chaos

chaos chaos is an 'origin' IP scanner developed by RST in collaboration with ChatGPT. It is a niche utility with an intended audience of mostly penetration testers and bug hunters. An origin-IP is a term-of-art expression describing the final public IP destination for websites that are publicly...

G3-Loop-DoS

G3-Loop-DoS Python Script for Automated Vulnerability Detection of Loop DoS and CVE-2024-2169 Description: This Python script automates the process of scanning for systems potentially vulnerable to the Loop DoS attack and the hypothetical CVE-2024-2169 vulnerability. It focuses on scanning ports...

agentseal

Security toolkit for AI agents. Red-team prompts, detect MCP poisoning, scan skill files, trace toxic data flows. 225+ tests across 28 agents...

PenBox

PenBox – A Penetration Testing Framework A Penetration Testing Framework , The Hacker’s Repo our hope is in the last version we will have evry script that a hacker needs Information Gathering : nmap Setoolkit Port Scanning Host To IP wordpress user enumeration CMS scanner XSStracer - checks remot...

anticuckoo

anticuckoo A tool to detect and crash Cuckoo Sandbox. Tested in Cuckoo Sandbox Official and Accuvant's Cuckoo version. Please, consider make a donation: https://github.com/sponsors/therealdreg Anticuckoo can also detect other sandbox like FireEye -c2: Reddit / netsec discussion about anticuckoo...

Cisco_CVE-2023-20198

CVE-2023-20198 CVE-2023-20198 Checkscript based on: Technical analysis: https://blog.talosintelligence.com/active-exploitation-of-cisco-ios-xe-software/ First script version: https://github.com/Atea-Redteam/CVE-2023-20198/ Thanks to Atea Redteam for their work. Requires: Python3.7+ Python libs:...

CVE-2020-13942

CVE-2020-13942 Run httpx or httprob on the targets before using the script. USAGE ./CVE-2020-13942.sh target.txt Credit This script was made from Rohit Gautam Repo...

CVE-2023-24488

POC for CVE-2023-24488 This tool is inspired from similar tool https://github.com/securitycipher/CVE-2023-24488 built using python, This tool was built using golang and has been refined from its python version, this tool is used for exfoliation CVE-2023-24488 Installation follow this command...

Exploitivator

Exploitivator V2.0 - modified to use Python 3 Prerequisites This has only been tested on Kali. It depends on the pymetasploit3 module for Python, described in detail here: https://coalfire.com/the-coalfire-blog/pymetasploit3-metasploit-automation-library Install the necessary Kali packages and th...

CVE-2019-0708Poc-BatchScanning

title:CVE-2019-0708 Detección Masiva Esta detección masiva se basa en la herramienta de detección no invasiva publicada por 360 0708detector.exe, con las siguientes funciones: 1. Detección individual 2. Detección masiva root@kitploit: ¡Haga doble clic en 0708detector-全自动批量版.exe para usarlo! La...

CVE-2021-44228

CVE-2021-44228 Mass recognition tool for CVE-2021-44228 need to fix Crypto library to work with Python3.9 sudo vim /usr/local/lib/python3.9/dist-packages/Crypto/Random/UserFriendlyRNG.py replace line 77 : t = time.clock with : t = time.perfcounter how to use : sudo python3 192.168.0.0/8 mylog.txt...

CVE-2018-7600-Drupal7

CVE-2018-7600-Drupal7 CVE-2018-7600【Drupal7】Batch scanning tool. root@kitploit: 主文件：CVE-2018-7600-Drupal7.py Main file: CVE-2018-7600-Drupal7.py 其实本质是封装了whoami的exp In essence, it encapsulates the whoami exploit Drupal7/8的原理是一样的但该脚本当是只做了7的适配 Drupal7/8 principles are the same, but this script...

CVE-2022-23131

CVE-2022-23131 Create a urls.txt file and put the targets into urls.txt. python CVE-2022-23131.py If a vulnerability exists, it will generate bug.txt...

CloudRecon

CloudRecon Finding assets from certificates! Scan the web! Tool presented @DEFCON 31 BY Gunnar Andrews @G0LDENinfosec Jason Haddix @Jhaddix Install You must have CGO enabled, and may have to install gcc to run CloudRecon root@kitploit: sudo apt install gcc root@kitploit: go install...

CVE-2018-6389

CVE-2018-6389 Exploit CVE-2018-6389 Checker — a small, non‑destructive Python tool that checks for indicators of the CVE‑2018‑6389 WordPress vulnerability by issuing three controlled load-scripts.php requests and analysing response size, timing and JS token patterns. ⚠️ Disclaimer Use this tool...

Spartan

Spartan Recon Like a Pro Wiki • Usage • Gallery Features Subdomain Scan Using Aquatone & Sublist3r Httprob for only Live sites Masscan for open ports Identifing CMS using CMSeeK Grabing URL's from waybackMachine ScreenShot using Aquatone Brute forcing directories and files using Dirsearch Cors Sc...

CVE-2024-24919

CVE-2024-24919 Checker A simple bash script to check for the vulnerability CVE-2024-24919. Installation Clone the repository: root@kitploit: git clone https://github.com/am-eid/CVE-2024-24919.git cd CVE-2024-24919 chmod +x CVE-2024-24919 Usage ./CVE-2024-24919 -l ips.txt...

JSpector

JSpector JSpector is a Burp Suite extension that passively crawls JavaScript files and automatically creates issues with URLs, endpoints and dangerous methods found on the JS files. Prerequisites Before installing JSpector, you need to have Jython installed on Burp Suite. Installation 1. Download...

beanshooter

beanshooter beanshooter es una herramienta de enumeración y ataque JMX que ayuda a identificar vulnerabilidades comunes en endpoints JMX. https://user-images.githubusercontent.com/49147108/183278179-4a5566a7-5af8-4ce8-a73d-1016876a36d5.mp4 Instalación beanshooter es un proyecto maven y la...

pbscan

RESUMEN polarbearscan es un intento de realizar un escaneo de puertos y captura de banners más rápido y eficiente. Combina dos ideas diferentes que, con suerte, lo harán merecedor de su atención y tiempo. La primera de estas ideas es utilizar escaneo SYN sin estado usando cookies criptográficamen...