pyrasite

.. image:: docs/logo.png pyrasite .. image:: https://api.travis-ci.org/lmacken/pyrasite.png?branch=develop :target: http://travis-ci.org/lmacken/pyrasite .. image:: https://coveralls.io/repos/lmacken/pyrasite/badge.png?branch=develop :target: https://coveralls.io/r/lmacken/pyrasite?branch=develop...

pyrasite

.. image:: docs/logo.png pyrasite .. image:: https://api.travis-ci.org/lmacken/pyrasite.png?branch=develop :target: http://travis-ci.org/lmacken/pyrasite .. image:: https://coveralls.io/repos/lmacken/pyrasite/badge.png?branch=develop :target: https://coveralls.io/r/lmacken/pyrasite?branch=develop...

PPLcontrol

PPLcontrol 描述 此工具允许您列出受保护进程、获取特定进程的保护级别或设置任意保护级别。有关更多信息，您可以阅读这篇博文：调试受保护进程。 使用方法 1. 下载 MSI 驱动程序 您可以在此处获取 MSI 驱动程序 RTCore64.sys 的副本：PPLKiller/driver。 2. 安装 MSI 驱动程序 免责声明： 毋庸置疑，您绝不应在主机上安装此驱动程序。请使用虚拟机！ root@kitploit: sc.exe create RTCore64 type= kernel start= auto binPath= C:\PATH\TO\RTCore64.sys...

sandfly-entropyscan

What is sandfly-entropyscan? sandfly-entropyscan is a utility to quickly scan files or running processes and report on their entropy measure of randomness and if they are a Linux/Unix ELF type executable. Some malware for Linux is packed or encrypted and shows very high entropy. This tool can...

RogueAssemblyHunter

. . \ / \ | | | .. | // \ / | | / \ / / \ \ / // // \ / | | | // | /\ / / | \ \ \ /| Y Y \ \ \ | | || // /|/ | / || / // | / // / / / / / / / / / | \ / | / \ | |/ \ / \ Y / | / | \ | \ /| | / | /|/|| /| | / / / Rogue Assembly Hunter Rogue Assembly Hunter è un'utilità per scoprire moduli .NET CLR...

DNCI

DNCI - Iniettore di Codice .Net DNCI consente l'iniezione di codice .Net .exe o .dll in remoto in processi non gestiti in Windows. 1. Struttura del Progetto Il progetto è strutturato in: DNCI.Injector.Library - Libreria di iniezione. Contiene tutti i componenti e la logica di iniezione;...

cansina

Cansina Cansina is a Web Content Discovery Application. It is well known Web applications don't publish all their resources or public links, so the only way to discover these resources is requesting for them and check the response. Cansina duty is to help you making requests and filtering and...

mec

mec Console de Exploração em Massa Destinado à exploração em massa Siga owiki para começar Funcionalidades Interface CLI fácil de usar Execute exploits adaptados com concorrência em nível de processo Exploits embutidos automatizados Oculte seu IP usando proxychains4 e proxypool Varredura de hosts...

mimic

mimic mimic is a tool for covert execution on Linux x8664. What is "covert execution"? Covert execution is the art of hiding a process. In this case, mimic hides the process in plain sight. mimic can launch any program and make it look like any other program. Any user can use it. It does not...

massdns

MassDNS A high-performance DNS stub resolver MassDNS is a simple high-performance DNS stub resolver targeting those who seek to resolve a massive amount of domain names in the order of millions or even billions. Without special configuration, MassDNS is capable of resolving over 350,000 names per...

make-trust-irrelevant

Make Trust Irrelevant Il muro non chiede cosa bussa. TLDR: Ho costruito un muro a livello di kernel per agenti non fidati, script e processi userland compromessi. Il punto è rendere intere classi di effetti privilegiati non autorizzati che falliscono chiusi sotto un modello di minaccia dichiarato...

pymultitor

PyMultiTor Python Multi Threaded Tor Proxy, Did you ever want to be at two different places at the same time? When I asked myself this question, I actually started developing this solution in my mind. While performing penetration tests there are often problems caused by security devices that bloc...

gdb-frontend

GDBFrontend is an easy, flexible and extensionable gui debugger. Installing Requirements GDB = 8.2 with python3 python3 = 3.6 tmux PIP Package Python Wheel Recommended You can install GDBFrontend with pip. root@kitploit: sudo python3 -m pip install gdbfrontend if it is already installed and you a...

r2frida

r2frida Radare2 and Frida better together Description Self-contained plugin for radare2 that ships frida and allows to instrument local or remote processes using r2 commands instead but not limited to Frida scripts. The radare project provides a complete toolchain for reverse engineering, it's...

pe-sieve

Intro PE-sieve is a tool that helps to detect malware running on the system, as well as to collect the potentially malicious material for further analysis. Recognizes and dumps variety of implants within the scanned process: replaced/injected PEs, shellcodes, hooks, and other in-memory patches...

ir-rescue

ir-rescue ir-rescue is composed of two sister scripts that collect a myriad of forensic data from 32-bit and 64-bit Windows systems ir-rescue-win and from Unix systems ir-rescue-nix. The scripts respect the order of volatility and artifacts that are changed with the execution e.g. , prefetch file...

teamcity-exploit-cve-2023-42793

TeamCity Exploit Cve 2023 42793 Ein schnelles Skript, um den cve-2023-42793 Bug auszunutzen. Weitere Informationen zum Exploit finden Sie hier: https://www.fortinet.com/blog/threat-research/teamcity-intrusion-saga-apt29-suspected-exploiting-cve-2023-42793​...

polkit security update

125-4.0.1.el102.1 - Increase timeout to avoid defunct processes Orabug: 26930744 125-4.1 - NOTICE jrybar: the record 125-4 below was added in manually after Ymir's initial - commit 125-3.1. For some reason, 125-3.1 for rhel-10.2 was based on contents - of rhel-10.0 release instead of version 125-...

xpid

xpid Es ist nmap aber für PIDs. 🤓 Bitte helfen Sie mir, ein unabhängiger Programmierer zu werden, indem Sie direkt unten spenden. xpid gibt einem Benutzer die Möglichkeit, Prozessdetails auf einem Linux-System zu „untersuchen“. Zum Beispiel hat ein schlafender Thread ein Verzeichnis /proc/pid, da...

log4j2_vul_local_scanner

Scanner Locale per Vulnerabilità Log4j2 CVE-2021-45046 Script di rilevamento locale per la vulnerabilità Log4j, scansiona tutti i processi java sull'host, verifica se è stato introdotto un jar log4j-core vulnerabile e se è possibile un attacco remoto di esecuzione codice CVE-2021-45046. Carica il...