jwtear

Jwtear Uno strumento modulare da riga di comando per analizzare, creare e manipolare token JSON Web Token JWT per scopi di test di sicurezza. Caratteristiche Modularità completa. Tutti i comandi sono plugin. Facile aggiungere nuovi plugin. Supporta token JWS e JWE. Interfaccia semplice per i...

ratched

ratched ratched è un proxy Man-in-the-Middle MitM che intercetta specificamente le connessioni TLS. È progettato per essere usato insieme al target REDIRECT di Linux iptabes; tutte le connessioni che devono essere intercettate possono essere reindirizzate alla porta locale di ratched. Tramite...

Daily-dose-of-malware

Tägliche Dosis Malware DDOM oder Daily Dose of Malware ermöglicht es Ihnen, Malware und C&C aus Open-Source-Intelligence zu sammeln. Es kann Informationen anzeigen, Ergebnisse in eine Textdatei exportieren oder bösartige Software herunterladen. Ich möchte es so aktuell wie möglich halten, deshalb...

linux-soft-exploit-suggester

linux-soft-exploit-suggester Script to find exploits for all vulnerable software on the system, targeting software packages rather than just kernel vulnerabilities. It uses the exploit database to assess the security of packages and search for exploits to help with privilege escalation. Usage...

linux-soft-exploit-suggester

linux-soft-exploit-suggester Script per trovare exploit per tutto il software vulnerabile sul sistema, concentrandosi sui pacchetti software piuttosto che solo sulle vulnerabilità del kernel. Utilizza il database degli exploit per valutare la sicurezza dei pacchetti e cercare exploit per aiutare...

noia

Noia Noia is a web-based tool whose main aim is to ease the process of browsing mobile applications sandbox and directly previewing SQLite databases, images, and more. Powered by frida.re. Please note that I'm not a programmer, but I'm probably above the median in code-savyness. Try it out, open ...

StreamDivert

StreamDivert StreamDivert é uma ferramenta para fazer man-in-the-middle ou retransmitir conexões de rede de entrada e saída em um sistema. Ela tem a capacidade de, por exemplo, retransmitir todas as conexões SMB de entrada na porta 445 para outro servidor, ou apenas retransmitir conexões SMB de...

PolyDrop

BYOSI - Bringen Sie Ihren eigenen Skriptinterpreter mit - Durch den Missbrauch vertrauenswürdiger Anwendungen ist es möglich, einen kompatiblen Skriptinterpreter für ein Windows-, Mac- oder Linux-System sowie bösartigen Quellcode in Form des gewählten Skriptinterpreters bereitzustellen. Sobald...

Parth

Parth Heuristic Vulnerable Parameter Scanner Introduction Some HTTP parameter names are more commonly associated with one functionality than the others. For example, the parameter ?url= usually contains URLs as the value and hence often falls victim to file inclusion, open redirect and SSRF...

burpcommander

burpcommander Ruby command-line interface to Burp Suite's REST API Usage root@kitploit: burpcommander VERSION: 1.0.1 - UPDATED: 08/29/2018 -t, --target IP Address Defaults to 127.0.0.1 -p, --port Port Number Defaults to 1337 -k, --key API Key If you require an API key specify it here -i,...

burpcommander

burpcommander Ruby-Kommandozeilen-Schnittstelle zur REST-API von Burp Suite Verwendung root@kitploit: burpcommander VERSION: 1.0.1 - AKTUALISIERT: 08/29/2018 -t, --target IP Address Defaults to 127.0.0.1 -p, --port Port Number Defaults to 1337 -k, --key API Key If you require an API key specify i...

Arecibo

Arecibo Endpoint per l'esfiltrazione out-of-band DNS e HTTP Autori Juan Manuel Fernández @TheXC3LL e Pablo Martinez @Xassiz Esfiltrazione DNS Crea un nuovo token: root@kitploit: curl localhost:5000/generatedns "htoken": "c008b5dd22817c50441522f917c66743" Ora puoi usare questo token identificativo...

inject-assembly

inject-assembly - Execute .NET in an Existing Process This tool is an alternative to traditional fork and run execution for Cobalt Strike. The loader can be injected into any process, including the current Beacon. Long-running assemblies will continue to run and send output back to the Beacon,...

rdpy

RDPY Protocollo Remote Desktop in twisted python. RDPY è un'implementazione puramente Python del protocollo Microsoft RDP Remote Desktop Protocol lato client e server. RDPY è costruito sul motore di rete basato su eventi Twisted. RDPY supporta il livello di sicurezza RDP standard, RDP su SSL e...

rdpy

RDPY Remote Desktop Protocol in twisted python. RDPY is a pure Python implementation of the Microsoft RDP Remote Desktop Protocol protocol client and server side. RDPY is built over the event driven network engine Twisted. RDPY support standard RDP security layer, RDP over SSL and NLA...

socksmon

socksmon Monitora il traffico TCP arbitrario utilizzando il proxy di intercettazione HTTP di tua scelta Cos'è socksmon? socksmon è un server SOCKSv4 basato su Twisted, che tunnelizza il traffico TCP in entrata attraverso un proxy HTTP. socksmon lo fa avviando un webserver interno sulla porta 2357...

columbo

Columbo Columbo is a computer forensic analysis tool used to simplify and identify specific patterns in compromised datasets. It breaks down data to small sections and uses pattern recognition and machine learning models to identify adversaries behaviour and their possible locations in compromise...

dynmx

dynmx Prototype dynmx spoken dynamics is a signature-based detection approach for behavioural malware features based on Windows API call sequences. In a simplified way, you can think of dynmx as a sort of YARA for API call traces so called function logs originating from malware sandboxes. Hence,...

dynmx

dynmx Prototyp dynmx ausgesprochen Dynamics ist ein signaturbasierter Erkennungsansatz für verhaltensorientierte Schadsoftware-Merkmale basierend auf Windows-API-Aufrufsequenzen. Vereinfacht kann man sich dynmx als eine Art YARA für API-Aufrufspuren sogenannte Funktionslogs vorstellen, die von...

covert-control

covert-control Controlla sistemi da remoto caricando file su Google Drive, OneDrive, Youtube o Telegram usando Python per creare i file e i listener. Permette di creare file di testo, immagini, audio o video, con i comandi in chiaro o crittografati usando AES. covert-googledrive.py - Controlla...