Obfuscapk

!IMPORTANT 该项目已归档，不再维护。 常见问题的答案可在 FAQ 和 故障排除 中找到。 一款针对 Android 应用的黑盒混淆工具。 Obfuscapk 是一款模块化的 Python 工具，用于在不需源码的情况下混淆 Android 应用，它使用 apktool 反编译原始 apk 文件，并在对反编译后的 smali 代码、资源和清单文件应用某些混淆技术后，构建一个新的应用。混淆后的应用保留与原始应用相同的功能，但底层差异有时会使新应用与原始应用大相径庭（例如，对基于签名的防病毒软件而言）。 🆕 Android App Bundle 支持 🆕 Obfuscapk 正在通过使...

mig

MIG: Mozilla InvestiGator MIG is Mozilla's platform for investigative surgery of remote endpoints. ⚠️ Deprecation Notice ⚠️ Mozilla is no longer maintaining the Mozilla InvestiGator MIG project. Mozilla is also no longer making use of this code internally. You are welcome to use this code as is...

mig

本包提供了 Go 语言中读写 INI 文件的功能。 功能特性 支持覆盖加载多个数据源（byte、文件和 io.ReadCloser） 支持递归读取键值 支持读取父子分区 支持读取自增键名 支持读取多行的键值 支持大量辅助方法 支持在读取时直接转换为 Go 语言类型 支持读取和 写入 分区和键的注释 轻松操作分区、键值和注释 在保存文件时分区和键值会保持原有的顺序 下载安装 使用一个特定版本： root@kitploit: go get gopkg.in/ini.v1 使用最新版： root@kitploit: go get github.com/go-ini/ini 如需更新请添加 -u...

apparatus

ASTo - Apparatus Software Tool Archive Notice - After the completion of my research degree the repository has been archived. ASTo has made a significant impact to my research. I want to express my gratitude to everyone that helped make it better. However, this is not the end. Active development...

super

SUPER Android Analyzer Secure, Unified, Powerful and Extensible Rust Android Analyzer SUPER is a command-line application that can be used in Windows, MacOS X and Linux, that analyzes .apk files in search for vulnerabilities. It does this by decompressing APKs and applying a series of rules to...

securitybot

Securitybot Distributed alerting for the masses! Securitybot is an open-source implementation of a distributed alerting chat bot, as described in Ryan Huber's blog post. Distributed alerting improves the monitoring efficiency of your security team and can help you catch security incidents faster...

aquatone

AQUATONE Aquatone is a tool for visual inspection of websites across a large amount of hosts and is convenient for quickly gaining an overview of HTTP-based attack surface. Installation 1. Install Google Chrome or Chromium browser -- Note: Google Chrome is currently giving unreliable results when...

BrainDamage

BrainDamage A python based remote administration tool which uses Telegram as C&C server. root@kitploit: /\ /.\ ,.-'/ ",'-., -^ /-^: | \ | \ | | | | | | | | Coded by: Mehul Jain -- For windows only | | | | | | | | | / / | | | | | '/ / | | | | / | | || || | | | /\ \ || |,||,|| ||/ --...

StegCracker

StegCracker Steganography brute-force utility to uncover hidden data inside files. Looking for the Docker repository? You can find it here Deprecation Stop wasting time and CPU, use stegseek instead! Not convinced? Look at these benchmarks stolen with love: password| Line| Stegseek v0.4|...

gitrob

Gitrob: Putting the Open Source in OSINT Gitrob is a tool to help find potentially sensitive files pushed to public repositories on Github. Gitrob will clone repositories belonging to a user or organization down to a configurable depth and iterate through the commit history and flag files that...

gitrob

Gitrob: OSINTにおけるオープンソースの活用 Gitrobは、Githubの公開リポジトリにプッシュされた潜在的に機密性の高いファイルを見つけるためのツールです。Gitrobは、ユーザーまたは組織に属するリポジトリを設定可能な深さまでクローンし、コミット履歴を反復処理して、潜在的に機密性の高いファイルのシグネチャに一致するファイルにフラグを立てます。結果はWebインターフェースを通じて表示され、簡単に閲覧・分析できます。 使い方 root@kitploit: gitrob options target target2 ... targetN オプション root@kitploi...

CVE-2025-71408

A flaw was found in NLTK Natural Language Toolkit. This eval injection vulnerability in the nltk.collocations module allows a local attacker to execute arbitrary Python code. By manipulating command-line arguments when collocations.py is invoked directly, an attacker can bypass validation and...

Belati

Belati Belati - The Traditional Swiss Army Knife For OSINT Belati is tool for Collecting Public Data & Public Document from Website and other service for OSINT purpose. This tools is inspired by Foca and Datasploit for OSINT : Current Version v0.2.4 Belati In Action Why I Made this? Just for...

EGESPLOIT

EGESPLOIT EGESPLOIT is a golang library for malware development, it has few unique functions for meterpreter integration. DOCUMENTATION root@kitploit: CalculateChecksumx : Function calculates x digit 8 bit checksum for reverse HTTP/HTTPS meterpreter connections, returns the calculated checksum as...

certgraveyard_yara v2026.09.02

CertGraveyard YARA Rules Generator Automated YARA rule generation from the CertGraveyard compromised certificate database. Features 🔄 Daily Updates : Automatically checks CertGraveyard for new compromised certificates 📝 YARA Rule Generation : Creates individual YARA rules for each certificate ✅...

scanless

⚠️ I am no longer maintaining scanless as of August 2023. ⚠️ scanless This is a Python command-line utility and library for using websites that can perform port scans on your behalf. Supported Online Port Scanners ipfingerprints spiderip standingtech viewdns yougetsignal Install Do it up:...

passfault

Welcome to OWASP Passfault Objective: Do Passwords Better! NOTE: This project has been discontinued, but the zxcvbn project has a very similar approach and has been quite successful. We recommend using that library. Running the Command-line Interface: 1. install java 8 jdk 2. cd commandLine 3...

Hob0Rules

Hob0Rules Password cracking rules for Hashcat based on statistics and industry patterns. The following blog posts on passwords explain the statistical signifigance of these rulesets: Statistics Will Crack Your Password Praetorian Password Cracking Rules Released Useful wordlists to utilize with...

droid-hunter

root@kitploit: .---. .----------- / \ / ------ / / \ / ----- ╔╦╗╦═╗╔═╗╦╔╦╗ ╦ ╦╦ ╦╔╗╔╔╦╗╔═╗╦═╗ ////// ' / --- ║║╠╦╝║ ║║ ║║───╠═╣║ ║║║║ ║ ║╣ ╠╦╝ //// / // : : --- ═╩╝╩╚═╚═╝╩═╩╝ ╩ ╩╚═╝╝╚╝ ╩ ╚═╝╩╚═ // / / / '-- By HaHwul // //..\ www.hahwul.com ====UU====UU==== https://github.com/hahwul/droid-hunter...

droid-hunter

root@kitploit: .---. .----------- / \ / ------ / / \ / ----- ╔╦╗╦═╗╔═╗╦╔╦╗ ╦ ╦╦ ╦╔╗╔╔╦╗╔═╗╦═╗ ////// ' / --- ║║╠╦╝║ ║║ ║║───╠═╣║ ║║║║ ║ ║╣ ╠╦╝ //// / // : : --- ═╩╝╩╚═╚═╝╩═╩╝ ╩ ╩╚═╝╝╚╝ ╩ ╚═╝╩╚═ // / / / '-- By HaHwul // //..\ www.hahwul.com ====UU====UU==== https://github.com/hahwul/droid-hunter...