chipsec

CHIPSEC: Platform Security Assessment Framework CHIPSEC is a framework for analyzing the security of PC platforms including hardware, system firmware BIOS/UEFI, and platform components. It includes a security test suite, tools for accessing various low level interfaces, and forensic capabilities...

xmap

XMap: The Internet Scanner XMap is a fast network scanner designed for performing Internet-wide IPv6 & IPv4 network research scanning. XMap is reimplemented and improved thoroughly from ZMap and is fully compatible with ZMap, armed with the "5 minutes" probing speed and novel scanning techniques...

macsurf

The modern web, on a 25-year-old Mac. A native browser for the Carbon era, Mac OS 8.6 through Mac OS X 10.6: real CSS, modern JavaScript, and HTTPS on the Mac itself. No proxy, no second machine. MacSurf 2.0.5 on a Power Mac G3 iMac, renderinghackaday.com at full desktop width over native HTTPS. ...

hershell

Hershell NOTE: the project has been forked on this repo, check there for any other developments. Hershell is a simple TCP reverse shell written in Go. It uses TLS to secure the communications, and provide a certificate public key fingerprint pinning feature, preventing from traffic interception...

lunar

LUNAR Lockdown UNix Auditing and Reporting Version Current version 15.9.1 Refer to lunar.sh and changelog for more up to date version information License CC BY-SA: https://creativecommons.org/licenses/by-sa/4.0/ Fund me here: https://ko-fi.com/richardatlateralblast NOTICE Run this code in audit...

phpsploit

Full-featured C2 framework which silently persists on webserver via polymorphic PHP oneliner...

RootPipeTester

Table of Contents 1. What is RootPipe Tester? 2. Why should I use RootPipe Tester? 3. How do I use RootPipe Tester? 4. PANIC!!! My system is vulnerable? Are we all going to die? 1. OS X 10.10 Yosemite 2. OS X 10.9 Mavericks 3. OS X 10.8 Mountain Lion 4. OS X 10.7 Lion, Mac OS X 10.6 Snow Leopard,...

kurukshetra

Kurukshetra Kurukshetra is a web framework that’s developed with the aim of being the first open source framework which provides a solid foundation to host reasonably complex secure coding challenges while still providing the ability to efficiently and dynamically execute each challenge on the...

wafpass

WAFPASS root@kitploit: ██╗ ██╗ █████╗ ███████╗██████╗ █████╗ ███████╗███████╗ ██║ ██║██╔══██╗██╔════╝██╔══██╗██╔══██╗██╔════╝██╔════╝ ██║ █╗ ██║███████║█████╗ ██████╔╝███████║███████╗███████╗ ██║███╗██║██╔══██║██╔══╝ ██╔═══╝ ██╔══██║╚════██║╚════██║ ╚███╔███╔╝██║ ██║██║ ██║ ██║ ██║███████║███████...

zizzania

zizzania zizzania sniffs wireless traffic listening for WPA handshakes and dumping only those frames suitable to be decrypted one beacon + EAPOL frames + data. In order to speed up the process, zizzania sends IEEE 802.11 DeAuth frames to the stations whose handshake is needed, properly handling...

OSXAuditor

OS X Auditor OS X Auditor is a free Mac OS X computer forensics tool. OS X Auditor parses and hashes the following artifacts on the running system or a copy of a system you want to analyze: the kernel extensions the system agents and daemons the third party's agents and daemons the old and...

hershell

Hershell Simple TCP reverse shell written in Go. It uses TLS to secure the communications, and provide a certificate public key fingerprint pinning feature, preventing from traffic interception. Supported OS are: Windows Linux Mac OS FreeBSD and derivatives Why ? Although meterpreter payloads are...

perl-CVE-2013-1775

CVE-2013-1775 Apple Mac OSX 10.8.4 - Privilege Escalation Perl version of CVE-2013-1775 Apple Mac OSX 10.8.4 - Privelege Escalation exploit. References: https://www.exploit-db.com/exploits/27965/...

Disk-Arbitrator

简介 Disk Arbitrator 是一款 Mac OS X 取证工具，旨在帮助用户在磁盘设备镜像过程中确保遵循正确的取证流程。 Disk Arbitrator 本质上是 Disk Arbitration 框架的用户界面，该框架允许程序参与 块存储设备的管理，包括文件系统的自动挂载。启用后，Disk Arbitrator 将阻止文件系统的挂载，以避免以读写方式挂载从而破坏证据的完整性。 需要重点说明的是，Disk Arbitrator 不是 软件写阻断器——它不会改变当前已连接设备的状态，也不会影响新连接的设备以强制其只读。用户仍需小心，避免意外使用诸如 "dd"...

RootPipe-Demo

RootPipe-Demo 这是一个概念验证的Mac应用程序，演示了由Emil Kvarnhammar从TrueSec发现的RootPipe权限提升漏洞（CVE-2015-1130）。 此演示使用Objective-C编写，从Python PoC移植而来：RootPipe 使用方法 使用方式很简单：首先提供你想要提升权限的文件路径，然后提供文件提升权限后要复制到的目标路径，接着以八进制格式提供权限（例如04777），并且（可选）提供文件所有者的用户名和组名。 操作系统支持 Mac OS X 10.9 - Mac OS X 10.10.2 许可证 MIT许可证。版权所有 © 2015...

arpy

Arpy Arpy is an easy-to-use ARP spoofing MiTM tool for Mac. It provides 3 targeted functions: Packet Sniffing Visited Domains Visited Domains with Gource Each function will be explained below. Tested OS to date Darwin 14.3.0 Darwin Kernel Version 14.3.0 Mac OS X Requirements Python 2.7 Gource Sca...

KisMac2

PLEASE NOTE, THIS PROJECT IS NO LONGER BEING MAINTAINED KisMac2 KisMAC is a free, open source wireless stumbling and security tool for Mac OS X. Issue tracking: Going forward, please use the tracker here on GitHub. The Trac for the original KisMac is at http://trac.kismac-ng.org Whats new:...

blackboxprotobuf

Blackbox Protobuf Blackbox Protobuf now has an official package on PyPi under the namebbpb. The blackboxprotobuf package is an older fork Description Blackbox Protobuf is a set of tools for working with encoded Protocol Buffers protobuf without the matching protobuf definition. Protobuf is a bina...

test_struts2_vulnerability_CVE-2017-5638

teststruts2vulnerabilityCVE-2017-5638inMACOSX 在 Mac OS X 中测试 struts2 漏洞 CVE-2017-5638 下载测试 Web 应用并在 tomcat 中运行 root@kitploit: install tomcat brew install tomcat confirm where the tomcat installed ls -lF which catalina confirm tomcat home dir ls -lF /usr/local/Cellar/tomcat/8.5.11/libexec create w...

Astra Linux – Vulnerability in WebKit2GTK

A memory corruption issue has been resolved through improved state management. This issue is fixed in macOS Ventura 13.3, Safari 16.4, iOS 16.4, and iPadOS 16.4, as well as iOS 15.7.7 and iPadOS 15.7.7. Processing web content may lead to arbitrary code execution. Apple is aware of a report...