cirro-azcli-ext

cirro-azcli-ext An Azure CLI extension that passively collects Azure resource data into a SQLite database compatible with Cirro https://github.com/bishopfox/cirro schema. It also logs all CLI invocations to a JSON-lines file. Hooks into knack events: EVENTINVOKERPOSTPARSEARGS — logs command...

apidetector

APIDetector is a powerful and efficient tool designed for testing exposed Swagger endpoints in various subdomains with unique smart capabilities to detect false-positives. It's particularly useful for security professionals and developers who are engaged in API testing and vulnerability scanning...

salt-scanner

salt-scanner Un escáner de vulnerabilidades de Linux basado en Vulners Audit API y Salt Open, con notificaciones de Slack e integración con JIRA. Características Notificación y subida de informes a Slack Integración con JIRA Integración con OpsGenie Requisitos Salt Open 2016.11.x salt-master,...

wifi-deauth

Un ataque DoS que desconecta todos los dispositivos de una red wifi objetivo. No se requiere la contraseña de la red Probado en Kali NetHunter captura al final IMPORTANTE En algunas ocasiones, los APs de red pueden operar tanto en 5GHz como en 2.4GHz bajo el mismo nombre BSSID/SSID. Para realment...

ESP32-Bit-Pirate

ESP32 Bit Pirate ESP32 Bit Pirate is open-source firmware that turns your device into a multi-protocol development and analysis tool, inspired by the legendary Bus Pirate. It supports sniffing, sending, scripting, and interacting with various digital protocols I2C, UART, 1-Wire, SPI, etc. via a...

CVE-2018-11770

CVE-2018-11770 Apache Spark RCE no autenticado de shell inversa Exploit RCE independiente en Python 3 para Apache Spark reescrito a partir de este módulo de Metasploit POC del exploit explicado aquí. El propio código del exploit está explicado aquí. Probado con Python 3.7 en este objetivo. Uso:...

Am-I-affected-by-Meltdown

Am I affected by Meltdown?! Meltdown CVE-2017-5754 checker What am I? Proof-of-concept / Exploit / Checks whether system is affected by Variant 3: rogue data cache load CVE-2017-5754, a.k.a MELTDOWN. The basic idea is that user will know whether or not the running system is properly patched with...

f5scan

f5scan F5 BIG IP Scanner for CVE-2020-5902 by bt0 More information about the Vulnerability: https://support.f5.com/csp/article/K52145254?sf235665517=1 Requirements: python3+ shodan colorama urlopen pyOpenSSL $ pip3 install -r requirements Options root@kitploit: -h, --help show this help message a...

K2-CLI

Khao2 root@kitploit: ██╗ ██╗ ██████╗ ██║ ██╔╝ ╚════██╗ █████╔╝ █████╔╝ ██╔═██╗ ██╔═══╝ ██║ ██╗ ███████╗ ╚═╝ ╚═╝ ╚══════╝ Every single bit. Easy to use, informative and comprehensive steganalysis suite. This is a CLI tool for my SaaS sidehustle khao2.com for steganalysis. FAQs But what really is...

TREVORspray

TREVORspray 2.0 TREVORspray es un rociador de contraseñas modular con hilos, proxy SSH, módulos de botín y más. Por @thetechr0mancer Instalación: root@kitploit: pip install git+https://github.com/blacklanternsecurity/trevorproxy pip install git+https://github.com/blacklanternsecurity/trevorspray...

miasm

What is Miasm? Miasm is a free and open source GPLv2 reverse engineering framework. Miasm aims to analyze / modify / generate binary programs. Here is a non exhaustive list of features: Opening / modifying / generating PE / ELF 32 / 64 LE / BE Assembling / Disassembling X86 / ARM / MIPS / SH4 /...

honeybits

Honeybits Una herramienta PoC simple diseñada para mejorar la efectividad de tus trampas al esparcir breadcrumbs y honeytokens a través de tus servidores y estaciones de trabajo de producción para atraer al atacante hacia tus honeypots. Autor: Adel "0x4D31" Karimi. La versión para Windows de este...

CVE-2017-8625_Bypass_UMCI

Qué es ! Windows Defender Device Guard ! Windows Defender Device Guard es una combinación de funciones de seguridad de hardware y software relacionadas con la empresa que, cuando se configuran juntas, bloquean un dispositivo para que solo pueda ejecutar aplicaciones confiables que defina en sus...

CrawlBox

CrawlBox | Easy way to brute-force web directory. Operating Systems Tested MacOSX Kali Linux Ubuntu 16.04 Usage root@kitploit: python crawlbox.py -h -v -w WORDLIST url positional arguments: root@kitploit: url specific target url, like domain.com optional arguments: root@kitploit: -h, --help show...

macro_pack

macropack Descripción breve Advertencia: MacroPack no se mantiene desde 2021, si eres un profesional y necesitas herramientas ofensivas de infosec para acceso inicial, asunción de brecha, evasión de EDR, revisa https://www.balliskit.com MacroPack Community es una herramienta utilizada para...

macro_pack

macropack Short description Warning: MacroPack is not maintained since 2021, if you are a pro and need Offensive infosec tools for initial access, assume breach, EDR bypass, check https://www.balliskit.com MacroPack Community is a tool used to automatize obfuscation and generation of retro format...

wp2shell-Hestia-Scanner

🛡️ wp2shell-Hestia-Scanner 🇬🇧 English | 🇬🇷 Ελληνικά HestiaCP 서버용 읽기 전용 WordPress 보안 스캐너. 호스팅된 모든 사이트에서 wp2shell 침해 지표를 탐지합니다 — 클라이언트별 이메일 보고서, 코어 파일 diff, SHA256 웹셸 탐지, 위험 점수, 선택적 AI 평가 포함. ⚠️ 안전한 버전: WordPress 6.8.6 / 6.9.5 / 7.0.2 이상. 이 스크립트는 아무것도 수정하지 않습니다 — 전체 과정이 읽기 전용입니다. 🇬🇧 English...

FollinaScanner

FollinaScanner Go로 작성된 도구로, Follina 취약점CVE-2022-30190이 있는지 파일 및 디렉터리를 검사합니다. 참고: "의심스러운 파일"이란 URL을 포함하고 있지만 작동하지 않는 파일을 의미합니다 컴파일 root@kitploit: git clone https://github.com/ErrorNoInternet/FollinaScanner cd FollinaScanner go build 사용법 root@kitploit: Scan the current directory ./follina-scanner -...

joomlavs

joomlavs A black box, Ruby powered, Joomla vulnerability scanner What is it? JoomlaVS is a Ruby application that can help automate assessing how vulnerable a Joomla installation is to exploitation. It supports basic finger printing and can scan for vulnerabilities in components, modules and...

bladeGPS

bladeGPS Implementación experimental muy rudimentaria de gps-sdr-sim para generación de señales en tiempo real. El código funciona con bladeRF y ha sido probado en Windows 10 y Ubuntu 20.04. root@kitploit: Usage: bladegps options Options: -e RINEX navigation file for GPS ephemerides required -y...