hakoriginfinder

hakoriginfinder Tool for discovering the origin host behind a reverse proxy. Useful for bypassing WAFs and other reverse proxies. How does it work? This tool will first make a HTTP request to the hostname/URL that you provide and store the response, then it will make a request to every IP address...

httpx

...

sshprank

Description A fast SSH mass-scanner, login cracker, banner grabber and password auth checker tool using the python-masscan and shodan module. Usage root@kitploit: hacker@blackarch $ sshprank -H / / / / / / / / / / / / /// | / / / // / / / // / / / / , opts | mode options -h - single host, cidr,...

waf-bypass

WAF Bypass Tool WAF Bypass Tool is an open source tool to analyze the security of any WAF for False Positives and False Negatives using predefined and customizable payloads. Check your WAF before an attacker does. WAF Bypass Tool is developed by Nemesida WAF team with the participation of...

jadx

JADX jadx - Dex to Java decompiler Command line and GUI tools for producing Java source code from Android Dex and Apk files !WARNING Please note that in most cases jadx can't decompile all 100% of the code, so errors will occur. Check Troubleshooting guide for workarounds. Main features: decompil...

Q-DDOS-GUI

Q-DDOS-GUI Cで書かれたDDOSツール TCP/HTTP/HTTPS対応 Cで書かれたddosツールです。TCP、HTTP、HTTPSプロトコルに対する攻撃を行います。秒数の範囲内でランダムなTIMEOUTを選択するか、固定のTimeoutを指定してDDOS攻撃を実行します。使用するスレッド数を選択できます。 すべてのスレッドとプロセスを停止するには、「stop all」チェックボックスをオンにしてください。 いかなる誤用についても責任を負いません。...

gdb-dashboard

GDB dashboard GDB dashboard is a standalone .gdbinit file written using the Python API that enables a modular interface showing relevant information about the program being debugged. Its main goal is to reduce the number of GDB commands needed to inspect the status of current program thus allowin...

s3enum

s3enum s3enum is a fast and stealthy Amazon S3 bucket enumeration tool. It leverages DNS instead of HTTP, which means that requests are not logged in S3 server access logs. It was originally built back in 2016 to target GitHub. Installation root@kitploit: go install github.com/koenrh/s3enum@lates...

http-mcp-bridge

HTTP MCP Bridge このプロジェクトは、mcp Pythonライブラリ（GitHub）を使用して、HTTP/1.1リクエストとリモートMCPサーバー間のブリッジとして機能するHTTPサーバーを実装しています。 この取り組みの主な目的は、リモート転送メカニズム（HTTP+SSEまたはStreamable HTTP）を使用して、HTTPセキュリティツールでリモートMCPサーバーをテストできるようにすることです。 重要な注意事項！...

CWFF

CWFF - 퍼징을 위한 맞춤형 워드리스트 CWFF는 동시성을 사용하여 가능한 최고 속도로 특별한 고품질 퍼징/콘텐츠 발견 워드리스트를 생성하는 도구이며, @tomnomnom의 Who, What, Where, When, Wordlist NahamCon2020에서 크게 영감을 받았습니다. 사용법 root@kitploit: CWFF -h --threads --github --subdomains --recursive --js-libraries --connected-websites --juicy-files...

dcrawl

dcrawl dcrawl is a simple, but smart, multi-threaded web crawler for randomly gathering huge lists of unique domain names. How it works? dcrawl takes one site URL as input and detects all links in the site's body. Each found link is put into the queue. Successively, each queued link is crawled in...

Fiber

설명 파이버Fiber는 Windows에 내장된 우선순위 기반 스케줄링 메커니즘에 의존하지 않고 애플리케이션에서 수동으로 스케줄링해야 하는 실행 단위입니다. 파이버는 종종 경량 스레드라고 불립니다. 파이버가 무엇인지, 어떻게 작동하는지에 대한 자세한 내용은 공식 문서를 참조하세요. 파이버를 사용하면 단일 스레드 내에서 여러 실행 흐름을 가질 수 있으며, 각 실행 흐름은 자체 레지스터 상태와 스택을 갖습니다. 반면에 파이버는 커널에 보이지 않으므로 , 새 스레드를 생성하는 것보다 메모리 내 코드를 실행하는 더 은밀하고그리고 저렴한...

f5_scanner

f5scanner F5 대량 스캐너 및 CVE-2020-5902 체커 이 도구는 30개의 스레드가 하드코딩된 대량 스캐너입니다. 주의하여 사용하세요. 설정 방법 root@kitploit: $ python3 -m venv venv $ source venv/bin/activate $ python3 -m pip install -r requirements.txt 실행 방법 단일 IP python3 f5scanner.py --ip 192.168.1.1 CIDR python3 f5scanner.py --cidr 192.168.0.0/24...

CallStackMasker

CallStackMasker 该仓库演示了一种使用计时器动态伪造调用栈的 PoC 技术。在我们的植入体进入睡眠之前，我们可以排队计时器，用伪造的调用栈覆盖其调用栈，然后在恢复执行之前还原原始调用栈。因此，就像我们可以在睡眠期间屏蔽属于植入体的内存一样，我们也可以屏蔽主线程的调用栈。 有关完整的技术详解，请参阅随附的博客文章：https://www.cobaltstrike.com/blog/behind-the-mask-spoofing-call-stacks-dynamically-with-timers/。 默认情况下，该 PoC 会模仿取自 spoolsv.exe 的静态调用栈...

Hunt-Weird-ImageLoads

Hunt-Weird-ImageLoads このプロジェクトは、ImageLoad イベントによって引き起こされるさまざまな IOC を試すために作成されました。 ETW を利用して ImageLoad イベントを監視し、コールスタックを辿って、以下のような可能性のある IOC を特定します: コールスタック内の RWX ページ コールスタック内のストンプされたモジュール モジュールプロキシ（ ntdll - kernel32!LoadLibrary ）。説明は こちら または こちら ライブラリをロードする専用の新しいスレッド このリポジトリには、モジュールプロキシ と 専用スレッド...

domain

Info Recon-ng and Alt-DNS are awesome. This script combines the power of these tools with the ability to run multiple domains within the same session. TLDR; I just want to do my subdomain discovery via ONE command and be done with it. Only 1 module needs an api key /api/googlesite find instructio...

subjack

subjack DNS Takeover Scanner Subjack is a DNS takeover scanner written in Go designed to scan a list of domains concurrently and identify ones that are able to be hijacked. With Go's speed and efficiency, this tool really stands out when it comes to mass-testing. Always double check the results...

httpdoom

HttpDoom - HTTP Attack surface analyser Validate large HTTP-based attack surfaces in a very fast and reliable way. Inspired by Aquatone. Installing You must have dotnet SDK at version 6+: root@kitploit: $ dotnet pack -c Release -o nupkg $ dotnet tool install --global --add-source .\nupkg...

gau

getallurls gau getallurls gau fetches known URLs from AlienVault's Open Threat Exchange, the Wayback Machine, Common Crawl, and URLScan for any given domain. Inspired by Tomnomnom's waybackurls. Resources Usage Installation ohmyzsh note Usage: Examples: root@kitploit: $ printf example.com | gau $...

cansina

Cansina Cansina is a Web Content Discovery Application. It is well known Web applications don't publish all their resources or public links, so the only way to discover these resources is requesting for them and check the response. Cansina duty is to help you making requests and filtering and...