cloudspy

CloudSpy This is a proof-of-concept web app built on top of Frida. To get started: root@kitploit: npm install node rel/server.js Then point your web browser at http://127.0.0.1:8000/...

hashview

Hashview v0.8.2 Hashview is a tool for security professionals to help organize and automate the repetitious tasks related to password cracking. It is broken into two compoents, the Hashview Server, and Hashview Agent. The Hashview Server is a web application that manages one or more agents,...

RedTeam_toolkit

RedTeam Toolkit Note: Only legal activities should be conducted with this project. Red Team Toolkit is an Open-Source Django Offensive Web-App containing useful offensive tools used in the red-teaming together for the security specialist to identify vulnerabilities. The cybersecurity open-source...

insightsnexus

Insight Nexus - OSINT Investigation Graph Analysis Tool This local web application allows users to manipulate and connect nodes on their screen to streamline OSINT investigations and information gathering. Demo Become an Alpha Tester Sign Up Here: https://insightsnexus.org/ Features Core Graph...

aurora

Aurora This is a proof-of-concept web app built on top of Frida. To get started: root@kitploit: npm install grunt server Then point your web browser at http://127.0.0.1:8010/...

kraken

Warning I have been reviewing the Kraken-Client code and since this was my first ever react app, its old, clunky and it needs major improvement the server needs some work too. In the next few weeks/months I will do my best to rewrite it in either updated React or in another framework. Please feel...

AutoPWN-Suite

AutoPWN Suite AutoPWN Suite is a project for scanning vulnerabilities and exploiting systems automatically. Features CLI Fully automatic scanning and exploitation Detect network IP range without any user input Vulnerability detection based on service versions Web app vulnerability testing LFI, XS...

LOLBITS

root@kitploit: ██╗ ██████╗ ██╗ ██████╗ ██╗████████╗███████╗ ██║ ██╔═══██╗██║ ██╔══██╗██║╚══██╔══╝██╔════╝ ██║ ██║ ██║██║ ██████╔╝██║ ██║ ███████╗ ██║ ██║ ██║██║ ██╔══██╗██║ ██║ ╚════██║ ███████╗╚██████╔╝███████╗██████╔╝██║ ██║ ███████║ ╚══════╝ ╚═════╝ ╚══════╝╚═════╝ ╚═╝ ╚═╝ ╚══════╝ Table of...

mobileAudit

Mobile Audit MobileAudit - SAST and Malware Analysis for Android Mobile APKs A Django web application to perform static analysis and detect malicious content inside Android APKs. The project extracts app metadata, scans source code for weaknesses, and aggregates results SAST findings, best...

kanha

Kanha - A web-app pentesting suite written in rust 🦀 Installation ⦾ Subcommands ⦾ Contribute Kanha is a tool that can help you perform, a variety of attacks based on the target domain . With just kanha you can do, Fuzzing, Reverse dns lookup, common http response, subdomain takeover detection and...

malwinx

Malwinx A normal flask web app to learn win32api with code snippets and references. Prerequisite You need to download the following package before starting it root@kitploit: pip install flask pip install pefile pip install requests Usage root@kitploit: $ python flaskapp.py Live Demo...

modoboa 2.0.4 - Admin TakeOver

Authentication Bypass by Primary Weakness in GitHub repository modoboa/modoboa prior to 2.0.4. id: CVE-2023-0777 info: name: modoboa 2.0.4 - Admin TakeOver author: r3Y3r53 severity: critical description: | Authentication Bypass by Primary Weakness in GitHub repository modoboa/modoboa prior to...

Apache Tomcat Examples Web Application - Cross-Site Scripting

Apache Tomcat 8.5.50 to 8.5.81, 9.0.30 to 9.0.64, 10.0.0-M1 to 10.0.22, and 10.1.0-M1 to 10.1.0-M16 contain a reflected cross-site scripting caused by displaying unfiltered user data in the Form authentication example, letting attackers execute scripts in victim browsers, exploit requires attacke...

ThePhish

ThePhish ThePhish is an automated phishing email analysis tool based on TheHive, Cortex and MISP. It is a web application written in Python 3 and based on Flask that automates the entire analysis process starting from the extraction of the observables from the header and the body of an email to t...

osint-menace

OSINT Menace Open-Source Recon Console Built for Hunters, Not Browsers. OSINT Menace is a Defensive Thinking Project. OSINT Menace is a Dockerized Python web application for passive, case-driven OSINT triage. It gives analysts a simple cyberpunk-styled interface for running common open-source...

dotnetpaddingoracle

dotnetpaddingoracle Small script to check if the .NET web application is vulnerable to padding Oracle This script actually verify if the oracle is present and exploitable, not just if the patch has been installed. usage root@kitploit: dotnetpaddingoracle.py -h -t -b -d -s -p PARAMETER Burp reques...

analyzer

This project automates the daily tasks of Threat Intelligence Analyzer role internally without external resources' interaction. It analyzes, visualizes and structures sensitive files Malware or data by extracting features, artifacts and IoC using different modules. The output of those modules can...

rainmap-lite

rainmap-lite Rainmap Lite - 响应式Web应用，允许用户从手机/平板/浏览器启动Nmap扫描！ 与其前身1不同，Rainmap-lite不需要特殊服务（RabbitMQ、PostgreSQL、Celery、supervisor等），因此可以轻松安装在任何服务器上。你只需安装Django应用并添加cron轮询任务即可设置新的扫描服务器。随时随地都能进行Nmap扫描！ 1 Rainmap - https://nmap.org/rainmap/ 特性 只需几次点击即可轻松启动Nmap扫描。 响应式界面，在手机/平板上流畅运行。 报告通过电子邮件以所有格式发送。...

social-analyzer

Social Analyzer - 用于在 +1000 个社交媒体 \ 网站上分析和查找个人资料的 API、CLI 和 Web 应用程序。它包含不同的分析和检测模块，您可以在调查过程中选择使用哪些模块。 检测模块采用了基于不同检测技术的评级机制，产生的评分值从 0 到 100（否-可能-是）。该模块旨在减少误报。 来自此 OSINT 工具的分析和公开提取信息可帮助调查与可疑或恶意活动相关的资料，例如网络霸凌、网络诱骗、网络跟踪和传播虚假信息。 该项目目前被一些资源有限的国家执法机构使用 - 检测数据库与此处共享的不同.. 社交媒体 使创建和分享内容或参与社交网络的网站和应用程序 - 牛津...

patch-checker

PatchChecker 这是运行在 https://patchchecker.com 上的服务的代码库。 简而言之，PatchChecker 是一个 Web 应用程序（基于 Flask 运行），提供与 Watson 类似的输出。然而，使用 PatchChecker 无需在目标机器上执行二进制文件。 该项目还包含一个网络爬虫，它会利用 Microsoft 网站上的信息自动更新 PatchChecker 的数据库，从而提供一种更可扩展且更易用的解决方案，用于查找 Windows 系统已（或未）修补的 CVE。 此外，任何其他 CVE 都可以添加到数据收集器的输入中，只要它们在...