CVE-2017-8570

Utilisation : Après avoir téléchargé le script, modifiez attackip avec l'IP de Kali, LPORT avec le port que msf doit écouter, et DIR avec n'importe quel dossier vide. Donnez les permissions 777 au script root@kitploit: chmod 777 auto Puis exécutez le script root@kitploit: ./auto Ensuite, dans le...

Nac_Bypass_Agent

Agent de contournement Nac Ce code est un script écrit en Python et conçu pour fonctionner sur Kali Linux. Voici un résumé expliquant ce que fait chaque fonction : runcommandcommand Cette fonction exécute la commande qu'elle prend en entrée et retourne sa sortie. killnetworkservices Cette fonctio...

Exploitivator

Exploitivator V2.0 - Python 3를 사용하도록 수정됨 사전 요구 사항 이것은 Kali에서만 테스트되었습니다. 이것은 Python용 pymetasploit3 모듈에 의존하며, 자세한 내용은 여기에 설명되어 있습니다: https://coalfire.com/the-coalfire-blog/pymetasploit3-metasploit-automation-library 필요한 Kali 패키지와 Ruby용 PostgreSQL gem을 설치하세요: root@kitploit: apt-get install postgresq...

sandy

sandy Copyright 2013 Sandy Written by: Laszlo Toth, Ferenc Spala Description Sandy is an open-source Samsung phone encryption assessment framework. Sandy has different modules that allow you to carry out different attack scenarios against encrypted Samsung phones. For the details check our Derbyc...

KITT-Lite

Framework de Test d'Intrusion KITT - Version Lite N'est plus maintenu, peut nécessiter quelques modifications pour fonctionner Le framework de test d'intrusion KITT a été développé comme une solution open source pour les pentesteurs et les programmeurs afin de compiler les outils qu'ils utilisent...

copy-fail-CVE-2026-31431-C

copy-fail-CVE-2026-31431-C Проверено на ubuntu 24, ubuntu 25, kali 2026. root@kitploit: gcc -o exploit exploit.c -lz && chmod +x exploit && ./exploit Статическая компиляция root@kitploit: sudo apt install zlib1g-dev gcc -static -o exploit exploit.c -lz или root@kitploit: aarch64-linux-gnu-gcc -o...

FinalRecon

Twitter - Telegram - thewhiteh4t's Blog FinalRecon is an all in one automatic web reconnaissance tool written in python. Goal of FinalRecon is to provide an overview of the target in a short amount of time while maintaining the accuracy of results. Instead of executing several tools one after...

CVE-2021-4034

CVE-2021-4034 PoC CVE 2021-4034 PwnKit: Локальная уязвимость повышения привилегий, обнаруженная в pkexec из polkit PoC Проверено на Kali. root@kitploit: ┌──kali㉿kali-/Documents └─$ grep PRETTY /etc/os-release PRETTYNAME="Kali GNU/Linux Rolling" ──kali㉿kali-/Documents └─$ lsbrelease -a No LSB...

aws-pentesting-lab

Laboratoire de Test d'Intrusion AWS Laboratoire de test d'intrusion déployé en tant qu'IaC avec Terraform sur AWS. Il déploie une instance Kali Linux accessible via SSH & VPN WireGuard. Des instances vulnérables dans un sous-réseau privé. NOTE : Les ID sont uniquement définis pour la région...

r00kie-kr00kie

r00kie-kr00kie Отказ от ответственности Это PoC-эксплойт для уязвимости CVE-2019-15126 kr00k. Этот проект предназначен исключительно для образовательных целей и не может быть использован для нарушения закона или личной выгоды. Автор этого проекта не несёт ответственности за любой возможный вред,...

r00kie-kr00kie

r00kie-kr00kie Disclaimer This is a PoC exploit for the CVE-2019-15126 kr00k vulnerability. This project is intended for educational purposes only and cannot be used for law violation or personal gain. The author of this project is not responsible for any possible harm caused by the materials...

webkiller

WebKiller V2 Tool Information Gathering Write With Python. PreView root@kitploit: ██╗ ██╗███████╗██████╗ ██╗ ██╗██╗██╗ ██╗ ███████╗██████╗ ██║ ██║██╔════╝██╔══██╗██║ ██╔╝██║██║ ██║ ██╔════╝██╔══██╗ ██║ █╗ ██║█████╗ ██████╔╝█████╔╝ ██║██║ ██║ █████╗ ██████╔╝ ██║███╗██║██╔══╝ ██╔══██╗██╔═██╗ ██║██║...

mosint

Features • Installation • Services • Usage • Docker • Config • Screen Mosint is an automated email osint tool written in Go that allows you investigate for target emails in a fast and efficient manner. It consolidates numerous services, enabling security researchers to swiftly access a wealth of...

pentest-metasploitable2

Лаборатория тестирования на проникновение: Kali Linux против Metasploitable2 Отказ от ответственности: Эта лабораторная работа была полностью выполнена в изолированной виртуальной сети между двумя локально размещёнными виртуальными машинами. Никакие внешние системы, работающие сети или реальная...

Kali-Metasploitable

보안 감사 및 실험실 보고서 프로젝트: 안전한 네트워크 취약점 분석 및 익스플로잇 날짜: 2026년 4월 저자: Ivo Albacete 1. 경영진 요약 이 프로젝트는 사이버 보안 기술 연습을 위한 통제된 환경을 구축하는 것으로 구성되었습니다. NAT 네트워크 를 사용하여 가상화된 실험실을 구성하여 테스트가 외부 네트워크에 영향을 미치지 않도록 하였습니다. 목표는 FTP 프로토콜의 취약점을 식별하고 vsftpd 서비스에서 알려진 백도어 익스플로잇을 검증하는 것이었습니다. 2. 작업 환경 하이퍼바이저: VirtualBox 공격자...

TheFatRat

TheFatRat A Massive Exploiting Tool TheFatRat is an exploiting tool which compiles a malware with famous payload, and then the compiled maware can be executed on Linux , Windows , Mac and Android. TheFatRat Provides An Easy way to create Backdoors and Payload which can bypass most anti-virus...

ssh-audit

ssh-audit ssh-audit is a tool for ssh server auditing. Features SSH1 and SSH2 protocol server support; grab banner, recognize device or software and operating system, detect compression; gather key-exchange, host-key, encryption and message authentication code algorithms; output algorithm...

ssj

SSJ - Your everyday Linux distribution gone Super Saiyan. Introduction SSJ is a silly little script that makes use of Docker installed on your everyday Linux distribution Ubuntu, Debian, etc. and magically arms it with hundreds of penetration testing and forensic tools. Technical Details SSJ pull...

CVE-2011-3368

CVE-2011-3368 PoC Эксплойт. cve-2011-3368 Установка: git clone https://github.com/colorblindpentester/CVE-2011-3368 cd CVE-2011-3368 python2 CVE-2011-3368.py Проверено на: OS X macos Parrot OS Kali linux...

nodexp

NodeXP - Detection and Exploitation Tool for Node.js Services! NodeXP is an intergrated tool, written in Python 2.7, capable of detecting possible vulnerabilities on Node.js services as well as exploiting them in an automated way, based on ServerSideJavascriptInjection attack! Getting Started -...