Adhrit

Adhrit is an open source Android APK reversing and analysis suite. The tool is an effort to find an efficient solution to all the needs of mobile security testing and automation. Adhrit has been built with a focus on flexibility and mudularization. Adhrit currently uses the Ghera benchmarks to...

dnscat2-powershell

dnscat2 is a DNS covert channel tool by @iagox86 Ron Bowes which is used to transfer data over DNS requests. This is a powershell version of the dnscat2 C client. Click here for a blog post that gives a more detailed breakdown of the purpose of this script, and how to use it. To use this script,...

Dumb

Dumb - Dumain Bruteforcer Una herramienta para hacer fuerza bruta a dumains! Cómo funciona DUMB: Dumb funciona con una máscara de dumain para sustitución. El dumain puede tener tantas máscaras como quieras siempre que pases las listas de palabras correspondientes. Por ejemplo: Fuerza bruta a...

InfoLeak-Scanner

InfoLeak-Scanner Docker First run docker run --rm -p 8000:80 siwecos/infoleak-scanner. Open your browser and use the scanner: http://localhost/?url= Install Get php5, curl and a webserver: root@kitploit: sudo apt-get install apache2 php5 php5-curl Copy application into webserver: root@kitploit: c...

CVE-2023-27350-POC

CVE-2023-27350-POC Description: This tool is designed to exploit an authentication bypass vulnerability in PaperCut MF/NG versions 8.0 and above, but prior to versions 20.1.7, 21.2.11, or 22.0.9. The vulnerability allows for unauthorized access to the system and can potentially be used for...

honeybits

Honeybits A simple PoC tool designed to enhance the effectiveness of your traps by spreading breadcrumbs & honeytokens across your production servers and workstations to lure the attacker toward your honeypots. Author: Adel "0x4D31" Karimi. The Windows version of this project: honeybits-win...

struts2_cve-2017-5638

struts2cve-2017-5638 This is a sort of Java porting of the Python exploit at: https://www.exploit-db.com/exploits/41570/. This software is written to have no external dependencies. DISCLAIMER This tool is intended for security engineers and appsec guys for security assessments. Please use this to...

ctftools

База данных CTF-инструментов Twitter: @hydr0nium Зависимости: sudo apt install python2 Установка: git clone https://github.com/white-hood/ctftools.git cp .ctftools cd /bin ln -s ctftools /path/to/ctftools.py Использование: ./ctftools | обычный запуск ./ctftools --remove | удалить инструмент из ба...

autoenum

root@kitploit: / / / // / / // // \ / \ / \ / / / // \ / // // // // / / // // // / / // // // / / / / / ,/ ,/ / / /// // ,/// // // Resumen Autoenum es una herramienta de reconocimiento que realiza la enumeración automática de los servicios descubiertos. La construí para ahorrar tiempo...

CrawlBox

CrawlBox | Easy way to brute-force web directory. Operating Systems Tested MacOSX Kali Linux Ubuntu 16.04 Usage root@kitploit: python crawlbox.py -h -v -w WORDLIST url positional arguments: root@kitploit: url specific target url, like domain.com optional arguments: root@kitploit: -h, --help show...

CrawlBox

CrawlBox | Простой способ брутфорса веб-директорий. Протестированные операционные системы MacOSX Kali Linux Ubuntu 16.04 Использование root@kitploit: python crawlbox.py -h -v -w WORDLIST url позиционные аргументы: root@kitploit: url конкретный целевой URL, например domain.com необязательные...

macro_pack

macropack Краткое описание Предупреждение: MacroPack не поддерживается с 2021 года; если вы профессионал и нуждаетесь в инструментах offensive infosec для начального доступа, моделирования взлома, обхода EDR, посетите https://www.balliskit.com MacroPack Community — это инструмент для автоматизаци...

macro_pack

macropack Short description Warning: MacroPack is not maintained since 2021, if you are a pro and need Offensive infosec tools for initial access, assume breach, EDR bypass, check https://www.balliskit.com MacroPack Community is a tool used to automatize obfuscation and generation of retro format...

joomlavs

joomlavs Сканер уязвимостей Joomla на Ruby, работающий в режиме чёрного ящика Что это? JoomlaVS — это Ruby-приложение, которое помогает автоматизировать оценку подверженности установки Joomla эксплуатации. Оно поддерживает базовое снятие отпечатков и может сканировать уязвимости в компонентах,...

joomlavs

joomlavs A black box, Ruby powered, Joomla vulnerability scanner What is it? JoomlaVS is a Ruby application that can help automate assessing how vulnerable a Joomla installation is to exploitation. It supports basic finger printing and can scan for vulnerabilities in components, modules and...

bladeGPS

bladeGPS Very crude experimental implementation of gps-sdr-sim for real-time signal generation. The code works with bladeRF and has been tested on Windows 10 and Ubuntu 20.04. root@kitploit: Usage: bladegps options Options: -e RINEX navigation file for GPS ephemerides required -y YUMA almanac fil...

pupy

Pupy Simple Installation root@kitploit: pip3 install pipx pipx ensurepath pipx install git+https://github.com/n1nj4sec/pupy@nextgen pupysh If you want more detailed informationRefer to the wiki Development Install root@kitploit: git clone https://github.com/n1nj4sec/pupy cd pupy git checkout...

pupy

Pupy Простая установка root@kitploit: pip3 install pipx pipx ensurepath pipx install git+https://github.com/n1nj4sec/pupy@nextgen pupysh Если вам нужна более подробная информация,обратитесь к вики Установка для разработки root@kitploit: git clone https://github.com/n1nj4sec/pupy cd pupy git...

CVE-2015-57115

CVE-2015-57115 Mass Checker For CVE-2015-57115 Description The CVE-2015-57115 Checker Script is a Python tool for detecting vulnerabilities related to CVE-2015-57115, which is a path traversal vulnerability in certain PHP applications. The script checks multiple URLs for the presence of this...

Invoke-ATTACKAPI

Invoke-ATTACKAPI OBSOLETO RECOMENDAMOS USAR: https://github.com/Cyb3rWard0g/ATTACK-Python-Client Un script de PowerShell para interactuar con el framework MITRE ATT&CK a través de su propia API con el fin de recopilar información sobre técnicas, tácticas, grupos, software y referencias...