SharpStrike

SharpStrike SharpStrike 是一款用 C 编写的后渗透工具，可使用 CIM 或 WMI 查询远程系统。它可以使用提供的凭据或当前用户的会话。 注意：某些命令会结合 PowerShell 与 WMI 使用，在 --show-commands 命令中以 标注。 简介 SharpStrike 是对 @MattGrandy 的 CIMplant 和 @christruncer 的 WMImplant 的 C 重写和扩展。 SharpStrike 允许您收集远程系统的数据、执行命令、外泄数据等。该工具支持通过 Windows Management Instrumentation...

SXDork

SXDork v1.0 SXDork 是一款强大的工具，利用谷歌搜索技巧（Google Dorking）技术在互联网上搜索特定信息。谷歌搜索技巧是一种使用高级搜索运算符和关键字来发掘互联网上公开敏感信息的方法。SXDork 提供多种选项，用于搜索不同类型的安全风险点（dorks），例如域名登录 dork、wpadmin dork、SQL dork、配置文件 dork、日志文件 dork、仪表盘 dork、idrsa dork、FTP dork、备份文件 dork、邮件存档 dork、密码 dork、DCIM 照片 dork 和 CCTV dork。 SXDork 的关键特性之一是能够使用...

SocialPath

SocialPath 跨社交媒体平台追踪用户 通过用户名复用去匿名化暗网用户 研究第2项进行中 支持的服务： Facebook Twitter + 详细信息 Stackoverflow + 详细信息 Instagram + 详细信息 Reddit + 详细信息 Steam Pinterest Tumblr Pastebin Github 依赖： Django Tweepy PRAW Celery Redis 安装 将你的 API 密钥粘贴到 backend/keys.json 中。注意：在 JSON 中，Instagram cookie 中的双引号 " 需要使用反斜杠 \ 转义。 安装并...

WinFiHack

WinFiHack root@kitploit: \ \ / | | | | | | \ \ /\ / /| | ' | | | | || |/ |/ | |/ / \ V V / | | | | | | | | | | | | Tool: Provide interface default: Wi-Fi Tool-Interface: Disconnect all active network connections Interface-Network: Search for all available networks User-Tool: Set target network...

moltis v20260818.08

Moltis — A secure persistent personal agent server in Rust One binary — sandboxed, secure, yours. Installation • Comparison • Architecture • Security • Features • How It Works • Contributing Moltis recently hit the front page of Hacker News. Please open an issue for any friction at all. I'm focus...

Findsploit

Findsploit by @xer0dayz https://sn1persecurity.com ABOUT Finsploit is a simple bash script to quickly and easily search both local and online exploit databases. This repository also includes "copysploit" to copy any exploit-db exploit to the current directory and "compilesploit" to automatically...

reconerator

Overview This is a custom .NET assembly which will perform a number of situational awareness activities. There are a number of current featuresets: BASIC - Obtains information from the disk and registry. LDAP - Allows customised AD LDAP queries to be made. RESOLVEHOST - Performs DNS lookup querie...

smogcloud

☁️ Smogcloud Find exposed AWS cloud assets that you did not know you had. A comprehensive asset inventory is step one to any capable security program. We made smogcloud to enable security engineers, penetration testers, and AWS administrators to monitor the collective changes that create dynamic...

inquisitor

Inquisitor Notice This project is only partially complete and I have yet to implement many of the features described in the following blog post I made: https://penafieljlm.com/2017/07/14/inquisitor/. Inquisitor is a simple tool for gathering information on companies and organizations through the...

inquisitor

Inquisitor Aviso Este proyecto está solo parcialmente completo y aún tengo que implementar muchas de las características descritas en la siguiente publicación de blog que hice: https://penafieljlm.com/2017/07/14/inquisitor/. Inquisitor es una herramienta simple para recolectar información sobre...

password-generator

Generador de Contraseñas Para BruteForce o Crackeo/Comparación de Md5 root@kitploit: $ php password-generator --info="victim name,victim surname , victim age , victim email" --info Obtener toda la información de la víctima. --path El área donde se guardará el archivo opcional. --md5 Las...

pagodo

pagodo - Passive Google Dork Introduction pagodo automates Google searching for potentially vulnerable web pages and applications on the Internet. It replaces manually performing Google dork searches with a web GUI browser. There are 2 parts. The first is ghdbscraper.py that retrieves the latest...

awesome-osint

Awesome OSINT Una lista curada de herramientas y recursos de inteligencia de fuentes abiertas increíblemente asombrosos. Inteligencia de fuentes abiertas OSINT es la inteligencia recopilada de fuentes disponibles públicamente. En la comunidad de inteligencia IC, el término "abierto" se refiere a...

vortex

🚩 Este es el repositorio público de vortex, para la última versión y actualizaciones, considera apoyarnos a través de https://porchetta.industries/ Vortex Kit de herramientas de reconocimiento, prueba, enumeración y explotación de VPN en general 🚩 Patrocinadores Si quieres patrocinar este proyect...

Ropper

Ropper You can use ropper to display information about binary files in different file formats and you can search for gadgets to build rop chains for different architectures x86/X8664, ARM/ARM64, MIPS/MIPS64, PowerPC/PowerPC64, SPARC64. For disassembly ropper uses the awesome Capstone Framework...

bing-ip2hosts

Bing-ip2hosts Bing-ip2hosts is a Bing.com web scraper to discover hostnames by IP address. Description Bing-ip2hosts is a Bing.com web scraper that discovers hostnames by IP address. Bing is the flagship Microsoft search engine formerly known as MSN Search and Live Search. It provides a feature...

bing-ip2hosts

Bing-ip2hosts Bing-ip2hosts 是一个 Bing.com 网页抓取器，通过 IP 地址发现主机名。 描述 Bing-ip2hosts 是一个 Bing.com 网页抓取器，通过 IP 地址发现主机名。Bing 是微软的旗舰搜索引擎，前身为 MSN Search 和 Live Search。 它提供了一个搜索引擎独有的功能——允许按 IP 地址进行搜索。Bing-ip2hosts 利用了这个功能。 它可以用于发现子域名和其他相关域名。它还有助于识别在共享主机环境中托管的网站。该技术遵循渗透测试或漏洞赏金侦察阶段的最佳实践，用以扩展目标的攻击面。 与许多其他通过网页抓...

proctools

proctools Small toolkit for extracting information and dumping sensitive strings from Windows processes . Made to accompany FormThief. procsearch - find sensitive strings in target process memory searches for parsed string in readable process memory, if found, displays a range of valid ASCII char...

Pentest-Bookmarkz

Pentest Bookmarks List Sofiane Hamlaoui Ver más en Google : https://g.co/kgs/FUZgoXi Medios Hacker Blogs Hay MUCHOS blogs de pentesting, estos son los que monitoreo constantemente y valoro en el trabajo de pruebas del día a día. Carnal 0wnage - atom McGrew Security GNUCITIZEN Darknet - The...

domain_analyzer

Domain Analyzer v0.8.3 What Domain analyzer is a security analysis tool that automatically discovers and reports information about a given domain. Its main purpose is to analyze domains in an unattended way. It has many crazy features, such as getting more domains from DNS zones, automatic nmap,...