ssh-mitm

SSH MITM v2.3-dev Author: Joe Testa @therealjoetesta Overview This penetration testing tool allows an auditor to intercept SSH connections. A patch applied to the OpenSSH v7.5p1 source code causes it to act as a proxy between the victim and their intended SSH server; all plaintext passwords and...

ssh-mitm

SSH MITM v2.3-dev Autor: Joe Testa @therealjoetesta Resumen Esta herramienta de pruebas de penetración permite a un auditor interceptar conexiones SSH. Un parche aplicado al código fuente de OpenSSH v7.5p1 hace que actúe como un proxy entre la víctima y su servidor SSH destino; todas las...

megplus

meg+ Deprecated Automated reconnaissance wrapper — TomNomNom's meg on steroids. Built by TomNomNom and EdOverflow. About This wrapper will automate numerous tasks and help you during your reconnaissance process. The script finds common issues, low hanging fruit, and assists you when approaching a...

pyrebox

================ ARCHIVED PROJECT THIS PROJECT HAS BEEN ARCHIVED AND ITS ISSUE QUEUE IS LOCKED. THE PROJECT WILL BE KEPT PUBLIC ONLY FOR REFERENCE PURPORSES. .. image:: docs/media/pyreboxlogolightbg.png .. QEMU: http://qemu.org/ .. DECAF: https://github.com/sycurelab/DECAF .. S2E:...

goldig

Project moved to github.com/rtfmkiesel/goldig goldig Execute commands on Windows via DNS records. This utility will create a DNS server and serve a malicious TXT record. Just copy & paste the command from the console output into your Windows shell. Usage root@kitploit: usage: goldig OPTIONS...

Hijacker

Hijacker Hijacker is a Graphical User Interface for the penetration testing tools Aircrack-ng, Airodump-ng, MDK3 and Reaver. It offers a simple and easy UI to use these tools without typing commands in a console and copy&pasting MAC addresses. This application requires an ARM android device with ...

Windows-Exploit-Suggester

DESCRIPTION This tool compares a targets patch levels against the Microsoft vulnerability database in order to detect potential missing patches on the target. It also notifies the user if there are public exploits and Metasploit modules available for the missing bulletins. It requires the...

SimpleEmailSpoofer

SimpleEmailSpoofer A few Python programs designed to help penetration testers with email spoofing. This Project is Retired Due to improvements in email protections and anti-spam techniques, it is no longer effective to attempt to spoof emails simply because they do not have a proper DMARC record ...

Gitmails

Development - IMPORTANT This Gitmails version is no longer maintained. Check out the Gitmails Shell port if you want to use a version that is maintained and, hopefully, developed. If you do not want to use the shell port and prefer the Python version, feel free to fork Gitmails and direct it to...

lanGhost

⚠️ Warning! This project is no longer maintained and may not work as excepted. A LAN dropbox chatbot controllable via Telegram features: installation: warning: lanGhost is designed for Raspberry Pis Raspbian /Kali for RPi. Running it on other/desktop distros could cause issues and may not work as...

dnscat2-powershell

dnscat2 is a DNS covert channel tool by @iagox86 Ron Bowes which is used to transfer data over DNS requests. This is a powershell version of the dnscat2 C client. Click here for a blog post that gives a more detailed breakdown of the purpose of this script, and how to use it. To use this script,...

Exploit for CVE-2026-18351

CVE-2026-18351 Mass exploit tool for CVE-2026-18351 — Una...

macro_pack

macropack Descripción breve Advertencia: MacroPack no se mantiene desde 2021, si eres un profesional y necesitas herramientas ofensivas de infosec para acceso inicial, asunción de brecha, evasión de EDR, revisa https://www.balliskit.com MacroPack Community es una herramienta utilizada para...

macro_pack

macropack Short description Warning: MacroPack is not maintained since 2021, if you are a pro and need Offensive infosec tools for initial access, assume breach, EDR bypass, check https://www.balliskit.com MacroPack Community is a tool used to automatize obfuscation and generation of retro format...

bladeGPS

bladeGPS Very crude experimental implementation of gps-sdr-sim for real-time signal generation. The code works with bladeRF and has been tested on Windows 10 and Ubuntu 20.04. root@kitploit: Usage: bladegps options Options: -e RINEX navigation file for GPS ephemerides required -y YUMA almanac fil...

pupy

Pupy Simple Installation root@kitploit: pip3 install pipx pipx ensurepath pipx install git+https://github.com/n1nj4sec/pupy@nextgen pupysh If you want more detailed informationRefer to the wiki Development Install root@kitploit: git clone https://github.com/n1nj4sec/pupy cd pupy git checkout...

Invoke-ATTACKAPI

Invoke-ATTACKAPI DEPRECATED WE RECOMMEND TO USE: https://github.com/Cyb3rWard0g/ATTACK-Python-Client A PowerShell script to interact with the MITRE ATT&CK Framework via its own API in order to gather information about techniques, tactics, groups, software and references provided by the MITRE ATT&...

btlejuice

BtleJuice Framework Introduction BtleJuice is a complete framework to perform Man-in-the-Middle attacks on Bluetooth Smart devices also known as Bluetooth Low Energy. It is composed of: an interception core an interception proxy a dedicated web interface Python and Node.js bindings How to install...

Empire

Invoke-Obfuscation v1.8 Introduction Invoke-Obfuscation is a PowerShell v2.0+ compatible PowerShell command and script obfuscator. Background In the Fall of 2015 I decided to begin researching the flexibility of PowerShell's language and began cataloguing the various ways to accomplish a handful ...

GOSINT

GOSINT - Open Source Threat Intelligence Gathering and Processing Framework The GOSINT framework is a project used for collecting, processing, and exporting high quality indicators of compromise IOCs. GOSINT allows a security analyst to collect and standardize structured and unstructured threat...