AtomicTestHarnesses

AtomicTestHarnesses AtomicTestHarnesses is a library that simulates and validates attack technique execution. It consists of a Powershell module for running attack techniques on Windows and also a Python package for running on macOS and Linux The details of a technique can vary from attack to...

CVE-2021-42694

CVE-2021-42694 This script implements a Homoglyph detection tool, primarily used to detect potential CVE-2021-42694 vulnerabilities in code. Let me explain its main functions in detail: Core Features: Detect homoglyph substitution attacks in code Scan identifiers such as variable names and functi...

Ghidrathon

Ghidrathon Ghidrathon is a Ghidra extension that adds Python 3 scripting capabilities to Ghidra. Why? Ghidra natively supports scripting in Java and Jython. Unfortunately, many open-source analysis tools, like capa, Unicorn Engine, angr, etc., are written in Python 3 making it difficult, and in...

CVE-2022-29469

CVE-2022-29469 Thanks To All SynixCyberCrimeMY Members + Muslim Hackers How To Usage ? git clone https://github.com/S4muraiMelayu1337/CVE-2022-29469/ cd CVE-2022-29469 pip3 install -r requirements.txt python3 cve.py...

slowloris

slowloris.py - Pythonで書かれたシンプルなSlowloris Slowlorisとは？ Slowlorisは基本的に、スレッド型サーバーに影響を与えるHTTPサービス拒否攻撃です。仕組みは次のとおりです。 1. 大量のHTTPリクエストを開始します。 2. 接続を維持するために、定期的（約15秒ごと）にヘッダーを送信します。 3. サーバーが閉じない限り、接続を閉じません。サーバーが接続を閉じた場合は、新しい接続を作成して同じことを続けます。 これにより、サーバーのスレッドプールが枯渇し、サーバーは他の人に応答できなくなります。 引用...

CVE-2024-5932-web-ui

How to start Install root@kitploit: pip install -r ./requirement.txt Run root@kitploit: python3 ./app.py...

CVE-2024-53704

nxbender nxbender is a Proof-of-Concept PoC for establishing a VPN connection via NetExtender. This project is intended solely for educational and research purposes. Please only use the code in environments where you are explicitly authorized. Prerequisites Python 3.6+ recommended: Python 3.8 or...

loki-parse

loki-parse A python script that can detect and parse loki-bot malware related network traffic between a compromised host and a C2 server. This script can be helpful to DFIR analysts and security researchers who want to know what data is being exfiltrated to the C2, bot tracking, etc... This scrip...

CVE-2017-12149

CVE-2017-12149 Jboss Java Deserialization RCE CVE-2017-12149 The python script uses ysoserial to dynamically generate the payload. Therefore java is required as well...

plugxdecoder

plugxdecoder Basic Python script which Decodes PlugX traffic and encrypted/compressed artifacts. Accepting pull requests from those who wish to contribute. Currently requires: CTypes with ntdll, dpkt http://code.google.com/p/dpkt Tested with Python 2.7, on Windows. Long-term goal is to make a pur...

Shelly

Shelly | Simple Backdoor Manager with Python based on weevely Shelly is a simple tool that is written using Python, which functions to remote a website Instalation : $ git clone https://github.com/tegal1337/Shelly $ cd Shelly $ python3 shell.py Requirements : root@kitploit: sudo pip install -r...

xsssniper

XSSSNIPER xsssniper は、大量スキャン機能を備えた便利な XSS 発見ツールです。 使い方: root@kitploit: Usage: xsssniper.py options Options: -h, --help show this help message and exit -u URL, --url=URL ターゲット URL --post ターゲット URL に POST リクエストを試行 --data=POSTDATA 使用する POST データ --threads=THREADS スレッド数 --http-proxy=HTTPPROXY...

orbitaldump

OrbitalDump A simple multi-threaded distributed SSH brute-forcing tool written in Python. How it Works When the script is executed without the --proxies switch, it acts just like any other multi-threaded SSH brute-forcing scripts. When the --proxies switch is added, the script pulls a list usuall...

orbitaldump

OrbitalDump Pythonで書かれたシンプルなマルチスレッド分散SSHブルートフォースツール。 仕組み スクリプトが --proxies スイッチなしで実行されると、他のマルチスレッドSSHブルートフォーススクリプトと同様に動作します。--proxies スイッチを追加すると、スクリプトは ProxyScrape から（通常数千の）SOCKS4プロキシのリストを取得し、すべてのブルートフォース攻撃をSOCKS4プロキシ経由で実行するため、ブルートフォース試行がターゲットホストによってレート制限される可能性が低くなります。 インストール OrbitalDump は pip...

Tracgram

Trackgram Use Instagram location features to track an account Usage root@kitploit: At this moment the usage of Trackgram is extremly simple: 1. Download this repository 2. Go through the instalation steps 3. Change the parameters in the tracgram main method directly: + Mandatory: - NICKNAME: your...

domain_generation_algorithms

域名生成算法 用 Python 重新实现的恶意软件域名生成算法（DGA）。 概述 banjori 又名 MultiBanker 2, BankPatcher 链接 http://johannesbader.ch/2015/02/the-dga-of-banjori/ 示例域名 earnestnessbiophysicalohax.com kwtoestnessbiophysicalohax.com rvcxestnessbiophysicalohax.com hjbtestnessbiophysicalohax.com txmoestnessbiophysicalohax.com...

EvilOSX

EvilOSX An evil RAT Remote Administration Tool for macOS / OS X. Marco Generator by Cedric Owens This project is no longer active Features Emulate a terminal instance Simple extendable module system No bot dependencies pure python Undetected by anti-virus OpenSSL AES-256 encrypted payloads...

tcconfig

.. contents:: tcconfig :backlinks: top :depth: 2 摘要 tcconfig 是一个 tc 命令的封装工具。简化了对网络接口/Docker容器veth进行网络带宽/延迟/丢包/包损坏等流量控制的设置。 |PyPI pkg ver| |Supported Python ver| |CI status| |CodeQL| .. |PyPI pkg ver| image:: https://badge.fury.io/py/tcconfig.svg :target: https://badge.fury.io/py/tcconfig :alt: Py...

tcconfig

.. contents:: tcconfig :backlinks: top :depth: 2 Summary tcconfig is a tc command wrapper. Make it easy to set up traffic control of network bandwidth/latency/packet-loss/packet-corruption/etc. to a network-interface/Docker-containerveth. |PyPI pkg ver| |Supported Python ver| |CI status| |CodeQL|...

Joomla-Scanner

Joomla Scanner Joomla Unauthorized Access Vulnerability CVE-2023-23752 made with python Usage Display Result.txt URL | Database Name | Username | Password | Host Disclaimer Alat ini hanya untuk edukasi, dilarang memperjual beli kan dan menyalahgunakan...