ffuf

ffuf - Fuzz Faster U Fool Un fuzzer web rapide écrit en Go. Installation Exemples d'utilisation Découverte de contenu Découverte de vhosts Fuzzing de paramètres Fuzzing de données POST Utilisation d'un mutateur externe Fichiers de configuration Aide Mode interactif Installation Téléchargez un...

PrintNightmare

PrintNightmare Реализация на Python для PrintNightmare CVE-2021-1675 / CVE-2021-34527 с использованием стандартного Impacket. Установка root@kitploit: $ pip3 install impacket Использование root@kitploit: Impacket v0.9.23 - Copyright 2021 SecureAuth Corporation usage: printnightmare.py -h -debug...

wesng

Windows Exploit Suggester - Next Generation WES-NG WES-NG is a tool based on the output of Windows' systeminfo utility which provides the list of vulnerabilities the OS is vulnerable to, including any exploits for these vulnerabilities. Every Windows OS between Windows XP and Windows 11, includin...

lorsrf

LORSRF - 2.1 Lorsrf est un outil puissant de test de pénétration web conçu pour identifier les paramètres qui peuvent être exploités pour des attaques SSRF ou de chargement de ressources hors bande. En ajoutant un hôte OAST comme Burp Collaborator à la valeur du paramètre, Lorsrf peut générer une...

XanXSS

XanXSS XanXSS is a reflected XSS searching tool DOM coming soon that creates payloads based from templates. Unlike other XSS scanners that just run through a list of payloads. XanXSS tries to make the payload unidentifiable, for example: root@kitploit: /cLIcKMe!XaNxss With XanXSS every payload is...

Tater

Tater Tater is a PowerShell implementation of the Hot Potato Windows Privilege Escalation exploit. Credit All credit goes to @breenmachine, @foxglovesec, Google Project Zero, and anyone else that helped work out the details for this exploit. Potato - https://github.com/foxglovesec/Potato Included...

dnscat2

NOTE: The password for the .zip downloads are all "password"! Introduction Welcome to dnscat2, a DNS tunnel that WON'T make you sick and kill you! This tool is designed to create an encrypted command-and-control C&C channel over the DNS protocol, which is an effective tunnel out of almost every...

WMD

WMD Weapon of Mass Destruction This is a python tool with a collection of IT security software. The software is incapsulated in "modules". The modules does consist of pure python code and/or external third programs. Main functions 1. To use a module, run the command "use modulecall", e.g. "use...

reconerator

Overview This is a custom .NET assembly which will perform a number of situational awareness activities. There are a number of current featuresets: BASIC - Obtains information from the disk and registry. LDAP - Allows customised AD LDAP queries to be made. RESOLVEHOST - Performs DNS lookup querie...

inquisitor

Inquisitor Avis Ce projet n'est que partiellement terminé et je n'ai pas encore implémenté beaucoup des fonctionnalités décrites dans l'article de blog suivant que j'ai rédigé : https://penafieljlm.com/2017/07/14/inquisitor/. Inquisitor est un outil simple pour recueillir des informations sur des...

inquisitor

Inquisitor Notice This project is only partially complete and I have yet to implement many of the features described in the following blog post I made: https://penafieljlm.com/2017/07/14/inquisitor/. Inquisitor is a simple tool for gathering information on companies and organizations through the...

Amsi-Bypass-Powershell

Sponsored by Amsi-Bypass-Powershell Этот репозиторий содержит некоторые методы обхода/избегания Antimalware Scan Interface AMSI, которые я нашел в разных постах блогов. Большинство скриптов обнаруживаются самим AMSI. Поэтому вам нужно найти триггер и изменить сигнатуру в соответствующей части с...

Nosql-MongoDB-injection-username-password-enumeration

Script d'énumération des noms d'utilisateur et mots de passe par injection Nosql À l'aide de ce script, nous pouvons énumérer les noms d'utilisateur et mots de passe des applications web vulnérables à l'injection Nosql mongodb. Titre de l'exploit : Énumération des noms d'utilisateur/mots de passe...

pict

PICT - Post-Infection Collection Toolkit This set of scripts is designed to collect a variety of data from an endpoint thought to be infected, to facilitate the incident response process. This data should not be considered to be a full forensic data collection, but does capture a lot of useful...

ssrf-king

🔥 ssrf-king 🔥 v1.12 Latest SSRF plugin for burp that Automates SSRF Detection in all of the Request If you are facing any problems or would like a new feature that is not listed below Please create a new issue below in this form Create New Issue Upcoming Features Checklist ✔️ It will soon have a...

Sharp-SMBExec

Sharp-SMBExec Une conversion en C natif du script PowerShell Invoke-SMBExec de Kevin Robertson. https://github.com/Kevin-Robertson/Invoke-TheHash/blob/master/Invoke-SMBExec.ps1 Compilé pour .NET 3.5 Utilisation Sharp-SMBExec.exe hash:"hash" username:"username" domain:"domain.tld"...

bing-ip2hosts

Bing-ip2hosts Bing-ip2hosts is a Bing.com web scraper to discover hostnames by IP address. Description Bing-ip2hosts is a Bing.com web scraper that discovers hostnames by IP address. Bing is the flagship Microsoft search engine formerly known as MSN Search and Live Search. It provides a feature...

bing-ip2hosts

Bing-ip2hosts Bing-ip2hosts est un extracteur de données de Bing.com pour découvrir des noms d'hôte par adresse IP. Description Bing-ip2hosts est un extracteur de données de Bing.com qui découvre des noms d'hôte par adresse IP. Bing est le moteur de recherche phare de Microsoft, anciennement conn...

tomcatWarDeployer

tomcatWarDeployer Apache Tomcat auto WAR deployment & pwning penetration testing tool. What is it? This is a penetration testing tool intended to leverage Apache Tomcat credentials in order to automatically generate and deploy JSP Backdoor, as well as invoke it afterwards and provide nice shell...

CVE-2023-24055_PoC

CVE-2023-24055 PoC KeePass 2.5x 논의 및 분석 중... https://sourceforge.net/p/keepass/discussion/329220/thread/a146e5cf6b/ https://sourceforge.net/p/keepass/feature-requests/2773/ KeePass 설정 파일에 쓰기 권한이 있는 공격자는 해당 파일을 수정하고 악성 트리거를 주입하여, 예를 들어 내보내기 트리거를 추가함으로써 평문 비밀번호를 획득할 수 있습니다...