Phantom-Evasion-Loader

SROP-Assisted Cross-Memory Attach CMA Injection via Direct Syscalls. 👻 Phantom-Evasion-Loader x64 Linux Phantom-Evasion-Loader is a standalone, pure x64 Assembly injection engine engineered to minimize the detection surface of modern EDR/XDR solutions and Kernel-level monitors like Falco eBPF. It...

WhatsApp-OSINT

WHATS OSINT 🕵️‍♂️ OSINT tool for WhatsApp that allows you to obtain profile photos, verify Business accounts, check status and user information, analyze linked devices, review privacy settings, and access full data using the WhatsApp OSINT API from RapidAPI. Supports 6 endpoints: about, base64,...

capa

网站 | 下载 | Web 界面 capa 能够检测可执行文件中的能力。 你针对一个 PE、ELF、.NET 模块、shellcode 文件或沙箱报告运行它，它就会告诉你它认为该程序能够做什么。 例如，它可能会指出该文件是一个后门、能够安装服务、或依赖 HTTP 进行通信。 要交互式地在浏览器中查看 capa 结果，请使用 capa Explorer Web。 如果你想查看或编写 capa 规则，请前往 capa-rules 仓库。否则，请继续阅读。 下面你可以找到 我们关于 capa 的博客文章列表，其中包含更多细节。 示例 capa 输出 $ capa.exe...

test-certs-site

test-certs-site Introduction This is a purpose-built webserver for hosting the test pages required by the CA/Browser forum Baseline Requirements. They contain the following requirement: The CA SHALL host test Web pages that allow Application Software Suppliers to test their software with Subscrib...

trailmark

Trailmark Parse source code into queryable graphs of functions, classes, calls, and semantic annotations for security analysis. Trailmark uses tree-sitter for language-agnostic AST parsing and rustworkx for high-performance graph traversal. The long-term vision is to combine this graph with...

cypheroth

Cypheroth Automated, extensible toolset that runs cypher queries against Bloodhound's Neo4j backend and saves output to spreadsheets. Description This is a bash script that automates running cypher queries against Bloodhound data stored in a Neo4j database. I found myself re-running the same...

XXEinjector

XXEinjector XXEinjector automates retrieving files using direct and out of band methods. Directory listing only works in Java applications. Bruteforcing method needs to be used for other applications. Options: root@kitploit: --host Mandatory - our IP address for reverse connections...

Feb2023-CVE-2021-21974-OSINT

Feb2023-CVE-2021-21974-OSINT Analysis of the ransom demands from Shodan results and Censys For Shodan: I've provided a script that you can use as a basis for your own analysis, or to update and gather more results as Shodan scrapes them. I've also included a python script that can be used to quer...

holo

Holo is a suite of routing protocols designed to support high-scale and automation-driven networks. For a description of what a routing protocol is, please refer to this Wikipedia page. Features Focus on simplicity and correctness Holo's main goal is to create a reliable, easy-to-maintain, and...

heimdal

Heimdal Heimdal is an implementation of: ASN.1/DER, PKIX, and Kerberos. For information how to install see here. There are man pages for most of the commands. Bug reports and bugs are appreciated. Use GitHub issues. For more information see the project homepage https://heimdal.software/heimdal/ o...

Netryx-Astra-V2-Geolocation-Tool

Netryx Astra V2 State-of-the-art AI geolocation from a single image. The Idea • How It Works • Getting Started • Community Hub • Installation The Idea You have a photograph. Maybe it's a screenshot from a video. Maybe it's a cropped, blurry phone photo someone posted online. Maybe it shows just a...

cypherhound

CypherHound 一款Python3终端应用程序，包含用于BloodHound数据集的Neo4j Cypher查询，并附带一个脚本，可自动将这些查询导入BloodHound CE。 输出样例 终端 HTML报表 HTML报表（续） 为什么？ BloodHound 是每位渗透测试人员的必备工具。然而，它的设计也带来了一些负面影响。以下是我遇到的最棘手的痛点，以及本工具旨在解决的问题： 1. 我的工具以列表形式思考 – 在我的工具能解析导出的JSON图之前，我需要将图结果以逐行格式的.txt文件呈现， 才能从其他工具中实际攻击目标 。 2. 复制/粘贴图结果 – 这延续了第一点，但...

cypherhound

CypherHound A Python3 terminal application that contains Neo4j cyphers for BloodHound data sets with a script to automate importing them into BloodHound CE. Output Samples Terminal HTML Report HTML Report continued Why? BloodHound is a staple tool for every penetration tester. However, there are...

theHarvester

About theHarvester is a simple to use, yet powerful tool designed to be used during the reconnaissance stage of a red team assessment or penetration test. It performs open source intelligence OSINT gathering to help determine a domain's external threat landscape. The tool gathers names, emails,...

boundary

Boundary What is Boundary: https://developer.hashicorp.com/boundary/docs/what-is-boundary Website: https://www.developer.hashicorp.com/boundary/ Forums: HashiCorp Discuss Documentation: https://developer.hashicorp.com/boundary/docs Tutorials: HashiCorp's Learn Platform Boundary is an identity-awa...

rollback_car_attack_proverif

Rollback attack formal verif ProVerif proof of concept of the Rollback attack on car keyfob CVE-2022-37418, CVE-2022-36945 and CVE-2022-37305, presented in1 Disclaimer I have no connection with the authors of 1. I am grateful to them for making their paper open access. ProVerif installation...

HASH

HASH HTTP Agnostic Software Honeypot HASH is a framework for creating and launching low interactive honeypots. 🌟 Why HASH? The main philosophy of HASH is to be easy to configure and flexible to mimic any software running on HTTP/HTTPs. With the minimum footprint possible to avoid being detected a...

CVE-2024-24919

CVE-2024-24919 Checker A simple bash script to check for the vulnerability CVE-2024-24919. Installation Clone the repository: root@kitploit: git clone https://github.com/satriarizka/CVE-2024-24919.git cd CVE-2024-24919 chmod +x CVE-2024-24919-scan.sh Usage ./CVE-2024-24919-scan.sh -l ips.txt HUNT...

spiderfoot

SpiderFoot es una herramienta de automatización de inteligencia de código abierto OSINT. Se integra con casi todas las fuentes de datos disponibles y utiliza una variedad de métodos para el análisis de datos, facilitando la navegación de esos datos. SpiderFoot tiene un servidor web integrado para...

spiderfoot

SpiderFoot is an open source intelligence OSINT automation tool. It integrates with just about every data source available and utilises a range of methods for data analysis, making that data easy to navigate. SpiderFoot has an embedded web-server for providing a clean and intuitive web-based...