aimap

AIMap Internet-scale discovery and security testing platform for exposed AI agent infrastructure. AIMap finds, fingerprints, and security-tests publicly exposed AI endpoints — MCP servers, Ollama instances, vLLM/LiteLLM proxies, LangServe chains, Gradio apps, ComfyUI nodes, and more. Think Shodan...

XPRTestSuite

XProtect Remediator Test Suite A collection of scripts and documents to help future XProtect Remediator XPR research, presented at Black Hat USA 2025 About This Repository This repository contains: The scripts to create harmless minimal files and processes that reproduce the remediation of each...

ida_haru

+OPTIONS: ^: idaharu Scripts/plugins for IDA Pro Note: Old scripts don't work for IDA 8.x, but I leave them just for reference. esetcrackme IDA Pro loader/processor modules for ESET CrackMe driver VM stackstringstatic IDAPython script statically-recovering strings constructed in stack fnfuzzy...

xcat

XCat XCat is a command line tool to exploit and investigate blind XPath injection vulnerabilities. For a complete reference read the documentation here: https://xcat.readthedocs.io/en/latest/ It supports an large number of features: Auto-selects injections run xcat injections for a list Detects t...

gcp_scanner

Disclaimer This project is not an official Google project. It is not supported by Google and Google specifically disclaims all warranties as to its quality, merchantability, or fitness for a particular purpose. GCP Scanner This is a GCP resource scanner that can help determine what level of acces...

shim-review

This repo is for review of requests for signing shim. To create a request for review: clone this repo preferably fork it edit the template below add the shim.efi to be signed add build logs add any additional binaries/certificates/SHA256 hashes that may be needed commit all of that tag it with a...

attackgen

AttackGen AttackGen is a cybersecurity incident response testing tool that leverages the power of large language models and the comprehensive MITRE ATT&CK and ATLAS frameworks. The tool generates tailored incident response scenarios based on user-selected threat actor groups, AI attack case...

atomic-red-team

Atomic Red Team Atomic Red Team™ is a library of tests mapped to the MITRE ATT&CK® framework. Security teams can use Atomic Red Team to quickly, portably, and reproducibly test their environments. Get started You can execute atomic tests directly from the command line, no installation required. S...

Auto_EAP

AutoEAP Introduction Published Sepetember 15, 2016 AutoEAP.py is a script designed to perform automated brute-force authentication attacks against various types of EAP networks. These types of wireless networks provide an interface to facilitate password guessing of domain credentials as radius...

nsearch

root@kitploit: ================================================ | \ | |/ || | | | | | |\ --. | | | | | . | --. | | / || '| / || ' | | |\ |// /| | | | || | | | | | | | // / ,||| ||| || ================================================ Version 0.4b http://goo.gl/8mFHE5 @jjtibaquira Email:...

evil-winrm

Evil-WinRM...

kubeshark

Network Observability for SREs & AI Agents Live Demo · Docs Kubeshark indexes cluster-wide network traffic at the kernel level using eBPF — delivering instant answers to any query using network, API, and Kubernetes semantics. What you can do: Download Retrospective PCAPs — cluster-wide packet...

token-reverser

Token Reverser Words list generator to crack security tokens. Installation root@kitploit: $ git clone https://github.com/dariusztytko/token-reverser.git Example use case 1. You are testing reset password function 2. Reset password token was sent to your email box e.g...

androidReverse

Android Reverse A reverse engineering suite that runs entirely on Android. No PC, no ADB, no desktop tools — everything from APK extraction to native binary analysis, editing, and rebuilding happens on-device. MCP Server androidReverse includes a built-in Model Context Protocol server, allowing...

Sublist3r

About Sublist3r Sublist3r is a python tool designed to enumerate subdomains of websites using OSINT. It helps penetration testers and bug hunters collect and gather subdomains for the domain they are targeting. Sublist3r enumerates subdomains using many search engines such as Google, Yahoo, Bing,...

frida

Frida Dynamic instrumentation toolkit for developers, reverse-engineers, and security researchers. Learn more at frida.re. Two ways to install 1. Install from prebuilt binaries This is the recommended way to get started. All you need to do is: root@kitploit: pip install frida-tools CLI tools pip...

DNSnitch

DNSnitch Disclaimer I use that for myself, it's here if someone needs it though. Feel free to open an issue if you find bugs! The Interactive Terminal DNS Firewall DNSnitch is a local, privacy-first DNS server that puts you in complete control of your network traffic. Unlike passive blocklists,...

