Lucene search
K
KitploitRecent

6011 matches found

Kitploit
Kitploit
added 2017/08/14 9:56 p.m.23 views

JWT cracker - JWT Brute Force Cracker Written in C

A multi-threaded JWT brute-force cracker written in C. If you are very lucky or have a huge computing power, this program should find the secret key of a JWT token, allowing you to forge valid tokens. This is for testing purposes only, do not put yourself in trouble. The tool is based in the Appl...

6.5AI score
Exploits0References1
Kitploit
Kitploit
added 2017/08/14 1:48 p.m.15 views

RED HAWK v2.0.0 - All in one tool for Information Gathering, Vulnerability Scanning and Crawling

RED HAWK is An All In One Tool For Information Gathering, SQL Vulnerability Scannig and Crawling. Coded In PHP. Features: Basic Scan Site Title NEW IP Address Web Server Detection IMPROVED CMS Detection Cloudflare Detection robots.txt Scanner Whois Lookup IMPROVED Geo-IP Lookup Grab Banners...

7.1AI score
Exploits0References1
Kitploit
Kitploit
added 2017/08/13 9:24 p.m.17 views

Phishery - An SSL Enabled Basic Auth Credential Harvester with a Word Document Template URL Injector

Phishery is a Simple SSL Enabled HTTP server with the primary purpose of phishing credentials via Basic Authentication. Phishery also provides the ability easily to inject the URL into a .docx Word document. The power of phishery is best demonstrated by setting a Word document's template to a...

7.3AI score
Exploits0References3
Kitploit
Kitploit
added 2017/08/13 1:34 p.m.18 views

Spaghetti - Web Application Security Scanner

Spaghetti is a web application security scanner tool. It is designed to find various default and insecure files, configurations and misconfigurations. Spaghetti is built on python2.7 and can run on any platform which has a Python environment. Installation $ git clone...

7.3AI score
Exploits0References1
Kitploit
Kitploit
added 2017/08/12 10:44 p.m.17 views

PyREBox - Python scriptable Reverse Engineering Sandbox

PyREBox is a Python scriptable Reverse Engineering sandbox. It is based on QEMU, and its goal is to aid reverse engineering by providing dynamic analysis and debugging capabilities from a different perspective. PyREBox allows to inspect a running QEMU VM, modify its memory or registers, and to...

7AI score
Exploits0References7
Kitploit
Kitploit
added 2017/08/12 2:26 p.m.74 views

jadx - Dex to Java Decompiler

jadx - Dex to Java decompiler Command line and GUI tools for produce Java source code from Android Dex and Apk files. Building from source git clone https://github.com/skylot/jadx.git cd jadx ./gradlew dist on Windows, use gradlew.bat instead of ./gradlew Scripts for run jadx will be placed in...

7.6AI score
Exploits0References1
Kitploit
Kitploit
added 2017/08/11 10:33 p.m.95 views

APKiD - Android Application Identifier for Packers, Protectors, Obfuscators and Oddities

APKiD gives you information about how an APK was made. It identifies many compilers, packers, obfuscators, and other weird stuff. It's PEiD for Android. For more information on what this tool can be used for, check out: Android Compiler Fingerprinting Detecting Pirated and Malicious Android Apps...

6.7AI score
Exploits0References1
Kitploit
Kitploit
added 2017/08/11 3:8 p.m.14 views

LinEnum v0.6 - Scripted Local Linux Enumeration and Privilege Escalation Checks

LinEnum will automate many of the checks that I’ve documented in the Local Linux Enumeration & Privilege Escalation Cheatsheet. It’s a very basic shell script that performs over 65 checks, getting anything from kernel information to locating possible escalation points such as potentially useful...

7AI score
Exploits0References1
Kitploit
Kitploit
added 2017/08/10 10:43 p.m.26 views

Pafish - Tool to Detect Sandboxes and Analysis Environments in the Same Way as Malware Families Do

Pafish is a demonstration tool that employs several techniques to detect sandboxes and analysis environments in the same way as malware families do. The project is open source, you can read the code of all anti-analysis checks. Scope The objective of this project is to collect usual tricks seen i...

7.3AI score
Exploits0References3
Kitploit
Kitploit
added 2017/08/10 3:27 p.m.203 views

Vulscan - Advanced vulnerability scanning with Nmap NSE

Vulscan is a module which enhances nmap to a vulnerability scanner. The nmap option -sV enables version detection per service which is used to determine potential flaws according to the identified product. The data is looked up in an offline version of VulDB. Installation Please install the files...

