FFM

Freedom Fighting Mode FFM FFM is a hacking harness that you can use during the post-exploitation phase of a red-teaming engagement. The idea of the tool was derived from a 2007 conference from @thegrugq. It was presented at SSTIC 2018 video and the accompanying slide deck is available at this url...

trufflehog

TruffleHog Find leaked credentials. 🔎 Now Scanning ...and more To learn more about TruffleHog and its features and capabilities, visit our product page. 🌐 TruffleHog Enterprise Are you interested in continuously monitoring Git, Jira, Slack, Confluence, Microsoft Teams, Sharepoint and more for...

OnionHop

OnionHop V3 OnionHop V3 is a modern, cross-platform desktop app Windows, macOS and Linux that routes your traffic through Tor. It can run Tor as a local SOCKS proxy or as a system-wide tunnel, automatically pick a working connection strategy for your network with Smart Connect , scan and apply...

mwemu

MWEmu Official documentation mwemu.github.io What is this?...

binwalk

Binwalk v3 This is an updated version of the Binwalk firmware analysis tool, re-written in Rust for speed and accuracy. What does it do? Binwalk can identify, and optionally extract, files and data that have been embedded inside of other files. While its primary focus is firmware analysis, it...

GetBlocked

GetBlocked! Cleaner pages. Fewer trackers. Local-only. GetBlocked! is a lightweight, local-only Chrome extension that helps reduce common third-party website tracking by blocking known tracker requests, cleaning tracking links, and explaining tracking attempts. It is built as a small, inspectable...

Yonyou YonBIP - Path Traversal

Yonyou YonBIP v3 and before contains a path traversal caused by improper validation in the LoginWithV8 interface of the series data application service system, letting unauthorized attackers access sensitive information. id: CVE-2025-66744 info: name: Yonyou YonBIP - Path Traversal author:...

vapi

vAPI vAPI es una Interfaz Programada Adversamente Vulnerable que es una API auto-alojable que simula los escenarios del OWASP API Top 10 en forma de ejercicios. Requisitos PHP MySQL PostMan MITM Proxy Instalación Docker root@kitploit: docker-compose up -d Instalación Manual Copiando el Código...

ModSecurity

Libmodsecurity es uno de los componentes del proyecto ModSecurity v3. El código base de la biblioteca sirve como interfaz para los conectores de ModSecurity, que reciben tráfico web y aplican el procesamiento tradicional de ModSecurity. En general, proporciona la capacidad de cargar/interpretar...

reverse-SynthID

Reverse-Engineering SynthID Discovering, detecting, and surgically removing Google's AI watermark through spectral analysis Visit us on PitchHut This fork adds a drag and drop desktop app for the V3 bypass, no command line needed after setup. See gui/README.md for setup and usage. What the...

ADB-Toolkit

ADB-Toolkit V2.3 Tool for testing your Android device and HaHaHack someone Android Phone Don't use with wrong intentions 🤘🤘 ADB-Toolkit is a BASH Script with 28 options and an METASPLOIT Section which has 6 options which is made to do easy penetration testing in Android Device. You can do preety...

sjcam

Lelouch: Investigación de Firmware SJCAM SJ4000 y Firmware Personalizado Trocar para Português Brasil Notas de ingeniería inversa, herramientas de firmware, código de prueba de concepto y una interfaz de firmware personalizada para la versión Allwinner V3 de la SJCAM SJ4000 Air. Artículo de...

liffy

Herramienta avanzada de explotación LFI...

jok3r

.. raw:: html Jok3r v3 beta...

smbee

smbee Comprueba si el sistema es vulnerable a CVE-2020-0796 SMB v3 Script escrito en golang, inestable Uso ./smbee ip...

vt-py

vt-py This is the official Python client library for VirusTotal. With this library you can interact with the VirusTotal REST API v3 and automate your workflow quickly and efficiently. Things you can do with vt-py Scan files and URLs Get information about files, URLs, domains, etc Perform VirusTot...

scallion

Actualización del proyecto 2020 Scallion fue un proyecto hobby para aprender OpenCL y RSA. Actualmente no mantenemos scallion. Se ha deteriorado de dos maneras importantes: 1. Tor ha migrado a direcciones Onion v3, las cuales scallion no soporta. Las direcciones v2 antiguas dejarán de funcionar e...

hostintel

hostintel This tool is used to collect various intelligence sources for hosts. Hostintel is written in a modular fashion so new intelligence sources can be easily added. Hosts are identified by FQDN host name, Domain, or IP address. This tool only supports IPv4 at the moment. The output is in CSV...

ermir

Ermir Ermir is an Evil/Rogue RMI Registry, it exploits unsecure deserialization on any Java code calling standard RMI methods on it list/lookup/bind/rebind/unbind. Requirements Ruby v3 or newer. Installation Install Ermir from rubygems.org: root@kitploit: $ gem install ermir or clone the repo and...

faraday-client

Esto está obsoleto, por favor usa Faraday-Cli en su lugar!!! v1.1.0 fue una versión de transición, actualizando únicamente el acceso a Faraday mediante la API v3 v2 también quedará obsoleta. ================== Cliente GTK de Faraday .. image:: https://img.shields.io/pypi/v/faradayclient.svg...