DbgNexum

DbgNexum - Shellcode Injection DbgNexum is a Proof-of-Concept for injecting shellcode using the Windows Debugging API and Shared Memory File Mapping. It avoids writing and reading remote memory directly, instead using context manipulation to force the target process to load and execute the payloa...

hoppr-cop

Hoppr-Cop For Policing Your SBOM Vulnerabilities Hoppr Cop is a cli and python library that generates high quality vulnerability information from a cyclone-dx Software Bill of Materials SBOM by aggregating data from multiple vulnerability databases. This project is offered as part of the hoppr...

CryptoChat

CryptoChat : Beyond Secure Messaging 🛡️ Welcome to CryptoChat - where conversations remain truly private. Built on the robust Python ecosystem, our application ensures that every word you send is wrapped in layers of encryption. Whether you're discussing sensitive business details or sharing...

SharePointDumper

SharePointDumper SharePointDumper is a PowerShell-based extraction and auditing utility that enumerates SharePoint sites a user can access via Microsoft Graph and downloads files via SharePoint. It is designed for SOC / DLP testing, purple teaming, and non-sophisticated red-team assessments, and...

mx-takeover

mx-takeover How to works • Features • Installation • Usage • Running mx-takeover mx-takeover focuses DNS MX records and detects misconfigured MX records. It currently support three technique. These are, MX domains that will expire soon Unregistered MX domains Domains that points to not currently ...

clawk

Give a coding agent its own disposable Linux machine, not yours. -lightgrey Install · Quickstart · Why a VM? · How it works · Compared to · FAQ · Docs A coding agent is only useful when you let it actually do things: install packages, run the code it writes, start servers, use the network. On you...

claude-bug-bounty

BugHunter AI-powered bug bounty hunting — recon to report, in your terminal. Free Setup · Quick Start · Commands · What It Finds · Install · FAQ Powered byAwareXone.com — Your AI Agent Against Scams & Fraud 💜 Open for Sponsorship BugHunter is open for sponsorship. Your support funds new features...

SPY-MASKER

SPY-MASKER 🔥 SPY-MASKER It is a simple Python Script to hide phishing URL under a normal looking URL google.com or facebook.com. It can be integrated into Phishing tools to look the URL legit. ⚖️ Legal Disclaimer: FOR EDUCATIONAL PURPOSES ONLY Usage of SPY-MASKER for attacking targets without prio...

Hermes-Proxy

Hermes Proxy Hermes Proxy is a desktop HTTP/HTTPS interception app built with Electron and Vite. It captures requests/responses, lets you replay requests, and export/import HAR files. Features Live traffic table with request/response details Replay requests with editable URL/headers Export all...

dwipe

dwipe dwipe is a tool to wipe disks and partitions for Linux to help secure your data. dwipe aims to reduce mistakes by providing ample information about your devices during selection. Quick Comparison...

vscan

vscan vulnerability scanner tool is using nmap and nse scripts to find vulnerabilities This tool puts an additional value into vulnerability scanning with nmap. It uses NSE scripts which can add flexibility in terms of vulnerability detection and exploitation. Below there are some of the features...

RedRabbit

RedRabbit About RedRabbit is a PowerShell script aimed at helping pentesters conduct ethical hacking RedTeam. The aim is to highlight just how Powerful PowerShell is and how it can be used against you Ethically. To Run You can either run locally by downloading the script or run remotely using:...

tiuku

Tiuku Tiuku is a tool for scanning various kinds of systems and environments for security related information and displaying the results in a browser-based user interface. It can also detect and highlight some issues automatically. Both the data collection scripts and the user interface can be...

lykan

lykan Lykan is a leak analysis program written in C that generates visual graphs of the analysed data. It receives as inputs raw password text dumps where the passwords are separated by '\n' and extracts statistical information about the dumps, including the top passwords, character popularity et...

ScanQLi

ScanQLi ScanQLi is a simple SQL injection scanner with somes additionals features. This tool can't exploit the SQLi, it just detect them. Tested on Debian 9 Features Classic Blind Time based GBK soon Recursive scan follow all hrefs of the scanned web site Cookies integration Adjustable wait delay...

velociraptor

Velociraptor - Endpoint visibility and collection tool. Velociraptor is a tool for collecting host based state information using The Velociraptor Query Language VQL queries. To learn more about Velociraptor, read the documentation on: https://docs.velociraptor.app/ Quick start If you want to see...

AVBypass

antivirus bypass protection requirements golang installed usage root@kitploit: 1 - create your payload go run create.go e.g: go run create.go 1.1.1.1 443 SecRetkira https://www.youtube.com/watch?v=Rv4VzpGCEEM 2 - in output folder you will find shell.go compile it go build shell.go 3 - now you hav...

