pig

Pig Pig which can be understood as Packet intruder generator is a Linux packet crafting tool. You can use Pig to test your IDS/IPS among other stuff. Pig brings a bunch of well-known attack signatures ready to be used and you can expand this collection with more specific things according to your...

fern-wifi-cracker

Fern Wifi Cracker Fern Wifi Cracker 是一个无线安全审计和攻击的软件程序，使用 Python 编程语言 和 Python Qt GUI 库 编写。该程序能够破解和恢复 WEP/WPA/WPS 密钥，并在无线或以太网网络上运行其他基于网络的攻击。 免责声明 Fern-Wifi-Cracker 旨在用于测试和发现自身网络中的漏洞，以修复检测到的漏洞。请勿 在未经授权的网络上使用该程序，对于因使用本软件而造成的任何损害，本人概不负责。 访问 http://www.fern-pro.com 获取专业版 支持的操作系统 该软件可在任何满足前提条件的 Linux 机...

postfetch

postfetch Postfetch （posture fetch 的缩写）是一款采用 fastfetch 风格的 Linux 隐私与安全审计工具 ，使用 Rust 编写。 与展示系统美观信息的工具不同，postfetch 旨在检查你的系统是否支持隐私、安全、本地控制和数字主权 。 模块 模块| 检查项 ---|--- encryption| LUKS 磁盘加密、dm-crypt 活跃设备、/etc/crypttab、交换分区加密、TPM 芯片、家目录加密等 firewall| nftables、iptables、UFW、firewalld、整体防火墙状态等 dns|...

hashcatch

hashcatch Hashcatch 解除当前范围内所有 WiFi 网络中客户端的认证，并尝试捕获握手包。它可在任何 Linux 设备（包括 Raspberry Pi 和 Nethunter 设备）上使用，让你在遛狗时也能捕获握手包。 由 @SivaneshAshok 编写 hashcatch 的概念证明（在范围内有多个 WiFi 网络时运行） 从源码安装 1. git clone https://github.com/staz0t/hashcatch 2. 安装先决条件并确保它们正常工作 3. 可选 将 hashcatch 目录添加到你的 PATH 中 4. ./hashcatch...

ghostrecon

Herramienta de reconocimiento web basada en la nube, rápida y personalizable. Requisitos previos NodeJs Python3 Go pip3 npm Capturas de pantalla 📸 : Captura de pantalla 1 Captura de pantalla 2 Pasos para instalar en Linux y Mac🐧 👨🏽‍💻:...

LinuxCheck

LinuxCheck Linux emergency response/information gathering/vulnerability detection tool, supporting 13 categories and 70+ checks including basic configuration/network traffic/task scheduling/environment variables/user information/Services/bash/malicious files/kernel Rootkit/SSH/Webshell/mining...

cve-maker

CVE-MAKER 请仅将本软件用于合法目的 。 本人不对您的行为承担任何责任。 使用 Python 3.11.2 由 msd0pe 制作 描述 cve-maker 是一个用于查找 CVE 和漏洞利用的集线器。它基于官方 NIST、ExploitDB 和 Github 数据库。该工具可以快速方便地搜索 CVE 及其相关的漏洞利用。它能够检测漏洞利用的编译选项。还可以用于列出最新的重大漏洞。 使用方法 安装 通过 PIP： root@kitploit:...

inhale

Inhale - 恶意文件吸入器 Inhale 是一款恶意软件分析与分类工具，能够自动化并扩展多种静态分析操作。 此为测试版发布版本，用于测试、反馈及社区开发。 背景 Inhale 最初是我在从多个来源收集和分析大量恶意软件时使用的一系列小脚本。市面上已有许多框架和工具可以完成类似工作，但没有一个能真正匹配我快速查找、分类和存储大量文件信息的工作流程。有些工具还要求昂贵的 API 密钥及其他付费服务。 最终我将这些脚本整合成了一个可以快速部署和使用的工具，无论你是在研究服务器、笔记本电脑还是像树莓派这样低成本的计算机上运行都可以。 安装 本工具设计在 Linux 系统上运行，依赖...

