domain

Info Recon-ng and Alt-DNS are awesome. This script combines the power of these tools with the ability to run multiple domains within the same session. TLDR; I just want to do my subdomain discovery via ONE command and be done with it. Only 1 module needs an api key /api/googlesite find instructio...

reconmap

Reconmap Pentesting Management, Automation and Reporting Platform Reconmap is an open source vulnerability assessment and penetration testing platform designed to support security professionals throughout the entire engagement lifecycle. It enables penetration testers and InfoSec teams to...

Pegasus-Pentest-Arsenal

Pegasus Pentest Arsenal PPA root@kitploit: /\ / | / \ | \ | || | | | | / | /| |/ |/ |/ ,/; ; ; ,'/|; ,/,/, ,'/ |;/,/,/,/| ,/; |;|/,/,/,/,/| ,/'; |;|,/,/,/,/,/| ,/'; |;|/,/,/,/,/,/|, / ; |;|,/,/,/,/,/,/| / ,'; |;|/,/,/,/,/,/,/| /,/'; |;|,/,/,/,/,/,/,/| /;/ '; |;|/,/,/,/,/,/,/,/| ██████╗ ███████╗...

truegaze

truegaze A static analysis tool for Android and iOS applications focusing on security issues outside the source code such as resource strings, third party libraries and configuration files. Requirements Python 3 is required and you can find all required modules in the requirements.txt file. Only...

AndroPyTool

AndroPyTool Update! DroidBox images were fixed. Dynamic analysis is working now. This is a tool for extracting static and dynamic features from Android APKs. It combines different well-known Android apps analysis tools such as DroidBox, FlowDroid, Strace, AndroGuard or VirusTotal analysis. Provid...

airflowscan

airflowscan Checklist and tools for increasing security of Apache Airflow. DISCLAIMER This project NOT AFFILIATED with the Apache Foundation and the Airflow project, and is not endorsed by them. Contents The purpose of this project is provide tools to increase security of Apache Airflow...

gmailc2

gmailc2 root@kitploit: A Fully Undetectable C2 Server That Communicates Via Google SMTP to evade Antivirus Protections and Network Traffic Restrictions Note: root@kitploit: This RAT communicates Via Gmail SMTP or u can use any other smtps as well but Gmail SMTP is valid because most of the...

rscrypto

rscrypto rscrypto puts cryptographic primitives, cryptographic and fast hashes, password hashing, and checksums behind one feature model. Target-gated SIMD and assembly accelerate portable Rust backends without a production C/FFI, OpenSSL, or system-library dependency. rscrypto is a primitives...

CVE-2018-9276

CVE-2018-9276 — PRTG Network Monitor ⚠️ Aviso: Esta herramienta tiene fines educativos y solo para pruebas de penetración autorizadas. Úsala únicamente contra sistemas que poseas o para los que tengas permiso explícito por escrito. El uso no autorizado es ilegal. Tabla de contenidos Descripción...

mapsdumper

root@kitploit: ▒█▀▄▀█ ░█▀▀█ ▒█▀▀█ ▒█▀▀▀█ ▒█▀▀▄ ▒█░▒█ ▒█▀▄▀█ ▒█▀▀█ ▒█▀▀▀ ▒█▀▀█ ▒█▒█▒█ ▒█▄▄█ ▒█▄▄█ ░▀▀▀▄▄ ▒█░▒█ ▒█░▒█ ▒█▒█▒█ ▒█▄▄█ ▒█▀▀▀ ▒█▄▄▀ ▒█░░▒█ ▒█░▒█ ▒█░░░ ▒█▄▄▄█ ▒█▄▄▀ ░▀▄▄▀ ▒█░░▒█ ▒█░░░ ▒█▄▄▄ ▒█░▒█ by: @Tegal1337 MAPSDUMPER Demo • Installation • Feature • Credits A tool for dumping place...

hardentools

Hardentools Hardentools is designed to disable a number of "features" exposed by Microsoft Windows 10 and 11 and some widely used applications Microsoft Office, LibreOffice and Adobe PDF Reader, for now. These features, commonly thought for enterprise customers, are generally useless to regular...

zi

...

neto

Project Neto: Un conjunto de herramientas para analizar complementos del navegador Descripción general Project Neto es un paquete de Python 3 concebido para analizar y desvelar características ocultas de complementos y extensiones del navegador para navegadores conocidos como Firefox y Chrome...

ApplicationInspector

Introduction Microsoft Application Inspector is a software source code characterization tool that helps identify coding features of first or third party software components based on well-known library/API calls and is helpful in security and non-security use cases. It uses hundreds of rules and...

pandorafms_7.44

Pandora FMS 7.44 CVE-2020-13851 Pandora FMS 7.44 CVE-2020-13851 RCE permite a un usuario autenticado lograr la ejecución remota de comandos a través de la funcionalidad de eventos. Se puede realizar con credenciales o una cookie de sesión PHP. Comenzando Ejecutando el programa Usando credenciales...

SpiderSuite

SpiderSuite is an advance cross-platform and multi-feature web crawler designed for security professionals. For more information visit SpiderSuite's website. Installation and Usage Spider Suite is designed for easy installation and usage even for first timers. First, download the package of your...

ff4j__ff4j_CVE-2022-44262_1_8_13_fixed

✨✨✨ FF4J - Feature Flipping para Java ✨✨✨ Codacy Badge FF4j es una implementación del patrón Feature Toggle. 🤘Características Feature Toggle: Activa y desactiva funciones en tiempo de ejecución, sin despliegues. En tu código, implementa múltiples rutas protegidas por predicados dinámicos...

avpass

AVPASS AVPASS is a tool for leaking the detection model of Android malware detection systems i.e., antivirus software, and bypassing their detection logics by using the leaked information coupled with APK obfuscation techniques. AVPASS is not limited to detection features used by detection system...

EDR-Telemetry

EDR Telemetry 📖 About A comprehensive comparison of telemetry features from EDR products and endpoint agents like Sysmon. This project enables security practitioners to evaluate telemetry capabilities while promoting vendor transparency. 🌐 Visit our Website for the complete comparison and analysi...

CVE-2023-36003

CVE-2023-36003: PoC de bypass de Windows Defender Exploit Protection Este repositorio contiene una prueba de concepto PoC para CVE-2023-36003 , una vulnerabilidad crítica de bypass de funciones de seguridad que afecta a Windows Defender Exploit Protection. Información general CVE-2023-36003 es un...