TP-Link-defaults

TP-Link-defaults Python script for trying default passwords for some TP-Link Hotspots Inspired by Usage root@kitploit: usage: scan.py -h -p -t TIMEOUT Python script for trying default passwords for some TP-Link Hotspots optional arguments: -h, --help show this help message and exit -p, --print-al...

pyCobaltHound

Quick summary pyCobaltHound is an Aggressor script extension for Cobalt Strike which aims to provide a deep integration between Cobalt Strike and Bloodhound. pyCobaltHound strives to assists red team operators by: Automatically querying the BloodHound database to discover escalation paths opened ...

cve-2019-16097

cve-2019-16097 1. Add the URLs you want to detect in urls.txt 2. Run the cve-2019-16097 script in python3 environment python3 cve-2019-16097.py 3. After batch detection is complete, view the URLs with successfully written accounts in results...

ipyida

= IPyIDA IPyIDA 是一个纯 Python 解决方案，用于为 IDA Pro 添加 IPython 控制台。使用 可打开一个嵌入了 Qt 控制台 的窗口。随后你便可以享受 IPython 的自动补全、在线帮助、等宽字体输入框、图表等功能。 你也可以在 IDA 之外使用 ipython console --existing 连接到该内核。 image::ipyida-screenshot.pngIPyIDA screenshot,width=100% == 安装 IPyIDA 应当兼容 Windows、OS X 和 Linux 上的 IDA 6.6 及更高版本。它已在最高至 I...

Log4j-Scanner-Exploit

Log4Shell-Scanner-Exploit Bash script that allows identifying and/or exploiting the Log4Shell vulnerability remotely. This tool performs various tests using LDAP payloads and X-Api-Version, User-Agent, and X-Forwarded-For headers. Always use this script with prior authorization from the owner of...

redisHack

redisHack Redis unauthorized access detection and CVE-2022-0543 exploitation two-in-one script Usage:...

vcenter-log4j

VMware vCenter log4j workaround Script to workaround VMware vCenter log4j vulnerability CVE-2021-44228, as per the VMware KB article. 2021-12-13 02:09 UTC - Added Secure Token & Identity Management services 2021-12-13 12:46 UTC - Added PSC Client for 6.5 - see below VMware have released a python...

CVE-2022-42889-RCE

CVE-2022-42889-PoC Proof of Concept for CVE-2022-42889 remote code execution exploit Text4Shell Vulnerability. Give a ⭐ for support ❤️ About this vulnerability CVE-2022-42889 is a new critical vulnerability similar to Spring4Shell and Log4Shell. Its a RCE Remote Code Execution vulnerability with...

XSSTracer

XSSTracer v1.3 by 1N3 @CrowdShield https://crowdshield.com XSSTracer is a small python script that checks remote web servers for Clickjacking, Cross-Frame Scripting, Cross-Site Tracing and Host Header Injection. root@kitploit: Usage: ./xsstracer...

tscopy

TScopy 更新于 2022-03-31 介绍 TScopy 在事件响应（IR）工作中，需要具备分析文件系统中文件的能力。有时这些文件被操作系统（OS）锁定，因为它们正在使用中，特别是事件日志和注册表配置单元，这尤其令人沮丧。TScopy 允许以管理员权限运行的用户，通过解析文件在文件系统中的原始位置并绕过操作系统来复制锁定文件。 还有其他执行类似功能的工具，例如我们曾使用过的 RawCopy，它是本工具的基础。然而，RawCopy 存在一些缺点，促使我们开发了 TScopy，包括性能、体积以及将其集成到其他工具中的能力。 这篇博客旨在介绍...

CVE-2023-26360

CVE-2023-26360 Usage Usage: python3 script.py endpoint proxyurl Reading Files...

CVE-2020-7961

CVE-2020-7961 Exploit script for CVE-2020-7961 Unauthenticated Remote code execution via JSONWS References & inspirations original blogpost : https://codewhitesec.blogspot.com/2020/03/liferay-portal-json-vulns.html synacktiv blogpost :...

r00kie-kr00kie

r00kie-kr00kie Disclaimer This is a PoC exploit for the CVE-2019-15126 kr00k vulnerability. This project is intended for educational purposes only and cannot be used for law violation or personal gain. The author of this project is not responsible for any possible harm caused by the materials...

powerglot

Powerglot Powerglot encodes several kind of scripts using polyglots, for example, offensive powershell scripts. It is not needed a loader to run the payload. In red-team exercises or offensive tasks, masking of payloads is usually done by using steganography, especially to avoid network level...

Airopy

Airopy - Wireless Packet Capture Get clients and access points. With Alfa cards this script works correctly. Dependencies To run this script first install requirements as follows: root@kitploit: sudo pip3 install -r requirements.txt How to use In the examples I don't add 'sudo', but to execute th...

sandcastle

Inspired by a conversation with Instacart's @nickelser on HackerOne, I've optimised and published Sandcastle – a Python script for AWS S3 bucket enumeration, formerly known as bucketCrawler. The script takes a target's name as the stem argument e.g. shopify and iterates through a file of bucket...

dr_checker

DR.CHECKER : A Soundy Vulnerability Detection Tool for Linux Kernel Drivers This repo contains all the sources, including setup scripts. Now with an Amazing UI to view the warnings along with corresponding source files. Tested on Ubuntu = 14.04.5 LTS Announcements 16 Feb 2018 : DR.CHECKER has bee...

CVE-2019-16278-Nostromo_1.9.6-RCE

CVE-2019-16278 - Nostromo 1.9.6 RCE Python script to exploit RCE in Nostromo nhttpd = 1.9.6. Help root@kitploit: usage: CVE-2019-16278.py -h -t TARGET -p PORT -c COMMAND -b BYTES Exploit for CVE-2019-16278 - Nostromo 1.9.6 RCE optional arguments: -h, --help show this help message and exit -t...

WordListGen

WordListGen Super Simple Python Word List Generator for Password Cracking Hashcat! I know what your are thinking. Why create another word list generator? Well, I needed something very simple I could modify on the fly to get the exact character generators for the task at hand. This script is fully...

WFH

Windows Feature Hunter WFH Windows Feature Hunter WFH is a proof of concept python script that uses Frida, a dynamic instrumentation toolkit, to assist in potentially identifying common “vulnerabilities” or “features” within Windows executables. WFH currently has the capability to automatically...