scrounger

Description Scrounger - une personne qui emprunte ou vit aux dépens des autres. Il n'y a pas de meilleure description pour cet outil pour deux raisons principales, la première est que cet outil s'inspire de nombreux autres outils déjà publiés, la seconde est qu'il vit des vulnérabilités des...

scrounger

Description Scrounger - a person who borrows from or lives off others. There is no better description for this tool for two main reasons, the first is because this tool takes inspiration from many other tools that have already been published, the second reason is because it lives off mobile...

pwndrop

pwndrop est un service d'hébergement de fichiers auto-déployable pour envoyer des payloads de red team ou partager en toute sécurité vos fichiers privés via HTTP et WebDAV. Si vous avez déjà eu besoin de configurer rapidement un serveur web nginx/apache pour héberger vos fichiers et que vous n'av...

pwndrop

pwndrop is a self-deployable file hosting service for sending out red teaming payloads or securely sharing your private files over HTTP and WebDAV. If you've ever needed to quickly set up an nginx/apache web server to host your files and you were never happy with the limitations of python -m...

kbd-audio

kbd-audio This is a collection of command-line and GUI tools for capturing and analyzing audio data. Keytap The most interesting tool is called keytap - it can guess pressed keyboard keys only by analyzing the audio captured from the computer's microphone. Check this blog post for more details:...

s3reverse

s3reverse Install go get root@kitploit: $ go get -u github.com/hahwul/s3reverse snap root@kitploit: snap install s3reverse brew...

s3reverse

s3reverse Install go get root@kitploit: $ go get -u github.com/hahwul/s3reverse snap root@kitploit: snap install s3reverse brew...

vhosts-sieve

VHosts Sieve Searching for virtual hosts among non-resolvable domains. Installation root@kitploit: git clone https://github.com/dariusztytko/vhosts-sieve.git pip3 install -r vhosts-sieve/requirements.txt Usage Get a list of subdomains e.g. using Amass root@kitploit: $ amass enum -v -passive -o...

inject-assembly

inject-assembly - Execute .NET in an Existing Process This tool is an alternative to traditional fork and run execution for Cobalt Strike. The loader can be injected into any process, including the current Beacon. Long-running assemblies will continue to run and send output back to the Beacon,...

java-stager

java-stager A PoC Java Stager which can download, compile, and execute a Java file in memory. This is for research purposes only, do not use this where you are unauthorised to do so. What is this? This is based on the work of James Williams from his talk "Next Gen AV vs My Shitty Code" available...

ldsview

ldsview Offline search tool for LDAP directory dumps in LDIF format. Features Fast and memory efficient parsing of LDIF files Build ldapsearch commands to extract an LDIF from a directory Show directory structure UAC and directory time format translation Config Config options can be passed as CLI...

CVE-2022-0847

CVE-2022-0847 Уязвимость Dirty Pipe Только в образовательных целях root@kitploit: ┌──vagrant㉿kali- └─$ ls -al /etc/passwd -rw-r--r-- 1 root root 3124 Mar 8 08:47 /etc/passwd ┌──vagrant㉿kali- └─$ head -n 1 /etc/passwd root:x:0:0:root:/root:/usr/bin/zsh ┌──vagrant㉿kali- └─$ echo foo /etc/passwd zsh...

tulpar

Tulpar — это сканер веб-уязвимостей с открытым исходным кодом, написанный для автоматизации тестирования на проникновение. Tulpar имеет следующие функции. -Sql Injection GET Method -XSS GET Method -Crawl -E-mail Disclosure -Credit Card Disclosure -Whois -Command Injection GET Method -Directory...

CVE-2021-26855

CVE-2021-26855-PoC Эксплойт PoC для CVE-2021-26855. Исходный код разработан https://github.com/GreyOrder. Оригинальный репозиторий был удалён вскоре после добавления дополнительных функций перечисление пользователей и т.д.. Пожалуйста, создайте pull request, если у вас есть последняя версия...

should-i-trust

should-i-trust Riepilogo should-i-trust è uno strumento per valutare i segnali OSINT per un dominio. Requisiti should-i-trust richiede chiavi API dalle seguenti fonti: Censys.io - Gratuito per le prime 250/richieste al mese VirusTotal - Gratuito GrayHatWarFare - Gratuito con risultati limitati...

CVE-2023-20198-RCE

Fofa root@kitploit: body="window.onload=function url ='/webui';window.location.href=url;" && ishoneypot=false && isfraud=false Utilizzo root@kitploit: usage: CVE-2023-20198-RCE.py -h -u URL -p PROXY -au ADDUSER -ap ADDPASS -du DELUSER -pm PRIVILEGEMODE -em EXPLOITMODE -oc OSCMD -cc CLICMD...

Fudge

Fudge Ho avuto un certo successo in campagne di phishing codificando in base64 il contenuto di un file, inserendolo in un file HTML e facendo sì che venisse decodificato e rilasciato quando l'utente apriva il file HTML. Utilizzo Sono disponibili binari precompilati nella scheda releases sia per...

cve-2023-50164-poc

PoC per CVE-2023-50164 Installazione Per installare questo strumento è necessario avere Go versione almeno 1.20 installato e configurato. $ go install github.com/dwisiswant0/cve-2023-50164-poc@latest In alternativa, puoi compilarlo da te: $ git clone http://github.com/dwisiswant0/cve-2023-50164-p...

scour

Scour - Framework di Rilevamento AWS Questo strumento viene utilizzato per emulare modelli di attacco all'interno del Controlplane AWS. Ogni attacco è etichettato con uno specifico UA per consentire al blue team di identificarlo. Stato Questo è ancora un lavoro in corso. Molti bug Non pronto per ...

noia

Noia Noia is a web-based tool whose main aim is to ease the process of browsing mobile applications sandbox and directly previewing SQLite databases, images, and more. Powered by frida.re. Please note that I'm not a programmer, but I'm probably above the median in code-savyness. Try it out, open ...