secbutler

Essential utilities for pentester, bug-bounty hunters and security researchers Features • Usage • Installation • License • secbutler is a utility tool made for pentesters , bug-bounty hunters and security researchers that contains all the most used and tedious stuff commonly used while performing...

Snaffler

Snaffler What is it for? Snaffler is a tool for pentesters and red teamers to help find delicious candy needles creds mostly, but it's flexible in a bunch of horrible boring haystacks a massive Windows/AD environment. It might also be useful for other people doing other stuff, but it is explicitl...

volana

volana luna en malgache root@kitploit: Úsalo ; 🌚ocultar de; 🌞detectado por Ofuscación de comandos de shell para evitar SIEM/sistema de detección Durante un pentest, un aspecto importante es ser sigiloso. Por esta razón debes . Sin embargo, muchas infraestructuras registran comandos y los envían a...

foolav

foolav Executable compiled with this code is useful during penetration tests where there is a need to execute some payload meterpreter maybe? while being certain that it will not be detected by antivirus software. The only requirement is to be able to upload two files: binary executable and paylo...

nacker

Nacker Nacker is a tool to bypass 802.1x Network Access Control NAC on a wired LAN. Nacker will help you locate any non-802.1x configurable hosts on your subnet, and spoof their MAC address so that you appear authenticated to the switch. The name "Nacker" is a derived from the word "knocker" and...

LDAPmonitor

Monitor creation, deletion and changes to LDAP objects live during your pentest or system administration! With this tool you can quickly see if your attack worked and if it changed LDAP attributes of the target object. Features...

fileless-xec

➲ fileless-xec 🦜 👋 Ciertamente útil, principalmente por diversión, aproximadamente inspirado por el artículo de 0x00 artículo Uso en pentest: fileless-xec se utiliza en la máquina objetivo para ejecutar sigilosamente un archivo binario ubicado en la máquina del atacante ➲ Breve historia...

penta

penta PENTest + 半自动化工具 Penta 是一款使用 Python3 的渗透测试半自动化工具。它提供了高级功能，用于提取特定服务器上发现的漏洞信息。我目前正在使用漏洞数据库开发一个扫描系统。 安装...

rsg

Generador de Reverse Shell - rsg Una herramienta para generar varias formas de hacer un reverse shell Ejemplo de uso Fuentes de Reverse Shell http://bernardodamele.blogspot.com.br/2011/09/reverse-shells-one-liners.html http://pentestmonkey.net/cheat-sheet/shells/reverse-shell-cheat-sheet...

BeeLogger

BeeLogger Copyright 2017 BeeLogger Written by: Alisson Moretto - 4w4k3 Twitter: @4w4k3Official TOOL DESIGNED TO GOOD PURPOSES, PENTESTS, DON'T BE A CRIMINAL ! Only download it here, do not trust in other places. NOTE: BeeLogger just have official support for latin languages in this moment. HOW TO...

imposter

IMPOSTER 一个用于在恶意网络上攻击Windows客户端的渗透测试工具。 当前版本 功能 将LDAP降级为NTLM认证 模拟域控制器的初始步骤，以欺骗网络位置感知 服务器 DNS, CLDAP, LDAP 安装 当前版本已在Kali Linux上测试过，但也应适用于其他操作系统。 依赖项 pyasn1 dnspython Kali Linux上的快速安装 使用以下步骤在Kali Linux机器上设置imposter。 root@kitploit: git clone https://github.com/bugch3ck/imposter.git cd imposter/src g...

CVE-2026-14191

cve-id ⚡ Simple Usage Use this project only in safe and authorized environments such as: Local virtual machines Docker containers Isolated lab setups Authorized penetration testing environments Example setup: root@kitploit: git clone cd Project use python follow below Create a virtual environment...

gitjacker

gitjacker Gitjacker descarga repositorios git y extrae su contenido de sitios donde el directorio .git ha sido subido por error. Aún así, logra recuperar una parte significativa de un repositorio incluso cuando los listados de directorios están deshabilitados. Solo para uso educativo/pruebas de...

android-pentest-tool

Android pentest tool designed for kali linux javaFX + Spring boot + bash scripts make all routine steps in one click Update Version 1.0 released! Build root@kitploit: mvn clean package Run root@kitploit: java -jar target/android-pentest-tool.jar TODO: add installation steps add features list more...

SnaffPoint

SnaffPoint Was ist das? SnaffPoint ist ein Tool für Pentester, die etwas Süße in dieser Welt brauchen. Es soll dir helfen, sensible Dateien zu finden, die auf SharePoint Online und in freigegebenen OneDrive-Dateien deines Unternehmens oder deines Kunden verfügbar sind. Wie funktioniert es? Es gib...

GitPython-Exploit-CVE-2022-24439

GitPython-Exploit Pentest pratico...

MySQL-Fu.rb

MySQL-Fu.rb MySQL-Fu ist ein Ruby-basiertes MySQL-Client-Skript, das ich geschrieben habe. Es erledigt die meisten Dinge, die ein normaler MySQL-Client tun würde: SQL Shell, Update/Delete/Drop-Datenbank/-Tabelle, Add/Delete-Benutzer, Dump-Datenbanken/-Tabelle mit Option für gzip…… Plus ein paar...

PyCk

PyCk Für vollständige Details werfen Sie bitte einen Blick auf das Wiki. Installation git clone https://github.com/Naategh/PyCk.git cd PyCk pip3 install -r requirements.txt Installation via Docker git clone https://github.com/Naategh/PyCK.git docker build . Anforderungen Python 3.5 Fahrplan Dies...

chromebackdoor

VIDEO Install Text V 3.0 Install Video OLD Binder guide Module guide Form grabber plugins Facebook MessengerSpy plugins Jabber Notifier/ Hide Panel Windows infection Rubber Ducky Payload Require: pip install crxmake wine32 Let's go root@kitploit: python chromebackdoor.py user: root pass: toor KAL...

cloud-buster

Risolutore Cloudflare Un completo strumento di pentest che verifica i siti abilitati a Cloudflare per perdite di IP di origine. È pieno di fantastiche funzionalità! esamina un'ampia gamma di configurazioni errate e vulnerabilità cerca nei database di altri servizi di risoluzione IP dettaglia gli ...