Quantcast
Channel: KitPloit - PenTest Tools!
Browsing all 5816 articles
Browse latest View live
↧

Image may be NSFW.
Clik here to view.

Forerunner - Fast And Extensible Network Scanning Library Featuring...

The Forerunner library is a fast, lightweight, and extensible networking library created to aid in the development of robust network centric applications such as: IP Scanners, Port Knockers, Clients,...

View Article


Image may be NSFW.
Clik here to view.

GhostShell - Malware Indetectable, With AV Bypass Techniques,...

In this malware, are used some techniques to try bypass the AVs, VMs, and Sandboxes, with only porpuse to learning more. I'm not responsible for your actions.Bypass TechniquesAnti-DebuggerTo try bypass...

View Article


Image may be NSFW.
Clik here to view.

Inshackle - Instagram Hacks: Track Unfollowers, Increase Your Followers,...

Instagram hacks: Track unfollowers, Increase your followers, Download Stories, etcFeatures:Unfollow TrackerIncrease FollowersDownload: Stories, Saved Content, Following/followers list, Profile...

View Article

Image may be NSFW.
Clik here to view.

Ligolo - Reverse Tunneling Made Easy For Pentesters, By Pentesters

Ligolo is a simple and lightweight tool for establishing SOCKS5 or TCP tunnels from a reverse connection in complete safety (TLS certificate with elliptical curve).It is comparable to Meterpreter with...

View Article

Image may be NSFW.
Clik here to view.

Eviloffice - Inject Macro And DDE Code Into Excel And Word Documents (Reverse...

Win python script to inject Macro and DDE code into Excel and Word documents (reverse shell)Features:Inject malicious Macro on formats: docm, dotm, xlsm, xltmInject malicious DDE code on formats: doc,...

View Article


Image may be NSFW.
Clik here to view.

GitMonitor - A Github Scanning System To Look For Leaked Sensitive...

GitMonitor is a Github scanning system to look for leaked sensitive information based on rules. I know that there are a lot of very good other tools for finding sensitive information leaked on Github...

View Article

Image may be NSFW.
Clik here to view.

Jshole - A JavaScript Components Vulnrability Scanner, Based On RetireJS

A JavaScript components vulnrability scanner, based on RetireJS.Why use JShole instead of RetireJS?By default, RetireJS only searches one page, but JShole tries to crawl all pages.How it works?Get...

View Article

Image may be NSFW.
Clik here to view.

Recox - Master Script For Web Reconnaissance

The script aims to help in classifying vulnerabilities in web applications. The methodology RecoX is arising can spot weaknesses other than OWASP top ten. The script presents information against the...

View Article


Image may be NSFW.
Clik here to view.

Git-Scanner - A Tool For Bug Hunting Or Pentesting For Targeting Websites...

This tool can scan websites with open .git repositories for Bug Hunting/ Pentesting Purposes and can dump the content of the .git repositories from webservers that found from the scanning method. This...

View Article


Image may be NSFW.
Clik here to view.

Astsu - A Network Scanner Tool

How it worksScan common portsSend a TCP Syn packet to the destination on the defined port, if the port is open, use an nmap scan to check the service running on the port and prints all the ports...

View Article

Image may be NSFW.
Clik here to view.

JSshell - A JavaScript Reverse Shell For Exploiting XSS Remotely Or Finding...

JSshell - a JavaScript reverse shell. This using for exploit XSS remotely, help to find blind XSS, ...This tool works for both Unix and Windows operating system and it can running with both Python 2...

View Article

Image may be NSFW.
Clik here to view.

Words Scraper - Selenium Based Web Scraper To Generate Passwords List

Selenium based web scraper to generate passwords list.Installation# Download Firefox webdriver from https://github.com/mozilla/geckodriver/releases$ tar xzf geckodriver-v{VERSION-HERE}.tar.gz$ sudo mv...

View Article

Image may be NSFW.
Clik here to view.

Spyeye - Script To Generate Win32 .Exe File To Take Screenshots

Script to generate Win32 .exe file to take screenshots every ~10 seconds.Features:Works on WAN: Port Forwarding by Serveo.netFully Undetectable (FUD) -> Don't Upload to virustotal.com!Legal...

View Article


Image may be NSFW.
Clik here to view.

Tangalanga - The Zoom Conference Scanner Hacking Tool

Zoom Conference scanner.This scanner will check for a random meeting id and return information if available.UsageThis are all the possible flags:tangalanga \ -token=user-token \ # [default: env TOKEN]...

View Article

Image may be NSFW.
Clik here to view.

Impost3r - A Linux Password Thief

Impost3r is a tool that aim to steal many kinds of linux passwords(including ssh,su,sudo) written by C.Attackers can use Impost3r to make a trap to steal the legal user's passwords XDThis tool is...

View Article


Image may be NSFW.
Clik here to view.

URLCrazy - Generate And Test Domain Typos And Variations To Detect And...

URLCrazy is an OSINT tool to generate and test domain typos or variations to detect or perform typo squatting, URL hijacking, phishing, and corporate espionage.Homepage:...

View Article

Image may be NSFW.
Clik here to view.

BabyShark - Basic C2 Server

This is a basic C2 generic server written in Python and Flask. This code has based ideia to GTRS, which uses Google Translator as a proxy for sending commands to the infected host. The BabyShark...

View Article


Image may be NSFW.
Clik here to view.

Stegcloak - Hide Secrets With Invisible Characters In Plain Text Securely...

StegCloak is a pure JavaScript steganography module designed in functional programming style, to hide secrets inside text by compressing and encrypting with Zero Width Characters. It can be used to...

View Article

Image may be NSFW.
Clik here to view.

Atlas - Quick SQLMap Tamper Suggester

Atlas is an open source tool that can suggest sqlmap tampers to bypass WAF/IDS/IPS, the tool is based on returned status code.ScreenInstallation$ git clone https://github.com/m4ll0k/Atlas.git atlas$ cd...

View Article

Image may be NSFW.
Clik here to view.

RMIScout - Wordlist And Bruteforce Strategies To Enumerate Java RMI Functions...

RMIScout performs wordlist and bruteforce attacks against exposed Java RMI interfaces to safely guess method signatures without invocation.On misconfigured servers, any known RMI signature using...

View Article
Browsing all 5816 articles
Browse latest View live


<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>