dynmx

dynmx Prototype dynmx spoken dynamics is a signature-based detection approach for behavioural malware features based on Windows API call sequences. In a simplified way, you can think of dynmx as a sort of YARA for API call traces so called function logs originating from malware sandboxes. Hence,...

pe-sieve

Intro PE-sieve is a tool that helps to detect malware running on the system, as well as to collect the potentially malicious material for further analysis. Recognizes and dumps variety of implants within the scanned process: replaced/injected PEs, shellcodes, hooks, and other in-memory patches...

xray

Welcome to xray 👋 A Powerful Security Assessment Tool 🏠 Documentation • ⬇️ Download xray • ⬇️ Download xpoc • ⬇️ Download xapp • 📖 Plugin Repository 中文版 Note: xray is not open source, just download the built binary files directly. The repository mainly contains community-contributed POCs. Each xray...

BokuLoader

BokuLoader : Cobalt Strike Reflective Loader A proof-of-concept User-Defined Reflective Loader UDRL which aims to recreate, integrate, and enhance Cobalt Strike's evasion features! Contributors:...

extrude

extrude تحليل البرامج الثنائية للكشف عن ميزات الأمان المفقودة، تسريب المعلومات، والمزيد. 🚧 إكسترود في مراحل التطوير المبكرة، ويدعم حالياً فقط ملفات ELF و MachO الثنائية. ستدعم ملفات PE ويندوز قريباً. الاستخدام root@kitploit: Usage: extrude flags file Flags: -a, --all Show details of all tests, no...

extrude

extrude Analyse binaries for missing security features, information disclosure and more. 🚧 Extrude is in the early stages of development, and currently only supports ELF and MachO binaries. PE Windows binaries will be supported soon. Usage root@kitploit: Usage: extrude flags file Flags: -a, --all...

malicious-pdf

Malicious PDF Generator ☠️ Generate 67 malicious PDF test files for testing phone-home callbacks, SSRF, XSS, XXE, NTLM credential theft, and data exfiltration in PDF viewers, converters, and web applications. Can be used with Burp Collaborator or Interact.sh Used for penetration testing, bug bount...

SANS_THIR16

SANSTHIR16 SANS Chasse à bas prix Classificateur DGA RandomForest en utilisant des caractéristiques de domaine telles que voweltoconsonantratio, longestconsonantsequence, ngrams à partir du dictionnaire et des domaines Alexa les plus populaires. Courbe ROC...

airgeddon

airgeddon This is a multi-use bash script for Linux systems to audit wireless networks. All the needed info about how to "install | use | enjoy" airgeddon is present at GitHub's Wiki. I. Content & Features Home Features Screenshots Wallpapers II. Requirements Requirements Compatibility Cards and...

pacbot

Introduction Policy as Code Bot PacBot is a platform for continuous compliance monitoring, compliance reporting and security automation for the cloud. In PacBot, security and compliance policies are implemented as code. All resources discovered by PacBot are evaluated against these policies to...

liffy

Advanced LFI Exploitation Tool A powerful Python tool for Local File Inclusion LFI exploitation with advanced features including WAF bypass, encoding techniques, and comprehensive vulnerability detection. Liffy v2.0 is the significantly enhanced version of liffy which was originally created by...

Certitude

Certitude is a Python package to perform supervised malicious URL classification using a joint set of lexicographic and certificate features. All COSSAS projects are hosted onGitLab with a push mirror to GitHub. For issues/contributions check CONTRIBUTING.md Getting Started Certitude requires...

snuffleupagus

Snuffleupagus Security module for php7 and php8 - Killing bugclasses and virtual-patching the rest! Key Features • Download • Examples • Documentation • License • Thanks Snuffleupagus is a PHP 7+ and 8+ module designed to drastically raise the cost of attacks against websites, by killing entire b...

cloud-sniper

Cloud Sniper : Detection-as-code platform Cloud Sniper is a comprehensive platform meticulously designed to streamline Cloud Security Operations. It swiftly responds to security incidents by analyzing and correlating cloud artifacts, ensuring a holistic view of the company's cloud security postur...

CVE-2018-11788

ملخص Apache Karaf هو حاوية تطبيقات حديثة ومتعددة الأشكال. إنها حاوية خفيفة وقوية وجاهزة للمؤسسات تعمل بواسطة OSGi. Apache Karaf هو "مشروع منتج"، يوفر بيئة تشغيل كاملة وجاهزة للتشغيل. بيئة التشغيل "متعددة الأوجه"، مما يعني أنه يمكنك نشر أنواع مختلفة من التطبيقات: تطبيقات OSGi أو غير OSGi، تطبيقات...

xc

XC Netcat like reverse shell for Linux & Windows. Features Windows root@kitploit: Usage: └ Shared Commands: !exit !upload uploads a file to the target !download downloads a file from the target !lfwd local portforwarding like ssh -L !rfwd remote portforwarding like ssh -R !lsfwd lists active...

nexphisher

Project not maintained anymore. UseZPhisher Installation : apt update apt install git -y git clone git://github.com/htr-tech/nexphisher.git cd nexphisher SETUP : bash setup SETUP TERMUX : bash tmuxsetup Run : bash nexphisher Single Command : root@kitploit: apt update ; apt install git -y ; git...

columbus-server

Columbus server This repository is deprecated! ‼️ The server component is moved to https://github.com/elmasy-com/columbus. Columbus Project is an API first subdomain discovery service, blazingly fast subdomain enumeration service with advanced features. Columbus returned 638 subdomains of tesla.co...

dockerized-android

Dockerized Android Dockerized Android is a container-based framework that allows to execute and Android Emulator inside Docker and control it through a browser. This project has been developed in order to provide a starting point for integrating mobile security components into Cyber Ranges but it...

sniffles

Sniffles--Packet Capture Generator for IDS and Regular Expression Evaluation Sniffles is a tool for creating packet captures that will test IDS that use fixed patterns or regular expressions for detecting suspicious behavior. Sniffles works very simply. It takes a set of regular expressions or...