got-responded

root@kitploit: | |/ \ | | | | | || || |/ | \ | || \ | || \ | | || || |||| \ | | -.-. | || || | || | || \ ||/ || ||\|||||| /|/||/|||/ Author: @wm A simple tool to detect NBT-NS and LLMNR spoofing and messing with them a bit What is it? Pentesters, Redteamers and even real attackers love to...

DriverSentinel

🛡️ DriverSentinel 🛡️ Vulnerable Windows Driver Scanner DriverSentinel is a security tool developed in Go that detects malicious and vulnerable drivers on Windows systems by comparing them against the LOLDrivers.io database. Features • Installation • Usage • How It Works 📋 Table of Contents Features...

ggshield

ggshield: protect your code with GitGuardian...

ADTrapper

ADTrapper - Active Directory Security Analysis Platform Professional Active Directory Security Analysis and Threat Detection Platform Transform Windows authentication logs into actionable security insights with advanced threat detection and interactive visualizations Overview ADTrapper is a...

xsssniper

XSSSNIPER xsssniper is an handy xss discovery tool with mass scanning functionalities. Usage: root@kitploit: Usage: xsssniper.py options Options: -h, --help show this help message and exit -u URL, --url=URL target URL --post try a post request to target url --data=POSTDATA post data to use...

moonwalk

moonwalk Cover your tracks during Linux Exploitation / Penetration Testing by leaving zero traces on system logs and filesystem timestamps. 📖 Table of Contents Introduction Features Installation Usage Contribution License ℹ️ Introduction moonwalk is a 400 KB single-binary executable that can clear...

gaia

Gaia: Global API Integrity Assessor Dependencies Install opam to build the tests API. Install git, python3, pip and .NET to build RESTler and Schemathesis. Install cargo to build Gaia. Install docker v26.0.1 and docker compose v2.26.1 to build Gaia with the ELK Stack optionnal if not. Install nod...

Sniffle

Sniffle Sniffle is a sniffer for Bluetooth 5 and 4.x LE using TI CC1352/CC26x2 hardware. Sniffle has a number of useful features, including: Support for BT5/4.2 extended length advertisement and data packets Support for BT5 Channel Selection Algorithms 1 and 2 Support for all BT5 PHY modes regula...

AADInternals

AADInternals AADInternals is PowerShell module for administering Azure AD and Office 365 For details, please visit https://aadinternals.com/aadinternals Installation Run the following PowerShell command to install root@kitploit: Install-Module AADInternals...

nipe

An engine to make Tor Network your default gateway. Summary The Tor project allows users to surf the Internet, chat and send instant messages anonymously through its own mechanism. It is used by a wide variety of people, companies and organizations, both for lawful activities and for other illici...

nipe

Un motor para hacer de la red Tor tu puerta de enlace predeterminada. Resumen El proyecto Tor permite a los usuarios navegar por Internet, chatear y enviar mensajes instantáneos de forma anónima a través de su propio mecanismo. Es utilizado por una amplia variedad de personas, empresas y...

opencve

¿Qué es OpenCVE? OpenCVE es una plataforma de inteligencia de vulnerabilidades que te ayuda a monitorear y gestionar CVEs de manera eficiente. Agrega vulnerabilidades de múltiples fuentes MITRE, NVD, RedHat, Vulnrichment... y te permite filtrar, rastrear y organizarlas por proveedor, producto,...

opencve

What is OpenCVE? OpenCVE is a Vulnerability Intelligence Platform that helps you monitor and manage CVEs efficiently. It aggregates vulnerabilities from multiple sources MITRE, NVD, RedHat, Vulnrichment... and lets you filter, track, and organize them by vendor, product, severity, and more. You c...

FDD-book

FreeBSD Device Drivers From First Steps to Kernel Mastery by Edson Brandi · Version 2.0 April 2026 About This Book FreeBSD Device Drivers: From First Steps to Kernel Mastery is a free, open-source book that takes you from "I've never written kernel code" to "I can write, debug, and submit...

ADCollector

ADCollector ADCollector is a lightweight tool that enumerates the Active Directory environment to identify possible attack vectors. It will give you a basic understanding of the configuration/deployment of the environment as a starting point. Notes: ADCollector is not an alternative to the powerf...

An-Integrated-Wireless-Network-Forensic-Analysis-Framework

An-Integrated-Wireless-Network-Forensic-Analysis-Framework This framework combines a set of existing open source tools into an integrated package that automates the forensics investigation process. It is able to capture wireless network traffic, to analyze the captured traffic according to the...

DOCxNGINxFX

WORDLISTxGENERATORxFX Version 1.0 Version 2.0 WORDLISTxGENERATORxFX renamed to DOCxNGINxFX Version 3.0 DOCxNGINxFX I wrote this to give somethink back to the great and powerful open source community all out there that shares their knowledge or frameworks and from whom I have learned so much. The...

