scan4log4j

scan4log4j 发送CVE-2021-44228 log4j payload请求到URL列表的Python脚本 非常Beta 使用方法 将您的URL列表提供给urls.txt 将您的payloads放入payloads.txt 可选 在headers.txt中添加更多请求头 运行 ./scan4log4j.py...

enum_shares

enumshares Herramienta de enumeración de carpetas compartidas EnumShares enumera carpetas compartidas a través de la red y bajo una cuenta de usuario personalizada. Puede comprobar si la carpeta compartida es escribible para el usuario actual. Puede ahorrarte mucho tiempo cuando necesitas descubr...

CVE-2025-4138-POC

CVE-2025-4138 - Python tarfile PATHMAX 绕过 PoC 作者： d3vn0mi root@kitploit: / \ \ / / | | / \ | | | | || | / | | \ V /| | | | | | | \ | | || || / \ | | | | | ||/ /| || / / || | , | | || || ||/|/ |||/ // CVE-2025-4138 :: Python tarfile PATHMAX 绕过 作者: d3vn0mi 概述 针对 CVE-2025-4138 的概念验证利用代码，这是一个...

NTLMRecon

NTLMRecon An NTLM reconnaissance tool without external dependencies. Useful to find out information about NTLM endpoints when working with a large set of potential IP addresses and domains. NTLMRecon is built with flexibilty in mind. Need to run recon on a single URL, an IP address, an entire CID...

htattack

htattack.py Una implementación de exploit para RCE en documentos RTF CVE-2017-0199. Video en español: https://www.youtube.com/watch?v=0lDvclMrymM Uso: root@kitploit: python htattack.py -u...

Hash-Buster

Hash Buster Why crack hashes when you can bust them? Features Automatic hash type identification Supports MD5, SHA1, SHA256, SHA384, SHA512 Can extract & crack hashes from a file Can find hashes from a directory, recursively Multi-threading Insallation & Usage Note: Hash Buster isn't compatible...

volatility-gui

Volatility GUI This is a GUI for Volatility forensics tool written in PyQT5 Prerequisites: 1- Installed version of Volatility. 2- Install PyQT5. sudo apt-get install python3-pyqt5 3- Download Volatility GUI. Configuration From the downloaded Volatility GUI, edit config.py file to specify 1- Pytho...

MikroRoot

MikroRoot Versión automatizada de CVE-2018-14847. Buscará en Shodan hosts vulnerables e intentará explotarlos. Cómo usar Ten en cuenta que este script NO funcionará con Python2.x. Usa solo Python 3+ MikroRoot: python3 MikroRoot.py -k SHODANKEY -p page count User: ncss Pass: ncss!@2018 IP: 1.2.3.4...

Metaforge

Metaforge "An OSINT tool that analyzes metadata and creates dynamic reports" https://chriswmorris.github.io/Metaforge/ Senior Design Project 2019 - By Chris Morris and Collin Mockbee A Python3 Application for Unix-based Operating Systems Note: Metaforge requires at least python version 3.5 to wor...

the-endorser

🚨 The Endorser is no longer maintained. If you need support or consultation for your OSINT endeavours, drop me an e-mail [email protected] 🚨 The Endorser An OSINT tool that allows you to draw out relationships between people on LinkedIn via endorsements/skills. Check out the example digraph,...

Inspector

Privilege Escalation unix helper SUMMARY Inspector is a python script for help in privilege escalation, for linux environement. After starting, this script search the kernel version and check if is exploit exists, load file history bash,zsh,mysql... and load list of programs loaded with root user...

PyFuscation

PyFuscation Requires python3 usage: PyFuscation.py -h -f -v -p --ps SCRIPT Optional arguments: root@kitploit: • -h, --help show this help message and exit • -f Obfuscate functions ○ Do this First ... Its probably the most likely to work well • -v Obfuscate variables ○ If your going to obfuscate...

CVE-2016-10033

PoC para CVE-2016-10033 RCE contra WordPress 4.6 uso: root@kitploit: ./CVE-2016-10033.py ejemplo: root@kitploit: ./CVE-2016-10033.py http://site.com/ 1.2.3.4:4444 admin Adaptación a Python +modificaciones de https://exploitbox.io/vuln/WordPress-Exploit-4-6-RCE-CODE-EXEC-CVE-2016-10033.html...

CVE-2023-37979

Exploit CVE-2023-37979...

burp-exporter

Exporter Extension for Burp Suite Community and Pro Follow us to know more about tips and others extensions Description Exporter is a Burp Suite extension to copy a request to a file or the clipboard as multiple programming languages functions. It also adds a tab called Exporter where you can...

iocx

IOCX Deterministic, Zero‑Risk IOC Extraction for Modern Security Pipelines Static IOC extraction from a PE file using the IOCX CLI Official IOCX Project This is the original IOCX engine for deterministic static IOC extraction and PE analysis. Any other repositories using the name "iocx" are not...

AdminSnatcher

AdminSnatcher Let's Snatch The Admin Panel Of Any Website In Seconds. Usage: 1. Go To The Terminal and cd To The Path. 2. Type: python3 adminsnatcher.py --url https://example.com Requirements 1. Python 3 2. Following Libraries Should Be Installed In Python3: Requests Random Colorama Why Only...

Python-Ransomware

Python-Ransomware Complete Python RansomeWare Source Code With Full Decoumetions. root@kitploit: |/ || |\ | | | |/| | | | || |/ | | / | \ | | | | || | | ||| | | | \ | .| | About: This is a Classic Example Of RansomWare Written in python. Tested On: Windows 10 / Windows7 Suport : +Windows7 Date...

CVE-2024-7399-POC

CVE-2024-7399 Exploit para CVE-2024-7399. Más detalles se pueden encontrar aquí: https://davidxbors.github.io/0xpages/posts/cve-2024-7399/. Uso: root@kitploit: python3 CVE-2024-7399.py https://localhost:7002/ --check python3 CVE-2024-7399.py https://localhost:7002/ --execute python3...

NextRecon

NextRecon NextRecon es una herramienta de reconocimiento simple basada en Python diseñada para cazadores de recompensas por errores, investigadores de seguridad y probadores de penetración. Realiza reconocimiento pasivo recolectando URLs archivadas de Wayback Machine y obteniendo credenciales...