kcsec Goto Github PK

struts-pwn_cve-2017-9805

An exploit for Apache Struts CVE-2017-9805

sublist3r

Fast subdomains enumeration tool for penetration testers

symboliclink-testing-tools

tater

Tater is a PowerShell implementation of the Hot Potato Windows Privilege Escalation exploit from @breenmachine and @foxglovesec

the-backdoor-factory

Patch PE, ELF, Mach-O binaries with shellcode (NOT Supported)

thefatrat

Thefatrat a massive exploiting tool revealed >> An easy tool to generate backdoor and easy tool to post exploitation attack like browser attack,dll . This tool compiles a malware with popular payload and then the compiled malware can be execute on windows, android, mac . The malware that created with this tool also have an ability to bypass most AV software protection .

theharvester

E-mails, subdomains and names Harvester - OSINT

thundershell

PowerShell based RAT

trevorc2

TrevorC2 is a legitimate website (browsable) that tunnels client/server communications for covert command execution.

trinity

This is a web site scraper. Collects all urls from any site.

truecrack

TrueCrack is a brute-force password cracker for TrueCrypt (Copyrigth) volumes. It works on Linux and it is optimized for Nvidia Cuda technology.

vegile

This tool will setting up your backdoor/rootkits when backdoor already setup it will be hidden your spesisifc process,unlimited your session in metasploit and transparent. Even when it killed, it will re-run again. There always be a procces which while run another process,So we can assume that this procces is unstopable like a Ghost in The Shell

veil-1

Veil is the superproject containing all tools in the Veil-Framework

veil-catapult

Veil Catapult is no longer supported

veil-evasion

Veil-Evasion is a tool used to generate payloads that bypass antivirus solutions

veil-ordnance

Veil-Ordnance is a tool designed to quickly generate MSF stager shellcode

veil-pillage

Veil-Pillage is a post-exploitation framework that integrates with Veil-Evasion.

venom

venom (metasploit) shellcode generator/compiler/listener

viproy-voipkit

VIPROY - VoIP Pen-Test Kit for Metasploit Framework

vulninjector

Generates a Windows 'vulnerable' machine from ISOs

vulscan

Advanced vulnerability scanning with Nmap NSE

walrus

An Android app that lets you use your access control card cloning devices in the field.

wascan

WAScan - Web Application Scanner

webdavdelivery

A WebDAV PROPFIND covert channel to deliver payloads

windows-exploit-suggester

This tool compares a targets patch levels against the Microsoft vulnerability database in order to detect potential missing patches on the target. It also notifies the user if there are public exploits and Metasploit modules available for the missing bulletins.

windows-privesc-check

Standalone Executable to Check for Simple Privilege Escalation Vectors on Windows Systems

wmiops

This repo is for WMIOps, a powershell script which uses WMI for various purposes across a network.

wordlist

Collection of some common wordlists such as RDP password, user name list, ssh password wordlist for brute force. IP Cameras Default Passwords.

wordpress-exploit-framework

A Ruby framework for developing and using modules which aid in the penetration testing of WordPress powered websites and systems.

wsuspect-proxy

WSUSpect Proxy - a tool for MITM'ing insecure WSUS connections