BeatRev

BeatRev Version 2 Disclaimer/Liability The work that follows is a POC to enable malware to "key" itself to a particular victim in order to frustrate efforts of malware analysts. I assume no responsibility for malicious use of any ideas or code contained within this project. I provide this researc...

WDExtract

WDExtract Extract Windows Defender database from vdm files and unpack it This program is distributed as-is, without any warranty; No official support, if you like this tool, feel free to contribute. Features Unpack VDM containers of Windows Defender/Microsoft Security Essentials; Decrypt VDM...

yamaha-smaf-player

Yamaha SMAF Player C++ by Akustikrausch Andreas Wendorf a small, dependency-free player for Yamaha SMAF ringtones .mmf in c++. you hand it one of those files that made your samsung, sharp, or panasonic go deedle-deedle-dee in 2004, and it hands you clean stereo audio. no phone, no firmware, no...

TInjA

TInjA – the Template INJection Analyzer TInjA is a CLI tool for testing web pages for template injection vulnerabilities. It supports 44 of the most relevant template engines as of September 2023 for eight different programming languages. TInjA was developed by Hackmanit and Maximilian Hildebrand...

gotator

Gotator Gotator is a tool to generate DNS wordlists through permutations. 🛠️ Installation If you want to make modifications locally and compile it, follow the instructions below: root@kitploit: git clone https://github.com/Josue87/gotator.git cd gotator go build If you are only interested in using...

dnsReaper

DNS Reaper DNS Reaper is yet another sub-domain takeover tool, but with an emphasis on accuracy, speed and the number of signatures in our arsenal! We can scan around 50 subdomains per second, testing each one with over 50 takeover signatures. This means most organisations can scan their entire D...

pillager

Pillager Pillage filesystems for sensitive information with Go. Table of Contents 1. Summary 2. Installation 3. Usage 4. Exfiltration 5. Documentation Summary Pillager is designed to provide a simple means of leveraging Go's strong concurrency model to recursively search directories for sensitive...

gallia

Gallia Gallia is an extendable pentesting framework with the focus on the automotive domain. The scope of the toolchain is conducting penetration tests from a single ECU up to whole cars. Currently, the main focus lies on the UDS interface. Acting as a generic interface, the logging functionality...

Cloakify

CloakifyFactory CloakifyFactory & the Cloakify Toolset - Data Exfiltration & Infiltration In Plain Sight; Evade DLP/MLS Devices; Social Engineering of Analysts; Defeat Data Whitelisting Controls; Evade AV Detection. Text-based steganography using lists. Convert any file type e.g. executables,...

Cloakify

CloakifyFactory CloakifyFactory & el Cloakify Toolset - Exfiltración e Infiltración de Datos a Plena Vista; Evasión de Dispositivos DLP/MLS; Ingeniería Social de Analistas; Derrotar Controles de Lista Blanca de Datos; Evasión de Detección de AV. Esteganografía basada en texto usando listas...

awesome-ethical-hacking-resources

Awesome Resources For Learning Ethical Hacking & Pentesting ⚡️ What I’m sharing here is a collection of some best resources about Hacking & Penetration Testing to make you learn faster! Let's make it the best resource repository for our community. Contents Books Online Offline Vulnerable Machines...

CVE-2024-3094

This repository does not have a README...

NodeSecurityShield

Node Security Shield Node Security Shield NSS is an Open source Runtime Application Self-Protection RASP tool which aims at bridging the gap for comprehensive NodeJS security by enabling Developer and Security Engineer to declare what resources an application can access. Inspired by the Log4Shell...

GDir-Thief

GDir-Thief Red Team tool for exfiltrating the target organization's Google People Directory that you have access to, via Google's People API. HOW TO Create a new Google Cloud Platform GCP project Steps to get the Google API Access Token needed for connecting to the API 1. Create a burner...

OpenMalleableC2

OpenMalleableC2 Open Source Implementation of Cobalt Strike's Malleable C2 OpenMalleableC2 is a framework-agnostic library that implements Cobalt Strike's Malleable C2 profile format for HTTP transformations. It enables security researchers and red teams to easily implement malleable C2...

nginx_log_check

nginxlogcheck Nginx log security analysis script Features Top 20 address statistics SQL injection analysis Scanner alert analysis Vulnerability exploitation detection Sensitive path access File inclusion attack Webshell Find Top 20 URLs by response length Find rare script file access Find 302...

