pftriage

pftriage pftriage is a tool to help analyze files during malware triage. It allows an analyst to quickly view and extract properties of a file to help during the triage process. The tool also has an analyze function which can detect common malicious indicators used by malware. Dependencies pefile...

osint-scraper

Social Recon This application locates and compiles information about online personalities, given a username and/or email address. Use this to investigate your own online presence, summarize the digital footprint of someone you know, or uncover the person behind a specific username. Getting Starte...

gitGraber

About gitGraber gitGraber is a tool developed in Python3 to monitor GitHub to search and find sensitive data in real time for different online services such as: Google, Amazon AWS, Paypal, Github, Mailgun, Facebook, Twitter, Heroku, Stripe, Twilio... How it works ? It's important to understand th...

Scrapling

Effortless Web Scraping for the Modern Web العربيه | Español | Português Brasil | Français | Deutsch | 简体中文 | 日本語 | Русский | 한국어 Selection methods · Fetchers · Spiders · Proxy Rotation · CLI · MCP Scrapling is an adaptive Web Scraping framework that handles everything from a single request to a...

reposcanner

Reposcanner Reposcanner is a python script to search through the commit history of Git repositories looking for interesting strings such as API keys, inspired by truffleHog. Installation The python Git module is required python3-git on Debian. Docker root@kitploit: docker build -t reposcanner...

wfuzz

Wfuzz - The Web Fuzzer Wfuzz has been created to facilitate the task in web applications assessments and it is based on a simple concept: it replaces any reference to the FUZZ keyword by the value of a given payload. A payload in Wfuzz is a source of data. This simple concept allows any input to ...

ipv4Bypass

ipv4Bypass Using IPv6 to Bypass Security Dependences tested on Kali Linux python3 nmap arp-scan apt-get install arp-scan python-nmap https://pypi.org/project/python-nmap/ Example on how to run the tool root@kitploit: $ python bypass.py -i eth0 -r 10.5.192.0/24 $ python bypass.py -h Usage: bypass....

shellen

Shellen General Shellen is an interactive shellcoding environment. If you want a handy tool to write shellcodes, then shellen may be your friend. Shellen can also be used as an assembly or disassembly tool. keystone and capstone engines are used for all of shellen's operations. Shellen only works...

bbqsql

BBQSQL A Blind SQL Injection Exploitation Tool Table Of Contents What is BBQSQL? Overview of Readme High Level Usage Install BBQSQL Options Query Syntax Overview HTTP Parameters Export Config Import Config Custom Hooks Found a Bug? Can I Help? What's Up with the Name? What is BBQSQL? Blind SQL...

Shelly

Shelly | Simple Backdoor Manager with Python based on weevely Shelly is a simple tool that is written using Python, which functions to remote a website Instalation : $ git clone https://github.com/tegal1337/Shelly $ cd Shelly $ python3 shell.py Requirements : root@kitploit: sudo pip install -r...

knowsmore

Knows More KnowsMore officially supports Python 3.8+. Main features Import NTLM Hashes from .ntds output txt file generated by CrackMapExec or secretsdump.py Import NTLM Hashes from NTDS.dit and SYSTEM Import Cracked NTLM hashes from hashcat output file Import BloodHound ZIP or JSON file BloodHou...

py_certificate_extractor

pycertificateextractor Sometimes it necessary to extract certificate information from the digital signed file. Use this tool when that occurs. you can easily finish Let me know if there are any changes required or additional features need it. Features Extract the certificate information and...

WhatsApp-OSINT

WHATS OSINT 🕵️‍♂️ OSINT tool for WhatsApp that allows you to obtain profile photos, verify Business accounts, check status and user information, analyze linked devices, review privacy settings, and access full data using the WhatsApp OSINT API from RapidAPI. Supports 6 endpoints: about, base64,...

pypacker

General information This is Pypacker: The fastest and simplest low-level packet manipulation library for Python. See below examples for what you can do with it. If you want to support this project you can via PayPal. What you can do with Pypacker Create custom Packets via keywords or from raw byt...

noisy

Noisy A simple python script that generates random HTTP/DNS traffic noise in the background while you go about your regular web browsing, to make your web traffic data less valuable for selling and for extra obscurity. Tested on MacOS High Sierra, Ubuntu 16.04 and Raspbian Stretch and is compatab...

docf-sec-check

DocF-Sec-Check Description DocF-Sec-Check helps to make your Dockerfile commands more secure. ScreenShot...

Ox4Shell

Ox4Shell Deobfuscate Log4Shell payloads with ease. Description Since the release of the Log4Shell vulnerability CVE-2021-44228, many tools were created to obfuscate Log4Shell payloads, making the lives of security engineers a nightmare. This tool intends to unravel the true contents of obfuscated...

PiSavar

PiSavar - Detects PineAP module and starts deauthentication attack for fake access points - WiFi Pineapple Activities Detection About Project The goal of this project is to find out the fake access points opened by the WiFi pineapple device using the PineAP module and to prevent clients from bein...

petereport

PeTeReport PeTeReport Pe nTe st Report is an open-source application vulnerability reporting tool designed to assist pentesting/redteaming efforts, by simplifying the task of writting and generation of reports. Focused in product security, the tool help security researchers and pentesters to...

mariana-trench

Mariana Trench Mariana Trench is a security focused static analysis platform targeting Android. This guide will walk you through setting up Mariana Trench on your machine and get you to find your first remote code execution vulnerability in a small sample app. These instructions are also availabl...