phpsploit

Full-featured C2 framework which silently persists on webserver via polymorphic PHP oneliner...

log4j-detector

Log4-detector Scanner that detects vulnerable Log4J versions to help teams assess their exposure to CVE-2021-44228 CRITICAL, CVE-2021-45046, CVE-2021-45105, and CVE-2021-44832. Can search for Log4J instances by carefully examining the complete file-system, including all installed applications. It...

sniffles

Sniffles--Packet Capture Generator for IDS and Regular Expression Evaluation Sniffles is a tool for creating packet captures that will test IDS that use fixed patterns or regular expressions for detecting suspicious behavior. Sniffles works very simply. It takes a set of regular expressions or...

nacker

Nacker Nacker es una herramienta para evadir el Control de Acceso a la Red NAC 802.1x en una LAN cableada. Nacker te ayudará a localizar cualquier host en tu subred que no sea configurable con 802.1x, y suplantará su dirección MAC para que parezcas autenticado ante el switch. El nombre "Nacker" s...

kurukshetra

Kurukshetra Kurukshetra is a web framework that’s developed with the aim of being the first open source framework which provides a solid foundation to host reasonably complex secure coding challenges while still providing the ability to efficiently and dynamically execute each challenge on the...

RootPipeTester

Tabla de Contenidos 1. ¿Qué es RootPipe Tester? 2. ¿Por qué debería usar RootPipe Tester? 3. ¿Cómo uso RootPipe Tester? 4. ¡¡¡PÁNICO!!! ¿Mi sistema es vulnerable? ¿Vamos a morir todos? 1. OS X 10.10 Yosemite 2. OS X 10.9 Mavericks 3. OS X 10.8 Mountain Lion 4. OS X 10.7 Lion, Mac OS X 10.6 Snow...

ipa-medit

ipa-medit Ipa-medit es una herramienta de búsqueda y parcheo de memoria para ipa refirmados sin hacer jailbreak. Soporta aplicaciones iOS ejecutándose en iPhone y Mac con Apple Silicon. Fue creada para pruebas de seguridad en juegos móviles. Muchos juegos móviles tienen detección de jailbreak, pe...

hostintel

hostintel This tool is used to collect various intelligence sources for hosts. Hostintel is written in a modular fashion so new intelligence sources can be easily added. Hosts are identified by FQDN host name, Domain, or IP address. This tool only supports IPv4 at the moment. The output is in CSV...

CVE-2018-13797

node-macaddress Obtén direcciones MAC en Linux, OS X y Windows. Una idea errónea común sobre las direcciones MAC es que cada host tiene una dirección MAC, mientras que un host puede tener múltiples direcciones MAC – ya que cada interfaz de red puede tener su propia dirección MAC. Esta biblioteca...

rp

rp++: a fast ROP gadget finder for PE/ELF/Mach-O x86/x64/ARM/ARM64 binaries Overview rp++ or rp is a C++ ROP gadget finder for PE/ELF/Mach-O executables and x86/x64/ARM/ARM64 architectures. Finding ROP gadgets To find ROP gadget you need to specify a file with the --file / -f option and use the...

D1rkLdr

D1rkLdr Shellcode Loader with Indirect Dynamic syscall Implementation , shellcode in MAC format, API resolving from PEB, Syscall calll and syscall instruction address resolving at run time...

arpy

Arpy Arpy is an easy-to-use ARP spoofing MiTM tool for Mac. It provides 3 targeted functions: Packet Sniffing Visited Domains Visited Domains with Gource Each function will be explained below. Tested OS to date Darwin 14.3.0 Darwin Kernel Version 14.3.0 Mac OS X Requirements Python 2.7 Gource Sca...

kemon

Kemon An Open Source Pre and Post Callback-based Framework for macOS Kernel Monitoring. Breaking News - 08/28/2019 macOS Catalina 10.15 Beta 7 Release Notes https://developer.apple.com/documentation/macosreleasenotes/macoscatalina1015beta7releasenotes Endpoint Security The kauth API has been...

KisMac2

POR FAVOR, TENGA EN CUENTA QUE ESTE PROYECTO YA NO SE MANTIENE KisMac2 KisMAC es una herramienta gratuita y de código abierto para la exploración y seguridad inalámbrica en Mac OS X. Seguimiento de incidencias: En adelante, utilice el rastreador...

pe_tree

PE Tree PE Tree is a Python module for viewing Portable Executable PE files in a tree-view using pefile and PyQt5. It can also be used with IDA Pro, Ghidra, Volatility, Rekall and minidump to view and dump in-memory PE files, as well as perform import table reconstruction. Table of contents 1...

AspDotNetWrapper-Edited-

AspDotNetWrapper for test machine keys viewstate in ASP.NET download clone and unzip file in windows Used root@kitploit: AspDotNetWrapper.exe --keypath MachineKeys.txt --encrypteddata --decrypt --purpose=viewstate --modifier= --macdecode replace the to viewstate= parameter value in the source...

F31

F31: Hiding Kali Linux F31 is a bash script that hardens your Kali Linux and allows you to minimize noise in the air. Useful for pentesters or Red Team operators where it is important to have minimal impact on the infrastructure to avoid network performance issues. The tool does not guarantee you...

hide-me

Cambiador aleatorio de MAC y nombre de host hide-me Cada vez que intentaba realizar una Prueba de Penetración de Red, necesitaba seguir algunos pasos para asegurarme de estar oculto: poner mi interfaz hacia abajo, cambiar mi dirección MAC, cambiar mi nombre de host, volver a levantar la interfaz ...

The vulnerability of the FormWriteFacMac function in the /goform/WriteFacMac file of the Tenda CH22 software allows a perpetrator to execute arbitrary commands.

The vulnerability of the FormWriteFacMac function in the /goform/WriteFacMac file of the Tenda CH22 microprogramming system is related to the failure to take measures to neutralize special elements during the processing of the mac parameter. Exploiting this vulnerability can allow an attacker to...

Linux Distros Unpatched Vulnerability : CVE-2026-90376

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - wifi: mt76: mt7996: fix MLD ID in MAC TXD and HIF TXP Problem: MCU command timeout while the firmware state is normal, and the firmware keeps showing the error...