sandcat

Sandcat Browser Sandcat is a lightweight multi-tabbed web browser that combines the speed and power of Chromium and Lua. Sandcat comes with built-in live headers, an extensible user interface and command line console, resource viewer, and many other features that are useful for web developers and...

AdbNet

adb - An exploitation tool for android devices. A tool that allows you to search for vulnerable android devices across the world and exploit them. Features root@kitploit: Features: - Post-Exploitation modules to control and tinker with the device you are connected to. - Scanners to search for...

oauth2-proxy

OAuth2 Proxy 是一款灵活的开源工具，既可以作为独立的反向代理使用，也可以作为中间件组件集成到现有的反向代理或负载均衡器设置中。它提供了一种简单且安全的方式，通过 OAuth2 / OIDC 身份验证来保护您的 Web 应用程序。作为反向代理，它拦截对您应用程序的请求，并将用户重定向到 OAuth2 提供商进行身份验证。作为中间件，它可以无缝集成到您现有的基础设施中，为多个应用程序处理身份验证。 OAuth2 Proxy 支持大量 OAuth2 以及 OIDC 提供商。既可以通过通用 OIDC 客户端，也可以通过针对 Google、Microsoft Entra...

gpasskey

======== gpasskey .. image:: https://gitlab.com/renich/gpasskey/-/raw/master/assets/banner.svg :width: 100% :align: center :alt: gpasskey banner | .. image:: https://gitlab.com/renich/gpasskey/badges/master/pipeline.svg :target: https://gitlab.com/renich/gpasskey/-/commits/master :alt: pipeline...

XposedOrNot

XposedOrNot XposedOrNot XoN tool is to search an aggregated repository of xposed passwords comprising of 850 million real time passwords. Usage of such compromised passwords is detrimental to individual account security. Screenshot What is Xposed Passwords? The main aim of this project is to give...

Egress-Assess

Egress-Assess Egress-Assess is a tool used to test egress data detection capabilities. Setup To set up, run the included setup script, or perform the following: 1. Install pyftpdlib 2. Generate a server certificate and store it as "server.pem" on the same level as Egress-Assess. This can be done...

kanha

Kanha - A web-app pentesting suite written in rust 🦀 Installation ⦾ Subcommands ⦾ Contribute Kanha is a tool that can help you perform, a variety of attacks based on the target domain . With just kanha you can do, Fuzzing, Reverse dns lookup, common http response, subdomain takeover detection and...

django_cve201919844

djangocve201919844poc PoC for CVE-2019-19844 Requirements Python 3.7.x PostgreSQL 9.5 or higher Setup 1. Create databasee.g. djangocve201919844poc 2. Set the database name to the environment variable DJANGODATABASENAMEe.g. export DJANGODATABASENAME=djangocve201919844poc 3. Run pip install -r...

Solr-GRAB

Solr-GRAB Steal Apache Solr instance Queries with or without a username and password. DISCLAIMER : This project should be used for authorized testing and educational purposes only. Download root@kitploit: git clone https://github.com/GnosticPlayers/Solr-GRAB Usage You can search for Apache Solr...

HTTPUploadExfil

HTTPUploadExfil HTTPUploadExfil is a very simple HTTP server written in Go that's useful for getting files and other information off a machine using HTTP. While there are many use-cases, it's meant to be used in low-stakes offensive scenarios e.g., CTFs. Think of this as python3 -m http.server bu...

CVE-2024-7627-PoC

CVE-2024-7627-PoC 背景 此概念验证（PoC）脚本用于WordPress插件Bit File Manager版本6.0至6.5.5中通过竞态条件导致的未认证远程代码执行漏洞（CVE-2024-7627）。 信息 描述： WordPress的Bit File...

SMB-Session-Spoofing

root@kitploit: / | / || \ / | / | / | \ --.| . . || |/ / \ --. \ --. | | --. \ |/| || \ --. / / / | |/ | ' \ --. \ ' \ / \ / | / \ '| // / | | || |/ / // / /\ \ \ | | | | | // / | | | | || / | /| |// / ||//|/|| || /| ./ / /|| || | | || Welcome! This is a utility that can be...

aws-security-assessment-solution

セルフサービスセキュリティアセスメントソリューション v2.0 サイバーセキュリティは、多くのCIO、CISO、そしてその顧客にとって非常に重要なトピックであり、関心事であり続けています。これらの重要な関心事に対応するために、AWSは顧客がアカウントを保護するために使用すべき主要なサービスのセットを開発しました。Amazon GuardDuty、AWS Security Hub、AWS Config、AWS Well-Architected...

Next.js-Exploit-Tool

Next.js-Exploit-Tool Next.js-Exploit-Tool 图形化综合利用工具。 简介 一款针对 CVE-2025-55182 的独立安全评估工具，基于 Go 开发，提供图形化界面（GUI），用于快速完成漏洞检测与验证。 更新日志 v1.3.0 新增 Godzilla 哥斯拉 内存马支持 实现了基于 Node.js 的 Godzilla 内存马注入功能，...

azureOutlookC2

Azure Outlook C2 Azure Outlook Command & Control that uses Microsoft Graph API for C2 communications & data exfiltration. Remotely Control a compromised Windows Device from your Outlook Mailbox. Creators: Bobby Cooke @0xBoku & Paul Ungur @C5pider CTI Threat update 02/13/22 Elastic Security Labs h...

scan4all

💬 README中文 • Compile/Install/Run • Parameter Description • How to use • Scenario • POC List • Custom Scan • Best Practices Features Free one id Multi-target web netcat for reverse shell What is scan4all: integrated vscan, nuclei, ksubdomain, subfinder, etc., fully automated and intelligent。red te...

restic

简介 restic 是一款快速、高效且安全的备份程序。它支持三大主流操作系统（Linux、macOS、Windows）以及一些较小的操作系统（FreeBSD、OpenBSD）。 有关详细的使用和安装说明，请查看文档。 您可以在我们的 Discourse 论坛 中提问。 快速开始 一旦您安装了 restic，就可以开始 为您的备份创建一个仓库： root@kitploit: $ restic init --repo /tmp/backup enter password for new backend: enter password again: created restic backend...

CVE-2018-10517

CVE-2018-12613 Authenticated remote command execution by uploading a fake module, dropping PHP files on remote web server. Software Affected 1. CMS Made Simple 2.2.7; How to use This PowerShell scripts need two parameters to craft a exploit HTTP request: root@kitploit: 1. CMS Made Simple URL...

recox

Recox v2.0 RecoX is an incredibly versatile and powerful tool that is specifically designed to aid in the identification and classification of vulnerabilities within web applications. The script is able to detect vulnerabilities that are not typically included in the OWASP top ten vulnerabilities...

go_parser

Yet Another Golang binary parser for IDAPro English |中文 NOTE : Now the latest master branch is the Python3 version. The old master branch has been changed to branch py2 , and temporarily not maintained. Instructions for Python3 branch This version is developed and tested on macOS/Windows, IDA7.4+...