fuzzable

Fuzzable 通过静态分析自动化“可模糊测试”目标发现的框架 简介 进行软件安全评估的漏洞研究人员通常会利用覆盖引导的模糊测试能力，借助 AFL++ 和 libFuzzer 等强大工具。这很重要，因为它自动化了漏洞挖掘过程，并能快速暴露目标中的可利用条件。然而，当遇到庞大而复杂的代码库或闭源二进制文件时，研究人员必须花费大量时间手动审计和逆向工程，以确定哪些函数适合进行基于模糊测试的探索。 Fuzzable 是一个集成 C/C++...

blackarmy-framework

BlackArmy BlackArmy 渗透测试框架...

mysql-baseline

DevSec MySQL Baseline This Compliance Profile ensures, that all hardening projects keep the same quality. https://github.com/dev-sec/ansible-collection-hardening/tree/master/roles/mysqlhardening https://github.com/dev-sec/chef-mysql-hardening https://github.com/dev-sec/puppet-mysql-hardening...

bluebox

Bluebox work in progress A collection of exploits for different VoIP products. Thanks to the Go Exploit Framework. If you ended up here looking for a VoIP pentesting solution, check out Sippts sippts-gui in Kali or SIPVicious. This project is more focused on the exploitation phase. Install...

CrossC2

CrossC2 framework README | 中文文档 | READMEFULL | 中文完整文档 CobaltStrike support Support CobaltStrike's security assessment of other platforms Linux/MacOS/..., and include the development support of Unix post-penetration module...

Ducky-Exploit

Ducky-Exploit Introduction Ducky Exploit is python framework which helps as to code Digispark as Rubber Ducky This script has been tested on Kali Linux 18.2 Ubuntu 18.04 Windows Works with both Python2 and Python3 Keyboard Support Type US Type Keyboard Usage root@kitploit: git clone...

Nmap-API

Nmap API Uses python3.10, Debian, python-Nmap, and flask framework to create an Nmap API that can do scans with a good speed online and is easy to deploy. This is an implementation for our college PCL project which is still under development and constantly updating. API Reference Get all items...

StegoForge

🛡️ StegoForge The ultimate hybrid of steganography, digital forensics, and covert communications. ⚡ Quick Launch Standalone Binaries StegoForge is a complex Python framework, but you shouldn't have to deal with broken environments when doing active forensics. We have compiled zero-dependency,...

snoopy-ng

SensePost 呈现： root@kitploit: /$$$$$$ /$$ $$ | $$ / /$$$$$$$ /$$$$$$ /$$$$$$ /$$$$$$ /$$ /$$ | $$$$$$ | $$ $$ /$$ $$ /$$ $$ /$$ $$| $$ | $$ \ $$| $$ \ $$| $$ \ $$| $$ \ $$| $$ \ $$| $$ | $$ /$$ \ $$| $$ | $$| $$ | $$| $$ | $$| $$ | $$| $$ | $$ | $$$$$$/| $$ | $$| $$$$$$/| $$$$$$/| $$$$$$$/| $$$$$$...

paimei

PaiMei 是一个由多个可扩展组件组成的逆向工程框架。该框架本质上可以看作是逆向工程师的瑞士军刀，已被证明可有效用于各种静态和动态任务，例如模糊测试辅助、代码覆盖率跟踪、数据流跟踪等。 有关更多详细信息，请参阅 docs\index.html。...

