tmpmail

A temporary email right from your terminal written in POSIX sh tmpmail is a command line utility written in POSIX sh that allows you to create a temporary email address and receive emails to the temporary email address. It uses 1secmail's API to receive emails. By default w3m is used to render th...

ncrack

ncrack Ncrack is a high-speed network authentication cracking tool. It was built to help companies secure their networks by proactively testing all their hosts and networking devices for poor passwords. Security professionals also rely on Ncrack when auditing their clients. Ncrack was designed...

ulexecve

Quick Start Execute dynamic or statically compiled ELF Linux binaries without ever calling execve. root@kitploit: cat /bin/echo | ulexecve - hello hello Introduction This Python tool is called ulexecve and it stands for userland execve. It helps you execute arbitrary ELF binaries on Linux systems...

androwarn

Androwarn Yet another static code analyzer for malicious Android applications Description Androwarn is a tool whose main aim is to detect and warn the user about potential malicious behaviours developped by an Android application. The detection is performed with the static analysis of the...

qvm-create-windows-qube

Qvm-Create-Windows-Qube Spin up new Windows qubes quickly, effortlessly and securely About Qvm-Create-Windows-Qube is a tool for quickly and conveniently installing fresh new Windows qubes with Qubes Windows Tools QWT dr...

rpcfirewall

I Need More Information Check out our RPC Firewall blog post or our BlackHat talk to gain better understanding of RPC, RPC attacks, and the solution: RPC Firewall. Join our |Zero| Labs Slack Community workspace for any questions, issues, or simply to shout out. We would love to hear from you also...

WMIHACKER

WMIHACKER（No need 445 Port） 中文版Chinese version Disclaimer: The technology involved in this project is only for security learning and defense purposes, illegal use is prohibited! Bypass anti-virus software lateral movement command execution test tool（No need 445 Port） Introduction: The common...

CVE-2020-14947

CVE-2020-14947 OCS Inventory NG v2.7 Remote Command Execution CVE-2020-14947 के लिए आधिकारिक शोषण...

credcheck

Features Check credentils of given target. Check credentials passivlyusing regex. CMD-line script. Use as library Todos Publish on pypi Inclusion of api docs Pin-pointed regexes for Creds Test cases Multiple subparsers Complete regex Uses pre-requisite 3.6+ Command line usage root@kitploit: pytho...

SharpToken

SharpToken रेड टीम लेटरल मूवमेंट के दौरान, हमें अक्सर अन्य उपयोगकर्ताओं की अनुमतियाँ चुराने की आवश्यकता होती है। आधुनिक EDR की सुरक्षा के तहत, हमारे लिए Mimikatz का उपयोग करके अन्य उपयोगकर्ता अनुमतियाँ प्राप्त करना कठिन है, और यदि लक्ष्य उपयोगकर्ता की कोई प्रक्रिया जीवित नहीं है, तो हमारे पास Tok...

CVE-2019-11043

CVE-2019-11043 ثغرة RCE في php-fpm وNginx 0x01 تثبيت phuip-fpizdam-Mac go get github.com/neex/phuip-fpizdam go install github.com/neex/phuip-fpizdam root@kitploit: ale@Pentest /go go get github.com/neex/phuip-fpizdam ale@Pentest /go go install github.com/neex/phuip-fpizdam ale@Pentest /go ls bin...

CIMplant

CIMplant C port of WMImplant which uses either CIM or WMI to query remote systems. It can use provided credentials or the current user's session. Note: Some commands will use PowerShell in combination with WMI, denoted with in the --show-commands command. Introduction CIMplant is a C rewrite and...

gospider

GoSpider GoSpider - Fast web spider written in Go Painless integrate Gospider into your recon workflow? this project was part of Osmedeus Engine. Check out how it was integrated at @OsmedeusEngine Installation GO install root@kitploit: GO111MODULE=on go install...

gospider

GoSpider GoSpider - गो में लिखा गया तेज़ वेब स्पाइडर क्या आप अपने रिकॉन वर्कफ़्लो में बिना दर्द के GoSpider को एकीकृत करना चाहते हैं? यह प्रोजेक्ट Osmedeus Engine का हिस्सा था। देखें कि इसे कैसे एकीकृत किया गया है @OsmedeusEngine इंस्टॉलेशन GO इंस्टॉल root@kitploit: GO111MODULE=on go install...

nvd

nvd CVE को NVD U.S. राष्ट्रीय भेद्यता डेटाबेस फीड से प्राप्त करने के लिए Go में तेज़ और सरल लाइब्रेरी। स्थापना root@kitploit: go get github.com/daehee/nvd उपयोग nvd पैकेज आधिकारिक NVD फीड से CVE प्राप्त करने के लिए एक Client प्रदान करता है: root@kitploit: // nvd client with ./tmp working dir...

CVE-2024-20931

CVE-2024-20931 CVE-2024-20931، هذا هو تجاوز التصحيح لـ CVE-2023-21839 Oracle Weblogic الاستخدام: إعداد JNDI، الإعداد المحدد من https://github.com/WhiteHSBG/JNDIExploit/ الاستغلال: root@kitploit: java -jar CVE-2024-20931.jar Please input target IP:127.0.0.1 Please input target port:7001 Please inp...

gargamel

Gargamel Compile Compiled and tested with Rust 1.50+. Open terminal in the project directory and to compile a release build type root@kitploit: cargo build --release Debug build can be compiled using root@kitploit: cargo build Compiled executable is located at target/release/gargamel.exe or...

jsecret

jsecret simple and fast tool to detect sensitive data in the source code such as javascript files or others install go install -v github.com/raoufmaklouf/jsecret@latest Usage cat jsfiles.txt | jsceret echo http://test.tld/main.js | jsecret Big thank to https://twitter.com/medmahmoudi619 for helpf...

CVE-2022-46169

CVE-2022-46169 - Cacti में अप्रमाणित रिमोट कोड निष्पादन Cacti क्या है और इसकी भेद्यता? Cacti एक ओपन-सोर्स परिचालन निगरानी उपकरण है जो PHP, MySQL/MariaDB में लिखा गया है और यह एक अनुकूल इंटरफ़ेस प्रदान करता है। यह भेद्यता 2022 में पाई गई थी जो 1.2.23 से पहले के सभी संस्करणों को प्रभावित करती है। इ...

scan-for-webcams

scan-for-webcams 📷 中文文档 Note I switched to a new method of installing this program for a better developer experience and better modifiability. As a result, the PYPI package scan-for-webcams is not maintained anymore, and should be considered deprecated. btw: we have a discord channel ! join Table...