haaukins

Haaukins Haaukins is a highly accessible and automated virtualization platform for security education, it has three main components Docker, Virtualbox and Golang, the communication and orchestration between the components managed using Go programming language. The main reason of having Go...

crucible

root@kitploit: ██████╗██████╗ ██╗ ██╗ ██████╗██╗██████╗ ██╗ ███████╗ ██╔════╝██╔══██╗██║ ██║██╔════╝██║██╔══██╗██║ ██╔════╝ ██║ ██████╔╝██║ ██║██║ ██║██████╔╝██║ █████╗ ██║ ██╔══██╗██║ ██║██║ ██║██╔══██╗██║ ██╔══╝ ╚██████╗██║ ██║╚██████╔╝╚██████╗██║██████╔╝███████╗███████╗ ╚═════╝╚═╝ ╚═╝ ╚═════╝...

SourceLeakHacker

Description SourceLeakHacker is a muilt-threads web directories scanner. Installation root@kitploit: pip install -r requirements.txt Usage root@kitploit: usage: SourceLeakHacker.py options optional arguments: -h, --help show this help message and exit --url URL url to scan, eg: 'http://127.0.0.1/...

PayloadsAllTheThings

Payloads All The Things A list of useful payloads and bypasses for Web Application Security. Feel free to improve with your payloads and techniques! You can also contribute with a 🍻 IRL, or using the sponsor button. An alternative display version is available at PayloadsAllTheThingsWeb. 📖...

akto

...

CVE-2018-14665

CVE-2018-14665 Here you can find my analisys and PoC for most used Linux distribution. For now i started from Redhat, this is the link for the official RHSA RHSA-2018:3410...

CVE-2024-29269

Telesquare TLR-2005KSHRCE CVE-2024-29269 Batch scan/exploit 1.このツールはセキュリティテストのみに使用されており、違法な攻撃については責任を負いません. 2.The tool is only used for security testing, and I am not responsible for any illegal attacks. 3.工具仅用于安全测试，任何非法攻击本人概不负责. Help root@kitploit: / /\ //\ | \ / \ | || | | \ / \ \ / / / \ / /...

BurpSuiteJSBeautifier

Burp Suite JSBeautifier Most of the websites compress their resources such as JS files in order to increase the loading speed. However, security testing and debugging a compressed resource is not an easy task. This is a Burp Suite open source extension which makes it possible to beautify most of...

Damn-Vulnerable-Drone

Damn Vulnerable Drone The Damn Vulnerable Drone is an intentionally vulnerable drone hacking simulator based on the popular ArduPilot/MAVLink architecture, providing a realistic environment for hands-on drone hacking. Table of Contents About the Damn Vulnerable Drone What is the Damn Vulnerable...

LuLu

LuLu 简体中文 | 正體中文 LuLu is the free open-source macOS firewall: Documentation: Full details and usage instructions can be found here. To Support: ❤ Love this product and want to support it? Please check out my patreon page...

rita

RITA Real Intelligence Threat Analytics If you get value out of RITA and would like to go a step further with hunting automation, futuristic visualizations, and data enrichment, then take a look at AC-Hunter. Brought to you by Active Countermeasures. Sponsored by BHIS. RITA is an open source...

brakeman

Brakeman Brakeman is a static analysis tool which checks Ruby on Rails applications for security vulnerabilities. Installation Using RubyGems: root@kitploit: gem install brakeman Using Bundler: root@kitploit: group :development do gem 'brakeman', require: false end Using Docker: root@kitploit:...

pmd

PMD - source code analyzer PMD is an extensible multilanguage static code analyzer. It finds common programming flaws like unused variables, empty catch blocks, unnecessary object creation, and so forth. It's mainly concerned with Java and Apex , but supports 16 other languages. It comes with 400...

traefik-CVE-2024-45410-poc

Shadow Corp CTF Challenge Welcome to the Shadow Corp Capture the Flag CTF challenge! This challenge will test your skills in identifying and exploiting vulnerabilities related to security headers and HTTP proxy behavior. Your mission is to bypass protections and uncover secrets hidden within the...

PentestGPT

PentestGPT AI-Powered Autonomous Penetration Testing Agent Published at USENIX Security 2024 Official Website: pentestgpt.com » Research Paper · ·...

sharingan

Sharingan Sharingan is a recon multitool for offensive security / bug bounty WIP, will I ever finish? Who knows Cloning for development Outside of your gopath git clone https://github.com/leobeosab/sharingan Installing go get github.com/leobeosab/sharingan/cmd/sharingancli Dependencies NMap Go...

laurel

Linux Audit – Usable, Robust, Easy Logging LAUREL is an event post-processing plugin for auditd8 that generates useful, enriched JSON-based audit logs suitable for modern security monitoring setups. Documentation corresponding to the latest stable release can be found here. Why? TLDR: Instead of...

Cortex-XDR-Config-Extractor

Cortex XDR Config Extractor ⚠️ For more information, please visit https://laokoon-security.com/cortex-xdr-config-exctractor/ currently in German only This tool is meant to be used during Red Team Assessments and to audit the XDR Settings. With this tool its possible to parse the Database Lock File...

CVE-2019-0708

CVE-2019-0708...

Gixy-Next

Gixy-Next: NGINX Configuration Security Scanner for Security Audits Overview Gixy-Next Gixy is an open-source NGINX configuration security scanner and hardening tool that statically analyzes your nginx.conf to detect security misconfigurations, hardening gaps, and common performance pitfalls befo...