boko

boko Application Hijack Scanner for macOS boko.py is an application scanner for macOS that searches for and identifies potential dylib hijacking and weak dylib vulnerabilities for application executables, as well as scripts an application may use that have the potential to be backdoored. The tool...

PowershellKerberos

PowershellKerberos Some scripts to abuse kerberos using Powershell. Check how to use video Thanks to @BRIPWN YouTube Injector.ps1 Small tool for injecting kerberos tickets. Supports two work modes: U can read ticket from kirbi file 1 mode U can read ticket from b64 2 mode Examples: root@kitploit:...

nmap-nse-vulnerability-scripts

Scripts de escaneo de vulnerabilidades de NMAP Una colección de scripts de escaneo de vulnerabilidades de nmap para ayudar a la detección y remediación asequibles. Antecedentes Estos scripts utilizan el Nmap Scripting Engine NSE para implementar comprobaciones de diversas vulnerabilidades...

inteno-exploits

Pruebas de concepto y exploits para dispositivos IOPSYS Esta es una colección de scripts que abusan de diversas vulnerabilidades en dispositivos que ejecutan IOPSYS de Inteno. Más detalles sobre cada vulnerabilidad se pueden encontrar en mi blog. Estos scripts solo se han probado en Linux, pero...

Bountystrike-sh

Bountystrike-sh Bountystrike-sh is a collection of bash and python scripts that installs common bug bounty tools, performs recon scans and continous asset discovery. Bountystrike-sh is opensource but belongs to the BountyStrike project, self-hosted bug bounty management system. root@kitploit: | \...

vscan

vscan vulnerability scanner tool is using nmap and nse scripts to find vulnerabilities This tool puts an additional value into vulnerability scanning with nmap. It uses NSE scripts which can add flexibility in terms of vulnerability detection and exploitation. Below there are some of the features...

DedSec

DedSec Project Official Website DedSec Project Cross-platform build note: This copy includes support for Ubuntu, Kali Linux, Linux Mint, and Termux. Run bash Setup.sh, then use ./Run.sh. See CROSSPLATFORM.md for platform-specific behavior and limitations. Για να μεταβείτε στην πλήρη Ελληνική...

aws_pwn

AWS pwn Resumen Esta es una colección de guiones horriblemente escritos para realizar varias tareas relacionadas con pruebas de penetración en AWS. No te entristezcas si no funciona para ti. Puede que AWS haya cambiado desde que se escribió una herramienta en particular o que el código sea una...

r2frida

r2frida Radare2 and Frida better together Description Self-contained plugin for radare2 that ships frida and allows to instrument local or remote processes using r2 commands instead but not limited to Frida scripts. The radare project provides a complete toolchain for reverse engineering, it's...

Urgent11-Suricata-LUA-scripts

Urgent11-Suricata-LUA-scripts Scripts LUA de Suricata para detectar CVE-2019-12255, CVE-2019-12256, CVE-2019-12258 y CVE-2019-12260 CVE-2019-12255 El script comprueba la CVE-2019-12255; el paquete que se comprueba debe tener los flags PSH, ACK y URG establecidos, y un tamaño de payload superior a...

ghostrings

Ghostrings Scripts for recovering string definitions in Go binaries with P-Code analysis. Tested with x86, x86-64, ARM, and ARM64. Scripts Golang These can be found in the Golang category in the Script Manager. GoDynamicStrings.java Analyzes P-Code to find string structures created on the stack...

community-scripts

Community Scripts A collection of ZAP scripts provided by the community, i.e. you lot : The easiest way to use this repo in ZAP is to install the 'Community Scripts' add-on from the ZAP Marketplace. !CAUTION While we do review all scripts to ensure they don't do anything obviously malicious, you...

AlphaGolang

AlphaGolang by Juan Andres Guerrero-Saade JAG-S @ SentinelLabs Description: AlphaGolang is a collection of IDAPython scripts to help malware reverse engineers master Go binaries. The idea is to break the scripts into concrete steps, thus avoiding brittle monolithic scripts, and mimicking the...

hedgehog-tools

hedgehog-tools Repo of smaller scripts for malware analysis, deobfuscation and configuration extraction. See README.md files within the folders for more details. Overview of generic tools...

JavaUnserializeExploits

JavaUnserializeExploits Scripts de Python y peticiones HTTP referenciados en la publicación del blog What Do WebLogic, WebSphere, JBoss, Jenkins, OpenNMS, and Your Application Have in Common? This Vulnerability at http://foxglovesecurity.com...

python-pentesting

Python for Pentesters Overview Getting started with Python for pentesting and red team engagements is fairly easy! This repo is just a small collection of random scripts to help get you started. Brought to you by: Examples: by Mike Felch @ustayready and Joff Thyer @joffthyer This code is provided...

Setup IPsec VPN

English | 简体中文 | 繁體中文 | 日本語 | Русский IPsec VPN Server Auto Setup Scripts Set up your own IPsec VPN server in just a few minutes, with IPsec/L2TP, Cisco IPsec and IKEv2. An IPsec VPN encrypts your network traffic, so that nobody between you and the VPN server can eavesdrop on your data as it...

kali-vm

Kali-VM Build-Script Kali Linux Virtual Machine VM image builder, viadebos with fakemachine and KVM. These are the same build-scripts that the Kali team uses to generate the official Kali Linux VM images, found on kali.org/get-kali/. For more information, please see: kali.org/docs/virtualization/...

boofuzz

.. image:: https://github.com/jtpereyda/boofuzz/raw/master/artwork/boo-logo-dark.svg :width: 60% :alt: boofuzz logo boofuzz: Network Protocol Fuzzing for Humans .. image:: https://github.com/jtpereyda/boofuzz/actions/workflows/test.yml/badge.svg?branch=master :target:...

LSMS

Linux Security and Monitoring Scripts These are a collection of security and monitoring scripts you can use to monitor your Linux installation for security-related events or for an investigation. Each script works on its own and is independent of other scripts. The scripts can be set up to either...