uncle-spufus

█░░█ █▀▀▄ █▀▀ █░░ █▀▀ █▀▀ █▀▀█ █░░█ █▀▀ █░░█ █▀▀ v1.6" █░░█ █░░█ █░░ █░░ █▀▀ ▀▀█ █░░█ █░░█ █▀▀ █░░█ ▀▀█" ░▀▀▀ ▀░░▀ ▀▀▀ ▀▀▀ ▀▀▀ ▀▀▀ █▀▀▀ ░▀▀▀ ▀░░ ░▀▀▀ ▀▀▀" Uncle Spufus v1.6 一个自动执行MAC地址和主机名欺骗的工具 什么是Uncle Spufus 我的长篇故事...

Veil

Veil Veil Logo Veil is a tool designed to generate metasploit payloads that bypass common anti-virus solutions. Veil is current under support by @ChrisTruncer Software Requirements: The following OSs are officially supported: Debian 8+ Kali Linux Rolling 2018.1+ The following OSs are likely able ...

IPGhost

IPGhost IPGhost is a strong tool for ethical hackers. It helps you stay private and anonymous online by using the Tor network. This tool automatically changes your IP address, making it hard for anyone to track your online activities. Features Automatic installation of required dependencies Tor,...

Exploit for CVE-2025-36911

ZWhisper for Linux CVE-2025-36911 WhisperPair Vulnerabilit...

Exploit for CVE-2021-6789

🔹 VulnScanner – Smart Automated Vulnerability Scanner VulnScann...

vulns

It is an offensive tool for Linux. The repository, 'vulns', contains a collection of vulnerabilities and attacks, including Slowloris, BEAST, CRIME, BREACH, TIME, Heartbleed, CCS Injection, Shellshock, Drupalgeddon, POODLE, goto fail, GHOST, FREAK, Superfish, Rowhammer, Logjam, Stagefright, VENOM...

finit 授权问题漏洞

finit is a quick initialization tool for Linux by Joachim Wiberg, a personal developer. An authorization issue vulnerability exists in finit versions prior to 4.11, which stems from a tty configuration directive that bypasses /bin/login and could result in an unauthenticated user logging in...

Stalld 安全漏洞

stalld is a Linux tool from rt-linux-tools open source. A security vulnerability exists in Stalld 1.19.7 and earlier versions, which stems from a denial of service vulnerability that allows local users to cause a denial of service via a /tmp/rtthrottle symbolic link attack...

IPCDump - Tool For Tracing Interprocess Communication (IPC) On Linux

Announcement post ipcdump is a tool for tracing interprocess communication IPC on Linux. It covers most of the common IPC mechanisms -- pipes, fifos, signals, unix sockets, loopback-based networking, and pseudoterminals. It's a useful tool for debugging multi-process applications, and it's also a...

This One Time on a Pen Test: Outwitting the Vexing VPN

Each year, Rapid7 penetration testers complete hundreds of internally and externally based penetration testing service engagements. This post is part of an ongoing series featuring testimonials of what goes on beneath the hoodie. For more insights, check out our 2020 Under the Hoodie report. Just...

file 'readelf.c' out-of-bounds read vulnerability

file is a tool for checking file types under linux. An out-of-bounds read vulnerability exists in file 'readelf.c', which can be exploited by an attacker to execute arbitrary code or launch a denial-of-service attack in the context of an affected application...

Brecht Claerhout Sniffit 0.3.6 HIP0.3.7 Beta - Mail Logging Buffer Overflow (1)

Brecht Claerhout Sniffit 0.3.6 HIP0.3.7 Beta - Mail Logging Buffer Overflow 1 // source: https://www.securityfocus.com/bid/1158/info Sniffit is a freely available, open source network monitoring tool. It is designed for use on the Unix and Linux Operating Systems. Sniffit contains a remotely...