Lucene search
K
KitploitRecent

6011 matches found

Kitploit
Kitploit
added 2015/07/03 9:23 p.m.17 views

Blackbone - Windows Memory Hacking Library

Blackbone, Windows Memory Hacking Library Features x86 and x64 support Process interaction Manage PEB32/PEB64 Manage process through WOW64 barrier Process Memory Allocate and free virtual memory Change memory protection Read/Write virtual memory Process modules Enumerate all 32/64 bit modules...

8AI score
Exploits0References1
Kitploit
Kitploit
added 2015/07/02 8:32 p.m.26 views

Nikto2 - Web Server Scanner

Nikto is an Open Source GPL web server scanner which performs comprehensive tests against web servers for multiple items, including over 6700 potentially dangerous files/programs, checks for outdated versions of over 1250 servers, and version specific problems on over 270 servers. It also checks...

8.6AI score
Exploits0References1
Kitploit
Kitploit
added 2015/07/01 10:12 p.m.41 views

Cowrie - SSH Honeypot

Cowrie is a medium interaction SSH honeypot designed to log brute force attacks and, most importantly, the entire shell interaction performed by the attacker. Cowrie is directly based on Kippo by Upi Tamminen desaster. Features Some interesting features: Fake filesystem with the ability to...

7.1AI score
Exploits0References2
Kitploit
Kitploit
added 2015/06/30 4:44 p.m.35 views

AntiCuckoo - A Tool to Detect and Crash Cuckoo Sandbox

A tool to detect and crash Cuckoo Sandbox. Tested in Cuckoo Sandbox Official and Accuvant's Cuckoo version. Features Detection: Cuckoo hooks detection all kind of cuckoo hooks. Suspicius data in own memory without APIs, page per page scanning. Crash Execute with arguments out of a sandbox these...

7.3AI score
Exploits0References2
Kitploit
Kitploit
added 2015/06/29 9:45 p.m.19 views

USBkill - Anti-Forensic Kill-Switch that waits for a change on your USB ports

USBkill is an anti-forensic kill-switch that waits for a change on your USB ports and then immediately shuts down your computer. To run: sudo python usbkill.py Why? Some reasons to use this tool: In case the police or other thugs come busting in or steal your laptop from you when you are at a...

7.6AI score
Exploits0References2
Kitploit
Kitploit
added 2015/06/28 3:21 p.m.30 views

Sentry - Bruteforce Attack Blocker (ssh, FTP, SMTP, and more)

Sentry detects and prevents bruteforce attacks against sshd using minimal system resources. SAFE To prevent inadvertant lockouts, Sentry manages a whitelist of IPs that have connected more than 3 times and succeeded at least once. Never again will that forgetful colleague behind the office NAT...

7.7AI score
Exploits0References1
Kitploit
Kitploit
added 2015/06/27 3:33 p.m.18 views

Squert - A Simple QUEry and Report Tool

Squert is a web application that is used to query and view event data stored in a Sguil database typically IDS alert data. Squert is a visual tool that attempts to provide additional context to events through the use of metadata, time series representations and weighted and logically grouped resu...

7AI score
Exploits0References1
Kitploit
Kitploit
added 2015/06/26 8:23 p.m.29 views

SQLMAP-Web-GUI - Web GUI to drive near full functionality of SQLMAP

PHP Frontend to work with the SQLMAP JSON API Server sqlmapapi.py to allow for a Web GUI to drive near full functionality of SQLMAP! Here is a few quick videos to show that almost all of your usual SQLMAP command line functionality is still possible via this Web GUI. Demo against: Windows 2003...

7.5AI score
Exploits0References1
Kitploit
Kitploit
added 2015/06/25 9:43 p.m.19 views

Poet - A simple Post-Exploitation Tool

The client program runs on the target machine and is configured with an IP address the server to connect to and a frequency to connect at. If the server isn't running when the client tries to connect, the client quietly sleeps and tries again at the next interval. If the server is running however...

7.3AI score
Exploits0References1
Kitploit
Kitploit
added 2015/06/24 6:10 p.m.43 views

Acunetix v10 - Web Application Security Testing Tool

Acunetix, the pioneer in automated web application security software, has announced the release of version 10 of its Vulnerability Scanner. New features are designed to prevent the risk of hacking for all customers; from small businesses up to large enterprises, including WordPress users, web...

