metta

Metta Metta es una herramienta de preparación para la seguridad de la información. Este proyecto utiliza Redis/Celery, Python y Vagrant con VirtualBox para realizar simulación adversarial. Esto le permite probar principalmente su instrumentación basada en el host, pero también puede permitirle...

Creds

Creds 用于渗透测试与取证的一些实用脚本与可执行文件 大多数脚本/可执行文件针对 Windows / 域环境。 法律免责声明： 未经事先双方同意，使用这些脚本/可执行文件攻击目标属违法行为。遵守所有适用的地方、州和联邦法律是最终用户的责任。开发者不承担任何责任，也不对因使用本程序造成的任何滥用或损害负责。仅限教育目的使用。...

CVE-2019-19781

CVE-2019-19781 Automated script for Citrix ADC scanner CVE-2019-19781 using hosts retrieved from Shodan API. You must have a Shodan account to use this script. Click here if you don't have Shodan account. Installation 1. Install dependencies. root@kitploit: CentOS & Fedora yum install git python3...

pythem

pythem - Penetration Testing Framework pythem is a multi-purpose pentest framework written in Python. It has been developed to be used by security researchers and security professionals. The tool intended to be used only for acts within the law. I am not liable for any undue and unlawful act...

pythem

pythem - 渗透测试框架 pythem 是一个多用途渗透测试框架，由 Python 编写，专为安全研究人员和安全专业人士设计。该工具仅限于合法行为使用。对于因使用本工具而导致的任何不当或违法行为，本人概不负责。更多信息请阅读许可协议。 安装 链接： 创建桌面快捷方式 Linux 安装 依赖安装 注意： 仅在基于 Debian 的发行版上测试过，如果你使用 Redhat 或 SUSE 类系统，可以尝试使用 yum 或 zypper 安装依赖。 root@kitploit: sudo apt-get update sudo apt-get install -y...

commix

Commix （command injection exploiter 的缩写）是一款开源渗透测试工具，由 Anastasios Stasinopoulos （@ancst ）编写，用于自动化检测和利用 命令注入 漏洞。 您可以访问截图合集，其中展示了wiki上的一些功能。 安装 您可以通过克隆官方Git仓库在任何平台上下载commix： root@kitploit: $ git clone https://github.com/commixproject/commix.git commix 或者，您可以下载最新的tarball或zipball。 注意： 运行commix需要 Pytho...

faraday_addon

About Faraday Addon is a simple addon for automate reporting vulnerabilities through the browsed to your own Faraday instance. Faraday Addon intercepts every single request from the browser, adding a functionality for accessing each one of them treating them as a vulnerability. In this way, a...

mass-bruter

Mass Bruter Mass bruteforce network protocols Info Simple POC to quickly mass bruteforce common services in a large scale of network. It will check for default credentials on ftp, ssh, mysql, mssql...etc. This was made for authorized penetration testing purpose only. How it works 1. Use...

MalQR.github.io

MalQR About MalQR is a collection of malicious QR codes and barcodes you can use to test the security of your scanners. It gives you the ability to conduct such tests with easiness : you just need to have a smartphone, a tablet or a laptop with an internet connection and browse MalQR.shielder.com...

AutoBrowser

AutoBrowser 4.0 AutoBrowser is a tool written in python for penetration testers. The purpose of this tool is to create reportJson file and screenshots of http/s based ports on the network. you can choose between analyze Nmap reportXML file -oX or scan with Nmap, then the tool automaticly Check th...

polyshell

PolyShell: a Bash/Batch/PowerShell polyglot What It Is PolyShell is a script that's simultaneously valid in Bash, Windows Batch, and PowerShell i.e. a polyglot. This makes PolyShell a useful template for penetration testing as it can be executed on most systems without the need for target-specifi...

Clickjacking-Tester

Clickjacking Tester A python script designed to check if the website is vulnerable of clickjacking and creates a poc. Screenshot Usage root@kitploit: python3 clickjackingtester.py Example Input root@kitploit: python clickjackingtester.py sites.txt sites.txt root@kitploit: www.google.com...

Damn-Vulnerable-GraphQL-Application

Damn Vulnerable GraphQL Application Damn Vulnerable GraphQL Application is an intentionally vulnerable implementation of Facebook's GraphQL technology, to learn and practice GraphQL Security. Table of Contents About DVGA Operation Modes Scenarios Prerequisites Installation Installation - Docker...

blackarch

Table of Contents Description Overview Download and Installation Key Features Installation Instruction Usage Get Involved Contributing Contact License Disclaimer Conclusion Description BlackArch Linux is an Arch Linux–based penetration testing distribution for penetration testers and security...

malware_training_vol1

malwaretrainingvol1 Materials for Windows Malware Analysis training volume 1 🚧 WARNING: work in progress! More material will be added gradually. Content The goal of this training it to build understanding of various common techniques used by malware. It contains elements of programming as well as...

badKarma

badKarma is an open source GUI based network reconnaissance toolkit which aims to assist penetration testers during network infrastructure assessments. Screenshots not updated Setup install Kali linux dependecies: root@kitploit: apt install python3-pip python3-gi phantomjs mitmproxy ffmpeg...

fridump

Fridump Fridump v0.1 is an open source memory dumping tool, primarily aimed to penetration testers and developers. Fridump is using the Frida framework to dump accessible memory addresses from any platform supported. It can be used from a Windows, Linux or Mac OS X system to dump the memory of an...

CANToolz

CANToolz a.k.a. YACHT Yet Another Car Hacking Tool CANToolz is a framework for analysing CAN networks and devices. It provides multiple modules that can be chained using CANToolz's pipe system and used by security researchers, automotive/OEM security testers in black-box analysis. CANToolz can be...

raider

Quick links Website. OWASP page. Documentation. Installation. FAQ. Getting started. Architecture. Discussions. Issues. Twitter. Fediverse. What is Raider OWASP Raider was developed with the goal to improve web authentication testing. By now it has evolved and can be used for all kinds of stateful...

PeekABoo

PeekABoo PeekABoo tool can be used during internal penetration testing when a user needs to enable Remote Desktop on the targeted machine. It uses PowerShell remoting to perform this task. The tool only works if WinRM is enabled. Since Windows Server 2012 WinRM is enabled by default on all Window...