7.2AI score
Exploits0References1
Kitploit
Kitploit
added 2017/08/09 11:12 p.m.27 views

Plasma - An Interactive Disassembler for x86/ARM/MIPS

PLASMA is an interactive disassembler. It can generate a more readable assembly pseudo code with colored syntax. You can write scripts with the available Python api see an example below. The project is still in big development. wiki : TODO list and some documentation. It supports : architectures ...

7.2AI score
Exploits0References8
Kitploit
Kitploit
added 2017/08/09 3:11 p.m.32 views

Invoke-CradleCrafter - PowerShell Remote Download Cradle Generator and Obfuscator

Invoke-CradleCrafter is a PowerShell v2.0+ compatible PowerShell remote download cradle generator and obfuscator. Purpose Invoke-CradleCrafter exists to aid Blue Teams and Red Teams in easily exploring, generating and obfuscating PowerShell remote download cradles. In addition, it helps Blue Team...

7.3AI score
Exploits0References1
Kitploit
Kitploit
added 2017/08/08 10:48 p.m.19 views

BadIntent - Intercept, Modify, Repeat and Attack Android's Binder Transactions Using Burp Suite

BadIntent is the missing link between the Burp Suite and the core Android's IPC/Messaging-system. BadIntent consists of two parts, an Xposed-based module running on Android and a Burp-plugin. Based on this interplay, it is possible to use the Burp's common workflow and all involved tools and...

7.1AI score
Exploits0References12
Kitploit
Kitploit
added 2017/08/08 3:12 p.m.23 views

BoopSuite - A Suite of Tools for Wireless Auditing and Security Testing

BoopSuite is an up and coming suite of wireless tools designed to be easy to use and powerful in scope, that support both the 2 and 5 GHz spectrums. Written purely in python. A handshake sniffer CLI and GUI, a monitor mode enabling script and a deauth script are all parts of this suite with more ...

7.4AI score
Exploits0References1
Kitploit
Kitploit
added 2017/08/07 11:39 p.m.192 views

pydictor - A Powerful and Useful Hacker Dictionary Builder for a Brute-Force Attack

pydictor is a powerful and useful hacker dictionary builder for a brute-force attack. Why I need to use pydictor ? 1. it always can help you You can use pydictor to generate a general blast wordlist, a custom wordlist based on Web content, a social engineering wordlist, and so on. You can use the...

7.3AI score
Exploits0References1
Kitploit
Kitploit
added 2017/08/07 3:16 p.m.130 views

PcapViz - Visualize Network Topologies and Collect Graph Statistics Based on PCAP Files

PcapViz visualizes network topologies and provides graph statistics based on pcap files. It should be possible to determine key topological nodes or data exfiltration attempts more easily. Features Draw network topologies Layer 2 and communication graphs Layer 3 and 4 Network topologies contain...

6.7AI score
Exploits0References1
Kitploit
Kitploit
added 2017/08/06 11:35 p.m.15 views

WS-Attacker v1.8 - Modular Framework For Web Services Penetration Testing

WS-Attacker is a modular framework for web services penetration testing. It is developed by the Chair of Network and Data Security, Ruhr University Bochum http://nds.rub.de/ and the Hackmanit GmbH http://hackmanit.de/ . The basic idea behind WS-Attacker is to provide a functionality to load WSDL...

7.1AI score
Exploits0References1
Kitploit
Kitploit
added 2017/08/06 4:8 p.m.880 views

jwt-cracker - Simple HS256 JWT Token Brute Force Cracker

Simple HS256 JWT token brute force cracker. Effective only to crack JWT tokens with weak secrets. Recommendation : Use strong long secrets or RS256 tokens. Install With npm: npm install --global jwt-cracker Usage From command line: jwt-cracker Where: token : the full HS256 JWT token string to cra...

6.6AI score
Exploits0References1
Kitploit
Kitploit
added 2017/08/05 10:30 p.m.35 views

CyberChef - The Cyber Swiss Army Knife [A Web App For Encryption, Encoding, Compression And Data Analysis]

The Cyber Swiss Army Knife CyberChef is a simple, intuitive web app for carrying out all manner of "cyber" operations within a web browser. These operations include simple encoding like XOR or Base64, more complex encryption like AES, DES and Blowfish, creating binary and hexdumps, compression an...