7.3AI score
Exploits0
Kitploit
Kitploit
added 2015/06/23 10:41 p.m.15 views

VBScan - An Black Box vBulletin Vulnerability Scanner

VBScan is a Black Box vBulletin vulnerability scanner. Written in Perl Demo on youtube: Security Bug Found by VBScan in Ubuntu / Fedora/ python forums by VBScan Vulnerability Scanner Report any bug to : [email protected] Download VBScan...

7.2AI score
Exploits0References1
Kitploit
Kitploit
added 2015/06/23 8:34 p.m.82 views

TeemIp - IP Address Management Solution

All network administrators do recognize how important it is to have a well managed IP space: a comprehensive and up to date inventory of all subnets and IPs used in a network as well as clear and simple processes to request, change or release IPs are underlying key factors for a trouble free...

7.2AI score
Exploits0
Kitploit
Kitploit
added 2015/06/22 9:27 p.m.15 views

Just-Metadata - Tool that Gathers and Analyzes Metadata about IP Addresses

Just-Metadata is a tool that can be used to gather intelligence information passively about a large number of IP addresses, and attempt to extrapolate relationships that might not otherwise be seen. Just-Metadata has "gather" modules which are used to gather metadata about IPs loaded into the...

7AI score
Exploits0References1
Kitploit
Kitploit
added 2015/06/18 5:7 p.m.23 views

Security CheatSheets - A collection of cheatsheets for various infosec tools and topics

These security cheatsheets are part of a project for the Ethical Hacking and Penetration Testing course offered at the University of Florida. Expanding on the default set of cheatsheets, the purpose of these cheatsheets are to aid penetration testers/CTF participants/security enthusiasts in...

7.6AI score
Exploits0References1
Kitploit
Kitploit
added 2015/06/18 4:39 p.m.24 views

Cheat - Create and view interactive cheatsheets on the command-line

cheat allows you to create and view interactive cheatsheets on the command-line. It was designed to help remind nix system administrators of options for commands that they use frequently, but not frequently enough to remember. cheat depends only on python and pip. Example The next time you're...

7AI score
Exploits0References2
Kitploit
Kitploit
added 2015/06/17 11:41 p.m.325 views

VBS-Obfuscator - VBScript obfuscation to allow PenTesters bypass countermeasures

VBScript obfuscation to allow PenTesters bypass countermeasures. Sample Script Output C:\toolspython obfuscator.py test.vbs out.vbs Char 109 - 5505-5396 Char 115 - 1113775/9685 Char 103 - 540853/5251 Char 98 - -2629+2727 Char 111 - 291-180 Char 120 - 826320/6886 Char 32 - 118016/3688 Char 34 -...

7.3AI score
Exploits0References1
Kitploit
Kitploit
added 2015/06/17 10:23 p.m.24 views

Gcat - A stealthy Backdoor that uses Gmail as a command and control server

A stealthy Python based backdoor that uses Gmail as a command and control server. Setup For this to work you need: A Gmail account Use a dedicated account! Do not use your personal one! Turn on "Allow less secure apps" under the security settings of the account This repo contains two files: gcat....

8.1AI score
Exploits0References2
Kitploit
Kitploit
added 2015/06/16 8:2 p.m.26 views

Cupp - Common User Passwords Profiler

The most common form of authentication is the combination of a username and a password or passphrase. If both match values stored within a locally stored table, the user is authenticated for a connection. Password strength is a measure of the difficulty involved in guessing or breaking the passwo...

7.3AI score
Exploits0References1
Kitploit
Kitploit
added 2015/06/15 9:57 p.m.14 views

icmpsh - Simple Reverse ICMP Shell

Sometimes, network administrators make the penetration tester's life harder. Some of them do use firewalls for what they are meant to, surprisingly! Allowing traffic only onto known machines, ports and services ingress filtering and setting strong egress access control lists is one of these cases...

7.4AI score
Exploits0References1
Kitploit
Kitploit
added 2015/06/15 3:33 p.m.99 views

Crouton - Chromium OS Universal Chroot Environment

crouton is a set of scripts that bundle up into an easy-to-use, Chromium OS-centric chroot generator. Currently Ubuntu and Debian are supported using debootstrap behind the scenes, but "Chromium OS Debian, Ubuntu, and Probably Other Distros Eventually Chroot Environment" doesn't acronymize as wel...

