cve-2021-42013-apache

Installation and Execution of the script 💻 Prerequisites Before starting, ensure you have the following tools installed on your machine: Python 3.x Git pip to manage Python dependencies Installation Steps 1. Clone the repository Use git to clone the repository: root@kitploit: git clone...

xssless

xssless An automated XSS payload generator written in python. Usage 1. Record requests with Burp proxy 2. Select requests you want to generate, then right click and select "Save items" 3. Use xssless to generate your payload: ./xssless.py burpexportfile 4. Pwn! A more detailed tutorial can be fou...

openwifipass

OpenWifiPass An open source implementation of the grantor role in Apple's Wi-Fi Password Sharing protocol. Disclaimer OpenWifiPass is experimental software and is the result of reverse engineering efforts by the Open Wireless Link project. The code serves solely documentary and educational...

SessionView

SessionView A lightweight C console application for enumerating and displaying all user sessions on Windows Server, including session GUIDs. Features Complete Session Enumeration : Lists all active sessions on the Windows server Detailed Session Information : Displays Session ID, Station Name,...

usbsnoop

usbsnoop — live USB transfer sniffer from two fentry hooks A real-time, colorized feed of USB traffic system-wide — built on the two universal URB chokepoints every host-controller driver funnels through, so it works on xHCI/EHCI/OHCI/dwc alike with no per-controller tracepoints and no usbmon...

nuvola

nuvola nuvola with the lowercase n is a tool to dump and perform automatic and manual security analysis on AWS environments configurations and services using predefined, extensible and custom rules created using a simple Yaml syntax. The general idea behind this project is to create an abstracted...

hal

Welcome to HAL! HAL /hel/ is a comprehensive netlist reverse engineering and manipulation framework. Navigation 1. Introduction 2. Build Instructions 3. Quickstart Guide 4. Academic Context Introduction What the hell is HAL? Virtually all available research on netlist analysis operates on a...

ferret

Ferret The collaborative MITM proxy for security testers. Capture HTTP traffic, annotate requests with AI, run hunt sessions, replay traffic, and track findings from one interface. Quick start · Features · Screenshots · Configuration · Security · Contributing Quick start Install root@kitploit: gi...

thrunt-god

From signal, to swarm. No gods. Only Thrunt. Threat hunting command system for agentic IDEs. Claude Code · OpenCode · Gemini · Codex · Copilot · Cursor · Windsurf /thrunt:autonomous | one command, full hunt Install · Phases · Commands · Flows · Artifacts Installation root@kitploit: npx...

apimspray

apimspray apimspray is a specialized Entra ID Passwordspraying Toolkit designed for authorized security research and Red Teaming. It utilizes Azure API Management APIM gateways as a distributed, rotating proxy layer for IP Rotating. Read Blog Post for more Details about this project Prerequisites...

ccat

Cloud Container Attack Tool CCAT ☁️🐈...

bulk_extractor

bulkextractor is a high-performance digital forensics exploitation tool. It is a "get evidence" button that rapidly scans any kind of input disk images, files, directories of files, etc and extracts structured information such as email addresses, credit card numbers, JPEGs and JSON snippets witho...

apache__mina-sshd_CVE-2023-35887_2-9-2

Apache MINA SSHD Apache MINA SSHD is a 100% pure java library to support the SSH protocols on both the client and server side. It does not aim at being a replacement for the SSH client or SSH server from Unix operating systems, but rather provides support for Java based applications requiring SSH...

quasar

Quasar Quasar Is An Information Gathering Framework For Penetration Testers Coded By Belahsan Ouerghi Website Informations E-mail Address Checker Phone Number Information Credit Card Bin Checker Ip Locator Port Scanner Installation root@kitploit: sudo apt-get install git git clone...

libpcap

LIBPCAP 1.x.y by The Tcpdump Group To report a security issue please send an e-mail to [email protected]. To report bugs and other problems, contribute patches, request a feature, provide generic feedback etc please see the guidelines for contributing. The documentation directory has README...

CVE-2023-29489

CVE-2023-29489 SynixCyberCrimeMY CVE-2023-29489 Scanner By SamuraiMelayu1337 & h4zzzzzz@scc How To Usage ? git clone https://github.com/SynixCyberCrimeMy/CVE-2023-29489 cd CVE-2023-29489 pip3 install -r requirements.txt python3 eksepelot.py Thanks To All SynixCyberCrimeMY Members...

red-tldr

Red Team TL;DR English | 中文简体 What is Red Team TL;DR? red-tldr is a lightweight red team command lookup tool. It helps experienced red team operators quickly find the commands, techniques, and key points they need — like a man command built for offensive security. Starting from v0.5.0, red-tldr...

dns_amplification_scanner

DNS Amplification DDoS Detection and Verification Tool This script is designed to identify and verify potential DNS servers vulnerable to exploitation in DNS amplification distributed denial-of-service DDoS attacks. It addresses the limitations of automated vulnerability scanners like Nessus, whi...

rizin-notebook

Rizin Notebook A notebook for binary analysis with rizin. Keep notes, commands, and scripts organized per binary. Requires rizin 0.7.0 or later. What it does Each notebook page is tied to one binary. It stores the binary itself, its SHA-256 hash, and a list of cells : command cells - a rizin...

shotlooter

Introduction Shotlooter tool is developed to find sensitive data inside the screenshots which are uploaded to https://prnt.sc/ via the LightShot software by applying OCR and image processing methods. root@kitploit: +-------------------+ IMAGE FILE |!/usr/bin/python | +--------------------+ |...