ActiveReign

ActiveReign ⚠️ Thank you for your support. This project is no longer publicly maintained. Background A while back I was challenged to write a discovery tool with Python3 that could automate the process of finding sensitive information on network file shares. After writing the entire tool with...

rop-tool

rop-tool v2.4.2 A tool to help you write binary exploits OPTIONS root@kitploit: rop-tool v2.4.2 Help you make binary exploits. Usage: rop-tool OPTIONS Commands : gadget Search gadgets patch Patch the binary info Print info about binary heap Display heap structure disassemble Disassemble the binar...

procrustes

Procrustes A bash script that automates the exfiltration of data over dns in case we have a blind command execution on a server where all outbound connections except DNS are blocked. The script currently supports sh, bash and powershell and is compatible with exec style command execution e.g...

doona

Doona - Network fuzzing tool .:: About ::. Doona is a fork of the Bruteforce Exploit Detector Tool BED. BED is a program which is designed to check daemons for potential buffer overflows, format string bugs etc. Doona is Australian for duvet. It adds a significant enough number of features/change...

DLLHijackingScanner

UAC bypass - DLL hijacking Description This is a PoC for bypassing UAC using DLL hijacking and abusing the "Trusted Directories" verification. Summary Generate Header from CSV Arguments Generate the list of vulnerable PE and DLL DLLHijacking.exe Log file Execution Result test.dll Sources Generate...

RedRoot

🔴 RedRoot Lite – Mark X Offensive Security Framework Lite Edition | CLI-Based "약한 힘. 같은 훈련." RedRoot Lite 은 고급 모듈을 잠금 상태로 유지하면서 핵심 레드팀 기능을 제공하도록 설계된 RedRoot의 제한 버전 입니다. 동일한 아키텍처, 동일한 CLI 스타일, 동일한 사고방식을 사용하지만 제한된 액세스 를 제공합니다. 참고:- RedRoot는 필수 레드팀 도구를 하나의 통합 터미널 환경으로 모아주는 Python 기반의 CLI 중심 공격 보안...

Root-My-Device

Root My Device BuSung-dev/Root-My-Galaxy のフォークであり、Apache License 2.0 に基づきます — LICENSE と クレジット を参照してください。 Root My Device は、明示的にサポートされているファームウェアビルド向けのワンクリックインストーラーです。アプリケーション本体は、デバイスオフセット、ネイティブエクスプロイトペイロード、KernelSU ビルド成果物から分離して管理されています。 最新リリース デバイスフィードとネイティブペイロードは Root-My-Device-Payloads で管理されています。...

proxy.py

Table of Contents Features Install Using PIP Stable version Development version Using Docker Stable version from Docker Hub Development Version from GHCR Build container locally Using HomeBrew Stable version Development version Start proxy.py From command line when installed using PIP Run it...

CVE-2022-45451

Introduction System Specs: Windows 10 1809 x64 EN Target: Acronis Home Cyber Protect Acronis Cyber Protect Vulnerability Description The Acronis "ngscan" anti-malware scan driver suffers from incorrect / improper access control placed on the filter communication port. The minifilter driver suppor...

RmiTaste

RmiTaste RmiTaste allows security professionals to detect, enumerate, interact and attack RMI services by calling remote methods with gadgets from ysoserial. It also allows to call remote method with specific parameters. Disclaimer RmiTaste was written to aid security professionals in identifying...

github-endpoints

github-endpoints GitHub上でエンドポイントを探す。 説明 このGoツールは、GitHub上で検索を実行し、その結果を解析して、指定されたドメインのエンドポイントを探します。 インストール root@kitploit: go install github.com/gwen001/github-endpoints@latest または root@kitploit: git clone https://github.com/gwen001/github-endpoints cd github-endpoints go install 使い方 root@kitploit: ...

firecall

firecall Automate SSH communication with firewalls, switches, etc. Description These scripts are designed to automate sending commands to a Cisco ASA firewall. The intended purpose here is to eliminate the need to manually log in to a firewall to make changes. This code can be run directly via...

pcfg_cracker

PCFG = Probabilistic Context Free Grammar PCFG = Pretty Cool Fuzzy Guesser In short: A collection of tools to perform research into how humans generate passwords. These can be used to crack password hashes, but also create synthetic passwords honeywords, or help develop better password strength...

protocol-fuzzer-ce

:toc: = GitLab Protocol Fuzzer Community Edition This project is based on Peach Fuzzer Professional v4 which was https://about.gitlab.com/press/releases/2020-06-11-gitlab-acquires-peach-tech-and-fuzzit-to-expand-devsecops-offering.htmlaquired by GitLab in 2020. Some features of Peach Fuzzer...

basecrack

BaseCrack Decoder For Base Encoding Schemes BaseCrack is a tool written in Python that can decode all alphanumeric base encoding schemes. This tool can accept single user input, multiple inputs from a file, input from argument, multi-encoded bases , bases in image EXIF data , bases on images with...

CVE-2024-26475

CVE-2024-26475 Authors Sherlock Fang, Vlad Tronciu, Ayam Babu Description An issue in radareorg radare2 v.0.9.7 through v.5.8.6 and fixed in v.5.8.8 allows a local attacker to cause a denial of service via the grubsfsreadextent function. Attack Vectors Crafting a payload to cause “treeblock =...

ReconDog

ReconDog Reconnaissance Swiss Army Knife Main Features Wizard + CLA interface Can extracts targets from STDIN piped input and act upon them All the information is extracted with APIs, no direct contact is made to the target Utilities Censys: Uses censys.io to gather massive amount of information...

svn-extractor

Svn-Extractor 웹 애플리케이션 침투 테스터는 .svn 폴더가 존재하는 상황을 자주 마주칩니다. 모르는 분들을 위해 설명하면, .svn 폴더는 SVN 버전 관리 시스템이 작업을 수행하는 데 사용하는 폴더입니다. 블랙박스 침투 테스트에서 이 폴더는 엄청난 양의 정보를 담고 있습니다. 이 정보가 도움이 되는 주요 분야는 다음과 같습니다. 1. 숨겨진 파일 및 폴더 이름 찾기 2. 파일의 소스 코드에 접근하기 3. htaccess에 접근 제한이 있어도 파일 다운로드하기 이것을 달성하는 방법. 1. 숨겨진 파일 및 폴더 이름...

CVE-2018-2628all

CVE-2018-2628 Vulnerability Batch Detection Script Usage IP format: root@kitploit: 192.168.31.1:443 192.168.31.100:443 Save it as url.txt in the same directory and run the script. Please comment on the output effect yourself! Execute like this: root@kitploit: The program works fine under Deepin,...

WireBug

WireBug WireBug is a tool set for Voice-over-IP penetration testing. It is designed as a wizard which makes it easy to use. The tools are build for single using too, so every tool is its own python or bash program. Installation Read the Installation Guide in the wiki. Tools FullBridge: This is a...