7.2AI score
Exploits0References1
Kitploit
Kitploit
added 2015/06/10 10:1 p.m.47 views

REMnux v6 - A Linux Toolkit for Reverse-Engineering and Analyzing Malware

REMnux is a free Linux toolkit for assisting malware analysts with reverse-engineering malicious software. It strives to make it easier for forensic investigators and incident responders to start using the variety of freely-available tools that can examine malware, yet might be difficult to locat...

7.5AI score
Exploits0References40
Kitploit
Kitploit
added 2015/06/10 6:0 p.m.11 views

Chrome Autofill Viewer - Tool to View or Delete Autocomplete data from Google Chrome browser

Chrome Autofill Viewer is the free tool to easily see and delete all your autocomplete data from Google Chrome browser. Chrome stores Autofill entries typically form fields such as login name, pin, passwords, email, address, phone, credit/debit card number, search history etc in an internal...

6.7AI score
Exploits0
Kitploit
Kitploit
added 2015/06/09 10:21 p.m.42 views

Medusa - Speedy, Parallel and Modular Login Brute-Forcer

Medusa is intended to be a speedy, massively parallel, modular, login brute-forcer. The goal is to support as many services which allow remote authentication as possible. The author considers following items as some of the key features of this application: Thread-based parallel testing. Brute-for...

7.5AI score
Exploits0References2
Kitploit
Kitploit
added 2015/06/09 3:11 p.m.38 views

BruteX - Automatically Brute Force all Services Running on a Target

Automatically brute force all services running on a target including: Open ports DNS domains Web files Web directories Usernames Passwords USAGE ./brutex target DEPENDENCIES NMap Hydra Wfuzz SNMPWalk DNSDict To brute force multiple hosts, use brutex-massscan and include the IP's/hostnames to scan...

7.2AI score
Exploits0References1
Kitploit
Kitploit
added 2015/06/09 12:30 p.m.51 views

MITMf - Framework for Man-In-The-Middle attacks

Framework for Man-In-The-Middle attacks Available plugins SMBtrap - Exploits the 'SMB Trap' vulnerability on connected clients Screenshotter - Uses HTML5 Canvas to render an accurate screenshot of a clients browser Responder - LLMNR, NBT-NS, WPAD and MDNS poisoner SSLstrip+ - Partially bypass...

7.5AI score
Exploits0References2
Kitploit
Kitploit
added 2015/06/08 10:7 p.m.15 views

Proxenet - Hacker Friendly Proxy for Web Application Penetration Tests

Proxenet is a hacker friendly proxy for web application penetration tests. proxenet is a multi-threaded proxy which allows you manipulate your HTTP requests and responses using your favorite scripting language. No need to learn Java like for Burp or Python like for mitmproxy. proxenet supports...

7AI score
Exploits0References1
Kitploit
Kitploit
added 2015/06/08 2:19 a.m.15 views

The Exploit-Database Git Repository

This is the official repository of The Exploit Database, a project sponsored by Offensive Security. The Exploit Database is an archive of public exploits and corresponding vulnerable software, developed for use by penetration testers and vulnerability researchers. Its aim is to serve as the most...

7.5AI score
Exploits0References1
Kitploit
Kitploit
added 2015/06/07 5:15 p.m.13 views

Firefox Autocomplete Spy - Tool to View or Delete Autofill Data from Mozilla Firefox

Firefox Autocomplete Spy is the free tool to easily view and delete all your autocomplete data from Firefox browser. Firefox stores Autocomplete entries typically form fields such as login name, email, address, phone, credit/debit card number, search history etc in an internal database file...

6.9AI score
Exploits0
Kitploit
Kitploit
added 2015/06/06 3:12 p.m.53 views

ChromePass - Chrome Browser Password Recovery Tool

ChromePass is a small password recovery tool that allows you to view the user names and passwords stored by Google Chrome Web browser. For each password entry, the following information is displayed: Origin URL, Action URL, User Name Field, Password Field, User Name, Password, and Created Time. Y...

6.4AI score
Exploits0
Kitploit
Kitploit
added 2015/06/05 10:21 p.m.25 views

BypassWAF - Burp Plugin to Bypass Some WAF Devices

Add headers to all Burp requests to bypass some WAF products. This extension will automatically add the following headers to all requests. X-Originating-IP: 127.0.0.1 X-Forwarded-For: 127.0.0.1 X-Remote-IP: 127.0.0.1 X-Remote-Addr: 127.0.0.1 Usage Steps include: 1. Add extension to burp 2. Create...

