web-traffic-generator

web-traffic-generator A quick and dirty HTTP/S "organic" traffic generator. About Just a simple poorly written Python script that aimlessly "browses" the internet by starting at pre-defined ROOTURLS and randomly "clicking" links on pages until the pre-defined MAXDEPTH is met. I created this as a...

Reversecore_MCP

Reversecore MCP AI-Powered Reverse Engineering & Security Analysis via Model Context Protocol An MCP server that gives AI assistants like Claude and Cursor the ability to perform reverse engineering, malware analysis, vulnerability research, digital forensics, and source code auditing through...

HellHall

HellsHall - Another Way To Fetch Clean Syscalls HellsHall is a combination of HellsGate and indirect syscalls. How it works First, HellsHall checks whether the syscall address is hooked and tries to retrieve the syscall number by checking the presence of the following bytes: 0x4C, 0x8B, 0xD1, 0xB...

purrcrypt

🐱 PurrCrypt 🐶 Fur-ociously Secure, Paw-sitively Adorable! The purr -fect way to keep your secrets fur -ever safe, straight from the meow -th of your computer to your fur -ends' paws! !IMPORTANT PurrCrypt is real cryptography in a fuzzy disguise! Your messages are protected by the same elliptic...

CVE-mitre

CVE-Mitre Common Vulnerability Exposure Download single CVE The variable is only for example ; you can make your own SVN script for downloading a single folder = CVE = BR @nu11secur1ty $CVE = CVE-2020-13935 root@kitploit: svn checkout https://github.com/nu11secur1ty/CVE-mitre/trunk/$CVE Link tabl...

MITM_Intercept

MITMIntercept A little bit less hackish way to intercept and modify non-HTTP protocols through Burp and others with SSL and TLS interception support. This tool is for researchers and applicative penetration testers that perform thick clients security assesments. An improved version of the fantast...

swift-nio-ssh

SwiftNIO SSH This project contains SSH support using SwiftNIO. What is SwiftNIO SSH? SwiftNIO SSH is a programmatic implementation of SSH: that is, it is a collection of APIs that allow programmers to implement SSH-speaking endpoints. Critically, this means it is more like libssh2 than openssh...

auth_analyzer

Auth Analyzer Table of Contents What is it? Why should I use Auth Analyzer? GUI Overview Parameter Extraction Auto Extract From To String Static Value Prompt for Input Parameter Replacement Replacement Location Parameter removement Sample Usage Auto extract session Cookie Session Header and CSRF...

unicorn

unicorn Escrito por: Dave Kennedy @HackingDave Sitio web: https://www.trustedsec.com Magic Unicorn es una herramienta sencilla para utilizar un ataque de downgrade de PowerShell e inyectar shellcode directamente en memoria. Basado en los ataques de PowerShell de Matthew Graeber y la técnica de...

unicorn

unicorn Written by: Dave Kennedy @HackingDave Website: https://www.trustedsec.com Magic Unicorn is a simple tool for using a PowerShell downgrade attack and inject shellcode straight into memory. Based on Matthew Graeber's powershell attacks and the powershell bypass technique presented by David...

finalrun-agent

finalrun.app • Docs • Blog • Cloud Device Waitlist • Join Slack Community Follow us on finalrun-agent is an AI-driven CLI that tests your Android and iOS apps using natural language. You write a plain-English test in YAML, FinalRun launches your app on an emulator or simulator, uses an AI model...

LDAP-Password-Hunter

LDAP Password Hunter It happens that due to legacy services requirements or just bad security practices password are world-readable in the LDAP database by any user who is able to authenticate. LDAP Password Hunter is a tool which wraps features of getTGT.py Impacket and ldapsearch in order to lo...

cve-2021-4034

cve-2021-4034 PoC for cve-2021-4034 Based on the PoC by https://haxx.in: https://haxx.in/files/blasty-vs-pkexec.c. Probably he's https://github.com/blasty?! I don't know. With a little help from https://github.com/daimoniac How to use? Compile cve-2021-4034.c root@kitploit: gcc -Wall...

Crassus

Crassus Windows privilege escalation discovery tool Quick start 1. In Process Monitor, select the Enable Boot Logging option. 2. Reboot. 3. Once you have logged in and Windows has settled, run Process Monitor once again. 4. When prompted, save the boot log, e.g., to raw.PML. 5. Reset the default...

censys-python

Biblioteca Python de Censys !WARNING AVISO DE OBSOLESCENCIA : Las APIs de Censys Search v1 y v2 quedarán obsoletas pronto. Migre a la nueva Plataforma Censys. 📖 Nueva documentación de la API : https://docs.censys.com/reference/get-started 📦 Nuevo SDK de Python : censys/censys-sdk-python 🖥️ Nueva...

retryabledns

Retryable dns resolver Based on miekg/dns and freely inspired by bogdanovich/dnsresolver. Features Supports both system default DNS resolvers and user-provided ones Retries DNS requests in case of I/O errors, timeouts, or network failures Allows arbitrary query types Resolution with random...

cerbos

What is Cerbos? Cerbos is an authorization layer that evolves with your product. It enables you to define powerful, context-aware access control rules for your application resources in simple, intuitive YAML policies; managed and deployed via your Git-ops infrastructure. It provides highly...

cve-collector

CVE-Collector Simple Latest CVE Collector Written in Python There are various methods for collecting the latest CVE Common Vulnerabilities and Exposures information. This code was created to provide guidance on how to collect, what information to include, and how to code when creating a CVE...

cve-collector

CVE-Collector Simple recolector de las últimas CVE escrito en Python Existen varios métodos para recolectar información sobre las últimas CVE Common Vulnerabilities and Exposures. Este código fue creado para proporcionar orientación sobre cómo recolectar, qué información incluir y cómo codificar ...

ssj

SSJ - Your everyday Linux distribution gone Super Saiyan. Introduction SSJ is a silly little script that makes use of Docker installed on your everyday Linux distribution Ubuntu, Debian, etc. and magically arms it with hundreds of penetration testing and forensic tools. Technical Details SSJ pull...