71 matches found
Browser-ExternalC2
Browser-EC2...
kubesploit
Kubesploit Kubesploit is a cross-platform post-exploitation HTTP/2 Command & Control server and agent dedicated for containerized environments written in Golang and built on top of Merlin project by Russel Van Tuyl @Ne0nd0g. Our Motivation While researching Docker and Kubernetes, we noticed that...
DarkLoadLibrary
DarkLoadLibrary LoadLibrary for offensive operations. How does it work? https://www.mdsec.co.uk/2021/06/bypassing-image-load-kernel-callbacks/ Usage root@kitploit: DARKMODULE DarkModule = DarkLoadLibrary LOADLOCALFILE, // control flags L"TestDLL.dll", // local dll path, if loading from disk NULL,...
Powermad
PowerShell MachineAccountQuota and DNS exploit tools Wiki https://github.com/Kevin-Robertson/Powermad/wiki Blog Post Beyond LLMNR/NBNS Spoofing - Exploiting Active Directory-Integrated DNS Functions MachineAccountQuota Functions DNS Functions Dynamic Updates Functions ADIDNS Functions Miscellaneo...
hinge-command-control-c2
Using Hinge as a Command & Control Server Please see https://mattwie.se/hinge-command-control-c2...
xeca
xeca xeca is a project that creates encrypted PowerShell payloads for offensive purposes. Creating position independent shellcode from DLL files is also possible. Note: Please place your custom AMSI bypass in src/assets/amsi-bypass.ps1. Table of Contents xeca Install How It Works Mitigations...
ccat
Cloud Container Attack Tool CCAT ☁️🐈...
RemoteKeyStrokes
RemoteKeyStrokes A script to automate keystrokes through an active remote desktop session that assists offensive operators in combination with living off the land techniques. All credits goes to nopernik for making it possible so I took it upon myself to improve it. I wanted something that helps...
SwiftBelt
SwiftBelt About SwiftBelt is a macOS enumerator inspired by @harmjoy's Windows-based Seatbelt enumeration tool. SwiftBelt does not utilize any command line utilities and instead uses Swift code leveraging the Cocoa Framework, Foundation libraries, OSAKit libraries, etc. to perform system...
SelectMyParent
이건 뭔가요? 이것은 부모 프로세스 스푸핑parent process spoofing을 위한 프로젝트입니다. 사용 방법 1단계: 부모 프로세스를 선택하고 pid를 기억하세요. 2단계: 다음 명령을 실행하여 부모 프로세스 스푸핑을 수행합니다. root@kitploit: SelectMyParent.exe notepad 928 3단계: Process Explorer로 프로세스 트리를 확인하면 스푸핑이 성공적으로 수행된 것을 확인할 수 있습니다. 참고...
gpblib
GPBLib GPBLib는 GroupPolicyBackdoor, OUned 및 GPOddity 프로젝트에서 GPO 조작을 위해 사용되는 공통 코드를 포함합니다. 도구들을 본 라이브러리 사용으로 마이그레이션하는 작업은 아직 진행 중입니다...
tplmap
Tplmap 이 프로젝트는 더 이상 유지 관리되지 않습니다. 테스트 스위트를 손상시키지 않는 한 새로운 PR은 병합할 의향이 있습니다. Tplmap은 샌드박스 탈출 기술을 활용하여 Code Injection 및 Server-Side Template Injection 취약점의 악용을 지원하며, 이를 통해 기본 운영 체제에 접근할 수 있습니다. 이 도구와 테스트 스위트는 SSTI 취약점 클래스를 연구하고 웹 애플리케이션 침투 테스트 중 공격 보안 도구로 사용하기 위해 개발되었습니다. 샌드박스 탈출 기술은 James Kett의...
shocker
Shocker Shellshock에 취약한 서버를 찾아 익스플로잇하는 도구 Ref: https://en.wikipedia.org/wiki/Shellshocksoftwarebug NCC Group Plc가 오픈소스로 공개 - https://www.nccgroup.trust/ 개발자: Tom Watson, tom dot watson at nccgroup dot trust https://github.com/nccgroup/shocker AGPL 라이선스로 배포됨, 자세한 내용은 LICENSE 참조 도움말 사용법: shocker.py...
exploit
Exploit Оффенсивный хакерский инструмент Начало работы Это хакерский инструмент или программа, закодированная и созданная для помощи хакеру во взломе и выполнении эксплойтов. По вопросам Telegram: https://t.me/bitgodhack Email: [email protected] Требования к установке на любом дистрибутиве...
Offensive Tool Determination Strategy R.I.D.D.L.E. + (C)
Intentional threats are a major risk factor related to vulnerabilities in critical infrastructure assets, and an accurate risk assessment is necessary to analyze threats, assess vulnerabilities, and evaluate potential impacts on assets and systems. This research proposes a methodology that can be...
Xss-Wordlist
It is an offensive tool for web application security testing. Th...
Zero-Days
It is an offensive tool for Windows. This repository appears to...
dzzoffice_upload
It is an offensive tool for web application exploitation. The re...