5764 matches found
Skrull
Skrull Skrull is a malware DRM, that prevents Automatic Sample Submission by AV/EDR and Signature Scanning from Kernel. It generates launchers that can run malware on the victim using the Process Ghosting technique. Also, launchers are totally anti-copy and naturally broken when got submitted. It...
chaos
chaos chaos is an 'origin' IP scanner developed by RST in collaboration with ChatGPT. It is a niche utility with an intended audience of mostly penetration testers and bug hunters. An origin-IP is a term-of-art expression describing the final public IP destination for websites that are publicly...
G3-Loop-DoS
G3-Loop-DoS Python Script for Automated Vulnerability Detection of Loop DoS and CVE-2024-2169 Description: This Python script automates the process of scanning for systems potentially vulnerable to the Loop DoS attack and the hypothetical CVE-2024-2169 vulnerability. It focuses on scanning ports...
agentseal
Security toolkit for AI agents. Red-team prompts, detect MCP poisoning, scan skill files, trace toxic data flows. 225+ tests across 28 agents...
PenBox
PenBox – A Penetration Testing Framework A Penetration Testing Framework , The Hacker’s Repo our hope is in the last version we will have evry script that a hacker needs Information Gathering : nmap Setoolkit Port Scanning Host To IP wordpress user enumeration CMS scanner XSStracer - checks remot...
anticuckoo
anticuckoo A tool to detect and crash Cuckoo Sandbox. Tested in Cuckoo Sandbox Official and Accuvant's Cuckoo version. Please, consider make a donation: https://github.com/sponsors/therealdreg Anticuckoo can also detect other sandbox like FireEye -c2: Reddit / netsec discussion about anticuckoo...
Cisco_CVE-2023-20198
CVE-2023-20198 Script de verificación CVE-2023-20198 basado en: Technical analysis: https://blog.talosintelligence.com/active-exploitation-of-cisco-ios-xe-software/ First script version: https://github.com/Atea-Redteam/CVE-2023-20198/ Gracias a Atea Redteam por su trabajo. Requiere: Python3.7+...
CVE-2020-13942
CVE-2020-13942 Run httpx or httprob on the targets before using the script. USAGE ./CVE-2020-13942.sh target.txt Credit This script was made from Rohit Gautam Repo...
CVE-2023-24488
POC para CVE-2023-24488 Esta herramienta está inspirada en una herramienta similar https://github.com/securitycipher/CVE-2023-24488 construida con python. Esta herramienta fue construida con golang y ha sido refinada a partir de su versión en python. Esta herramienta se utiliza para explotar...
Exploitivator
Exploitivator V2.0 - modified to use Python 3 Prerequisites This has only been tested on Kali. It depends on the pymetasploit3 module for Python, described in detail here: https://coalfire.com/the-coalfire-blog/pymetasploit3-metasploit-automation-library Install the necessary Kali packages and th...
CVE-2019-0708Poc-BatchScanning
title:CVE-2019-0708 Detección Masiva Esta detección masiva se basa en la herramienta de detección no invasiva publicada por 360 0708detector.exe, con las siguientes funciones: 1. Detección individual 2. Detección masiva root@kitploit: ¡Haga doble clic en 0708detector-全自动批量版.exe para usarlo! La...
CVE-2021-44228
CVE-2021-44228 Herramienta de reconocimiento masivo para CVE-2021-44228 Necesita corregir la librería Crypto para que funcione con Python3.9 sudo vim /usr/local/lib/python3.9/dist-packages/Crypto/Random/UserFriendlyRNG.py reemplazar línea 77 : t = time.clock con : t = time.perfcounter Cómo usar:...
trufflehog
TruffleHog Encuentra credenciales filtradas. 🔎 Escaneando ahora ...y más Para obtener más información sobre TruffleHog y sus características y capacidades, visita nuestra página de producto. 🌐 TruffleHog Enterprise ¿Estás interesado en monitorear continuamente Git, Jira, Slack, Confluence,...
CVE-2018-7600-Drupal7
CVE-2018-7600-Drupal7 CVE-2018-7600【Drupal7】Batch scanning tool. root@kitploit: 主文件：CVE-2018-7600-Drupal7.py Main file: CVE-2018-7600-Drupal7.py 其实本质是封装了whoami的exp In essence, it encapsulates the whoami exploit Drupal7/8的原理是一样的但该脚本当是只做了7的适配 Drupal7/8 principles are the same, but this script...
mzap
mzap mzap es una CLI en Crystal para escaneo ZAP de múltiples objetivos. Distribuye objetivos entre uno o más hosts de API de ZAP, admite modo de espera opcional y puede exportar informes. Características Comandos de escaneo: spider, ajaxspider, clientspider ZAP 2.16+, ascan, pscan Importación de...
mzap
mzap mzap is a Crystal CLI for multi-target ZAP scanning. It dispatches targets across one or more ZAP API hosts, supports optional wait mode, and can export reports. Features Scan commands: spider, ajaxspider, clientspider ZAP 2.16+, ascan, pscan API definition import for openapi, soap, graphql,...
CVE-2022-23131
CVE-2022-23131 Create a urls.txt file and put the targets into urls.txt. python CVE-2022-23131.py If a vulnerability exists, it will generate bug.txt...
CloudRecon
CloudRecon Finding assets from certificates! Scan the web! Tool presented @DEFCON 31 BY Gunnar Andrews @G0LDENinfosec Jason Haddix @Jhaddix Install You must have CGO enabled, and may have to install gcc to run CloudRecon root@kitploit: sudo apt install gcc root@kitploit: go install...
CVE-2018-6389
CVE-2018-6389 Exploit CVE-2018-6389 Checker — a small, non‑destructive Python tool that checks for indicators of the CVE‑2018‑6389 WordPress vulnerability by issuing three controlled load-scripts.php requests and analysing response size, timing and JS token patterns. ⚠️ Disclaimer Use this tool...