February 15, 2024WEB-Wordlist-Generator - Creates Related Wordlists After Scanning Your Web Applications

WEB-Wordlist-Generator scans your web applications and creates related wordlists to take preliminary countermeasures against cyber attacks. Done [x] Scan Static Files. [ ] Scan Metadata Of Public Documents...

by KitPloit in Security Tools, Web-Wordlist-Generator, Wordlist, Wordlist Generator, Wordlists
February 14, 2024Secbutler - The Perfect Butler For Pentesters, Bug-Bounty Hunters And Security Researchers

Essential utilities for pentester, bug-bounty hunters and security researchers secbutler is a utility tool made for pentesters, bug-bounty hunters and security researchers that contains all the most...

by KitPloit in golang, Pentesting, Reverse, Revshell, Secbutler, Security, Wordlists
February 10, 2024SqliSniper - Advanced Time-based Blind SQL Injection Fuzzer For HTTP Headers

SqliSniper is a robust Python tool designed to detect time-based blind SQL injections in HTTP request headers. It enhances the security assessment process by rapidly scanning and identifying potential vulnerabilities...

by KitPloit in Scanning, SQL Injection, SqliSniper, Subfinder, Time-Based Blind SQL Injection, vulnerabilities, Webhook
February 9, 2024CloudMiner - Execute Code Using Azure Automation Service Without Getting Charged

Execute code within Azure Automation service without getting charged Description CloudMiner is a tool designed to get free computing power within Azure Automation service. The tool...

by KitPloit in CloudMiner, Python Scripts, Requirements, Research
February 8, 2024SADProtocol goes to Hollywood

Faraday’s researchers Javier Aguinaga and Octavio Gianatiempo have investigated on IP cameras and two high severity vulnerabilities.This research project began when Aguinaga's wife, a former Research leader at Faraday Security,...

by KitPloit in Faraday, Faraday Community
February 7, 2024BounceBack - Stealth Redirector For Your Red Team Operation Security

BounceBack is a powerful, highly customizable and configurable reverse proxy with WAF functionality for hiding your C2/phishing/etc infrastructure from blue teams, sandboxes, scanners, etc. It uses real-time traffic...

by KitPloit in BounceBack, Cobalt Strike, Redteam
February 6, 2024SharpShares - Multithreaded C# .NET Assembly To Enumerate Accessible Network Shares In A Domain

Multithreaded C# .NET Assembly to enumerate accessible network shares in a domain Built upon djhohnstein's SharpShares project > .\SharpShares.exe helpUsage: SharpShares.exe /threads:50 /ldap:servers...

by KitPloit in LDAP, Network, SharpShares
February 5, 2024Navgix - A Multi-Threaded Golang Tool That Will Check For Nginx Alias Traversal Vulnerabilities

navgix is a multi-threaded golang tool that will check for nginx alias traversal vulnerabilities Techniques Currently, navgix supports 2 techniques for finding vulnerable directories (or location...

by KitPloit in golang, Navgix, Vulnerability, Vulnerable
February 4, 2024Argus - A Framework for Staged Static Taint Analysis of GitHub Workflows and Actions

This repo contains the code for our USENIX Security '23 paper "ARGUS: A Framework for Staged Static Taint Analysis of GitHub Workflows and Actions". Argus is a comprehensive...

by KitPloit in Repositories, Sensitive Information, Taint Analysis, Techniques, vulnerabilities, Website
February 3, 2024Nemesis - An Offensive Data Enrichment Pipeline

Nemesis is an offensive data enrichment pipeline and operator support system. Built on Kubernetes with scale in mind, our goal with Nemesis was...

by KitPloit in Data Analysis, Offensive, Post Exploitation, Research
Archives
Categories
Tags
Bugbounty Cybersecurity Devsecops Dfir Distribution golang Information Gathering Infosec Kali Kali Linux Kerberos Linux Malware Analysis Malware Detection Microsoft mimikatz msfvenom NTLM OSINT Payload Penetration Testing Pentest Tool Pentesting Post Exploitation PowerShell Privilege Escalation Processes Python Python3 Recon Reconnaissance Red Team Red Teaming Redteam Redteam Tools Remote Research Reverse Engineering Scan Scanner Scanning Scripts Security Security Tools Shellcode SMB Spoofing SSH Static Analysis Subdomain Syscalls Testing Threat Hunting Threat Intelligence Toolkit Traffic Username vulnerabilities Vulnerability Vulnerability Scanners Vulnerable Win32 Windows Windows 10 Wireshark Wordlist XSS Yara Blueteam Subdomains Windows Defender Wrapper Redteaming Techniques