RedGhost

RedGhost Linux 后渗透框架，旨在帮助红队实现持久化、侦察、权限提升以及不留下痕迹。 Payloads 生成各种编码的反向 Shell 的函数，支持 netcat, bash, python, php, ruby, perl SudoInject 为 sudo 命令注入包装函数的函数，每次运行 "sudo" 时执行反向 root Shell，用于权限提升 lsInject 为 "ls" 命令注入包装函数的函数，每次运行 "ls" 时执行 payload，用于持久化 SSHKeyInject 使用 strace 记录 SSH 进程按键记录的函数 Crontab 创建 cron...

androwarn

Androwarn Yet another static code analyzer for malicious Android applications Description Androwarn is a tool whose main aim is to detect and warn the user about potential malicious behaviours developped by an Android application. The detection is performed with the static analysis of the...

aparoid

Aparoid Aparoid is a framework designed for Android application analysis. It offers an automated set of tools to discover vulnerabilities and other risks in mobile applications. It is built using the Flask framework and offers a web GUI to upload APK files and explore the contents / results. The...

canTot

canTot canTot 是一个基于 Python 的命令行框架，底层使用 sploitkit，操作方式类似于 Metasploit，易于上手。它类似于漏洞利用框架，但专注于已知的 CAN 总线漏洞或有趣的 CAN 总线攻击技巧。它也可以作为渗透测试车辆的学习指南，以及通过更简单的方式学习汽车黑客技术的 Python 教程。这不是要重新发明已有的 CAN 模糊测试工具、汽车探索工具（如 caring caribou）或其他优秀的 CAN 分析器，而是将汽车安全中所有已知的漏洞和有趣的 CAN 总线攻击技巧整合在一起。 由 Car Hacking Village Philippines...

jaeles-signatures

该项目是 Osmedeus Engine 的一部分。查看其在 @OsmedeusEngine 的集成方式 本仓库仅包含 Jaeles 项目的默认签名。欢迎提交 Pull Request 或任何想法。 请阅读官方文档 这里 以了解如何编写你自己的签名。 安装 root@kitploit: jaeles config init 或者 尝试将签名文件夹克隆到某个位置，例如： root@kitploit: git clone --depth=1 https://github.com/jaeles-project/jaeles-signatures /tmp/jaeles-signatures/...

ogi

OpenGraph Intel OGI 开源可视化链接分析与OSINT框架。 免费、可自托管、社区驱动。 特性 • 截图 • 快速开始 • Docker • 转换中心 • 架构 • 参与贡献 注意： 该项目正在积极开发中。它拥有稳定的核心能力和测试覆盖，我们持续在每个版本中改进文档、加固和特性深度。欢迎贡献、报告错误和提供反馈。 特性 可视化图谱调查 — 拖拽实体，交互式探索连接 20+内置转换 — DNS、WHOIS、SSL证书、地理位置、网页/邮箱/哈希/社交增强等 转换中心 — 从注册中心浏览和安装社区转换 AI调查员 —...

m3

m3 A simple and scalable Android bot emulation framework. A detailed explanation can be found here. This project was first published at Black Hat Europe 2021's Arsenal. Aside from the documentation in the code both in-line and as JavaDoc, one can learn more about extending the framework here. The...

raptor

root@kitploit: ╔═══════════════════════════════════════════════════════════════════════════╗ ║ ║ ║ ██████╗ █████╗ ██████╗ ████████╗ ██████╗ ██████╗ ║ ║ ██╔══██╗██╔══██╗██╔══██╗╚══██╔══╝██╔═══██╗██╔══██╗ ║ ║ ██████╔╝███████║██████╔╝ ██║ ██║ ██║██████╔╝ ║ ║ ██╔══██╗██╔══██║██╔═══╝ ██║ ██║ ██║██╔══█...

CVE-2017-13286

CVE-2017-13286 CVE-2017-13286 Poccannot use All resources are sourced from this article https://bbs.kanxue.com/thread-268506.htm The main cause of this vulnerability is the inconsistency between reading and writing of Parcel objects. It can be traced back to the following code root@kitploit: publ...

Athanasius

Athanasius Hacking Framework Installation 1.Clone Repo root@kitploit: git clone https://github.com/shyam999/Athanasius.git 2.Install Requirements root@kitploit: pip install -r requirements.txt 3.Install hydra root@kitploit: sudo apt install hydra 4.Run The Script root@kitploit: python athanasius....