lsassy

lsassy Python tool to remotely extract credentials on a set of hosts. This blog post explains how it works. This tool uses impacket project to remotely read necessary bytes in lsass dump and pypykatz to extract credentials...

aiengine

AIEngine Artificial Inteligent Engine AIEngine is a next generation interactive/programmable Python/Ruby/Java/Lua packet inspection engine with capabilities of learning without any human intervention, NIDSNetwork Intrusion Detection System functionality, DNS domain classification, network...

jfscan

!CAUTION ⚠️ 项目已弃用 该项目已使用 Go 重写，以获得更好的性能和功能。 请使用新版本：nullt3r/massmap 描述 核心特性 利用 Masscan 释放 Nmap 的强大能力，进行大规模扫描 使用域名和其他格式扫描目标 以清晰的 domain:port 格式输出结果 使用 stdin/stdout 模式与其他工具流式传输结果 享受 Masscan 自动速率调整带来的无忧扫描 生成 Nmap XML 报告 通过范围控制保持专注并锁定目标 JFScan 是一个包装器，利用 Masscan 的速度和 Nmap 的指纹识别能力。JFScan 接受 URL、域名或 IP（包括...

Check-LocalAdminHash

Check-LocalAdminHash Check-LocalAdminHash is a PowerShell tool that attempts to authenticate to multiple hosts over either WMI or SMB using a password hash to determine if the provided credential is a local administrator. It's useful if you obtain a password hash for a user and want to see where...

jfscan

!CAUTION ⚠️ Project Deprecated This project has been rewritten in Go for better performance and features. Please use the new version here: nullt3r/massmap Description Killing features Unleash the power of Nmap with Masscan for large-scale scans Scan targets using domain names and other formats...

LACheck

LACheck Multithreaded C .NET Assembly Local Administrative Privilege Enumeration Arguments root@kitploit: ./LACheck.exe help | | /\ / | | | | | | / \ | | | | | | | | / /\ \ | | | ' \ / / | |/ / | | / \ | || | | | / | |// \ || |||||\ Usage: LACheck.exe smb rpc...

Hale

Acerca de Hale es un monitor/espía de command & control para botnets con un diseño modular que facilita el desarrollo de nuevos módulos para monitorizar nuevos protocolos usados por servidores C&C. Hale incluye monitores IRC y HTTP desarrollados con Twisted para manejar la escalabilidad de un gra...

LogonTracer

Concept LogonTracer v2 is a tool to investigate malicious logon by visualizing and analyzing Windows Active Directory event logs. This tool associates a host name or an IP address and account name found in logon-related events and displays it as a graph. This way, it is possible to see in which...

atomic-operator

license atomic-operator This python package is used to execute Atomic Red Team tests Atomics across multiple operating system environments. What's new? Why? atomic-operator enables security professionals to test their detection and defensive capabilities against prescribed techniques defined with...

atomic-operator

license atomic-operator 此 Python 包用于在多种操作系统环境中执行 Atomic Red Team 测试（Atomics）。 新增内容？ 为什么？ atomic-operator 使安全专业人员能够针对 atomic-red-team 中定义的既定技术测试其检测和防御能力。通过使用 atomic-operator 这样的测试框架，您可以识别自己的防御能力以及防御覆盖范围的缺口。 此外，atomic-operator 还可用于许多其他场景，例如： 生成警报以测试产品 测试 EDR 和其他安全工具 从对手角度识别执行防御规避的方法 等等。 特性 支持在...

clawdstrike

Clawdstrike EDR para la era del enjambre. Cerrar en fallo. Firma la verdad. Estado: beta pre-1.0. Las API públicas son estables; los valores predeterminados pueden endurecerse antes de 1.0. Clawdstrike es un motor de políticas, un EDR y una cadena de auditoría firmada en un solo binario. Un...

CVE-2022-1388-checker

CVE-2022-1388-checker Simple script realizado en bash, para revisión de múltiples hosts para CVE-2022-1388 F5. + Uso: ./CVE-2022-1388.sh hosts.txt Referencias https://support.f5.com/csp/article/K23605346 https://thehackernews.com/2022/05/f5-warns-of-new-critical-big-ip-remote.html...

fail2ban

root@kitploit: / | | | | / | | |/ /| ' / | ' \ || ,||/|./,|||| v1.1.0.dev1 20??/??/?? Fail2Ban: ban hosts that cause multiple authentication errors Fail2Ban scans log files like /var/log/auth.log and bans IP addresses conducting too many failed login attempts. It does this by updating system...

Guinevere

Guinevere - Automated Security Assessment Reporting Tool This tool works with Gauntlet a private tool to automate assessment reporting. Main features include: Generate Assessment Report Export Assessment Generate Retest Report Generate Pentest Checklist Generate Assessment Report This option will...

slipstream

NAT Slipstreaming NAT Slipstreaming allows an attacker to remotely access any TCP/UDP service bound to any system behind a victim's NAT, bypassing the victim's NAT/firewall remote arbitrary firewall pinhole control, just by the victim visiting a website. v1 developed by : @SamyKamkar //...

CVE-2024-6387-Checker

CVE-2024-6387-Checker Description CVE-2024-6387-Checker is a tool designed to identify servers running vulnerable versions of OpenSSH, specifically targeting the recently discovered regreSSHion vulnerability CVE-2024-6387. This script facilitates rapid scanning of multiple IP addresses, domain...

CVE-2026-6875-PoC-Exploit

CVE-2026-6875 - Framework de explotación y verificador de PoC para RCE sin autenticación en ServiceNow 🔥 Plataforma AI de ServiceNow — Inyección de JavaScript → Escape de sandbox → RCE → Escalada a root Framework de explotación y verificador seguro Solo para pruebas de seguridad autorizadas. ⚖️...

maalik

Maalik Network Pivoting and Post Exploitation Framework. Features Console Features Desktop notification on new session. Kill Online session easily. Build Maalik Client, Fhdawn easily. Configurable values in settings.ini Root shell. Multithreaded, Get multiple sessions. Maalik is extremenly easy t...

AdGuardHome

Centro de protección de la privacidad para ti y tus dispositivos Servidor DNS libre y de código abierto que bloquea anuncios y rastreadores en toda tu red. AdGuard.com | Wiki | Reddit | Twitter | Telegram AdGuard Home es un software para toda la red que bloquea anuncios y rastreo. Una vez que lo...

SteganographierGUI

SteganographierGUI Hide files into MP4/MKV files Please make sure you understand what "file extension " means before watching the following tutorial. If you don't understand, first search "how to change a file extension" If it still shows as MP4 after changing the extension, that means file...