover the person behind a specific username. Getting Starte...
nox-framework
root@kitploit: ββββ βββ βββββββ βββ βββ βββββ ββββββββββββββββββββ ββββββ ββββββ βββ ββββββ βββββββββββββ βββ ββββββ βββ βββββββββββββββββββ βββ βββ βββββ βββββββ βββ βββ Cyber Threat Intelligence Framework OSINT framework for red teaming, digital forensics, and corporate exposure analysis...
echidna
Echidna: A Fast Smart Contract Fuzzer Echidna is a weird creature that eats bugs and is highly electrosensitive with apologies to Jacob Stanley More seriously, Echidna is a Haskell program designed for fuzzing/property-based testing of Ethereum smart contracts. It uses sophisticated grammar-based...
DNSint
DNSint π Professional DNS Reconnaissance & OSINT Toolkit A comprehensive DNS intelligence and security analysis tool for domain reconnaissance Created by wh0xac Features β’ Installation β’ Usage β’ Examples β’ Documentation π― Overview DNSint is a powerful, all-in-one DNS reconnaissance and OSINT tool...
looney-tunables-CVE-2023-4911
PoC of CVE-2023-4911 Looney Tunables This is a PoC of CVE-2023-4911 a.k.a. "Looney Tunables" exploiting a bug in glibc dynamic loader's GLIBCTUNABLES environment variable parsing function parsetunables. Getting Started Executing program We can check if target is vulnerable root@kitploit: env -i...
AWSBucketDump
AWSBucketDump AWSBucketDump is a tool to quickly enumerate AWS S3 buckets to look for loot. It's similar to a subdomain bruteforcer but is made specifically for S3 buckets and also has some extra features that allow you to grep for delicious files as well as download interesting files if you're n...
r2frida
r2frida Radare2 and Frida better together Description Self-contained plugin for radare2 that ships frida and allows to instrument local or remote processes using r2 commands instead but not limited to Frida scripts. The radare project provides a complete toolchain for reverse engineering, it's...
ShinyHunters claims FBI breach was revenge for βfalseβ report
Extortion group ShinyHunters is not afraid to make enemies. Now it claims to have breached the FBI. After reportedly taking over ransomware group Clopβs leak site, ShinyHunters says it attacked the FBI to punish the agency for spreading what it calls false information about the group. In a very...
XSS-CVE-2022-30489
WAVLINK WN535G3 POST XSS Use CVE-2022-30489 PAYLOAD root@kitploit: POST /cgi-bin/login.cgi HTTP/1.1 Host: 98.127.66.193 Content-Length: 255 Cache-Control: max-age=0 Upgrade-Insecure-Requests: 1 Origin: http://98.127.66.193 Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0...