7.4AI score
Exploits0References2
Kitploit
Kitploit
added 2015/06/05 6:44 p.m.57 views

SQLiPy - Plugin for Burp Suite that integrates SQLMap using the SQLMap API

SQLiPy is a Python plugin for Burp Suite that integrates SQLMap using the SQLMap API. SQLMap comes with a RESTful based server that will execute SQLMap scans. This plugin can start the API for you or connect to an already running API to perform a scan. Requirements Jython 2.7 beta, due to the use...

7.6AI score
Exploits0References1
Kitploit
Kitploit
added 2015/06/04 10:59 p.m.63 views

I2P - The Invisible Internet Project

I2P is an anonymous network, exposing a simple layer that applications can use to anonymously and securely send messages to each other. The network itself is strictly message based a la IP, but there is a library available to allow reliable streaming communication on top of it a la TCP. All...

7.4AI score
Exploits0
Kitploit
Kitploit
added 2015/06/04 9:19 p.m.36 views

WAIDPS - Wireless Auditing, Intrusion Detection & Prevention System

WAIDPS is an open source wireless swissknife written in Python and work on Linux environment. This is a multipurpose tools designed for audit penetration testing networks, detect wireless intrusion WEP/WPA/WPS attacks and also intrusion prevention stopping station from associating to access point...

6.9AI score
Exploits0References1
Kitploit
Kitploit
added 2015/06/04 4:10 p.m.20 views

PentestBox - Portable Penetration Testing Distribution for Windows Environments

PentestBox is not like other Penetration Testing Distributions which runs on virtual machines. It is created because more than 50% of penetration testing distributions users uses windows. So it provides an efficient platform for Penetration Testing on windows platform. Check out demo video: Easy ...

7.1AI score
Exploits0
Kitploit
Kitploit
added 2015/06/03 10:27 p.m.17 views

Damn Vulnerable Web App - PHP/MySQL Training Web Application that is Damn Vulnerable

Damn Vulnerable Web App DVWA is a PHP/MySQL web application that is damn vulnerable. Its main goals are to be an aid for security professionals to test their skills and tools in a legal environment, help web developers better understand the processes of securing web applications and aid...

7.2AI score
Exploits0References1
Kitploit
Kitploit
added 2015/06/03 6:30 p.m.52 views

Web Security Dojo - Training Environment for Web Application Security Penetration Testing

A free open-source self-contained training environment for Web Application Security penetration testing. Tools + Targets = Dojo What? Various web application security testing tools and vulnerable web applications were added to a clean install of Ubuntu v10.04.2, which is patched with the...

7.4AI score
Exploits0
Kitploit
Kitploit
added 2015/06/02 10:21 p.m.34 views

NoPo - NoSQL Honeypot Framework

NoSQL-Honeypot-Framework NoPo is an open source honeypot for nosql databases that automates the process of detecting attackers,logging attack incidents. The simulation engines are deployed using the twisted framework.Currently the framework holds support for redis. N.B : The framework is under...

7.4AI score
Exploits0References1
Kitploit
Kitploit
added 2015/06/01 11:32 p.m.54 views

Pixiewps - Bruteforce Offline the WPS Pin (Pixie Dust Attack)

Pixiewps is a tool written in C used to bruteforce offline the WPS pin exploiting the low or non-existing entropy of some APs pixie dust attack. It is meant for educational purposes only. All credits for the research go to Dominique Bongard. DEPENDENCIES Pixiewps requires libssl. To install it:...

7.4AI score
Exploits0References2
Kitploit
Kitploit
added 2015/06/01 9:52 p.m.50 views

Wireless Network Watcher v1.81 - Show Who is Connected to your Wireless Network

Wireless Network Watcher is a small utility that scans your wireless network and displays the list of all computers and devices that are currently connected to your network. For every computer or device that is connected to your network, the following information is displayed: IP address, MAC...

6.6AI score
Exploits0
Kitploit
Kitploit
added 2015/06/01 2:8 p.m.1038 views

PyPhisher - A Simple Python Tool for Phishing

If you are looking to make a phishing testing or demonstration you can check PyPhisher. This tool was created for the purpose of phishing during a penetration test. This tool is python based that provide user a way to send emails with a customized template that he design. you can have an html...

