2118265 matches found
kwetza
Introduction By Chris Le Roy @brompwnie [email protected] Kwetza is a tool that allows you to infect an existing Android application with a Meterpreter payload. What does it do? Kwetza infects an existing Android application with either custom or default payload templates to avoid detection ...
kwetza
IntroducciΓ³n Por Chris Le Roy @brompwnie [email protected] Kwetza es una herramienta que permite infectar una aplicaciΓ³n Android existente con un payload de Meterpreter. ΒΏQuΓ© hace? Kwetza infecta una aplicaciΓ³n Android existente con plantillas de payload personalizadas o predeterminadas para...
Ruse
Ruse Mobile camera-based application that attempts to alter photos to preserve their utility to humans while making them unusable for facial recognition systems. Installation 1 Easy Method: Wait and download app from appropriate app store. 2 Download and run ios app via XCode see Development setu...
YARA-Performance-Guidelines
YARA Performance Guidelines Writing efficient YARA rules is essential for maintaining fast and accurate scanning performance. This guide provides key principles and best practices to help you optimize your rules, reduce unnecessary computation, and avoid common pitfalls. It incorporates insights...
mkpath
mkpath Make URL path combinations using a wordlist Read a wordlist file and generate path combinations for given domain or list of domains. Input from wordlist file is lowercased and unique words are processed. Additionally, wordlist can be filtered using regex. When you use mkpath's -l parameter...
api_wordlist
apiwordlist A wordlist of API names used for fuzzing web application APIs. Contents apiseeninwild.txt - This contains API function names I've seen in the wild. actions.txt - All API function name verbs objects.txt - All API function name nouns actions-uppercase.txt - API function name verbs with...
SharpHound2
THIS IS NOW DEPRECATED IN FAVOR OF SHARPHOUND3. DATA COLLECTED USING THIS METHOD WILL NOT WORK WITH BLOODHOUND 3.0 SharpHound - C Rewrite of the BloodHound Ingestor Get SharpHound The latest build of SharpHound will always be in the BloodHound repository here Compile Instructions Sharphound is...
MrKaplan
Mr.Kaplan Description MrKaplan is a tool aimed to help red teamers to stay hidden by clearing evidence of execution. It works by saving information such as the time it ran, snapshot of files and associate each evidence to the related user. This tool is inspired by MoonWalk, a similar tool for Uni...
rdpy
RDPY Remote Desktop Protocol in twisted python. RDPY is a pure Python implementation of the Microsoft RDP Remote Desktop Protocol protocol client and server side. RDPY is built over the event driven network engine Twisted. RDPY support standard RDP security layer, RDP over SSL and NLA...
SCMKit
SCMKit Description S ource C ode M anagement Attack Toolkit - SCMKit is a toolkit that can be used to attack SCM systems. SCMKit allows the user to specify the SCM system and attack module to use, along with specifying valid credentials username/password or API key to the respective SCM system...
DashOverride
DashOverride What This is a pre-authenticated RCE exploit for VMware vRealize Operations Manager vROPS that impacts versions Run root@kitploit: researcher@mars:$ ./poc.py + usage: ./poc.py connec...
CVE-2024-6028-Poc
CVE-2024-6028-Poc CVE-2024-6028 Quiz Maker method getquestionscategories image image image Poc root@kitploit: POST /wp-admin/admin-ajax.php HTTP/1.1 Host: Accept-Encoding: gzip, deflate Accept: / Accept-Language: en-US;q=0.9,en;q=0.8 User-Agent: Mozilla/5.0 Windows NT 10.0; Win64; x64...
git-all-secrets
git-all-secrets About git-all-secrets is a tool that can: Clone multiple public/private github repositories of an organization and scan them, Clone multiple public/private github repositories of a user that belongs to an organization and scan them, Clone a single public/private repository of an...
Starlink-FI
Starlink User Terminal Modchip This repository accompanies the talk titled "Glitched on Earth by Humans: A Black-Box Security Evaluation of the SpaceX Starlink User Terminal". A slide deck is available here, a recording of the talk should be available soon. The talk covers how we managed to execu...
STrace
STrace Steve's Tracer. A DTrace on windows syscall hook reimplementation. Think of this like a patchguard compatible SSDT hook, but without hacks. This doesn't support SSSDT win32k apis, as the DTrace system call APIs themselves do not support this additional table. Zw kernel apis can be traced i...
cs-token-vault
Token Vault BOF for Cobalt Strike This Beacon Object File BOF creates in-memory storage for stolen/duplicated Windows access tokens allow you to: Hot swap/re-use already stolen tokens without re-duplicating. Store tokens for later use in case of a person log out. Installation 1. Download the late...
cisco_asa_research
Cisco ASA Research This repository contains slides and code presented at Black Hat USA 2022 and DEF CON 30. The following can be found: Slides DEF CON 30 and Black Hat slide decks. The DEF CON deck is slightly longer due to a longer time slot. theway - a tool for creating malicious/distributable...
Estudo-de-Caso-CVE-2024-21413
CVE-2024-21413 β Moniker Link ππ Microsoft Outlook RCE + FiltraciΓ³n de Credenciales NTLM β οΈ Aviso Legal: Este repositorio es exclusivamente con fines educativos y de investigaciΓ³n en seguridad. Todas las demostraciones se realizaron en entornos controlados y aislados. El uso de estas tΓ©cnicas...
PRET
PRET - Printer Exploitation Toolkit Is your printer secure? Check before someone else does... PRET is a new tool for printer security testing developed in the scope of a Master's Thesis at Ruhr University Bochum. It connects to a device via network or USB and exploits the features of a given...
CVE-2020-3452
CVE-2020-3452 Lectura de archivos sin autenticaciΓ³n en Cisco ASA y Cisco Firepower Saikat Karmakar | Nov : 2021 Esto comprobarΓ‘ si el host dado es vulnerable a CVE-2020-3452 o no Requisitos: root@kitploit: requests termcolor Uso: root@kitploit: darklord@kali: python3 cve-2020-3452.py -h usage:...