6.8AI score
Exploits0References9
Kitploit
Kitploit
added 2017/08/05 3:14 p.m.19 views

lscript - This script will make your life easier, and of course faster

This is a script that automates many procedures about wifi penetration and hacking. Features Enabling-Disabling interfaces faster Changing Mac faster Anonymizing yourself faster View your public IP faster View your MAC faster TOOLS You can install whichever tools you want from within lscript!...

7.3AI score
Exploits0References1
Kitploit
Kitploit
added 2017/08/04 10:12 p.m.344 views

WiFi Bruteforcer - Android application to brute force WiFi passwords (No Root Required)

WARNING: This project is still under development and by installing the app may misconfigure the Wi-Fi settings of your Android OS, a system restore may be necessary to fix it. Android application to brute force WiFi passwords without requiring a rooted device. Download WiFi Bruteforcer...

6.4AI score
Exploits0References1
Kitploit
Kitploit
added 2017/08/04 2:11 p.m.526 views

Universal Radio Hacker - Investigate Wireless Protocols Like A Boss

The Universal Radio Hacker is a software for investigating unknown wireless protocols. Features include hardware interfaces for common Software Defined Radios easy demodulation of signals assigning participants to keep overview of your data customizable decodings to crack even sophisticated...

6.7AI score
Exploits0References3
Kitploit
Kitploit
added 2017/08/03 10:49 p.m.221 views

Mercure - A Tool For Security Managers Who Want To Train Their Colleague To Phishing

Mercure is a tool for security managers who want to teach their colleagues about phishing. What Mercure can do: Create email templates Create target lists Create landing pages Handle attachments Let you keep track in the Campaign dashboard Track email reads, landing page visits and attachment...

6.8AI score
Exploits0References1
Kitploit
Kitploit
added 2017/08/03 3:7 p.m.80 views

BAF - Blind Attacking Framework

What is BAF ? it's a framework written in python 2.7 that is being made specially for blind attacking , ie : attacking random targets with common security issues , targets are generated by the hackers search engine "shodan" and vulnerable hosts are hacked in an automated way . this framework is...

6.7AI score
Exploits0References1
Kitploit
Kitploit
added 2017/08/02 10:47 p.m.115 views

Faraday v2.6 - Collaborative Penetration Test and Vulnerability Management Platform

Faraday is the Integrated Multiuser Risk Environment you were looking for! It maps and leverages all the knowledge you generate in real time , letting you track and understand your audits. Our dashboard for CISOs and managers uncovers the impact and risk being assessed by the audit in real-time...

6.6AI score
Exploits0References2
Kitploit
Kitploit
added 2017/08/02 3:9 p.m.116 views

Nmap 7.60 - Free Security Scanner For Network Exploration & Security Audits

Nmap "Network Mapper" is a free and open source utility for network discovery and security auditing. Many systems and network administrators also find it useful for tasks such as network inventory, managing service upgrade schedules, and monitoring host or service uptime. Nmap uses raw IP packets...

7.4AI score
Exploits0
Kitploit
Kitploit
added 2017/08/01 10:15 p.m.597 views

XSStrike v1.2 - Fuzz, Crawl and Bruteforce Parameters for XSS

XSStrike is a python script designed to detect and exploit XSS vulnerabilites. A list of features XSStrike has to offer: Fuzzes a parameter and builds a suitable payload Bruteforces paramteres with payloads Has an inbuilt crawler like functionality Can reverse engineer the rules of a WAF/Filter...

6.7AI score
Exploits0References4
Kitploit
Kitploit
added 2017/08/01 2:32 p.m.614 views

Arachni v1.5.1 - Web Application Security Scanner Framework

Arachni is a feature-full, modular, high-performance Ruby framework aimed towards helping penetration testers and administrators evaluate the security of web applications. It is smart, it trains itself by monitoring and learning from the web application's behavior during the scan process and is...

7.9AI score
Exploits0References9
Kitploit
Kitploit
added 2017/07/31 10:12 p.m.24 views

CookieCatcher - Tool to assist in the exploitation of XSS

CookieCatcher is an open source application which was created to assist in the exploitation of XSS Cross Site Scripting vulnerabilities within web applications to steal user session IDs aka Session Hijacking. The use of this application is purely educational and should not be used without proper...

6.5AI score
Exploits0References1
Kitploit
Kitploit
added 2017/07/31 3:9 p.m.39 views

Sn1per - Automated PenTest Recon Scanner

Sn1per is an automated scanner that can be used during a penetration test to enumerate and scan for vulnerabilities. DEMO VIDEO: FEATURES: Automatically collects basic recon ie. whois, ping, DNS, etc. Automatically launches Google hacking queries against a target domain Automatically enumerates...

