Snaffler

Snaffler What is it for? Snaffler is a tool for pentesters and red teamers to help find delicious candy needles creds mostly, but it's flexible in a bunch of horrible boring haystacks a massive Windows/AD environment. It might also be useful for other people doing other stuff, but it is explicitl...

BeeLogger

BeeLogger Copyright 2017 BeeLogger Written by: Alisson Moretto - 4w4k3 Twitter: @4w4k3Official TOOL DESIGNED TO GOOD PURPOSES, PENTESTS, DON'T BE A CRIMINAL ! Only download it here, do not trust in other places. NOTE: BeeLogger just have official support for latin languages in this moment. HOW TO...

secbutler

Essential utilities for pentester, bug-bounty hunters and security researchers Features • Usage • Installation • License • secbutler is a utility tool made for pentesters , bug-bounty hunters and security researchers that contains all the most used and tedious stuff commonly used while performing...

jdwp-shellifier

JDWP exploitation script What is it ? This exploitation script is meant to be used by pentesters against active JDWP service, in order to gain Remote Code Execution. How does it work ? Well, in a pretty standard way, the script only requires a Python 2 interpreter: root@kitploit: % python...

LDAPmonitor

Monitor creation, deletion and changes to LDAP objects live during your pentest or system administration! With this tool you can quickly see if your attack worked and if it changed LDAP attributes of the target object. Features...

foolav

foolav Executable compiled with this code is useful during penetration tests where there is a need to execute some payload meterpreter maybe? while being certain that it will not be detected by antivirus software. The only requirement is to be able to upload two files: binary executable and paylo...

rsg

反向 Shell 生成器 - rsg 一款用于生成多种反向 Shell 方式的工具 使用示例 反向 Shell 参考资料 http://bernardodamele.blogspot.com.br/2011/09/reverse-shells-one-liners.html http://pentestmonkey.net/cheat-sheet/shells/reverse-shell-cheat-sheet...

nacker

Nacker Nacker is a tool to bypass 802.1x Network Access Control NAC on a wired LAN. Nacker will help you locate any non-802.1x configurable hosts on your subnet, and spoof their MAC address so that you appear authenticated to the switch. The name "Nacker" is a derived from the word "knocker" and...

imposter

IMPOSTER A pentest tool used to attack windows clients on rogue networks. Current version Features Downgrade LDAP to NTLM authentication Fake initial steps of an domain controller to fool Network Location Awareness Servers DNS, CLDAP, LDAP Setup The current version have been tested on Kali Linux...

gitjacker

gitjacker Gitjacker 能够从误上传了 .git 目录的站点下载 git 仓库并提取其内容。即使禁用了目录列表，它仍能恢复仓库的很大一部分。 仅用于教育/渗透测试用途。 更多信息请访问 https://liam-galvin.co.uk/security/2020/09/26/leaking-git-repos-from-misconfigured-sites.html 安装 root@kitploit: curl -s "https://raw.githubusercontent.com/liamg/gitjacker/master/scripts/install.sh...

fileless-xec

➲ fileless-xec 🦜 👋 肯定有用，主要是好玩，大致受到0x00 文章的启发 渗透测试用途： fileless-xec 用于在目标机器上隐秘地执行位于攻击者机器上的二进制文件 ➲ 简短故事 fileless-xec 使我们能够直接在本地机器上从内存中执行远程二进制文件，而无需将其写入磁盘 ➪ 安装 简单用法 fileless-xec binaryurl curl | sh 用于二进制文件 以指定程序名称执行二进制文件：fileless-xec -n /usr/sbin/sshd binaryurl 将程序执行与 tty 分离：fileless-xec --setsid...

volana

volana 马达加斯加语中的月亮 root@kitploit: 使用它 ; 🌚隐藏于; 🌞可被检测到 Shell 命令混淆，以避免 SIEM/检测系统 在渗透测试中，一个重要方面是保持隐秘 。因此，你应该在行动后清除痕迹 。然而，许多基础设施会实时记录命令并发送到 SIEM，这使得事后清理工作变得毫无意义。 volana 提供了一种简单的方法来隐藏在被攻陷机器上执行的命令：它提供了一个自己的 shell 运行环境（输入你的命令，volana 为你执行）。这样你可以在行动过程中清除痕迹 。 使用方法 你需要获取一个交互式...

penta

penta PENTest + 半自动化工具 Penta 是一款使用 Python3 的渗透测试半自动化工具。它提供了高级功能，用于提取特定服务器上发现的漏洞信息。我目前正在使用漏洞数据库开发一个扫描系统。 安装 安装依赖 penta 需要以下软件包。 Python3.7+ pipenv 解决 Python 包依赖。 root@kitploit: $ pipenv install 如果你不喜欢 pipenv root@kitploit: $ pip install -r requirements.txt 用法 root@kitploit: $ pipenv run start 或者 $...

CVE-2026-14191

cve-id ⚡ Simple Usage Use this project only in safe and authorized environments such as: Local virtual machines Docker containers Isolated lab setups Authorized penetration testing environments Example setup: root@kitploit: git clone cd Project use python follow below Create a virtual environment...

GitPython-Exploit-CVE-2022-24439

GitPython-Exploit Practical Pentest...

android-pentest-tool

Android pentest tool designed for kali linux javaFX + Spring boot + bash scripts make all routine steps in one click Update Version 1.0 released! Build root@kitploit: mvn clean package Run root@kitploit: java -jar target/android-pentest-tool.jar TODO: add installation steps add features list more...

SnaffPoint

SnaffPoint What is it SnaffPoint is a tool for pointesters who are in need of some sweetness in this world. It should help you find sensitive files available on SharePoint online and on shared OneDrive files for your company or your customer. How does it work There are actually 2 tools:...

PyCk

PyCk For complete details please take a look at the wiki. Installation git clone https://github.com/Naategh/PyCk.git cd PyCk pip3 install -r requirements.txt Install via docker git clone https://github.com/Naategh/PyCK.git docker build . Requirements Python 3.5 Roadmap This is an educational...

chromebackdoor

VIDEO Install Text V 3.0 Install Video OLD Binder guide Module guide Form grabber plugins Facebook MessengerSpy plugins Jabber Notifier/ Hide Panel Windows infection Rubber Ducky Payload Require: pip install crxmake wine32 Let's go root@kitploit: python chromebackdoor.py user: root pass: toor KAL...

cloud-buster

Cloudflare Resolver A comprehensive pentest tool that checks Cloudflare enabled sites for origin IP leaks. It's filled with awesome features! scan a wide array of miss-configuration and vulnerabilities search other IP resolution service databases detail origin and related services IPs smart engin...