fi6s

fi6s: Fast IPv6 scanner fi6s is an IPv6 port scanner designed to be fast, aimed at Internet scanning and discovery. This is achieved by sending and processing raw packets asynchronously. The design and goal is pretty similar to Masscan, though it is not as full-featured. Please take note of the...

imaginaryC2

Imaginary C2 автор: Felix Weyne веб-сайт Twitter Imaginary C2 — это python-инструмент, предназначенный для помощи в поведенческом сетевом анализе вредоносного ПО. Imaginary C2 запускает HTTP-сервер, который перехватывает HTTP-запросы к выборочно выбранным доменам/IP-адресам. Кроме того, инструмен...

armory

root@kitploit: dM. ,MMb d'YM. ,P Mb MM 6MM MM 6MMb 6MMb 6MMMMMb MM 6MM MM M' d' YM. MM69 " MM69 MM69 Mb 6M' Mb MM69 " Mb d' ,PMbMMMMMMMMMMMMMMYM.,P d' YM. MM MM MM MM MM MM MM MM M \ ,MMMMMMMMbMMMMMMMMMMMMMMMbd'\ d' YM. MM MM MM MM YM. ,M9 MM YMP dM dMMMM MM MM MM YMMMMM9 MM M d' 8,P YMM...

secator

The pentester's swiss knife. Features • Supported commands • Installation • Usage • Documentation • Join us on Discord ! secator is a task and workflow runner used for security assessments. It supports dozens of well-known security tools and it is designed to improve productivity for pentesters a...

uncover

Quickly discover exposed hosts on the internet using multiple search engines. Features • Installation • Usage • Configuration • Running Uncover • Join Discord uncover is a go wrapper using APIs of well known search engines to quickly discover exposed hosts on the internet. It is built with...

trufflehog

TruffleHog Find leaked credentials. 🔎 Now Scanning ...and more To learn more about TruffleHog and its features and capabilities, visit our product page. 🌐 TruffleHog Enterprise Are you interested in continuously monitoring Git, Jira, Slack, Confluence, Microsoft Teams, Sharepoint and more for...

outpost

Outpost AWS 테스트 및 보고 관리 Outpost는 AssumeRole용 AWS 구성 파일을 생성하고, 계정이 정상적으로 작동하는지 확인하는 테스트 기능, 그리고 ScoutSuite 스캔 결과용 리포트 생성기를 제공하는 간단한 도구입니다. ScoutSuite 실행 결과 파싱 ✨보고서 결과 생성✨ 설치 Outpost는 Python3와 boto3가 필요합니다. 의존성을 설치하세요. root@kitploit: virtualenv -p python3 . source bin/activate pip install -r...

CVE-2024-7593_PoC_Exploit

CVE-2024-7593 익스플로잇 스크립트 이 Bash 스크립트는 Ivanti vTM의 인증 우회 취약점CVE-2024-7593을 악용하기 위한 개념 증명PoC입니다. 이 스크립트를 통해 사용자는 대상 시스템에 새로운 관리자 계정을 생성할 수 있습니다. 목차 전제 조건 사용법 매개변수 예제 제작자 라이선스 전제 조건 시스템에 다음이 설치되어 있는지 확인하세요. curl: 이 스크립트는 HTTP 요청을 보내기 위해 curl을 사용합니다. curl이 설치되어 있는지 확인하려면 다음 명령어를 실행하세요. bash command -...

unblob

unblob Accurate, fast, and easy-to-use extraction suite for binary blobs. unblob parses unknown binary blobs for 78+ archive, compression, and file-system formats , extracts their content recursively, and carves out unknown chunks. It is the perfect companion for extracting, analyzing, and revers...

emploleaks

EmploLeaks EmploLeaks is an OSINT Open Source Intelligence tool with a CLI interface, designed to discover and correlate information about employees of a target company. It allows collecting LinkedIn profiles, generating potential corporate emails, searching for leaked credentials in leak databas...

trackerjacker

trackerjacker Like nmap for mapping wifi networks you're not connected to. Maps and tracks wifi networks and devices through raw 802.11 monitoring. PyPI page: https://pypi.python.org/pypi/trackerjacker Install root@kitploit: pip3 install trackerjacker Supported platforms : Linux tested on Ubuntu,...

safety

!NOTE Come and join us at SafetyCLI. We are hiring for various roles. Table of Contents Table of Contents Introduction Key Features Getting Started GitHub Action Command Line Interface 1. Installation 2. Log In or Register...

PDFkit-CMD-Injection

PDFkit-CMD-Injection CVE-2022-25765 pdfkit 0.8.6 명령 삽입command injection. pdfkit 패키지는 URL이 제대로 삭제sanitize되지 않아 명령 삽입Command Injection에 취약합니다. 참고: 이 문제는 0.8.7.2에서 패치되었지만, 해당 패치는 효과가 없는 것으로 밝혀졌습니다. 업데이트된 패치 버전은 0.8.7.2입니다. PoC HTTP 서버 시작 root@kitploit: python3 -m http.server 80 netcat 리스너 시작...

CVE-2021-45232-RCE

Apache APISIX 대시보드 RCE root@kitploit: usage: -h -u URL -p PORT -c CMD optional arguments: -h, --help show this help message and exit -u URL, --url URL target url e.g: http://127.0.0.1:9000 -p PORT, --port PORT apisix management port default: 9080 -c CMD, --cmd CMD command default: ifconfig 참고...

EsFileExplorer-CVE-2019-6447

EsFileExplorer-CVE-2019-6447 Эксплуатация уязвимости Android в ES File Explorer Уязвимость ES File Explorer был создан компанией ES worldwide, которая является частью DO Global и базируется в Китае. Данный файловый менеджер доступен только для мобильных устройств под управлением операционной...

cariddi

Take a list of domains, crawl urls and scan for endpoints, secrets, api keys, file extensions, tokens and more Coded with 💙 by edoardottt Share on Twitter! Install • Usage • Get Started • Changelog • Contributing • License Installation 📡 Homebrew root@kitploit: brew install cariddi Snap...

digital-forensics-lab

Digital Forensics Lab & Shared Cyber Forensic Intelligence Repository Features of Repository Interactive Digital Forensics Labs: Tailored for students and faculty engagement Linux-Centric Lab Environment: Utilizes Kali Linux exclusively for all labs Visual Learning Support: Each lab includes...

subjack

subjack DNS Takeover Scanner Subjack is a DNS takeover scanner written in Go designed to scan a list of domains concurrently and identify ones that are able to be hijacked. With Go's speed and efficiency, this tool really stands out when it comes to mass-testing. Always double check the results...

rastrea2r

.. image:: https://github.com/rastrea2r/rastrea2r/blob/master/logo.png :align: center :alt: logo .. image:: https://travis-ci.org/rastrea2r/rastrea2r.svg?branch=master :target: https://travis-ci.org/rastrea2r/rastrea2r.svg?branch=master :alt: travis-ci for master branch .. image::...

sylkie

sylkie A command line tool and library for testing networks for common address spoofing security vulnerabilities in IPv6 networks using the Neighbor Discovery Protocol. Getting Started Note: This project is still in the early phases of development. If you run into any problems, please consider...