exploit-CVE-2014-6271

Shellshock exploit + vulnerable environment Shellshock, also known as Bashdoor, is a family of security bugs in the widely used Unix Bash shell, the first of which was disclosed on 24 September 2014. Many Internet-facing services, such as some web server deployments, use Bash to process certain...

sslyze

注意 目前 SSLyze 的开发已转移至单独的代码仓库： https://github.com/nabla-c0d3/sslyze. 本仓库会定期从新父仓库同步更新，但如需最新版本，请查看新仓库。如果你已克隆本仓库但希望追踪新分支，可以使用以下命令更新远程源： root@kitploit: git remote set-url origin https://github.com/nabla-c0d3/sslyze.git ======= SSLyze 快速且功能全面的 SSL 扫描器。 描述 SSLyze 是一个 Python 工具，可通过连接服务器分析其 SSL...

CSS-Keylogging

CSS Keylogger Chrome extension and Express server that exploits keylogging abilities of CSS. To use Setup Chrome extension 1. Download repository git clone https://github.com/maxchehab/CSS-Keylogging 2. Visit chrome://extensions in your browser or open up the Chrome menu by clicking the icon to t...

fail2ban

root@kitploit: / | | | | / | | |/ /| ' / | ' \ || ,||/|./,|||| v1.1.0.dev1 20??/??/?? Fail2Ban：禁止导致多次认证错误的主机 Fail2Ban 扫描 /var/log/auth.log 等日志文件，并禁止尝试过多失败登录的 IP 地址。它通过更新系统防火墙规则，在可配置的时间内拒绝来自这些 IP 地址的新连接。Fail2Ban 开箱即用，可读取许多标准日志文件（例如 sshd 和 Apache 的日志），并且可以轻松配置，使其能够根据需要读取任何日志文件中的任何错误。 虽然 Fail2Ban...

fail2ban

root@kitploit: / | | | | / | | |/ /| ' / | ' \ || ,||/|./,|||| v1.1.0.dev1 20??/??/?? Fail2Ban: ban hosts that cause multiple authentication errors Fail2Ban scans log files like /var/log/auth.log and bans IP addresses conducting too many failed login attempts. It does this by updating system...

bucky

El proyecto está en espera temporal. Bucky Bucky es una herramienta automática diseñada para descubrir configuraciones incorrectas de buckets S3. Bucky consta de dos módulos: el complemento de Firefox de Bucky y el motor backend de Bucky. El complemento de Bucky lee el código fuente de las página...

bucky

Project is on temporary hold. Bucky Bucky is an automatic tool designed to discover S3 bucket misconfiguration, Bucky consists up of two modules Bucky firefox addon and Bucky backend engine. Bucky addon reads the source code of the webpages and uses Regular ExpressionRegex to match the S3 bucket...

ghostbuster

Table of Contents Table of Contents Ghostbuster The problem Project Features Installing Ghostbuster Using Ghostbuster Example Output Setting up your AWS accounts Setting up Cloudflare Optional Authors License Ghostbuster Eliminate dangling elastic IPs by performing analysis on your resources with...

PhEmail

PhEmail PhEmail is a python open source phishing email tool that automates the process of sending phishing emails as part of a social engineering test. The main purpose of PhEmail is to send a bunch of phishing emails and prove who clicked on them without attempting to exploit the web browser or...

GhostDriver

GhostDriver 👻 Acerca de GhostDriver es una herramienta de eliminación de AV construida en Rust que utiliza BYOVD. Cómo empezar 1. Instala Rust desde rust-lang.org 2. Clona: git clone https://github.com/BlackSnufkin/GhostDriver.git 3. Compila: cargo build --release --target=x8664-pc-windows-msvc 4...

go_parser

Otro analizador de binarios Golang para IDAPro Inglés |中文 NOTA : Ahora la última rama master es la versión de Python3. La rama master anterior se ha cambiado a la rama py2 , y temporalmente no se mantiene. Instrucciones para la rama Python3 Esta versión se desarrolla y prueba en macOS/Windows,...

4-ZERO-3

Introduction 4-ZERO-3 Tool to bypass 403/401. This script contain all the possible techniques to do the same. NOTE : If you see multiple 200 Ok/bypasses as output, you must check the Content-Length. If the content-length is same for multiple 200 Ok/bypasses means false positive. Reason can be...

sast-scan

引言 root@kitploit: ███████╗ ██████╗ █████╗ ███╗ ██╗ ██╔════╝██╔════╝██╔══██╗████╗ ██║ ███████╗██║ ███████║██╔██╗ ██║ ╚════██║██║ ██╔══██║██║╚██╗██║ ███████║╚██████╗██║ ██║██║ ╚████║ ╚══════╝ ╚═════╝╚═╝ ╚═╝╚═╝ ╚═══╝ Scan 是一款面向现代 DevOps 团队的免费开源安全工具。基于集成多扫描器的设计，Scan 可以在一轮快速扫描中检测应用程序和基础设施代码中的各种安全缺陷，无需...

PackMyPayload

PackMyPayload - Emerging Threat of Containerized Malware Jump to supported formats This tool takes a file or directory on input and embeds them into an output file acting as an archive/container. It can serve purpose for a Proof-of-Concept presenting emerging risk of container file formats with...

waybackpack

waybackpack Waybackpack is a command-line tool that lets you download the entire Wayback Machine archive for a given URL. For instance, to download every copy of the Department of Labor's homepage through 1996 which happens to be the first year the site was archived, you'd run: root@kitploit:...

github-search

github-search 一套用于在 GitHub 上执行搜索的工具集合。 安装 root@kitploit: git clone https://github.com/gwen001/github-search cd github-search pip3 install -r requirements.txt 大多数情况下，GitHub 需要一个令牌来执行搜索。 你可以在克隆的仓库目录下创建一个 .tokens 文件，每行一个令牌 或者 你可以像这样配置一个环境变量（推荐）：GITHUBTOKEN=token1,token2,... 文档...

github-search

github-search A collection of tools to perform searches on GitHub. Install root@kitploit: git clone https://github.com/gwen001/github-search cd github-search pip3 install -r requirements.txt Most of the time GitHub requires a token to perform searches. You can create a .tokens file in the cloned...

vmware_vcenter_cve_2020_3952

Proof of concept for CVE-2020-3952 This is a short piece of code that exploits of CVE-2020-3952, which is described in detail at the Guardicore Labs post over here. This vulnerability was published by VMware in April 2020 with a maximum CVSS score of 10.0. It allows an attacker with a network...

CVE-2023-23752

CVE-2023-23752 CVE-2023-23752 is an authentication bypass resulting in an information leak on Joomla! Servers. Although rated as a CVSSv3 5.3 Medium severity by NVD, this vulnerability could allow an attacker to achieve code execution under the right circumstances. That likely justifies the...

domainhunter

Domain Hunter Authors Joe Vest @joevest & Andrew Chiles @andrewchiles Domain name selection is an important aspect of preparation for penetration tests and especially Red Team engagements. Commonly, domains that were used previously for benign purposes and were properly categorized can be purchas...