7.4AI score
Exploits0References1
Kitploit
Kitploit
added 2015/05/31 8:30 a.m.14 views

AsHttp - Shell Command to Expose any other Command as HTTP

ashttp provide a simple way to expose any shell command by HTTP. For example, to expose top by HTTP, try : ashttp -p8080 top ; then try http://localhost:8080. Dependencies ashttp depends on hlvt100, a headless VT100 emulator. To get and compile hlvt100 : $ git clone...

7.4AI score
Exploits0References1
Kitploit
Kitploit
added 2015/05/30 1:17 p.m.21 views

Plecost - Wordpress Vulnerabilities Finder

Plecost is a vulnerability fingerprinting and vulnerability finder for Wordpress blog engine. Why? There are a huge number of Wordpress around the world. Most of them are exposed to be attacked and be converted into a virus, malware or illegal porn provider, without the knowledge of the blog owne...

7AI score
Exploits0References2
Kitploit
Kitploit
added 2015/05/29 3:1 a.m.18 views

YASUO - Scans for Vulnerable & Exploitable 3rd-party Web Applications

Yasuo is a ruby script that scans for vulnerable 3rd-party web applications. While working on a network security assessment internal, external, redteam gigs etc., we often come across vulnerable 3rd-party web applications or web front-ends that allow us to compromise the remote server by exploiti...

8.6AI score
Exploits0References1
Kitploit
Kitploit
added 2015/05/28 1:46 a.m.78 views

INURLBR - Advanced Search in Multiple Search Engines

Advanced search in search engines, enables analysis provided to exploit GET / POST capturing emails & urls, with an internal custom validation junction for each target / url found. INURLBR scanner was developed by Cleiton Pinheiro, owner and founder of INURL - BRASIL. Tool made ​​in PHP that can...

8.4AI score
Exploits0References1
Kitploit
Kitploit
added 2015/05/26 9:38 p.m.14 views

WS-Attacker - Modular Framework for Web Services Penetration Testing

XML-based SOAP Web Services are a widely used technology, which allows the users to execute remote operations and transport arbitrary data. It is currently adapted in Service Oriented Architectures, cloud interfaces, management of federated identities, eGovernment, or millitary services. The wide...

8.6AI score
Exploits0
Kitploit
Kitploit
added 2015/05/25 11:17 p.m.8 views

RouterCheck - Android app for ensure the safety of your Router

RouterCheck is a system for ensuring the well-being of your router and home network. It’s offered as a smartphone app, but is far more than just a simple smartphone app. RouterCheck communicates with a powerful server that helps to check whether your router is vulnerable to any of the latest...

8.1AI score
Exploits0
Kitploit
Kitploit
added 2015/05/23 2:56 p.m.415 views

WakeMeOnLan v1.71 - Turn on computers on your network with Wake-on-LAN packet

This utility allows you to easily turn on one or more computers remotely by sending Wake-on-LAN WOL packet to the remote computers. When your computers are turned on, WakeMeOnLan allows you to scan your network, and collect the MAC addresses of all your computers, and save the computers list into...

6.7AI score
Exploits0
Kitploit
Kitploit
added 2015/05/22 11:6 p.m.25 views

FTPMap - FTP scanner in C

Ftpmap scans remote FTP servers to indentify what software and what versions they are running. It uses program-specific fingerprints to discover the name of the software even when banners have been changed or removed, or when some features have been disabled. also FTP-Map can detect Vulnerables b...

7.5AI score
Exploits0References1
Kitploit
Kitploit
added 2015/05/22 10:11 p.m.81 views

SmarTTY - Multi-tabbed SSH Client with SCP Support

SmarTTY is a free multi-tabbed SSH client that supports copying files and directories with SCP on-the-fly and editing files in-place. One SSH session - multiple tabs Most SSH servers support up to 10 sub-sessions per connection. SmarTTY makes the best of it: no annoying multiple windows, no need ...

7.7AI score
Exploits0
Kitploit
Kitploit
added 2015/05/22 8:54 p.m.94 views

Loki - Scanner for Simple Indicators of Compromise

Simple IOC Scanner Detection is based on four detection methods: 1. File Name IOC Regex match on full file path/name 2. Yara Rule Check Yara signature match on file data and process memory 3. Hash check Compares known malicious hashes MD5, SHA1, SHA256 with scanned files The Windows binary is...

7.3AI score
Exploits0References1
Total number of security vulnerabilities6011