Egress-Assess

Egress-Assess Egress-Assess is a tool used to test egress data detection capabilities. Setup To set up, run the included setup script, or perform the following: 1. Install pyftpdlib 2. Generate a server certificate and store it as "server.pem" on the same level as Egress-Assess. This can be done...

cicd-goat

Deliberately vulnerable CI/CD environment. Hack CI/CD pipelines, capture the flags. 🚩 Created by Cider Security Acquired by Palo Alto Networks. Table of Contents...

interactive-binary-structures

Interactive Binary Structures An interactive web-based toolkit designed to bridge the gap between theoretical documentation and practical analysis of binary formats and system memory layouts. Portable Executable PE Format Documentation This tool serves as an interactive visual map of a Windows PE...

Umay

IoT Malware Similarity Analysis Platform View Demo Table of contents About The Project Current features Getting Started Prerequisites Installation Create your own dataset Contributing License About The Project This project provides IoT malware similarity analysis based on shared codes. It helps t...

vaf

vaf A fast, simple, and feature rich web fuzzer written in nim vaf is a cross-platform web fuzzer with a lot of features. Some of its features include: Fast threading HTTP header fuzzing Proxying your own feature! And more... Installing...

dsync

dsync IDAPython plugin that synchronizes decompiled and disassembled code views. Please refer to comments in source code for more details. Requires IDA Pro 7.3 N.B.: You may want to use the official synchronization feature introduced with IDA 7.3 instead...

HawkScan

HawkScan Security Tool for Reconnaissance and Information Gathering on a website. python 3.x News Installation Special features TODO Usage Exemples Thanks Donations Tools used Wiki News v2.x root@kitploit: - Add proxy function - Redefining priorities/tasks - Let's debug certificate subdomains...

frogy2.0

Orbis - Attack Surface Intelligence Full-Spectrum Attack Surface Intelligence Orbis automatically maps your organisation's entire internet-facing attack surface, subdomains, open ports, web applications, cloud infrastructure, TLS certificates, email posture, exposed secrets, login panels, and mor...

linkedin2username

linkedin2username OSINT Tool: Generate username lists from companies on LinkedIn. This is a pure web-scraper, no API key required. You use your valid LinkedIn username and password to login, it will create several lists of possible username formats for all employees of a company you point it at...

pentest-ai-agents

pentest-ai-agents 50 Claude Code subagents for penetration testing. Quick Start | Cheatsheet | Coverage | Agents | Examples Table of Contents What's New in v3.3 What's New in v3.2 Agent Map What's New in v3.1 Quick Start Cheatsheet Coverage...

Openssl_1_1_0_CVE-2021-23841

OpenSSL 1.1.0g 2 Nov 2017 Copyright c 1998-2016 The OpenSSL Project Copyright c 1995-1998 Eric A. Young, Tim J. Hudson All rights reserved. DESCRIPTION The OpenSSL Project is a collaborative effort to develop a robust, commercial-grade, fully featured, and Open Source toolkit implementing the...

redpill

:octocat: Project Description The redpill project aims to assist reverse tcp shells in post-exploration tasks. Often, on redteam appointments we need to use unconventional ways to access the target system, like reverse tcp shells not metasploit in order to bypass the defenses implemented by the...

binary-ninja-headless-mcp

Binary Ninja Headless MCP A headless Binary Ninja server that speaks MCP Model Context Protocol, giving AI agents full access to deep reverse-engineering workflows — disassembly, IL, patching, types, xrefs, and more — without a GUI. Designed to run in the same Docker container as the agent runtim...

cloudfox

🦊 CloudFox 🦊 CloudFox helps you gain situational awareness in unfamiliar cloud environments. It’s an open source command line tool created to help penetration testers and other offensive security professionals find exploitable attack paths in cloud infrastructure. CLOUDFOX UPDATE REQUIRED: 12/202...

ezsploit

ezsploit Alt text Linux bash script automation for metasploit Command line script for automating metasploit functions Checks for metasploit service and starts if not present Easily craft meterpreter reversetcp payloads for Windows, Linux, Android and Mac Start multiple meterpreter reversetcp...

CVE-2022-34715-POC

CVE-2022-34715-POC CVE-2022-34715-POC pcap nfssvr.sys version 10.0.20348.825 root@kitploit: 0: kd r rax=0000000080000001 rbx=0000000000000000 rcx=ffffde87fe461150 rdx=0000000000000000 rsi=fffff8040811aa50 rdi=0000000000000008 rip=fffff80408067dbb rsp=ffffb400eb3e2630 rbp=ffffb400eb3e26b9...

DCVC2

Discord Voice Channel C2 aka DCVC2 This multi operating system compatible tool was created to leverage Discord's voice channels for command and control operations. This tool operates entirely over the Real-Time Protocol RTP primarily leveraging DiscordGo and leaves no pesky traces behind in text...