7.2AI score
Exploits0References3
Kitploit
Kitploit
added 2017/07/30 11:12 p.m.40 views

Vulnreport - Pentesting Management And Automation Platform

Vulnreport is a platform for managing penetration tests and generating well-formatted, actionable findings reports without the normal overhead that takes up security engineer's time. The platform is built to support automation at every stage of the process and allow customization for whatever oth...

7.3AI score
Exploits0References1
Kitploit
Kitploit
added 2017/07/30 2:27 p.m.20 views

SSH MITM - SSH Man-In-The-Middle Tool

This penetration testing tool allows an auditor to intercept SSH connections. A patch applied to the OpenSSH v7.5p1 source code causes it to act as a proxy between the victim and their intended SSH server; all plaintext passwords and sessions are logged to disk. Of course, the victim's SSH client...

7.8AI score
Exploits0References1
Kitploit
Kitploit
added 2017/07/29 10:51 p.m.59 views

JKS Private Key Cracker - Cracking passwords of private key entries in a JKS file

The Java Key Store JKS is the Java way of storing one or several cryptographic private and public keys for asymmetric cryptography in a file. While there are various key store formats, Java and Android still default to the JKS file format. JKS is one of the file formats for Java key stores, but J...

7.1AI score
Exploits0References9
Kitploit
Kitploit
added 2017/07/29 2:43 p.m.15 views

Dracnmap v2.2 - Exploit Network and Gathering Information with Nmap

Dracnmap is an open source program which is using to exploit the network and gathering information with nmap help. Nmap command comes with lots of options that can make the utility more robust and difficult to follow for new users. Hence Dracnmap is designed to perform fast scaning with the...

7.2AI score
Exploits0References1
Kitploit
Kitploit
added 2017/07/28 9:34 p.m.15 views

RastLeak - Tool To Automatic Leak Information Using Hacking With Engine Searches

Tool to automatic leak information using Hacking with engine searches. How to install Install requirements with: pip install -r requirements.txt How to use: python rastleak.py Usage: $ python rastleak.py -h usage: rastleak.py -h -d DOMAIN -o OPTION -n SEARCH -e EXT -f EXPORT This script searchs...

6.9AI score
Exploits0References1
Kitploit
Kitploit
added 2017/07/28 3:7 p.m.15 views

Pythem - Penetration Testing Framework

pythem is a multi-purpose pentest framework written in Python. It has been developed to be used by security researchers and security professionals. The tool intended to be used only for acts within the law. I am not liable for any undue and unlawful act practiced by this tool, for more informatio...

7.5AI score
Exploits0References50
Kitploit
Kitploit
added 2017/07/27 11:12 p.m.23 views

Twiga - A Tool That Enumerates Android Devices For Information Useful In Understanding Its Internals And For Exploit Development

A tool that enumerates Android devices for information useful in understanding its internals and for exploit development. It supports android 4.2 to android 7.1.1 Requirements The most current ADB must be in your path and fully functional The report name must not have any whitespace Limitations...

7.1AI score
Exploits0References3
Kitploit
Kitploit
added 2017/07/27 3:12 p.m.43 views

SimplyEmail - Email Recon Made Fast And Easy

This tool was based on the work of theHarvester and kind of a port of the functionality. This was just an expansion of what was used to build theHarvester and will incorporate his work but allow users to easily build Modules for the Framework. MAJOR CALLOUTS: @laramies - Developer of theHarvester...

7.4AI score
Exploits0References3
Kitploit
Kitploit
added 2017/07/26 9:37 p.m.24 views

ASTo - An IoT Network Security Analysis Tool and Visualizer

ASTo is security analysis tool for IoT networks. It is developed to support the Apparatus security framework. ASTo is based on electron and cytoscape.js. The icons are provided by Google's Material Design. The application is still in prototyping stage, which means a lot of functionality is being...

7.3AI score
Exploits0References5
Kitploit
Kitploit
added 2017/07/26 2:45 p.m.22 views

DAws - Advanced Web Shell

There's multiple things that makes DAws better than every Web Shell out there: 1. Bypasses Security SystemsIPS, WAFs,etc like Suhosinuses up to 20 php functions just to get a command executed. 2. Drops CGI Shells and communicate with them to bypass Security Systems. 3. Uses the SSH Authorized Key...

