unlicense

Unlicense A Python 3 tool to dynamically unpack executables protected with Themida/WinLicense 2.x and 3.x. Warning: This tool will execute the target executable. Make sure to use this tool in a VM if you're unsure about what the target executable does. Note: You need to use a 32-bit Python...

Robber

Robber — Escáner de secuestro de DLL Herramienta gratuita y de código abierto para encontrar oportunidades de secuestro de DLL en ejecutables de Windows. Sin dependencias de terceros. Lo que hace Windows carga DLLs buscando en un conjunto fijo de directorios en orden: primero el directorio del...

rainbowcrackalack

Rainbow Crackalack Autor: Joe Testa @therealjoetesta Acerca de Este proyecto produce código de código abierto para generar tablas arcoíris y usarlas para buscar hashes de contraseñas. Aunque la versión actual solo soporta NTLM, las futuras versiones podrían soportar MD5, SHA-1, SHA-256 y...

rainbowcrackalack

Rainbow Crackalack Author: Joe Testa @therealjoetesta About This project produces open-source code to generate rainbow tables as well as use them to look up password hashes. While the current release only supports NTLM, future releases may support MD5, SHA-1, SHA-256, and possibly more. Both Linu...

ksentinel

ksentinel - Kernel Syscalls Integrity Monitor Overview ksentinel monitors critical kernel functions and the syscall table for unauthorized modifications. It detects common syscalls that are targeted by most rootkits including ftrace hooks, kprobes, and syscall table hijacking. Features Function...

Dagon

Dagon - Advanced Hash Manipulation Named after the prince of Hell, Dagon day-gone is an advanced hash cracking and manipulation system, capable of bruteforcing multiple hash types, creating bruteforce dictionaries, automatic hashing algorithm verification, random salt generation from Unicode to...

ExportDumper

ExportDumper A small tool I made to dump the export table of PE files. The primary use case was intended for use within DLL proxying. Usage root@kitploit: .\ExportDump dllpath e.g. root@kitploit: .\ExportDump C:\Windows\System32\version.dll Dumping all 17 exported functions from...

CVE-2020-11890

Made by HK CVE-2020-11890: Improper input validations in the usergroup table class could lead to a broken ACL configuration to RCE Link https://developer.joomla.org/security-centre/810-20200402-core-missing-checks-for-the-root-usergroup-in-usergroup-table.html PoC Affected version: Joomla core...

hashcatch

hashcatch Hashcatch deauthenticates clients connected to all nearby WiFi networks and tries to capture the handshakes. It can be used in any linux device including Raspberry Pi and Nethunter devices so that you can capture handshakes while walking your dog Written by @SivaneshAshok PoC of hashcat...

CVE-2023-21716

CVE-2023-21716 Microsoft Word RTF Font Table Heap Corruption A vulnerability within Microsoft Office's wwlib allows attackers to achieve remote code execution with the privileges of the victim that opens a malicious RTF document. The attacker could deliver this file as an email attachment or othe...

dcipher-cli

dcipher-cli Descifra hashes usando servicios de ataque de arcoíris y tablas de búsqueda en línea, directamente desde tu terminal. Instalación root@kitploit: ❯❯❯ npm install -g dcipher-cli Uso root@kitploit: ❯❯❯ dcipher --help Crack hashes using online rainbow & lookup table attack services, right...

HookDump

HookDump Volcado de hooks de funciones EDR Consulte la publicación del blog de Zeroperil para más información https://zeroperil.co.uk/hookdump/ Compilación del código fuente Para compilarlo necesitará Visual Studio 2019 la edición Community es suficiente y CMake. El archivo por lotes Configure.ba...

CVE-nu11secur1ty

CVE-nu11secur1ty Tabla de enlaces de descripción de análisis:...

hashcobra

hashcobra hashcobra Hash Cracking tool. Description This tool uses a new method to crack hashes. With the help of rainbow tables concept this tool generates rainbow tables from wordlists to heavily optimize the cracking process. Usage root@kitploit: $ ./hashcobra -H --== hashcobra by sepehrdad ==...

CVE-2024-43918

Wordpress WBW Product Table Pro = 1.9.4 - Ejecución SQL Arbitraria no Autenticada a Ejecución Remota de Código CVE-2024-43918 El plugin WBW Product Table Pro para WordPress es vulnerable a la ejecución SQL arbitraria no autorizada debido a la falta de verificación de capacidades en una función en...

solarflare

solarflare Credential Dumping Tool for SolarWinds Orion Blog post: https://malicious.link/post/2020/solarflare-release-password-dumper-for-solarwinds-orion/ Credit to @asolino, @gentilkiwi, and @skelsec for helping me figuring out DPAPI. root@kitploit: ============================================...

vmprotect-research

VMP Devirtualizer - Production Release Generalized VMProtect devirtualizer supporting versions 1.x, 2.x, and 3.x. Standalone CLI tool + Ghidra plugin. Status: ✅ Production Ready | Validation: 22/22 samples 100% | Scope: VMP ≤3.6 3.7+ requires reverse engineering Features Multi-Version Support: VM...

CVE-2024-1071-Docker

CVE-2024-1071 with Docker 🎯 Want to practice with the new WordPress CVE ? Follow the instructions Build the lab 1. Install Docker : https://docs.docker.com/get-docker/ 2. Clone the project : git clone https://github.com/Trackflaw/CVE-2024-1071-Docker.git. 3. Go to the project : cd...

HintInject

HintInject HintInject es un insertador y cargador de shellcode que desarrollé mientras jugaba con las estructuras del archivo PE y la Tabla de Directorios de Importación. Toma un archivo de shellcode sin procesar y coloca el shellcode en fragmentos dentro de las entradas de la Tabla de...

snowpick

snowpick is a ServiceNow exposure scanner that finds misconfigured widget ACLs, REST API access controls, and unauthenticated data exposure. ServiceNow exposes data through two common public surfaces: Service Portal widgets and the Table REST API. When access controls on either surface are...