IOCScraper

IOC Scraper IOC Scraper utilises IOCPARSER service to fetch IOCs from different vendor Blogs, PDFs, and CSV files. Parsing IOCs is time-consuming process, using current script one can automatically extract and aggregate IOCs easily. Features Defanged IOCs : Supports extracting and defanging IOCs...

bopscrk

bopscrk Generate smart and powerful wordlists for targeted attacks Explore the docs » View Demo · Report Bug · Request Feature Table of contents 1. About the Project What's new Built with 2. Getting started Installation Run interactive mode 3. Usage How it works Tips Advanced usage Lyricpass 4...

EvilClippy

This tool was released during our BlackHat Asia talk March 28, 2019. A video recording of this talk is available at https://www.youtube.com/watch?v=9ULzZA70Dzg. Evil Clippy A cross-platform assistant for creating malicious MS Office documents. Can hide VBA macros, stomp VBA code via P-Code and...

FreeLabFriday_Labs

Free Lab Friday Labs Need 1 lab?? Maybe 2???? Well we've got 200+ so go crazy! This repository contains all lab instructions for the following content: Information Security Core Skills SOC Core Skills Active Defense & Cyber Deception SOC Analyst Labs Backdoors & Breaches Card Labs Navigation John...

Apkx-Hunter

APKX-Hunter v2.7.2 — Debian Package APKX-Hunter is an open-source Android Static Analysis Framework written entirely in C , purpose-built for Android security assessments, reverse engineering, malware analysis, OWASP MASVS compliance scanning, bug bounty hunting, and penetration testing. The...

heappy

🙂 Heappy: a happy heap editor Heappy is an editor based on gdb/gef that helps you to handle the heap during your exploitation development. The project should be considered a didactic tool useful to understand the evolution of the heap during the process life cycle. It has been created to simplify...

003Recon

📌 Description This repository contains some of my scripts that i created to automate some recon processes. It performs the following things; 1. Get subdomains of a domain 2. Filter out only online domains 3. Scan the domains for CRLF 4. Check for a CORS misconfigurations 5. Test for open redirect...

CobaltStrikeParser

CobaltStrikeParser Python parser for CobaltStrike Beacon's configuration Description Use parsebeaconconfig.py for stageless beacons, memory dumps or C2 urls with metasploit compatibility mode default true. Many stageless beacons are PEs where the beacon code itself is stored in the .data section...

agentic-threat-hunting-framework

Agentic Threat Hunting Framework ATHF Quick Start • Installation • Documentation • Examples Give your threat hunting program memory and agency. The Agentic Threat Hunting Framework ATHF is the memory and automation layer for your threat hunting program. It gives your hunts structure, persistence,...

Zeus

Zeus AWS Auditing & Hardening Tool Zeus is a powerful tool for AWS EC2 / S3 / CloudTrail / CloudWatch / KMS best hardening practices. It checks security settings according to the profiles the user creates and changes them to recommended settings based on the CIS AWS Benchmark source at request of...

SharpMapExec

SharpMapExec A sharpen version of CrackMapExec. This tool is made to simplify penetration testing of networks and to create a swiss army knife that is made for running on Windows which is often a requirement during insider threat simulation engagements. Besides scanning for access it can be used ...

graudit

graudit graudit is a simple script and signature sets that allows you to find potential security flaws in source code using the GNU utility grep. It's comparable to other static analysis applications like RATS, SWAAT and flaw-finder while keeping the technical requirements to a minimum and being...

PowerTools

PowerTools Is Now Deprecated! PowerView and PowerUp have moved to the PowerSploit repository under ./Recon/ and ./Privesc/ respectively. PowerPick will move repository locations shortly back to its original home. PewPewPew is no longer supported. No pull requests will be accepted and no issues wi...

Scanners-Box

English | 简体中文 | Español Introduction Scanners Box is a curated arsenal of 9,000+ ⭐ open-source cybersecurity treasures — with a special focus on AI-driven automated security agents and Red Team / Blue Team tooling. All tools feature source code available , covering 10+ categories from subdomain...

dbeaver

DBeaver Free multi-platform database tool for developers, SQL programmers, database administrators and analysts. Has a lot of features including schema editor, SQL editor, data editor, AI integration, ER diagrams, data export/import/migration, SQL execution plans, database administration tools,...

wasmforge

WasmForge WasmForge compiles Go and C programs to WebAssembly, then packages them as single native binaries. The resulting executables sandbox guest code inside a WASM runtime a per-build fork of wazero. From inside that sandbox, guests get transparent access to networking, raw sockets, Win32 API...