7.4AI score
Exploits0References1
Kitploit
Kitploit
added 2017/07/25 11:30 p.m.33 views

WSSAT - Web Service Security Assessment Tool

WSSAT is an open source web service security scanning tool which provides a dynamic environment to add, update or delete vulnerabilities by just editing its configuration files. This tool accepts WSDL address list as input file and for each service, it performs both static and dynamic tests again...

7.8AI score
Exploits0References1
Kitploit
Kitploit
added 2017/07/25 7:30 p.m.19 views

inforfinder - Tool To Collect Information Of Any Domains Pointing At Some Server (Ip, Domain, Range, File)

Inforfinder is a tool made to collect information of any domain pointing at a server ip,domain,range,file. Requires python libs: pyRequests and pyDNS -First, you need to install complementary libraries: user@machine$ sudo apt-get install python-dns python-dnspython python-requests python-lxml...

7AI score
Exploits0References1
Kitploit
Kitploit
added 2017/07/25 2:29 p.m.35 views

Hydra 8.6 - Fast and Flexible Network Login Hacker

A very fast network logon cracker which supports many different services. See feature sets and services coverage page - incl. a speed comparison against ncrack and Medusa. Number one of the biggest security holes are passwords, as every password security study shows. This tool is a proof of...

7.9AI score
Exploits0References1
Kitploit
Kitploit
added 2017/07/24 11:31 p.m.37 views

HoneypotBuster - Microsoft PowerShell Module to Find HoneyPots and HoneyTokens in the Network

Microsoft PowerShell module designed for red teams that can be used to find honeypots and honeytokens in the network or at the host. CodeExecution Execute code on a target machine using Import-Module. Invoke-HoneypotBuster HoneypotBuster is a tool designed to spot Honey Tokens, Honey Bread Crumbs...

7.4AI score
Exploits0References1
Kitploit
Kitploit
added 2017/07/24 2:22 p.m.11 views

WebVulScan - Web Application Vulnerability Scanner

WebVulScan is a web application vulnerability scanner. It is a web application itself written in PHP and can be used to test remote, or local, web applications for security vulnerabilities. As a scan is running, details of the scan are dynamically updated to the user. These details include the...

8.1AI score
Exploits0References1
Kitploit
Kitploit
added 2017/07/23 9:20 p.m.51 views

ReconDog - An All In One Tool For All Your Basic Information Gathering Needs

Recon Dog is an all in one tool for all your basic information gathering needs. It uses APIs to gather all the information so your identity is not exposed. Downloading and running Recon Dog Enter the following command in the terminal to download it git clone...

7.1AI score
Exploits0References1
Kitploit
Kitploit
added 2017/07/23 3:0 p.m.16 views

maltran - Tool To Download Malware Exercises From MALware-TRaffic-ANalysis.net

This tool was developed with the purpose of furthering and organizing access to traffic analysis exercises and malware files captured and published almost daily. Maltran makes the views and downloads exercises and malspams easier in an extremely simple and organized way. Visit website...

7.3AI score
Exploits0References1
Kitploit
Kitploit
added 2017/07/22 8:30 p.m.433 views

Eternal - An internet scanner for Eternal Blue [exploit CVE-2017-0144]

Eternal scanner is a network scanner for Eternal Blue exploit CVE-2017-0144. Requirements masscan metasploit-framework How to Install git clone https://github.com/peterpt/eternalscanner.git cd eternalscanner && ./escan OR ./escan -h to change scanner speed Install Requirements apt-get install...

8.8CVSS8.9AI score0.9923EPSS
Exploits53References2
Kitploit
Kitploit
added 2017/07/22 3:1 p.m.8 views

Hash Buster - A Script Which Scraps Online Hash Crackers to Find Cleartext of a Hash (MD5, SHA1, SHA2)

Hash Buster is a python script which uses several online hash crackers to find the clear text of a hash in less than 5 seconds. Features of Hash Buster: Detects hash MD5 Support SHA1 Support SHA2 Support Adding more APIs for SHA1 and SHA2 More hash types will be added on demand Installing and Usi...

7.3AI score
Exploits0References1
Kitploit
Kitploit
added 2017/07/21 9:30 p.m.27 views

Samplicator - Send copies of (UDP) datagrams to multiple receivers, with optional sampling and spoofing

This small program receives UDP datagrams on a given port, and resends those datagrams to a specified set of receivers. In addition, a sampling divisor N may be specified individually for each receiver, which will then only receive one in N of the received packets. INSTALLATION This distribution...

7.3AI score
Exploits0References1
Total number of security vulnerabilities6011